last executing test programs: 2.829289365s ago: executing program 2 (id=3635): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0xfe33) readv(r4, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r8, &(0x7f0000000180)=""/6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl(r5, 0x3, &(0x7f0000000040)="7bd8b6f44f4351428e8eb07660e13a99d466954f7ba9f0a396477f1d0fd1c2aae8e8222dc6ed952570237a199c") ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r11}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) 1.889572852s ago: executing program 2 (id=3654): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r1, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) 1.680819707s ago: executing program 2 (id=3659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x24, 0x101, 0x70bd22, 0x25dfdbfb, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 1.607636723s ago: executing program 4 (id=3660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) 1.364460063s ago: executing program 2 (id=3663): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x7fff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r2, 0x11, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x288, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x5, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x14}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xfffffffc, 0x400, 0x0, 0x2, 0xffffc467, 0x400]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x275}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7fff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0x0, 0xfb, 0x7, 0x7ff8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}]}, @NL80211_ATTR_CQM={0x88, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0xfffff620, 0xf, 0x101, 0x8000, 0x0, 0x7f, 0x0, 0xfff, 0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x80, 0x12, 0x400, 0x3, 0x10, 0x7, 0x3, 0xd]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf1e7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x258}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x25a}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x41de}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x492}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6be}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x7, 0x7, 0x7, 0xfffffffe, 0x0, 0x1, 0x1, 0xf01d]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x1000, 0x9, 0x6, 0x3, 0x1]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe7d0}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3d}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6bf}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x6008005}, 0x4000800) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x4e24, 0x61c, 0x4e24, 0x7, 0x2, 0x0, 0x20, 0xc, r3, r4}, {0x7fffffffffffffff, 0x100, 0x3, 0x9, 0x4, 0x4, 0x8, 0x9}, {0x9, 0x26, 0x5, 0x4}, 0xc, 0x6e6bbf, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0x2, @in=@local, 0x3500, 0x2, 0x3, 0xc, 0x9, 0xd, 0x8}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe800000000000000000000000009dbbfe8000000000000000000000000000aa3c000005", @ANYRESHEX=r0, @ANYRES64=r3, @ANYRES64=r0], 0x0) 1.299544846s ago: executing program 4 (id=3664): r0 = socket(0x2a, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffe0}, {0x3, 0xe}}, [{0x8, 0xb, 0x3}, {0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xff000000, 'rose0\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x3, 0x6}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xc, 0x6, [0x6, 0xc, 0x38, 0x2f, 0x9, 0xb, 0x30, 0x32, 0x8, 0xa, 0x23, 0xb, 0x12, 0x20, 0x3a, 0x12], 0x0, 0x5207, 0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x6, 0x2, 0x2, 0x6, 0x5], 0x2, 0x5}, {0x0, [0x1, 0x5, 0x0, 0x6, 0x5, 0x7], 0x5, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x8, 0x4, 0x1, 0x2, 0x3], 0x0, 0x4}, {0x4, [0x0, 0x6, 0x1, 0x0, 0x2, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r2 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.264867013s ago: executing program 2 (id=3666): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) syz_emit_ethernet(0xde, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c94400040000008f51a80e5f48fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @random="0649f2d7c79c"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void}, 0x2c) syz_80211_inject_frame(0x0, 0x0, 0x0) 1.187419515s ago: executing program 1 (id=3667): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) getpid() (async) r5 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="f0af3f49b43b2c4c1e4cb32cf2acbfbc8793a6aad11aa4716f38cd0cc45fa911e8becfe488e4f93288ab8ff9328088d0f0284c10ffd699de518caa17eadf9c787fc0f6921d0ed155ba04d12b2b0cac78c9bb1cd085387acd73427d2405822fb81a4fae8682b869075caed8844bbbf66af5ecbddf3389a5fabf70126594", 0x7d}, {&(0x7f0000000580)="643ea3589bdf201abc7c0f4e6f43a6effb75611d6119696c5134930d40cfc301fceff946574eb4f692eec19662d68df2e7e925be7c1e700af538b39f72167f45f096c10305b4a2be2fac1a3fe3cf4c2884d0614fb8489639dc50577e5b267d5f687a732c5c25cede05e2488044364ce08337877bc50613ce0f19b97b215ce526698b04c1bb16086636b8b2e7d1f4c5b260b9c4b0681f998370af84e04b9d06e2f9c51a28237237d7517acfaf4a59bc0136fe682b4b57f6cdb29a16e2c4eb2c183858efbecaddcbb628b1e18341e6ab203333f7a64905455393deabe2099d04ec64dbba24a6e8eec2735dbf9bdb13e5", 0xef}, {&(0x7f0000000680)="602ff06733603c56e17a7930cb4581415369c76257299fad8f580193dd13d4c4938a7dfd561a1cc0774f3ce893f1729765761a0c112d12f848ca010ebbef92d3383ac4d9743e6d1e0672a6", 0x4b}], 0x3, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x30, 0x1, 0x1, [r1, r3, r3, r2, r0, r2, r1, r3]}}, @rights={{0x1c, 0x1, 0x1, [r1, r3, r3]}}], 0x88, 0xc000}, 0x4008000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) (async) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="34000000d27b745a2570b6235124fc0efa29805ed6d3be196257782c655b67e681833784c7f92b951c141fa2dcf4639bd0727dace2765164a0460a9d8ec95a8c800a86c1f8368c3f4a5a5dfa406984fb8424ce60bf2fe914ea9abc0bcc5013fb0101bc6dcd5252406140a8b649c479379e0b5cd4ca56b0994f53111feeeca25ce8e021856066e2de4240605dad8f67eaaf95d9846f901c4e4d30c6d53f4159baf32ee0d1ed45a2512d9d6dd868ee76007b9a27a3", @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf25040000002000018008000100", @ANYRES32=r12, @ANYBLOB="140002006272696467655f736c6176655f310000"], 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(r13, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9}, 0x0, 0x0, 0xf, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, {}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 'wlan1\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="24e42909e863", @empty, @dev={0xac, 0x14, 0x14, 0x18}, @empty, 0x18}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r13, @ANYRES8=0x0, @ANYRES64=r4, @ANYRES16=r4, @ANYRES16=r4], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r13, @ANYRES8=0x0, @ANYRES64=r4, @ANYRES16=r4, @ANYRES16=r4], 0x1c}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r15 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r15, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r15, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r15, 0x0) r16 = socket$rds(0x15, 0x5, 0x0) bind$rds(r16, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r16, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) (async) sendmsg$rds(r16, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.173161629s ago: executing program 4 (id=3668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x8, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0x9}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.098691678s ago: executing program 3 (id=3669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) (rerun: 32) 1.007455802s ago: executing program 0 (id=3670): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r3, r3, 0x0, 0xa) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x4d831, 0xffffffffffffffff, 0xa401000000000000) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) 903.765116ms ago: executing program 0 (id=3671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newnexthop={0x1c, 0x68, 0xefce5d6aba1cf00f, 0x70bd28, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @broadcast}, &(0x7f0000000080)=0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x10e4, 0x12, 0x4, 0x70bd27, 0x25dfdbff, {0x11, 0x17, 0x9, 0x0, {0x4e23, 0x4e21, [0x7, 0x101, 0x10, 0x3], [0x3, 0x6, 0xffff0001, 0x7fffffff], r1, [0xa7d, 0x1]}, 0x2, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "d9196cb12f1f8db437315d984139dc6b5154"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "7a1e045b0392f864c66466e7ef0d0dd71b0717e161475d0af818602baabd10c1458f5eed97e22deaaa1088e0c3d0182b0a568be77fb0101b040c381295fed0381ade0db83df77df39a99fdc11e0f43d5a31f69b86e902ce2ebc52485d22d83b6cb2212e49c85486cbd649789b8285c88159c3e3c14"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10e4}, 0x1, 0x0, 0x0, 0x10}, 0x840) 901.38369ms ago: executing program 4 (id=3672): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0xfffffffffffffffc, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) 894.886767ms ago: executing program 3 (id=3673): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904", @ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 819.694856ms ago: executing program 1 (id=3674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095", @ANYRES64=r2], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001040)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) shutdown(r0, 0x1) r4 = accept4$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x80000) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000000c0)=""/4, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x0, 0x401, 0x2}, 0x10) 819.328537ms ago: executing program 3 (id=3675): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0x400, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0x400, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async) 776.053384ms ago: executing program 4 (id=3676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800150000000000340000003400000200000000000000000000030000000003000000020000000000000000000000000020010500000020000000000000000000000a020000000000"], 0x0, 0x4e, 0x0, 0x1, 0x3}, 0x28) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8927, &(0x7f0000000040)={0x6, 'wlan0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)="b03db003de4b428bce67bb73c65248c8d2c75b4d2f203a48d51a50a757a365e8740fe54622bcd166cfbea2076fad8a6a09e68e8c1b80cb4eac9bc43fd0877d7fa329bd6a01b1fb92373554cfd387877deed3f7fce5bcad6f50362339674b03e582b5fc2d96015898ad1a5deee00f74f14094eb6a6d46680793c8f697368fc462e8c4a104ce7ce0fa6e6b212eae90e39c6ead6eb6c4f59bf0243f528f6c1af88ccc852bdd869c48ec248221e008f614b4220c528be5167873d9acae38855f08e8c317227d494274", 0xc7}, {&(0x7f00000001c0)="185d7397815712ec5c0ddd6325d8e86e5a89aa42892450c0b26d0a5f1d4e4351f4f2be2a60e0f0557deb2292f2ae1fb5157eae304d05f7ebe19c397ede0a054b9ce55de61097e0cf6abd64212821", 0x4e}, {&(0x7f00000002c0)="66aa4e244cf5013afa50b265ab54fc4105f63027aa34d2cdb0fc296aa94182b4eb3fcebc1af30958f3cb16755a18306bcb1b1aa30f275c86869f7848b525bcc98b54f75e1161b5fff737c1fde7b4695e4aed695ba0ed15fbc9d4b222786092bd4ce082d5c135dd479d22da628c08151556a65eec231b568c758f25a606332897bc368a83773a717bb87c3055", 0x8c}, {&(0x7f0000000240)="5c9748509ad5357db4657dad58b4330536422459855ad83e1d66754f8a8a54ec348c2a3365138646", 0x28}, {&(0x7f0000000380)="a19a46f3261f4693658a654aac673d15ba3a0fb76e1e48cbd86e448660c6980bb409c0ea99393724a07403fdd9509a874b7758b08147211b09884ee0f7d5905d8325ba83d500d4633e60ede72ca756da7d2a1c8c2a0f0c404e10d4605f7feaaecb73e7248009b218f3eb4961a2324f2f5b8827e65734edb019a8f91fd35c730d6a20c841875697ec2ce2544dd75f64d2e204161ce0308fde9dbf31d9bd022e177109d2020410b6ed5251cfafd35b1d86a518f237039a2cf96beddfa8c46a621eee290f28cd54e5dd24dd904dd8c08d278ab8dd3b88f76a44", 0xd8}, {&(0x7f0000000480)="4b326e61742a9fa53f1461c4e24c361c8b31ab4a66d54505cf90f41651984ac6efc3a88badde561e534a846b1cee954dd7284a6c59b99c08b21455ced77702f913b9632c32b1aa5f4f09fe8b63c4643ac9b23d4c3453a12d430c79412d38549710506535b1ffbe50055fbacd8123f24c66", 0x71}, {&(0x7f0000000500)="d3d20da2089b33746ce59573da443a84baff55128ae7b4ba4fc973619412", 0x1e}, {&(0x7f0000000540)="cb1ab6381873c7dc78d3dc9fdf8d55e12209a8dcfcd5e21dfd1e9fe5006f95f2eb742613de6db47efcc3c223b795c486fb043aeea946dbdd02e9b43313b753e17d1d5ecf440a07e614", 0x49}, {&(0x7f00000005c0)="7d835747f14f5a54a68f59fbb685e1e801b836799449414093987000813405ecd35f60067040dd9a05134b61a3cf6a274a29a6227111540e9e5f4f2d3eec243186f980fd894ea5038cddd599275a80a33760cb650f6a5e3368a12bc90812b0a3649eda91ffbfd03049d18b585bee3d6b8f71df5d88b99c87aba147dbfd9a9ab87e17baf98c087232794e9e9bb3932cd62db6db843b8a133c3aebe501e636789304df", 0xa2}, {&(0x7f0000000680)="1800c928e2c7d9f64ae01f4281503ff50f0d81a82f8092bd0ef9c15baad83e538c054f71509867517bd0b6ef7914a0587bba2a241df0eca64cfe96ba91cc1918a5f7fc13b2d0f3dfeaabeecb0e6f41b0179065fdb58629eed64914b2fd661e546441ded8f623fad15e5e28d4cc", 0x6d}], 0xa, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x801) 767.085853ms ago: executing program 1 (id=3677): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x191, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r3, 0x0, 0x0, 0x2043, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x34, 0x107, 0xfffffffc, 0x0, {0x18, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b)'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) 691.585975ms ago: executing program 0 (id=3678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10098600}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4894) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x700001b, 0x148, 0x150, 0x148, 0x228, 0x206, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xf0, 0x150, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5, 0xa], 0x3}}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x4, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x37, 0x15, 0x19, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 675.924089ms ago: executing program 1 (id=3679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x14, 0x11, 0x0, @private1, @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x5ebd81f7, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendto$inet6(r0, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x20}, 0x1c) 577.572538ms ago: executing program 3 (id=3680): socket(0x1e, 0x800, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x7e1887852d09a64d) 519.585287ms ago: executing program 2 (id=3681): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r0, &(0x7f0000001440)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x7, @f={0x5, 0x4, 0x2, 0x7, {0x6, 0x14, "c00247e421e1d6973cd60e42a98c0865c703cee5"}, 0x1}}, 0x1e) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 508.703263ms ago: executing program 4 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x20}}, 0x0) 457.89802ms ago: executing program 0 (id=3683): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) (async) 283.608957ms ago: executing program 3 (id=3684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000f00000000", @ANYRES32=r2, @ANYBLOB="8000ce040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000100)="867370fe09b7c79f8ad3ec62f70ff9efc76b75aa195261568e90f165f2c0490cbed58a0d7577ff7dd62c6a0224e9716d38421dc0c08a90ad9c43cf242325622a27be4538bb113713f55d323aded60ae137eb159b9e588c34c8805072c464b27aa6562708564ea52225b080fe16d0e2ce3142294b3fe1fd4eb334228d7ccbed670b90af59dac13b16a776eb0beedc70aa2ad97c3e8b72b348096e3a728e57701a4bfdb8d9ab66c02eec70db9f9d1758b32d33c47ca45ab5a4d110acb9a9594b3b3a97c981d50c6e9cb03cce168dd56212fee1742a266ebaa415f2bad1939c3121266a73", 0xe3, 0x4090, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) 262.043787ms ago: executing program 0 (id=3685): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000300)="79cda3e6b1dc2adbc4e70e7318fe9b54df8c0639fc7a5bead0606ea40dc0f6c3d90c45", 0x23) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getpid() sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000b55aeca56e8d689e5608402d777fab480400000034fb20693049322086e073c3317359635e40074719b9719c98dec3eba16bd959ad90e78a35507363", @ANYRES32=r2, @ANYBLOB="03c000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 254.237404ms ago: executing program 3 (id=3686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 147.47209ms ago: executing program 0 (id=3687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) write(r4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r7) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f0000000100)=""/117, 0x75}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) 138.914529ms ago: executing program 1 (id=3688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYRES64=r8], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000003c0)={0x1008}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a80)='Z8', 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x14, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 1 (id=3689): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast2}, &(0x7f0000000300)=0xc) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="344664eafe59c3937554700937b183dd08910bc4287ca1b74a6a98c42487b080d6d1aa07fad3aa699cc1cf654b687f536c177d03518ff9a6d7a4dd08a67a972a68721ac3101e976b8e38580e33bf1cd0161084605b573550b6c0e57652bd3a7b48c410809e03bbc582e8d8c7e52dc4a660065061e72610e6e094fa2e9b1381b12d07c4cc5eff7f1258636632e911cdd094950a7188b02d8b2e3a4618a8bc70f98f07764d2f2e5e0feae72238fd5e12240340d86db6f682c2364f52bdd0f4d31ff7510a08a5ad13bb6273a4fc1983b05abf395e8c6dc0aa3bbe1ad1ae3744a0e4e893b02047112f14285300b82a", 0xed, 0x40000, &(0x7f0000000340)={0x11, 0x3, r1, 0x1, 0x8, 0x6, @random="224d9047ffcd"}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000362d3fe86a148a89df2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000140000140003006e657464657673696d3000000000000018001680140001801000020081000000a1050000ff7f0000"], 0x4c}}, 0x24040800) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x70, r7, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x2, 0x9]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x7, 0x4, 0x7, 0xd]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x100}, 0x4080) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r5, 0x0, 0x0, 0x400000000000000) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="000d0000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e61, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110bc000000000006000000000044009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) kernel console output (not intermixed with test programs): ware/. failed with error -22 [ 246.875737][T13297] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 246.884980][T13297] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 246.951058][T13301] tipc: Enabled bearer , priority 0 [ 246.959716][T13301] syzkaller0: entered promiscuous mode [ 246.965337][T13301] syzkaller0: entered allmulticast mode [ 247.003172][T13301] tipc: Resetting bearer [ 247.272364][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.298396][T13324] __nla_validate_parse: 22 callbacks suppressed [ 247.298415][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 247.335219][T13324] sctp: [Deprecated]: syz.4.2038 (pid 13324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.335219][T13324] Use struct sctp_sack_info instead [ 247.493329][T13332] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2042'. [ 247.667728][T13348] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2045'. [ 247.743422][T13351] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2046'. [ 247.775987][T13300] tipc: Resetting bearer [ 247.831206][T13300] tipc: Disabling bearer [ 248.128222][T13375] validate_nla: 2 callbacks suppressed [ 248.128241][T13375] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 248.150165][T13375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2053'. [ 248.194963][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2056'. [ 248.241483][T13379] tipc: Enabling of bearer rejected, failed to enable media [ 248.287375][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2057'. [ 248.403136][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2059'. [ 248.435562][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 248.446256][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'. [ 248.794878][ T5831] block nbd1: Receive control failed (result -107) [ 248.937048][T13427] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.084788][T13437] bond6: invalid ARP target 0.0.0.0 specified for addition [ 249.095768][T13437] bond6: option arp_ip_target: invalid value (0) [ 249.175315][T13437] bond6 (unregistering): Released all slaves [ 252.078057][T13450] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 252.149370][T13450] bond6 (unregistering): Released all slaves [ 252.431265][T13460] __nla_validate_parse: 3 callbacks suppressed [ 252.431289][T13460] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2082'. [ 252.547538][T13471] syzkaller0: entered promiscuous mode [ 252.555712][T13471] syzkaller0: entered allmulticast mode [ 252.599499][T13483] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 252.702338][T13489] GUP no longer grows the stack in syz.4.2089 (13489): 200000003000-20000000a000 (200000001000) [ 252.719696][T13489] CPU: 1 UID: 0 PID: 13489 Comm: syz.4.2089 Not tainted syzkaller #0 PREEMPT(full) [ 252.719725][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.719743][T13489] Call Trace: [ 252.719751][T13489] [ 252.719758][T13489] dump_stack_lvl+0x189/0x250 [ 252.719784][T13489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.719800][T13489] ? __pfx__printk+0x10/0x10 [ 252.719814][T13489] ? find_vma+0xe7/0x160 [ 252.719846][T13489] __get_user_pages+0x2470/0x2a00 [ 252.719871][T13489] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 252.719911][T13489] ? rcu_is_watching+0x15/0xb0 [ 252.719935][T13489] __gup_longterm_locked+0xde4/0x1660 [ 252.719960][T13489] ? try_grab_folio_fast+0x1bf/0x6a0 [ 252.719990][T13489] ? gup_fast_fallback+0x1b86/0x22d0 [ 252.720012][T13489] gup_fast_fallback+0x1d65/0x22d0 [ 252.720066][T13489] ? __pfx_gup_fast_fallback+0x10/0x10 [ 252.720084][T13489] ? __mutex_lock+0x335/0x1350 [ 252.720113][T13489] ? is_valid_gup_args+0x11f/0x200 [ 252.720133][T13489] ? get_user_pages_fast+0x4d/0xb0 [ 252.720154][T13489] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 252.720194][T13489] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 252.720210][T13489] ? wait_for_space+0x248/0x2d0 [ 252.720235][T13489] iov_iter_get_pages2+0x5e/0xa0 [ 252.720262][T13489] __se_sys_vmsplice+0x548/0x10d0 [ 252.720296][T13489] ? futex_private_hash_put+0x4b/0x280 [ 252.720323][T13489] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 252.720346][T13489] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 252.720366][T13489] ? __pfx_futex_wake+0x10/0x10 [ 252.720389][T13489] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 252.720464][T13489] ? do_syscall_64+0xbe/0xfa0 [ 252.720487][T13489] do_syscall_64+0xfa/0xfa0 [ 252.720504][T13489] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.720522][T13489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.720538][T13489] ? clear_bhb_loop+0x60/0xb0 [ 252.720558][T13489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.720573][T13489] RIP: 0033:0x7f64d3d8eec9 [ 252.720603][T13489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.720617][T13489] RSP: 002b:00007f64d4bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 252.720642][T13489] RAX: ffffffffffffffda RBX: 00007f64d3fe5fa0 RCX: 00007f64d3d8eec9 [ 252.720654][T13489] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 252.720664][T13489] RBP: 00007f64d3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.720674][T13489] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 252.720683][T13489] R13: 00007f64d3fe6038 R14: 00007f64d3fe5fa0 R15: 00007ffe9d47c7b8 [ 252.720713][T13489] [ 253.026974][T13494] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 254.800330][T13514] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 254.864457][T13522] netlink: zone id is out of range [ 254.871569][T13522] netlink: zone id is out of range [ 254.877425][T13522] netlink: del zone limit has 4 unknown bytes [ 254.893918][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 254.919761][T13518] netlink: 'syz.3.2097': attribute type 8 has an invalid length. [ 255.049343][T13530] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2102'. [ 255.283875][T13546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.402334][T13554] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2112'. [ 255.473486][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 255.564553][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 255.870010][T13590] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 255.888275][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 255.923344][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 255.981755][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.994477][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103309][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 256.127093][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 256.204165][T13611] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 256.843045][T13655] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 257.167766][T13680] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 257.227138][T13680] bond6: entered promiscuous mode [ 257.243525][T13680] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.308436][T13686] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 257.449555][T13688] sctp: [Deprecated]: syz.0.2155 (pid 13688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.449555][T13688] Use struct sctp_sack_info instead [ 257.571809][T13700] batman_adv: batadv0: Adding interface: dummy0 [ 257.578105][T13700] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.614883][T13700] batman_adv: batadv0: Interface activated: dummy0 [ 257.664863][T13705] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.671820][T13705] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 257.817396][T13708] syzkaller1: left promiscuous mode [ 257.823990][T13708] syzkaller1: left allmulticast mode [ 258.258370][T13749] __nla_validate_parse: 41 callbacks suppressed [ 258.258405][T13749] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2170'. [ 258.275173][T13749] team0: No ports can be present during mode change [ 258.283368][T13751] netlink: 'syz.4.2172': attribute type 3 has an invalid length. [ 258.292010][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 258.305849][T13748] netlink: 'syz.2.2171': attribute type 12 has an invalid length. [ 258.315931][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 258.339409][T13748] netlink: 'syz.2.2171': attribute type 12 has an invalid length. [ 258.491620][T13764] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2178'. [ 258.543443][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 258.692535][T13779] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2182'. [ 258.702320][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 258.855438][T13788] C: renamed from team_slave_0 (while UP) [ 258.870737][T13788] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 258.888831][T13788] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.909711][T13793] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2187'. [ 258.927912][T13788] macsec0: left promiscuous mode [ 258.940595][T13797] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2187'. [ 258.951469][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'. [ 259.296701][T13823] tipc: New replicast peer: 255.255.255.255 [ 259.305034][T13823] tipc: Enabled bearer , priority 10 [ 259.344005][T13827] netlink: 'syz.1.2198': attribute type 1 has an invalid length. [ 259.420320][T13827] bond5: entered promiscuous mode [ 259.425737][T13827] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.511550][T13833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.529424][T13833] bond5: (slave bond6): making interface the new active one [ 259.536976][T13833] bond6: entered promiscuous mode [ 259.545577][T13833] bond5: (slave bond6): Enslaving as an active interface with an up link [ 259.802630][T13863] openvswitch: netlink: Missing key (keys=40, expected=80) [ 259.825742][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.419458][ T856] tipc: Node number set to 271370051 [ 260.655551][T13926] IPv6: sit1: Disabled Multicast RS [ 260.673309][T13926] sit1: entered allmulticast mode [ 260.855510][T13937] validate_nla: 2 callbacks suppressed [ 260.855525][T13937] netlink: 'syz.1.2227': attribute type 10 has an invalid length. [ 260.885388][T13937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.894667][T13937] bond0: (slave wg0): The slave device specified does not support setting the MAC address [ 260.906076][T13937] bond0: (slave wg0): Error -95 calling set_mac_address [ 261.117840][T13950] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 261.255154][T13961] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 261.325679][T13960] bond7 (unregistering): Released all slaves [ 262.236400][T14015] veth1_to_bond: entered allmulticast mode [ 262.265435][T14015] 8021q: VLANs not supported on sit0 [ 262.272522][T14015] veth1_to_bond: left allmulticast mode [ 262.941413][T14046] openvswitch: netlink: Flow key attr not present in new flow. [ 263.158989][T14056] vlan4: entered allmulticast mode [ 263.387914][T14081] x_tables: duplicate underflow at hook 3 [ 263.407659][T14081] x_tables: duplicate underflow at hook 2 [ 263.592832][T14093] netlink: 'syz.3.2278': attribute type 3 has an invalid length. [ 263.824568][T14104] tipc: Enabled bearer , priority 0 [ 263.848283][T14104] syzkaller0: entered promiscuous mode [ 263.865248][T14104] syzkaller0: entered allmulticast mode [ 263.912672][T14104] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.001919][T14104] tipc: Resetting bearer [ 264.052345][T14103] tipc: Resetting bearer [ 264.143657][T14103] tipc: Disabling bearer [ 264.211586][T14121] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.336702][T14133] __nla_validate_parse: 12 callbacks suppressed [ 264.336722][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 264.406142][T14139] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2293'. [ 264.429872][T14139] 8021q: VLANs not supported on gre0 [ 264.453387][T14140] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 264.472449][T14140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2293'. [ 264.486940][T14140] dummy0: entered promiscuous mode [ 264.500084][T14140] bridge0: port 3(dummy0) entered blocking state [ 264.520804][T14140] bridge0: port 3(dummy0) entered disabled state [ 264.562924][T14149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2295'. [ 264.578873][T14140] dummy0: entered allmulticast mode [ 264.629012][T14154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2296'. [ 264.834646][T14167] ksmbd: Unknown IPC event: 3, ignore. [ 264.844420][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 264.866056][T14167] IPVS: length: 8 != 1152 [ 264.981648][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 265.008002][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2302'. [ 265.164893][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2305'. [ 265.409122][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2313'. [ 265.414698][T14205] netlink: 'syz.0.2311': attribute type 1 has an invalid length. [ 265.603356][T14221] Cannot find add_set index 0 as target [ 265.937947][T14219] bond12 (unregistering): Released all slaves [ 266.220918][T14243] bond8 (unregistering): Released all slaves [ 266.335720][T14258] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 266.358053][T14260] netlink: 'syz.1.2325': attribute type 3 has an invalid length. [ 266.390059][T14260] netlink: 'syz.1.2325': attribute type 2 has an invalid length. [ 266.498317][T14272] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 267.294333][T14318] ksmbd: Unknown IPC event: 3, ignore. [ 267.388444][T14329] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 268.392224][T14387] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 268.696806][T14407] smc: removing ib device syz1 [ 268.718011][T14409] xt_socket: unknown flags 0x50 [ 268.978158][T14423] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 269.392882][T14442] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 269.404973][T14442] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 269.442479][T14442] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 269.468221][T14442] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 269.512907][T14442] netlink: 'syz.3.2378': attribute type 3 has an invalid length. [ 269.623704][T14450] __nla_validate_parse: 19 callbacks suppressed [ 269.623726][T14450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2380'. [ 269.900043][T14457] bridge0: port 3(dummy0) entered blocking state [ 269.906593][T14457] bridge0: port 3(dummy0) entered forwarding state [ 269.913764][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.920985][T14457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.940278][T14457] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.955374][T14457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.115545][T14469] wg2: entered promiscuous mode [ 270.136001][T14469] wg2: entered allmulticast mode [ 270.442968][T14486] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2391'. [ 270.598363][T14492] tipc: MTU too low for tipc bearer [ 270.607174][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 270.786154][T14499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.820602][T14499] bond0: (slave rose0): Enslaving as an active interface with an up link [ 270.882732][T14497] bond8: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.904776][T14497] bond8: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 270.917882][T14497] bond8: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode [ 271.138427][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 271.626032][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2415'. [ 271.647902][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 271.743274][T14550] wlan1 speed is unknown, defaulting to 1000 [ 271.758065][T14550] xfrm0 speed is unknown, defaulting to 1000 [ 271.927703][T14568] tipc: Enabled bearer , priority 0 [ 271.949285][T14568] syzkaller0: entered promiscuous mode [ 271.968706][T14568] syzkaller0: entered allmulticast mode [ 272.060852][T14568] tipc: Resetting bearer [ 272.080703][T14566] tipc: Resetting bearer [ 272.126255][T14566] tipc: Disabling bearer [ 272.313220][T14580] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 272.581856][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 272.605159][T14594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2430'. [ 272.831794][T14616] validate_nla: 43 callbacks suppressed [ 272.831815][T14616] netlink: 'syz.2.2436': attribute type 33 has an invalid length. [ 272.856923][T14618] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2437'. [ 272.911594][T14618] openvswitch: netlink: Missing key (keys=40, expected=100) [ 272.920618][T14616] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2436'. [ 273.106040][T14636] ip6gre0: Master is either lo or non-ether device [ 273.185768][T14644] netlink: 'syz.3.2442': attribute type 33 has an invalid length. [ 273.880475][T14635] netlink: 'syz.0.2441': attribute type 1 has an invalid length. [ 274.004397][T14670] vlan3: entered allmulticast mode [ 274.009671][T14670] bond0: entered allmulticast mode [ 274.090487][T14678] bond0: option ad_select: unable to set because the bond device is up [ 274.112472][T14681] 8021q: VLANs not supported on ipvlan1 [ 274.121584][T14681] netlink: 'syz.4.2448': attribute type 29 has an invalid length. [ 274.131634][T14681] netlink: 'syz.4.2448': attribute type 29 has an invalid length. [ 274.282564][T14691] netlink: 'syz.1.2454': attribute type 3 has an invalid length. [ 274.313653][T14692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 274.331630][T14692] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 274.350570][T14692] gretap3: entered promiscuous mode [ 274.359432][T14692] gretap3: entered allmulticast mode [ 274.487266][T14701] netlink: 'syz.3.2455': attribute type 2 has an invalid length. [ 274.720002][T14705] __nla_validate_parse: 4 callbacks suppressed [ 274.720025][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 274.765148][T14709] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2459'. [ 274.873223][T14709] netlink: 'syz.2.2459': attribute type 29 has an invalid length. [ 274.901187][T14709] netlink: 'syz.2.2459': attribute type 29 has an invalid length. [ 274.930144][ T5831] Bluetooth: hci4: link tx timeout [ 274.932781][T14709] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2459'. [ 274.939373][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.956237][ T5839] Bluetooth: hci4: link tx timeout [ 274.962138][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.986069][T14712] syzkaller0: entered promiscuous mode [ 275.000851][T14712] syzkaller0: entered allmulticast mode [ 275.021997][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 275.023974][T14712] : renamed from hsr0 (while UP) [ 275.042268][T14717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2462'. [ 275.093301][ T7633] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.109622][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'. [ 275.133764][T14712] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.140982][T14717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2462'. [ 275.171124][T14714] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.190690][ T7633] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.234670][ T7633] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.254217][ T7633] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.352624][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 275.416030][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 275.470096][T14746] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 275.613545][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 275.636422][T14761] netlink: 'syz.3.2474': attribute type 5 has an invalid length. [ 275.752424][T14767] tipc: Enabled bearer , priority 0 [ 275.766558][T14767] syzkaller0: entered promiscuous mode [ 275.773134][T14767] syzkaller0: entered allmulticast mode [ 275.783905][T14771] tun0: tun_chr_ioctl cmd 1074025675 [ 275.789966][T14771] tun0: persist disabled [ 275.851003][T14774] tipc: Resetting bearer [ 275.887783][T14765] tipc: Resetting bearer [ 275.920490][T14765] tipc: Disabling bearer [ 276.079298][T14779] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.321597][T14795] tipc: Enabled bearer , priority 0 [ 276.346131][T14795] syzkaller0: entered promiscuous mode [ 276.353945][T14795] syzkaller0: entered allmulticast mode [ 276.410920][T14795] dummy0: left allmulticast mode [ 276.416509][T14795] dummy0: left promiscuous mode [ 276.422288][T14795] bridge0: port 3(dummy0) entered disabled state [ 276.435111][T14795] bridge_slave_0: left allmulticast mode [ 276.441743][T14795] bridge_slave_0: left promiscuous mode [ 276.448391][T14795] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.462053][T14795] bridge_slave_1: left allmulticast mode [ 276.467769][T14795] bridge_slave_1: left promiscuous mode [ 276.473924][T14795] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.486180][T14795] bond3: (slave veth0_to_bond): Releasing active interface [ 276.501614][T14795] bond0: (slave bond_slave_0): Releasing backup interface [ 276.531502][T14795] bond0: (slave bond_slave_1): Releasing backup interface [ 276.565007][T14795] team0: Port device team_slave_0 removed [ 276.582860][T14795] team0: Port device team_slave_1 removed [ 276.591721][T14795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.600214][T14795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.610240][T14795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.617697][T14795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.627622][T14795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 276.690404][T14809] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 276.704571][T14809] bond8 (unregistering): Released all slaves [ 276.729422][T14793] tipc: Resetting bearer [ 276.751981][T14793] tipc: Disabling bearer [ 276.905520][T14819] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 277.010567][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 278.073748][T14886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.086705][T14886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.121379][T14879] dvmrp0: left allmulticast mode [ 278.135954][T14879] dvmrp1: left allmulticast mode [ 278.264279][T14886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.276492][T14886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.406911][T14886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.418049][T14886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.475135][T14915] tipc: Enabled bearer , priority 0 [ 278.485423][T14914] tipc: Enabling of bearer rejected, already enabled [ 278.494849][T14915] syzkaller0: entered promiscuous mode [ 278.514336][T14915] syzkaller0: entered allmulticast mode [ 278.538213][T14886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.549295][T14886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.568059][T14915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 278.617580][T14914] tipc: Resetting bearer [ 278.650532][T14913] tipc: Resetting bearer [ 278.685158][T14913] tipc: Disabling bearer [ 278.703087][T14926] ip6gre0: left allmulticast mode [ 278.760649][ T7633] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.782520][ T7633] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.832419][ T7633] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.849898][ T7633] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.887958][ T7633] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.900148][ T7633] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.923860][ T7633] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.932582][ T7633] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.061731][T14945] ipt_ECN: cannot use operation on non-tcp rule [ 279.093762][T14946] syz_tun: entered allmulticast mode [ 279.127906][T14949] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.153013][T14946] syz_tun: left allmulticast mode [ 279.293589][T14956] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 279.346945][T14956] bond12 (unregistering): Released all slaves [ 279.394330][T14975] vlan3: entered allmulticast mode [ 279.634605][ T7625] tipc: Subscription rejected, illegal request [ 279.893693][T15015] __nla_validate_parse: 21 callbacks suppressed [ 279.893713][T15015] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2545'. [ 280.207201][T15057] tipc: Enabled bearer , priority 0 [ 280.215235][T15053] tipc: Enabling of bearer rejected, already enabled [ 280.225991][T15057] syzkaller0: entered promiscuous mode [ 280.232035][T15057] syzkaller0: entered allmulticast mode [ 280.313132][T15057] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 280.345103][T15068] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 280.355843][T15066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 280.380593][T15057] tipc: Resetting bearer [ 280.426672][T15074] xt_policy: output policy not valid in PREROUTING and INPUT [ 280.543646][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 280.581300][T15081] validate_nla: 5 callbacks suppressed [ 280.581320][T15081] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 280.598941][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 280.737270][ T7630] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.751145][T15091] xt_l2tp: missing protocol rule (udp|l2tpip) [ 280.978220][T15052] tipc: Resetting bearer [ 280.995433][T15052] tipc: Disabling bearer [ 281.360885][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 281.426431][T15101] tunl0: entered allmulticast mode [ 281.433652][T15101] gre0: entered allmulticast mode [ 281.443783][T15101] gretap0: entered allmulticast mode [ 281.451843][T15101] erspan0: entered allmulticast mode [ 281.459681][T15101] ip_vti0: entered allmulticast mode [ 281.466741][T15101] ip6_vti0: entered allmulticast mode [ 281.483066][T15101] sit0: entered allmulticast mode [ 281.520268][T15101] ip6tnl0: entered allmulticast mode [ 281.533025][T15101] ip6gre0: entered allmulticast mode [ 281.544255][T15101] syz_tun: entered allmulticast mode [ 281.558248][T15101] ip6gretap0: entered allmulticast mode [ 281.581276][T15101] bridge0: entered allmulticast mode [ 281.594437][T15101] team0: entered allmulticast mode [ 281.604061][T15101] batman_adv: batadv0: Interface deactivated: dummy0 [ 281.611710][T15101] dummy0: left promiscuous mode [ 281.616682][T15101] dummy0: entered allmulticast mode [ 281.632870][T15101] nlmon0: entered allmulticast mode [ 281.633601][T15105] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 281.640693][T15101] caif0: entered allmulticast mode [ 281.652095][T15101] batadv0: entered allmulticast mode [ 281.660211][T15101] veth0: entered allmulticast mode [ 281.667630][T15101] veth1: entered allmulticast mode [ 281.676353][T15101] wg0: entered allmulticast mode [ 281.683944][T15101] wg1: entered allmulticast mode [ 281.691029][T15101] wg2: entered allmulticast mode [ 281.698256][T15101] veth0_to_bridge: entered allmulticast mode [ 281.707196][T15101] bridge_slave_0: entered allmulticast mode [ 281.715111][T15101] veth1_to_bridge: entered allmulticast mode [ 281.725179][T15101] bridge_slave_1: entered allmulticast mode [ 281.735434][T15101] veth0_to_bond: entered allmulticast mode [ 281.744388][T15101] bond_slave_0: entered allmulticast mode [ 281.751266][T15101] veth1_to_bond: entered allmulticast mode [ 281.759984][T15101] bond_slave_1: entered allmulticast mode [ 281.766175][T15101] veth0_to_team: entered allmulticast mode [ 281.774303][T15101] team_slave_0: entered allmulticast mode [ 281.780630][T15101] veth1_to_team: entered allmulticast mode [ 281.788477][T15101] team_slave_1: entered allmulticast mode [ 281.796690][T15101] veth0_to_batadv: entered allmulticast mode [ 281.805121][T15101] batadv_slave_0: left promiscuous mode [ 281.811562][T15101] veth1_to_batadv: entered allmulticast mode [ 281.820530][T15101] batadv_slave_1: entered allmulticast mode [ 281.829385][T15101] xfrm0: entered allmulticast mode [ 281.836695][T15101] veth0_to_hsr: entered allmulticast mode [ 281.845552][T15101] hsr_slave_0: entered allmulticast mode [ 281.853569][T15101] veth1_to_hsr: entered allmulticast mode [ 281.870635][T15101] hsr0: entered allmulticast mode [ 281.878099][T15101] veth1_virt_wifi: entered allmulticast mode [ 281.886781][T15101] veth0_virt_wifi: entered allmulticast mode [ 281.895213][T15101] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 281.903118][T15101] veth1_macvtap: entered allmulticast mode [ 281.912443][T15101] veth0_macvtap: entered allmulticast mode [ 281.922119][T15101] macvtap0: entered allmulticast mode [ 281.931237][T15101] macsec0: entered allmulticast mode [ 281.939102][T15101] geneve0: entered allmulticast mode [ 281.948013][T15101] geneve1: entered allmulticast mode [ 281.956858][T15101] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 281.964629][T15101] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 281.972604][T15101] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 281.983775][T15101] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 281.993741][T15101] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 282.005701][T15101] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 282.022607][T15101] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 282.032451][T15101] vxcan2: entered allmulticast mode [ 282.037881][T15101] vxcan3: entered allmulticast mode [ 282.043997][T15101] ip6gretap1: entered allmulticast mode [ 282.051330][T15101] ip6tnl1: entered allmulticast mode [ 282.057007][T15101] ip6tnl2: entered allmulticast mode [ 282.065191][T15101] @: entered allmulticast mode [ 282.073147][T15101] bridge1: entered allmulticast mode [ 282.078765][T15101] gretap1: entered allmulticast mode [ 282.085091][T15101] bond1: entered allmulticast mode [ 282.091719][T15101] bond2: entered allmulticast mode [ 282.097247][T15101] mac80211_hwsim hwsim1 wlan2: entered allmulticast mode [ 282.104878][T15101] vxlan0: entered allmulticast mode [ 282.111231][T15101] ip6erspan0: entered allmulticast mode [ 282.120753][T15101] bridge2: entered allmulticast mode [ 282.127546][T15101] ip6gretap2: entered allmulticast mode [ 282.133701][T15101] bond0: entered allmulticast mode [ 282.139079][T15101] veth2: entered allmulticast mode [ 282.144328][T15101] veth3: left promiscuous mode [ 282.149495][T15101] veth3: entered allmulticast mode [ 282.154763][T15101] macvlan2: entered allmulticast mode [ 282.160497][T15101] macsec1: entered allmulticast mode [ 282.165906][T15101] mac80211_hwsim hwsim28 wlan3: entered allmulticast mode [ 282.173400][T15101] sit1: entered allmulticast mode [ 282.178717][T15101] gretap2: entered allmulticast mode [ 282.184129][T15101] bond3: entered allmulticast mode [ 282.190678][T15101] bridge3: entered allmulticast mode [ 282.200649][T15101] bond4: entered allmulticast mode [ 282.206046][T15101] bridge4: entered allmulticast mode [ 282.212135][T15101] vlan0: left promiscuous mode [ 282.217918][T15101] vlan1: entered allmulticast mode [ 282.223451][T15101] macvlan0: entered allmulticast mode [ 282.229434][T15101] syztnl2: entered allmulticast mode [ 282.235510][T15101] bond5: left promiscuous mode [ 282.241198][T15101] bond5: entered allmulticast mode [ 282.247686][T15101] veth4: entered allmulticast mode [ 282.253114][T15101] veth5: entered allmulticast mode [ 282.259360][T15101] bond6: left promiscuous mode [ 282.264183][T15101] bond6: entered allmulticast mode [ 282.270289][T15101] bridge5: entered allmulticast mode [ 282.275725][T15101] bond7: entered allmulticast mode [ 282.281539][T15101] nicvf0: entered allmulticast mode [ 282.286922][T15101] veth6: entered allmulticast mode [ 282.293761][T15101] veth7: entered allmulticast mode [ 282.372008][T15107] gretap1: entered promiscuous mode [ 282.422189][T15107] bond10: (slave gretap1): making interface the new active one [ 282.448286][T15107] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 282.488072][ T7639] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.508569][ T7639] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.527908][ T7639] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.537981][ T7639] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.626595][T15110] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 282.641155][T15110] bond8 (unregistering): Released all slaves [ 282.709036][T15113] tipc: Enabled bearer , priority 0 [ 282.717493][T15124] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 282.735024][T15115] syzkaller0: entered promiscuous mode [ 282.741129][T15115] syzkaller0: entered allmulticast mode [ 282.896266][T15144] bond12: entered allmulticast mode [ 282.902291][T15144] 8021q: adding VLAN 0 to HW filter on device bond12 [ 282.971061][ T7639] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.014011][ T7639] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.062240][T15131] tipc: Resetting bearer [ 283.155562][T15131] tipc: Disabling bearer [ 283.308278][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2578'. [ 283.416241][T15176] macsec0: entered promiscuous mode [ 283.422352][T15176] macsec0: entered allmulticast mode [ 283.432729][T15168] veth1_macvtap: entered promiscuous mode [ 283.441723][T15177] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 283.442392][T15168] veth1_macvtap: entered allmulticast mode [ 283.458848][T15177] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2579'. [ 283.486110][T15168] macsec0: left promiscuous mode [ 283.506822][T15168] macsec0: left allmulticast mode [ 283.523696][T15168] veth1_macvtap: left allmulticast mode [ 283.814618][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2589'. [ 283.827255][T15198] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2588'. [ 283.850434][T15201] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2589'. [ 283.890560][T15201] team0: Mode changed to "loadbalance" [ 283.929725][T15201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2589'. [ 284.186606][T15227] xt_hashlimit: invalid rate [ 284.288358][T15232] netlink: 'syz.3.2596': attribute type 33 has an invalid length. [ 284.335163][T15242] netlink: 'syz.4.2598': attribute type 83 has an invalid length. [ 284.786968][T15259] syzkaller0: entered promiscuous mode [ 284.795670][T15259] syzkaller0: entered allmulticast mode [ 284.955588][T15267] hsr_slave_1 (unregistering): left promiscuous mode [ 285.158471][T15285] netlink: 'syz.1.2613': attribute type 23 has an invalid length. [ 285.234029][T15288] nbd: must specify at least one socket [ 285.896396][T15300] __nla_validate_parse: 4 callbacks suppressed [ 285.896416][T15300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2618'. [ 287.021924][T15301] dvmrp0: entered allmulticast mode [ 287.031221][T15300] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 287.289820][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.318006][T15315] syzkaller0: entered promiscuous mode [ 287.326792][T15315] syzkaller0: entered allmulticast mode [ 287.353230][T15315] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 287.484817][T15331] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 287.521619][T15331] 8021q: adding VLAN 0 to HW filter on device bond13 [ 287.550704][T15331] bond13: (slave veth21): Enslaving as an active interface with a down link [ 287.564353][T15335] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 287.678858][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.696330][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 287.820812][T15352] ÿ speed is unknown, defaulting to 1000 [ 287.881251][T15352] xfrm0 speed is unknown, defaulting to 1000 [ 287.897118][T15361] netlink: 'syz.3.2637': attribute type 23 has an invalid length. [ 287.992272][T15364] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.123306][T15376] veth0_to_bridge: entered promiscuous mode [ 288.155504][T15376] veth0_to_bridge: left promiscuous mode [ 288.307458][T15386] ip6t_srh: unknown srh invflags 4000 [ 288.364827][T15386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2642'. [ 288.765726][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2648'. [ 288.801819][T15414] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2650'. [ 288.852821][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'. [ 288.877683][T15416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2648'. [ 288.904317][T15416] bond_slave: renamed from dummy0 [ 289.022290][T15426] x_tables: duplicate underflow at hook 2 [ 289.144635][T15431] IPv6: Can't replace route, no match found [ 289.543157][T15463] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2660'. [ 289.580625][T15463] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 289.601272][T15463] 0ªî{X¹¦: entered allmulticast mode [ 289.610670][T15463] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 289.633792][T15467] delete_channel: no stack [ 289.697781][T15471] nbd: couldn't find a device at index 0 [ 289.864834][T15484] netlink: 'syz.4.2673': attribute type 178 has an invalid length. [ 289.878325][T15484] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2673'. [ 289.888068][T15484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2673'. [ 289.969120][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 290.096010][T15503] tipc: Enabled bearer , priority 0 [ 290.106597][T15504] syzkaller0: entered promiscuous mode [ 290.114377][T15504] syzkaller0: entered allmulticast mode [ 290.119707][T15508] netlink: 'syz.2.2680': attribute type 21 has an invalid length. [ 290.148427][T15505] tipc: Resetting bearer [ 290.183359][T15505] tipc: Disabling bearer [ 290.482454][T15529] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20004 [ 290.528104][T15527] netlink: 'syz.0.2686': attribute type 24 has an invalid length. [ 290.772697][T15540] team0: No ports can be present during mode change [ 291.123738][T15559] tipc: Bearer : already 2 bearers with priority 10 [ 291.132477][T15559] tipc: Bearer : trying with adjusted priority [ 291.140100][T15559] tipc: Enabling of bearer rejected, failed to enable media [ 291.162844][T15566] __nla_validate_parse: 4 callbacks suppressed [ 291.162867][T15566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2699'. [ 291.163236][T15559] tipc: Bearer : already 2 bearers with priority 10 [ 291.194016][T15559] tipc: Bearer : trying with adjusted priority [ 291.202276][T15559] tipc: Enabling of bearer rejected, failed to enable media [ 291.214742][T15562] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 291.261823][T15567] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.318415][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2702'. [ 291.505937][T15587] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2707'. [ 291.568733][T15587] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2707'. [ 292.111082][T15643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2724'. [ 292.194670][T15643] bond8 (unregistering): Released all slaves [ 292.371810][T15659] tipc: Enabled bearer , priority 0 [ 292.379956][T15659] syzkaller0: entered promiscuous mode [ 292.385651][T15659] syzkaller0: entered allmulticast mode [ 292.409373][T15659] tipc: Resetting bearer [ 292.448812][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.498874][T15658] tipc: Resetting bearer [ 292.554296][T15658] tipc: Disabling bearer [ 292.714085][T15685] netlink: 'syz.2.2734': attribute type 3 has an invalid length. [ 292.732768][T15683] bridge0: port 1(bridge_slave_1) entered blocking state [ 292.761554][T15683] bridge0: port 1(bridge_slave_1) entered disabled state [ 292.783666][T15683] bridge_slave_1: entered allmulticast mode [ 292.793101][T15683] bridge_slave_1: entered promiscuous mode [ 292.993917][T15703] IPv6: Can't replace route, no match found [ 293.193028][T15715] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 293.473968][T15733] tipc: Enabling of bearer rejected, failed to enable media [ 293.606237][T15735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2751'. [ 293.739545][T15738] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2752'. [ 294.311372][T15769] netlink: 'syz.1.2761': attribute type 3 has an invalid length. [ 294.322200][T15769] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2761'. [ 294.611770][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2765'. [ 294.673999][T15784] pimreg: entered allmulticast mode [ 294.727990][T15778] pimreg: left allmulticast mode [ 295.086973][T15814] siw: device registration error -23 [ 295.257702][T15820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2774'. [ 295.281515][T15820] tipc: Enabled bearer , priority 0 [ 295.379970][T15820] syzkaller0: entered promiscuous mode [ 295.393304][T15820] syzkaller0: entered allmulticast mode [ 295.464787][T15815] tipc: Resetting bearer [ 297.354947][T15815] tipc: Disabling bearer [ 297.364930][T15843] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 297.492313][T15851] wg1: entered promiscuous mode [ 297.706626][T15869] __nla_validate_parse: 1 callbacks suppressed [ 297.706657][T15869] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2792'. [ 297.877590][T15876] vlan0: entered allmulticast mode [ 297.949686][T15887] sctp: [Deprecated]: syz.0.2796 (pid 15887) Use of int in maxseg socket option. [ 297.949686][T15887] Use struct sctp_assoc_value instead [ 297.971542][T15876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2793'. [ 297.994054][T15887] sctp: [Deprecated]: syz.0.2796 (pid 15887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.994054][T15887] Use struct sctp_sack_info instead [ 298.034209][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2798'. [ 298.174280][T15891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 298.268884][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2798'. [ 298.537713][T15921] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 299.588308][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2812'. [ 302.419129][T15955] netlink: 'syz.0.2819': attribute type 7 has an invalid length. [ 302.426977][T15955] netlink: 'syz.0.2819': attribute type 8 has an invalid length. [ 302.627957][T15969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2825'. [ 302.764860][T15974] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 302.802595][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 303.147573][T16008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.227906][T16017] delete_channel: no stack [ 303.331325][T16025] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2842'. [ 303.380705][T16029] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 303.415500][T16029] bond8 (unregistering): Released all slaves [ 303.776677][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'. [ 303.841275][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'. [ 304.031149][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 304.031549][T16076] netlink: 'syz.1.2856': attribute type 24 has an invalid length. [ 304.111691][T16085] netlink: 'syz.1.2856': attribute type 24 has an invalid length. [ 304.160745][ T5900] ÿ speed is unknown, defaulting to 1000 [ 304.315250][T16089] xt_CONNSECMARK: invalid mode: 0 [ 304.780822][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.790652][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.805175][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.813698][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.823370][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.924130][T16109] ÿ speed is unknown, defaulting to 1000 [ 304.933579][T16120] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2870'. [ 304.951261][T16109] xfrm0 speed is unknown, defaulting to 1000 [ 305.152636][T16126] tipc: Enabled bearer , priority 0 [ 305.168348][T16126] syzkaller0: entered promiscuous mode [ 305.188277][T16126] syzkaller0: entered allmulticast mode [ 305.301973][T16129] tipc: Resetting bearer [ 305.378903][T16125] tipc: Resetting bearer [ 305.459499][T16125] tipc: Disabling bearer [ 305.559685][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 305.634460][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 305.938801][T16109] chnl_net:caif_netlink_parms(): no params data found [ 306.148182][T16109] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.181860][T16109] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.198909][T16109] bridge_slave_0: entered allmulticast mode [ 306.213434][T16109] bridge_slave_0: entered promiscuous mode [ 306.345870][T16109] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.362349][T16109] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.402406][T16109] bridge_slave_1: entered allmulticast mode [ 306.433512][T16109] bridge_slave_1: entered promiscuous mode [ 306.516235][T16109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.540883][T16109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.571886][T16188] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 306.654974][T16188] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.665537][T16109] team0: Port device team_slave_0 added [ 306.675333][T16109] team0: Port device team_slave_1 added [ 306.712058][T16196] veth11: entered promiscuous mode [ 306.724414][T16196] bond9: (slave veth11): Enslaving as an active interface with a down link [ 306.754155][T16188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2885'. [ 306.784709][T16109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.784932][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2890'. [ 306.792768][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.829441][T16109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.848703][ T5839] Bluetooth: hci3: command tx timeout [ 306.861121][T16109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.868121][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.895604][T16109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.925238][T16206] netlink: 'syz.2.2891': attribute type 26 has an invalid length. [ 307.016875][T16109] hsr_slave_0: entered promiscuous mode [ 307.033674][T16109] hsr_slave_1: entered promiscuous mode [ 307.041049][T16109] debugfs: 'hsr0' already exists in 'hsr' [ 307.046815][T16109] Cannot create hsr debugfs directory [ 307.427247][T16109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.441523][T16109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.452113][T16109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 307.752700][T16109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.791430][T16109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.815537][T16109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 308.030616][T16109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.041943][T16109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.054467][T16109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 308.142463][T16109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.164592][T16109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.176869][T16109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 308.195491][T16273] __nla_validate_parse: 1 callbacks suppressed [ 308.195513][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 308.213961][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 308.236755][T16271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2908'. [ 308.251447][T16267] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2906'. [ 308.252268][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 308.287471][T16271] gtp2: entered promiscuous mode [ 308.293813][T16271] gtp2: entered allmulticast mode [ 308.432705][T16109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.459368][T16109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.487417][T16109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.540538][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 308.564480][T16109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.626511][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2913'. [ 308.639766][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2911'. [ 308.742505][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 308.763040][T16301] Unsupported xt match [ 308.763062][T16301] unable to load match [ 308.890979][T16313] netlink: 14448 bytes leftover after parsing attributes in process `syz.1.2916'. [ 308.913834][T16313] openvswitch: netlink: Flow key attr not present in new flow. [ 308.931103][ T5839] Bluetooth: hci3: command tx timeout [ 308.945439][T16109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.972022][T16109] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.986699][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.994043][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.057804][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.065097][ T7626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.239799][T16329] tipc: Enabled bearer , priority 0 [ 309.248158][T16329] syzkaller0: entered promiscuous mode [ 309.255779][T16329] syzkaller0: entered allmulticast mode [ 309.280971][T16333] netlink: 'syz.4.2922': attribute type 64 has an invalid length. [ 309.309693][T16329] tipc: Resetting bearer [ 309.328841][T16328] tipc: Resetting bearer [ 309.397458][T16328] tipc: Disabling bearer [ 309.618166][T16109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.770832][T16109] veth0_vlan: entered promiscuous mode [ 309.821472][T16109] veth1_vlan: entered promiscuous mode [ 309.935771][T16109] veth0_macvtap: entered promiscuous mode [ 309.955596][T16109] veth1_macvtap: entered promiscuous mode [ 310.014060][T16109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.060070][T16109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.082455][ T7626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.102977][ T7626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.138481][ T7626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.157779][T16386] syzkaller0: entered promiscuous mode [ 310.165780][T16386] syzkaller0: entered allmulticast mode [ 310.176405][T16384] tipc: Enabled bearer , priority 0 [ 310.201641][ T7626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.315755][T16393] tipc: Resetting bearer [ 310.344184][T16393] tipc: Disabling bearer [ 310.396704][ T7622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.418761][ T7622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.501308][T15042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.521204][T15042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.981932][T16431] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 310.988409][T16431] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 311.012335][ T5839] Bluetooth: hci3: command tx timeout [ 311.104384][T16426] gretap1: entered promiscuous mode [ 311.119011][T16426] gretap1: entered allmulticast mode [ 311.343987][ T7639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.359674][ T7639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.431309][T16441] tipc: Enabling of bearer rejected, already enabled [ 311.433790][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.440052][T16443] tipc: New replicast peer: 255.255.255.255 [ 311.453121][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.468032][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.481036][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.516982][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.543636][ T7639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.569617][ T7639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.657246][ T7639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.668071][ T7639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.734000][T16444] ÿ speed is unknown, defaulting to 1000 [ 311.751708][T16444] xfrm0 speed is unknown, defaulting to 1000 [ 311.792826][ T7639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.807662][ T7639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.969208][T16462] tipc: Started in network mode [ 311.974137][T16462] tipc: Node identity 3ae28e18c7c, cluster identity 4711 [ 312.009571][T16462] tipc: Enabled bearer , priority 0 [ 312.015235][T16464] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 312.053148][T16466] syzkaller0: entered promiscuous mode [ 312.064500][T16466] syzkaller0: entered allmulticast mode [ 312.098148][T16470] netlink: 'syz.0.2960': attribute type 4 has an invalid length. [ 312.159243][T16464] bond9: entered promiscuous mode [ 312.166997][T16464] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.186003][T15042] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.208890][T16462] tipc: Resetting bearer [ 312.264587][T16461] tipc: Resetting bearer [ 312.286279][T16461] tipc: Disabling bearer [ 312.314773][ T1167] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.382993][ T7630] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.433452][ T7630] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.716230][ T7622] smc: removing ib device syz0 [ 313.085280][ T7639] bond4 (unregistering): (slave geneve3): Releasing active interface [ 313.093891][ T5831] Bluetooth: hci3: command tx timeout [ 313.568816][ T5831] Bluetooth: hci1: command tx timeout [ 313.968183][ T7639] bond0 (unregistering): Released all slaves [ 314.164512][ T7639] bond1 (unregistering): Released all slaves [ 314.284344][ T7639] bond2 (unregistering): (slave veth5): Releasing active interface [ 314.294300][ T7639] bond2 (unregistering): Released all slaves [ 314.310918][ T7639] bond3 (unregistering): Released all slaves [ 314.424446][ T7639] bond4 (unregistering): Released all slaves [ 314.534976][ T7639] bond5 (unregistering): (slave veth13): Releasing backup interface [ 314.544763][ T7639] bond5 (unregistering): Released all slaves [ 314.664897][ T7639] bond6 (unregistering): Released all slaves [ 314.678253][ T7639] bond7 (unregistering): Released all slaves [ 314.692098][ T7639] bond8 (unregistering): Released all slaves [ 314.704713][ T7639] bond9 (unregistering): Released all slaves [ 314.719007][ T7639] bond10 (unregistering): Released all slaves [ 314.732780][ T7639] bond11 (unregistering): Released all slaves [ 314.844912][ T7639] bond12 (unregistering): Released all slaves [ 314.955198][ T7639] bond13 (unregistering): (slave veth21): Releasing active interface [ 314.965607][ T7639] bond13 (unregistering): Released all slaves [ 315.231798][ T7639] tipc: Disabling bearer [ 315.250766][ T7639] tipc: Disabling bearer [ 315.270207][ T7639] tipc: Left network mode [ 315.331654][T16518] __nla_validate_parse: 13 callbacks suppressed [ 315.331674][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 315.379221][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 315.441741][T16444] chnl_net:caif_netlink_parms(): no params data found [ 315.488434][T16528] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2974'. [ 315.507104][T16529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2975'. [ 315.550711][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 315.655656][ T5831] Bluetooth: hci1: command tx timeout [ 315.703856][T16541] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 315.726988][T16533] netlink: 'syz.3.2976': attribute type 2 has an invalid length. [ 315.741449][T16533] netlink: 'syz.3.2976': attribute type 1 has an invalid length. [ 315.781015][T16541] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 315.980277][T16555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2983'. [ 316.012040][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.020645][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.032301][T16444] bridge_slave_0: entered allmulticast mode [ 316.041638][T16444] bridge_slave_0: entered promiscuous mode [ 316.121135][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.128471][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.137762][T16558] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2982'. [ 316.138818][T16444] bridge_slave_1: entered allmulticast mode [ 316.159440][T16444] bridge_slave_1: entered promiscuous mode [ 316.365402][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 316.419232][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 316.431182][T16444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.446182][T16444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.523871][T16444] team0: Port device team_slave_0 added [ 316.673269][T16444] team0: Port device team_slave_1 added [ 316.707654][ T7639] hsr_slave_0: left promiscuous mode [ 316.730191][ T7639] hsr_slave_1: left promiscuous mode [ 316.868170][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 317.432112][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.444122][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.730420][ T5831] Bluetooth: hci1: command tx timeout [ 317.756626][T16608] gre0: left allmulticast mode [ 317.789653][T16612] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 317.855957][T16444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.863980][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.892480][T16444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.905529][T16444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.912786][T16444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.978744][T16444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.154681][T16444] hsr_slave_0: entered promiscuous mode [ 318.162761][T16444] hsr_slave_1: entered promiscuous mode [ 318.630125][T16659] pim6reg1: entered promiscuous mode [ 318.635474][T16659] pim6reg1: entered allmulticast mode [ 318.651150][T16659] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 318.665547][T16444] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.781679][T16444] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.842847][T16666] veth3: entered promiscuous mode [ 318.892271][T16444] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.015454][T16444] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.094869][T16677] netlink: 'syz.2.3019': attribute type 14 has an invalid length. [ 319.105366][T16677] netlink: 'syz.2.3019': attribute type 14 has an invalid length. [ 319.176368][T16679] netlink: 'syz.3.3020': attribute type 2 has an invalid length. [ 319.425397][T16693] netlink: 'syz.0.3025': attribute type 15 has an invalid length. [ 319.431959][T16444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.473366][ T62] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 319.473551][T16693] netlink: 'syz.0.3025': attribute type 15 has an invalid length. [ 319.482137][T16444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.523726][ T62] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 319.533408][ T62] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 319.552609][T16444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.576042][ T62] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 319.593252][T16444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.811076][ T5831] Bluetooth: hci1: command tx timeout [ 319.886342][T16444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.972852][T16444] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.021876][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.029199][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.126548][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.133814][ T7626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.355699][T16733] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.872172][T16444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.129927][T16790] __nla_validate_parse: 8 callbacks suppressed [ 321.129948][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3048'. [ 321.253589][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 321.307586][T16795] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 321.322508][T16795] bond10 (unregistering): Released all slaves [ 321.524124][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 321.546251][T16810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3052'. [ 321.604136][T16812] geneve2: entered promiscuous mode [ 321.620030][T16812] geneve2: entered allmulticast mode [ 321.653150][ T7640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 321.687051][ T7640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 321.699536][T16809] bridge0: port 1(syz_tun) entered blocking state [ 321.709152][T16809] bridge0: port 1(syz_tun) entered disabled state [ 321.715793][T16809] syz_tun: entered allmulticast mode [ 321.749466][T16809] syz_tun: entered promiscuous mode [ 321.761973][T16809] bridge0: port 1(syz_tun) entered blocking state [ 321.768913][T16809] bridge0: port 1(syz_tun) entered forwarding state [ 321.838657][ T7640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 321.849202][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'. [ 321.936637][T16444] veth0_vlan: entered promiscuous mode [ 321.973484][T16444] veth1_vlan: entered promiscuous mode [ 322.055018][T16834] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 322.162893][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3059'. [ 322.249235][T16444] veth0_macvtap: entered promiscuous mode [ 322.297024][T16444] veth1_macvtap: entered promiscuous mode [ 322.333422][T16847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3060'. [ 322.390448][T16444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.405848][T16444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.444997][ T7640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.477939][ T7640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.501203][ T7640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.570609][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 322.580517][ T7640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.593388][T16859] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 322.626478][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 322.628244][T16857] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 322.643651][T16859] netlink: 'syz.2.3065': attribute type 30 has an invalid length. [ 322.652492][T16857] netlink: 'syz.3.3064': attribute type 2 has an invalid length. [ 322.716719][ T7626] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.727859][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 322.737571][ T7626] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.751760][ T7626] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.767282][T16873] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.776401][T16868] netlink: 'syz.2.3065': attribute type 30 has an invalid length. [ 322.930135][ T7626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.938273][ T7626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.318431][T16889] team0 (unregistering): Port device team_slave_0 removed [ 323.333232][T16889] team0 (unregistering): Port device team_slave_1 removed [ 323.371588][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.396518][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.617589][T16911] netlink: 'syz.0.3075': attribute type 21 has an invalid length. [ 323.666962][T16911] netlink: 'syz.0.3075': attribute type 6 has an invalid length. [ 324.170233][T16938] netlink: 'syz.4.3085': attribute type 1 has an invalid length. [ 324.322508][T16940] veth3: entered promiscuous mode [ 324.415160][T16949] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 324.461918][T16949] bond10 (unregistering): Released all slaves [ 324.569571][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.581087][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.587412][T16951] geneve3: entered promiscuous mode [ 324.593617][T16951] geneve3: entered allmulticast mode [ 324.593811][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.621899][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.625395][ T5828] bridge0: port 1(syz_tun) entered disabled state [ 324.637659][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.651028][ T5828] syz_tun (unregistering): left allmulticast mode [ 324.667325][ T5828] syz_tun (unregistering): left promiscuous mode [ 324.674439][ T5828] bridge0: port 1(syz_tun) entered disabled state [ 324.703047][ T7626] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.722307][ T7626] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 324.748218][ T7626] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.030705][T16979] tipc: Enabled bearer , priority 0 [ 325.056986][T16979] syzkaller0: entered promiscuous mode [ 325.072301][T16979] syzkaller0: entered allmulticast mode [ 325.126257][T16954] chnl_net:caif_netlink_parms(): no params data found [ 325.134446][T16978] netlink: ct family unspecified [ 325.141133][T16978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.174168][T16986] tipc: Resetting bearer [ 325.196394][T16977] tipc: Resetting bearer [ 325.215989][T16977] tipc: Disabling bearer [ 325.352406][T16954] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.361204][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.368495][T16954] bridge_slave_0: entered allmulticast mode [ 325.376705][T16954] bridge_slave_0: entered promiscuous mode [ 325.387643][T16954] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.409190][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.419210][T16954] bridge_slave_1: entered allmulticast mode [ 325.436123][T16954] bridge_slave_1: entered promiscuous mode [ 325.500471][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.515084][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.568482][T16954] team0: Port device team_slave_0 added [ 325.608248][T16954] team0: Port device team_slave_1 added [ 325.673483][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.689063][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.715750][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.731444][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.740542][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.766905][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.868183][T16954] hsr_slave_0: entered promiscuous mode [ 325.884004][T16954] hsr_slave_1: entered promiscuous mode [ 325.902334][T16954] debugfs: 'hsr0' already exists in 'hsr' [ 325.916271][T16954] Cannot create hsr debugfs directory [ 325.924798][T17018] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 326.475577][T17044] __nla_validate_parse: 14 callbacks suppressed [ 326.475598][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 326.521225][T16954] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.538902][T16954] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 326.552492][T16954] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.621880][T16954] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.634486][T16954] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 326.651583][T16954] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.689210][ T5831] Bluetooth: hci0: command tx timeout [ 327.019293][T16954] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.029412][T16954] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 327.056755][T16954] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.126126][T16954] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.144764][T16954] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 327.164585][T16954] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.312017][T17071] netlink: 'syz.2.3121': attribute type 5 has an invalid length. [ 327.521094][T16954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.561240][T16954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.585075][T16954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.602334][T16954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.644835][T17088] Bluetooth: MGMT ver 1.23 [ 327.808096][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'. [ 327.905580][T16954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.940733][T17103] netlink: 'syz.4.3130': attribute type 27 has an invalid length. [ 327.963198][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.966474][T17103] netlink: 'syz.4.3130': attribute type 4 has an invalid length. [ 327.994055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.001338][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.024646][T17103] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3130'. [ 328.026006][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.040992][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.704025][T16954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.769098][ T5831] Bluetooth: hci0: command tx timeout [ 328.883179][T16954] veth0_vlan: entered promiscuous mode [ 328.916421][T16954] veth1_vlan: entered promiscuous mode [ 328.969563][T17163] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3144'. [ 328.988505][T16954] veth0_macvtap: entered promiscuous mode [ 329.021095][T17166] netlink: 'syz.4.3145': attribute type 1 has an invalid length. [ 329.043212][T17166] netlink: 'syz.4.3145': attribute type 2 has an invalid length. [ 329.063066][T16954] veth1_macvtap: entered promiscuous mode [ 329.115540][T16954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.145203][T16954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.181603][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.213224][T17179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3149'. [ 329.228259][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.281582][T17180] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3148'. [ 329.291660][T17182] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3148'. [ 329.314398][ T7630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.326037][ T7630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.470684][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.485221][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.505880][T17191] netlink: 'syz.4.3152': attribute type 21 has an invalid length. [ 329.515649][T17191] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3152'. [ 329.567627][T17191] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3152'. [ 329.626593][ T7630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.652602][ T7630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.699594][T17203] netlink: 'syz.2.3156': attribute type 16 has an invalid length. [ 329.707648][T17203] netlink: 'syz.2.3156': attribute type 3 has an invalid length. [ 329.724524][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 329.990996][T17214] bond1: entered promiscuous mode [ 330.016687][T17214] bond1: entered allmulticast mode [ 330.034785][T17214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.151834][T17221] netlink: 'syz.1.3161': attribute type 10 has an invalid length. [ 330.178967][T17221] dummy0: entered promiscuous mode [ 330.184881][T17221] bridge0: port 2(dummy0) entered blocking state [ 330.214426][T17221] bridge0: port 2(dummy0) entered disabled state [ 330.234812][T17221] dummy0: entered allmulticast mode [ 330.260051][T17221] bridge0: port 2(dummy0) entered blocking state [ 330.266635][T17221] bridge0: port 2(dummy0) entered forwarding state [ 330.385610][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.396615][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.405338][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.414114][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.427858][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.714198][T17245] netlink: 'syz.4.3165': attribute type 1 has an invalid length. [ 330.850220][ T5831] Bluetooth: hci0: command tx timeout [ 331.127931][T17229] chnl_net:caif_netlink_parms(): no params data found [ 331.377985][T17277] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 331.422627][T17229] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.451528][T17229] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.476178][T17229] bridge_slave_0: entered allmulticast mode [ 331.494934][T17301] __nla_validate_parse: 14 callbacks suppressed [ 331.494954][T17301] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3181'. [ 331.502633][T17229] bridge_slave_0: entered promiscuous mode [ 331.702707][T17229] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.710968][T17229] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.718409][T17229] bridge_slave_1: entered allmulticast mode [ 331.730375][T17229] bridge_slave_1: entered promiscuous mode [ 331.788798][T17305] gretap1: entered promiscuous mode [ 331.794300][T17305] gretap1: entered allmulticast mode [ 331.841377][T17229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.909050][T17229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.011936][T17229] team0: Port device team_slave_0 added [ 332.053979][T17229] team0: Port device team_slave_1 added [ 332.063809][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3187'. [ 332.134850][ T13] wlan1: Trigger new scan to find an IBSS to join [ 332.154211][T17327] Cannot find add_set index 0 as target [ 332.198080][T17229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.217094][T17229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.256194][T17229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.292306][T17329] geneve2: entered promiscuous mode [ 332.309717][T17229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.318886][T17229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.345436][T17229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.452174][ T5831] Bluetooth: hci5: command tx timeout [ 332.536737][T17229] hsr_slave_0: entered promiscuous mode [ 332.553881][T17229] hsr_slave_1: entered promiscuous mode [ 332.579920][T17229] debugfs: 'hsr0' already exists in 'hsr' [ 332.584625][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3192'. [ 332.588821][T17229] Cannot create hsr debugfs directory [ 332.775855][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3198'. [ 332.809720][T17366] vlan3: entered allmulticast mode [ 332.814897][T17366] bridge0: entered allmulticast mode [ 332.847387][T17369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3199'. [ 332.930466][ T5831] Bluetooth: hci0: command tx timeout [ 333.033937][T17229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.054799][T17229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.066018][T17229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 333.194344][T17381] netlink: 'syz.0.3204': attribute type 1 has an invalid length. [ 333.232651][T17229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.261916][T17229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.285703][T17229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 333.468399][T17229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.481575][T17229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.493554][T17229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 333.535203][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3208'. [ 333.592057][T17401] netlink: 'syz.0.3210': attribute type 10 has an invalid length. [ 333.628922][T17401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3210'. [ 333.663402][T17399] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3208'. [ 333.735604][T17408] netlink: 'syz.1.3213': attribute type 5 has an invalid length. [ 333.747055][T17401] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 333.754703][T17401] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 333.764159][T17401] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 333.821056][T17399] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 333.846977][T17399] bond1 (unregistering): Released all slaves [ 333.967298][T17414] tc_dump_action: action bad kind [ 334.163754][T17229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.166561][T17431] nftables ruleset with unbound set [ 334.206141][T17434] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3221'. [ 334.226117][T17229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.234716][T17433] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3221'. [ 334.262062][T17229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.315634][T17229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.529744][ T5831] Bluetooth: hci5: command tx timeout [ 334.562398][T17455] tipc: Started in network mode [ 334.581253][T17455] tipc: Node identity ce98bfc56aca, cluster identity 4711 [ 334.599556][T17455] tipc: Enabled bearer , priority 0 [ 334.637264][T17455] syzkaller0: entered promiscuous mode [ 334.658813][T17455] syzkaller0: entered allmulticast mode [ 334.816143][T17454] tipc: Resetting bearer [ 334.860553][T17454] tipc: Disabling bearer [ 335.000990][T17229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.093640][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 335.106318][T17229] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.153626][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.160851][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.212647][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.219857][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.277167][T17484] tipc: Enabled bearer , priority 0 [ 335.285457][T17484] syzkaller0: entered promiscuous mode [ 335.308336][T17484] syzkaller0: entered allmulticast mode [ 335.348825][T17489] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 335.364172][T17482] tipc: Resetting bearer [ 335.371510][T17489] netlink: 'syz.4.3235': attribute type 4 has an invalid length. [ 335.420900][T17482] tipc: Disabling bearer [ 335.536223][T17496] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 335.886993][T17507] syzkaller0: entered allmulticast mode [ 335.942034][T17507] netlink: 'syz.3.3239': attribute type 3 has an invalid length. [ 336.113803][T17533] ipt_REJECT: TCP_RESET invalid for non-tcp [ 336.611274][ T5831] Bluetooth: hci5: command tx timeout [ 338.130111][ T7640] wlan1: Trigger new scan to find an IBSS to join [ 338.183760][T17229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.260445][T17548] tipc: Enabled bearer , priority 0 [ 338.303784][T17548] syzkaller0: entered promiscuous mode [ 338.315377][T17550] netlink: 'syz.3.3248': attribute type 21 has an invalid length. [ 338.325588][T17548] syzkaller0: entered allmulticast mode [ 338.333697][T17550] __nla_validate_parse: 2 callbacks suppressed [ 338.333718][T17550] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3248'. [ 338.353709][T17229] veth0_vlan: entered promiscuous mode [ 338.366220][T17550] netlink: 'syz.3.3248': attribute type 5 has an invalid length. [ 338.367589][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 338.375006][T17550] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3248'. [ 338.403893][T17548] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.426267][T17229] veth1_vlan: entered promiscuous mode [ 338.463745][T17548] tipc: Resetting bearer [ 338.477748][T17547] tipc: Resetting bearer [ 338.497661][T17547] tipc: Disabling bearer [ 338.511116][T17558] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 338.537652][T17229] veth0_macvtap: entered promiscuous mode [ 338.575178][T17229] veth1_macvtap: entered promiscuous mode [ 338.627828][T17229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.670798][T17229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.689016][ T5831] Bluetooth: hci5: command tx timeout [ 338.698413][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.720033][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.731748][T17568] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 338.732256][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.751782][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.767756][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3254'. [ 338.865128][ T7630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.875860][ T7630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.972843][ T7640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.981094][ T7640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.070649][ T7630] wlan1: Creating new IBSS network, BSSID 4a:8b:9d:b8:04:9b [ 339.163180][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3259'. [ 339.721771][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3267'. [ 340.196321][T17664] delete_channel: no stack [ 340.756791][T17695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3290'. [ 340.771408][T17699] syzkaller0: entered promiscuous mode [ 340.776928][T17699] syzkaller0: entered allmulticast mode [ 340.787062][T17698] tipc: Enabled bearer , priority 0 [ 340.819298][T17698] tipc: Resetting bearer [ 340.863185][T17698] tipc: Disabling bearer [ 340.884716][T17704] bridge0: port 2(dummy0) entered disabled state [ 340.902567][T17704] tipc: Resetting bearer [ 340.908453][T17704] tipc: Resetting bearer [ 340.937202][ T1167] tipc: Resetting bearer [ 341.017336][T17712] team0: Device wireguard0 is of different type [ 341.075570][T17716] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 341.109263][T17717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'. [ 341.120682][T17717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'. [ 341.239927][T17722] bond2 (unregistering): Released all slaves [ 341.533542][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 341.574152][T17752] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 341.585249][T17746] IPv6: addrconf: prefix option has invalid lifetime [ 341.666681][T17746] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 341.890557][T17768] syzkaller0: entered promiscuous mode [ 341.896062][T17768] syzkaller0: entered allmulticast mode [ 342.187595][T17777] bond1: option lp_interval: invalid value (0) [ 342.216375][T17777] bond1: option lp_interval: allowed values 1 - 2147483647 [ 342.233676][T17777] bond1 (unregistering): Released all slaves [ 342.630209][T17808] netlink: 'syz.3.3326': attribute type 21 has an invalid length. [ 343.121146][T17835] bond1: Invalid ad_actor_system MAC address. [ 343.127269][T17835] bond1: option ad_actor_system: invalid value (1) [ 343.203378][T17835] bond1 (unregistering): Released all slaves [ 343.258379][T17849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.305666][T17845] vlan3: entered allmulticast mode [ 343.313032][T17853] netlink: 'syz.1.3339': attribute type 7 has an invalid length. [ 343.321130][T17845] bridge_slave_0: entered allmulticast mode [ 343.327142][T17853] netlink: 'syz.1.3339': attribute type 8 has an invalid length. [ 343.340280][T17853] __nla_validate_parse: 5 callbacks suppressed [ 343.340300][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 343.512528][T17862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3342'. [ 343.526762][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3342'. [ 343.527788][T17862] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.3342'. [ 343.658409][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3345'. [ 343.718080][T17873] netlink: 'syz.1.3346': attribute type 3 has an invalid length. [ 343.728337][T17878] ªªªªªª: renamed from lo (while UP) [ 343.853099][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'. [ 344.048454][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 346.064440][T17906] bpq0: left promiscuous mode [ 346.183462][T17914] netlink: 'syz.0.3358': attribute type 1 has an invalid length. [ 346.249589][T17919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3360'. [ 346.339828][T17928] pim6reg527: entered allmulticast mode [ 346.819766][T17941] bond1: entered allmulticast mode [ 346.839781][T17941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.854724][T17949] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.864482][T17941] bridge0: port 3(bond1) entered blocking state [ 346.872535][T17941] bridge0: port 3(bond1) entered disabled state [ 346.883524][T17941] bond1: entered promiscuous mode [ 346.891234][T17941] bridge0: port 3(bond1) entered blocking state [ 346.897721][T17941] bridge0: port 3(bond1) entered forwarding state [ 346.957627][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.970647][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.992159][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.007250][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.022143][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.119211][ T7626] bridge0: port 3(bond1) entered disabled state [ 347.488186][T17951] chnl_net:caif_netlink_parms(): no params data found [ 347.740766][T17951] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.758824][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.780309][T17951] bridge_slave_0: entered allmulticast mode [ 347.788232][T17951] bridge_slave_0: entered promiscuous mode [ 347.817117][T17951] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.840271][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.847617][T17951] bridge_slave_1: entered allmulticast mode [ 347.871731][T17951] bridge_slave_1: entered promiscuous mode [ 347.955633][T18003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.025983][T18025] netlink: 'syz.2.3386': attribute type 1 has an invalid length. [ 348.138481][T18028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3387'. [ 348.200610][T18034] xt_hashlimit: overflow, rate too high: 0 [ 348.216186][T18034] openvswitch: netlink: Message has 4 unknown bytes. [ 348.242994][T18034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.256386][T18029] veth3: entered promiscuous mode [ 348.260056][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 348.326883][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.398357][T18025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.411168][T18025] __nla_validate_parse: 1 callbacks suppressed [ 348.411191][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3386'. [ 348.415343][T18043] netlink: 'syz.3.3390': attribute type 1 has an invalid length. [ 348.421229][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.426988][T18043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3390'. [ 348.467445][T18038] bridge0: entered promiscuous mode [ 348.559395][T18043] ªªªªªªç†áíÞ‚Ï: renamed from lo (while UP) [ 348.575894][T17951] team0: Port device team_slave_0 added [ 348.597967][T17951] team0: Port device team_slave_1 added [ 348.739731][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.746723][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.838655][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.861535][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.881171][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.945761][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.967048][T18074] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 348.984963][T18073] Bluetooth: MGMT ver 1.23 [ 349.010292][T18073] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 349.075015][T18073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.090659][ T5831] Bluetooth: hci2: command tx timeout [ 349.101736][T18078] nbd: must specify an index to disconnect [ 349.395517][T17951] hsr_slave_0: entered promiscuous mode [ 349.417846][T17951] hsr_slave_1: entered promiscuous mode [ 349.435118][T17951] debugfs: 'hsr0' already exists in 'hsr' [ 349.444160][T17951] Cannot create hsr debugfs directory [ 350.289684][T17951] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.305077][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 350.315983][T17951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.354748][T18154] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 350.362720][T18154] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3416'. [ 350.480242][T17951] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.505627][T17951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.620953][T18178] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3419'. [ 350.716147][T17951] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.750821][T18181] netlink: 'syz.0.3424': attribute type 64 has an invalid length. [ 350.758994][T18181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 350.760149][T17951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.797285][T18181] netlink: 'syz.0.3424': attribute type 64 has an invalid length. [ 350.817524][T18181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 350.846688][T17951] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.859935][T17951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.864197][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3425'. [ 350.914349][T18188] vxcan2: entered allmulticast mode [ 350.951255][T18189] netlink: 'syz.3.3425': attribute type 18 has an invalid length. [ 350.959350][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3425'. [ 351.014032][ T7640] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.024623][ T7640] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.037169][ T7640] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.051305][T18188] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3425'. [ 351.084429][ T7640] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.093371][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.100028][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 351.179113][ T5831] Bluetooth: hci2: command tx timeout [ 351.198694][T17951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.212039][T17951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.231654][T17951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.249366][T17951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.277835][T18201] ªªªªªªç†áíÞ‚Ï: entered allmulticast mode [ 351.298805][T18201] A link change request failed with some changes committed already. Interface ªªªªªªç†áíÞ‚Ï may have been left with an inconsistent configuration, please check. [ 351.510711][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.574068][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.604099][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.611330][ T7640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.613079][T18220] sock: sock_set_timeout: `syz.4.3434' (pid 18220) tries to set negative timeout [ 351.676451][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.683699][ T7640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.697472][T18222] netlink: 'syz.3.3435': attribute type 2 has an invalid length. [ 352.099995][T18245] syzkaller1: entered promiscuous mode [ 352.123137][T18245] syzkaller1: entered allmulticast mode [ 352.291508][T18254] tipc: Started in network mode [ 352.300718][T18254] tipc: Node identity 5a31abab1e43, cluster identity 4711 [ 352.312903][T18254] tipc: Enabled bearer , priority 0 [ 352.322836][T18254] syzkaller0: entered promiscuous mode [ 352.328354][T18254] syzkaller0: entered allmulticast mode [ 352.382521][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.423482][T18254] tipc: Resetting bearer [ 352.435588][T18253] tipc: Resetting bearer [ 352.453141][T18262] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 352.470154][T18253] tipc: Disabling bearer [ 352.476597][T18260] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 352.608412][T17951] veth0_vlan: entered promiscuous mode [ 352.641876][T17951] veth1_vlan: entered promiscuous mode [ 352.763264][T18280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.770572][T18280] IPv6: NLM_F_CREATE should be set when creating new route [ 352.810433][T17951] veth0_macvtap: entered promiscuous mode [ 352.835490][T17951] veth1_macvtap: entered promiscuous mode [ 352.915526][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.935013][T18289] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 352.961911][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.010354][ T7640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.031745][ T7640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.053493][ T7640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.153500][ T7640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.254540][ T5831] Bluetooth: hci2: command tx timeout [ 353.453163][T15042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.462149][T15042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.540760][T15042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.567636][T15042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.941998][T18327] syzkaller0: entered promiscuous mode [ 353.956536][T18327] syzkaller0: entered allmulticast mode [ 354.020420][T18327] validate_nla: 5 callbacks suppressed [ 354.020440][T18327] netlink: 'syz.4.3460': attribute type 1 has an invalid length. [ 354.041645][T18332] SET target dimension over the limit! [ 354.092413][T18330] netlink: 'syz.1.3461': attribute type 11 has an invalid length. [ 354.107886][T18330] __nla_validate_parse: 14 callbacks suppressed [ 354.107910][T18330] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3461'. [ 354.550272][T18359] syzkaller0: entered promiscuous mode [ 354.556007][T18359] syzkaller0: entered allmulticast mode [ 354.796178][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3477'. [ 354.805831][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3477'. [ 354.904717][T18386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3481'. [ 354.948919][T18386] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 354.969988][T18386] bond1 (unregistering): Released all slaves [ 355.169463][T18401] veth1_to_team: entered allmulticast mode [ 355.263945][T18416] x_tables: duplicate underflow at hook 1 [ 355.313108][T18418] netlink: 'syz.0.3488': attribute type 10 has an invalid length. [ 355.335717][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.338691][ T5831] Bluetooth: hci2: command tx timeout [ 355.343981][T18418] bridge_slave_1: left allmulticast mode [ 355.356264][T18418] bridge_slave_1: left promiscuous mode [ 355.363437][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.395933][T18423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3489'. [ 355.413719][T18418] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 355.456404][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 355.466379][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 355.596536][T18431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.995588][T18459] netlink: 'syz.3.3502': attribute type 11 has an invalid length. [ 356.171550][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'. [ 356.275718][T18476] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3507'. [ 356.287849][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3509'. [ 356.514960][T18488] netlink: 'syz.3.3511': attribute type 21 has an invalid length. [ 356.523256][T18488] netlink: 'syz.3.3511': attribute type 22 has an invalid length. [ 356.531671][T18488] netlink: 'syz.3.3511': attribute type 23 has an invalid length. [ 356.545458][T18488] netlink: 'syz.3.3511': attribute type 25 has an invalid length. [ 356.563323][T18489] bond1: (slave bond_slave_1): Device is not our slave [ 356.570449][T18489] bond1: option active_slave: invalid value (bond_slave_1) [ 356.580982][T18489] bond1 (unregistering): Released all slaves [ 356.798185][T10176] IPVS: starting estimator thread 0... [ 356.893047][T18519] IPVS: using max 36 ests per chain, 86400 per kthread [ 356.911552][T18512] netlink: 'syz.3.3517': attribute type 1 has an invalid length. [ 357.012477][T18527] vlan0: entered promiscuous mode [ 357.023401][T18527] veth1_to_bridge: entered promiscuous mode [ 357.030314][T18527] vlan0: entered allmulticast mode [ 357.035579][T18527] veth1_to_bridge: entered allmulticast mode [ 357.051117][T18530] netlink: 'syz.1.3519': attribute type 10 has an invalid length. [ 357.123090][T18530] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 357.153567][T18535] lo: entered allmulticast mode [ 357.202551][T18540] sctp: [Deprecated]: syz.4.3523 (pid 18540) Use of int in maxseg socket option. [ 357.202551][T18540] Use struct sctp_assoc_value instead [ 357.203549][T18535] tunl0: entered allmulticast mode [ 357.252188][T18535] gre0: entered allmulticast mode [ 357.285405][T18535] gretap0: entered allmulticast mode [ 357.356962][T18535] erspan0: entered allmulticast mode [ 357.386220][T18535] ip_vti0: entered allmulticast mode [ 357.407657][T18535] ip6_vti0: entered allmulticast mode [ 357.424417][T18535] sit0: entered allmulticast mode [ 357.440142][T18535] ip6tnl0: entered allmulticast mode [ 357.459824][T18535] ip6gre0: entered allmulticast mode [ 357.487430][T18535] syz_tun: entered allmulticast mode [ 357.502177][T18535] ip6gretap0: entered allmulticast mode [ 357.514999][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.522869][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.531928][T18535] bridge0: entered allmulticast mode [ 357.543573][T18535] vcan0: entered allmulticast mode [ 357.555569][T18535] bond0: entered allmulticast mode [ 357.563854][T18535] bond_slave_0: entered allmulticast mode [ 357.571834][T18535] bond_slave_1: entered allmulticast mode [ 357.590551][T18535] team0: entered allmulticast mode [ 357.595826][T18535] team_slave_0: entered allmulticast mode [ 357.602285][T18535] team_slave_1: entered allmulticast mode [ 357.613517][T18535] dummy0: entered allmulticast mode [ 357.624873][T18535] nlmon0: entered allmulticast mode [ 357.634974][T18535] caif0: entered allmulticast mode [ 357.641603][T18535] batadv0: entered allmulticast mode [ 357.656126][T18535] vxcan0: entered allmulticast mode [ 357.665069][T18535] vxcan1: entered allmulticast mode [ 357.674595][T18535] veth0: entered allmulticast mode [ 357.690502][T18535] veth1: entered allmulticast mode [ 357.702939][T18535] wg0: entered allmulticast mode [ 357.713861][T18535] wg1: entered allmulticast mode [ 357.724527][T18535] wg2: entered allmulticast mode [ 357.745579][T18535] veth0_to_bridge: entered allmulticast mode [ 357.765857][T18535] veth1_to_bridge: entered allmulticast mode [ 357.794817][T18535] veth0_to_bond: entered allmulticast mode [ 357.822184][T18535] veth1_to_bond: entered allmulticast mode [ 357.837713][T18535] veth0_to_team: entered allmulticast mode [ 357.856137][T18535] veth1_to_team: entered allmulticast mode [ 357.877861][T18535] veth0_to_batadv: entered allmulticast mode [ 357.892962][T18535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.907846][T18535] batadv_slave_0: entered allmulticast mode [ 357.926886][T18535] veth1_to_batadv: entered allmulticast mode [ 357.946078][T18535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.956034][T18535] batadv_slave_1: entered allmulticast mode [ 357.971555][T18535] xfrm0: entered allmulticast mode [ 357.982294][T18535] veth0_to_hsr: entered allmulticast mode [ 358.000222][T18535] hsr_slave_0: entered allmulticast mode [ 358.013292][T18535] veth1_to_hsr: entered allmulticast mode [ 358.035755][T18535] hsr_slave_1: entered allmulticast mode [ 358.052904][T18535] hsr0: entered allmulticast mode [ 358.064188][T18535] veth1_virt_wifi: entered allmulticast mode [ 358.085859][T18535] veth0_virt_wifi: entered allmulticast mode [ 358.097312][T18535] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 358.106154][T18535] veth1_vlan: entered allmulticast mode [ 358.123232][T18535] veth0_vlan: entered allmulticast mode [ 358.146498][T18535] vlan0: entered allmulticast mode [ 358.152470][T18535] vlan1: entered allmulticast mode [ 358.161289][T18535] macvlan0: entered allmulticast mode [ 358.179474][T18535] macvlan1: entered allmulticast mode [ 358.201549][T18535] ipvlan0: entered allmulticast mode [ 358.209625][T18535] ipvlan1: entered allmulticast mode [ 358.216276][T18535] veth1_macvtap: entered allmulticast mode [ 358.232487][T18535] veth0_macvtap: entered allmulticast mode [ 358.250546][T18535] macvtap0: entered allmulticast mode [ 358.262448][T18535] macsec0: entered allmulticast mode [ 358.286469][T18535] geneve0: entered allmulticast mode [ 358.308873][T18535] geneve1: entered allmulticast mode [ 358.327036][T18535] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 358.340543][T18535] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 358.356342][T18535] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 358.375876][T18535] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 358.404103][T18535] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 358.434592][T18535] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 358.453328][T18535] bond2: entered allmulticast mode [ 358.461969][T18535] macsec1: entered allmulticast mode [ 358.473136][T18535] bond3: entered allmulticast mode [ 358.481037][T18535] bond4: entered allmulticast mode [ 358.492702][T18535] bridge1: entered allmulticast mode [ 358.516187][T18536] erspan0: entered promiscuous mode [ 358.524534][T18536] erspan0: left promiscuous mode [ 358.597319][ T1167] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.617666][ T1167] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.678460][ T1167] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.720831][ T1167] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.823956][T18562] tipc: Invalid UDP bearer configuration [ 358.824013][T18562] tipc: Enabling of bearer rejected, failed to enable media [ 358.850539][T18562] tipc: Invalid UDP bearer configuration [ 358.850592][T18562] tipc: Enabling of bearer rejected, failed to enable media [ 359.173187][T18585] IPVS: set_ctl: invalid protocol: 135 172.20.20.13:20002 [ 359.189683][T18585] Cannot find set identified by id 65534 to match [ 359.494760][T18607] bond1 (unregistering): Released all slaves [ 359.606105][T18617] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 359.613230][T18615] __nla_validate_parse: 11 callbacks suppressed [ 359.613258][T18615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 359.633526][T18617] netlink: 'syz.0.3541': attribute type 2 has an invalid length. [ 359.651024][T18617] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 359.669584][T18617] netlink: 'syz.0.3541': attribute type 2 has an invalid length. [ 359.669932][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3542'. [ 359.677445][T18617] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 359.688376][T18615] netlink: 'syz.3.3543': attribute type 4 has an invalid length. [ 359.713817][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 359.726409][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 359.746405][T18617] netlink: 'syz.0.3541': attribute type 2 has an invalid length. [ 359.906618][T18622] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 359.958415][T18622] netlink: 16106 bytes leftover after parsing attributes in process `syz.2.3542'. [ 359.982575][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 360.032252][T18637] tipc: Enabled bearer , priority 0 [ 360.061379][T18637] syzkaller0: entered promiscuous mode [ 360.066898][T18637] syzkaller0: entered allmulticast mode [ 360.079709][T18637] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 360.113000][T18640] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3551'. [ 360.302161][T18647] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 360.311312][T18647] bond5: option packets_per_slave: allowed values 0 - 65535 [ 360.387124][T18647] bond5 (unregistering): Released all slaves [ 360.480508][T18654] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.504852][T18631] tipc: Resetting bearer [ 360.686743][T18631] tipc: Disabling bearer [ 360.891317][T18676] tipc: Enabled bearer , priority 0 [ 360.906162][T18664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3558'. [ 360.918401][T18664] tipc: Resetting bearer [ 360.982080][T18661] tipc: Disabling bearer [ 360.997489][T18682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3561'. [ 361.079435][T18680] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 361.098077][T18680] bond1 (unregistering): Released all slaves [ 361.204386][T18695] atomic_op ffff8880712bb998 conn xmit_atomic 0000000000000000 [ 361.212425][T18695] atomic_op ffff888056bd3998 conn xmit_atomic 0000000000000000 [ 361.228265][T18695] atomic_op ffff888056bd0198 conn xmit_atomic 0000000000000000 [ 361.310347][T18700] netlink: 'syz.1.3566': attribute type 33 has an invalid length. [ 361.320098][T18700] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3566'. [ 361.376061][T18704] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.419604][T18704] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 361.545976][T18712] bond5: (slave ip6gretap1): making interface the new active one [ 361.557284][T18712] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.565984][T18712] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.576825][T18712] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 361.593159][T18711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.870740][T18738] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 363.796795][T18834] veth5: entered promiscuous mode [ 363.803148][T18839] 8021q: VLANs not supported on ip6tnl0 [ 364.213067][ T5886] IPVS: starting estimator thread 0... [ 364.328761][T18871] IPVS: using max 34 ests per chain, 81600 per kthread [ 364.671617][T18898] __nla_validate_parse: 24 callbacks suppressed [ 364.671636][T18898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3620'. [ 364.686576][T18897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3620'. [ 364.737299][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 364.746592][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 364.950320][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3621'. [ 364.967648][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3622'. [ 364.968359][T18912] validate_nla: 3 callbacks suppressed [ 364.968376][T18912] netlink: 'syz.1.3624': attribute type 1 has an invalid length. [ 365.009106][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3621'. [ 365.089518][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 365.101785][T18915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.364347][T18931] netlink: 'syz.3.3628': attribute type 1 has an invalid length. [ 365.389029][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3628'. [ 365.453852][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3629'. [ 365.492000][T18934] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 365.514000][T18936] netlink: 'syz.0.3630': attribute type 21 has an invalid length. [ 365.756608][ T7626] tipc: Subscription rejected, illegal request [ 365.767783][T18943] x_tables: duplicate underflow at hook 1 [ 365.886116][T18958] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 366.074265][T18972] x_tables: duplicate entry at hook 2 [ 366.336529][T18989] netlink: 'syz.1.3648': attribute type 1 has an invalid length. [ 366.392232][T18989] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 366.404107][T18989] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 366.444521][T18998] vlan2: entered allmulticast mode [ 366.454291][T18998] bridge0: entered allmulticast mode [ 366.464391][T18998] bridge0: entered promiscuous mode [ 366.475311][T18998] bridge0: left promiscuous mode [ 366.485078][T18998] bond1: (slave vlan2): making interface the new active one [ 366.492782][T18998] bridge0: entered promiscuous mode [ 366.499540][T18998] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 366.651406][T19010] netlink: 'syz.2.3654': attribute type 2 has an invalid length. [ 366.672591][T19011] netlink: 'syz.2.3654': attribute type 1 has an invalid length. [ 366.706308][T19011] nbd: illegal input index 1048576 [ 367.310160][T19042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.330147][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.539045][T19058] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 367.871366][T19085] tipc: Started in network mode [ 367.897027][T19085] tipc: Node identity d25ecebe6975, cluster identity 4711 [ 367.924152][T19085] tipc: Enabled bearer , priority 0 [ 367.980516][T19087] syzkaller0: entered promiscuous mode [ 368.007373][T19087] syzkaller0: entered allmulticast mode [ 368.054766][ T1167] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 368.088222][T19085] tipc: Resetting bearer [ 368.158032][T19083] tipc: Resetting bearer [ 368.193987][T19083] tipc: Disabling bearer [ 368.254136][T19114] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.262004][T19115] geneve3: entered promiscuous mode [ 368.267348][T19115] geneve3: entered allmulticast mode [ 368.275659][ T7626] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 368.287222][ T7626] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 368.301966][ T7626] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 368.311529][ T7626] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 368.357402][T19120] netlink: 'syz.1.3688': attribute type 5 has an invalid length. [ 368.490385][T19117] netlink: 'syz.0.3687': attribute type 1 has an invalid length. [ 368.608805][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 368.617155][ C0] ------------[ cut here ]------------ [ 368.622977][ C0] ODEBUG: free active (active state 0) object: ffff88805b35ec90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 368.636193][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 368.645449][ C0] Modules linked in: [ 368.649782][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 368.658777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.668920][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 368.674783][ C0] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 368.694460][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 368.700605][ C0] RAX: a463be3669f38b00 RBX: dffffc0000000000 RCX: ffffffff8de95200 [ 368.708662][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 368.716676][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 368.724728][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 368.732794][ C0] R13: ffffffff8bc08000 R14: ffff88805b35ec90 R15: ffffffff8b6cf600 [ 368.740857][ C0] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 368.749885][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.756497][ C0] CR2: 0000200000002300 CR3: 000000004474a000 CR4: 00000000003526f0 [ 368.764516][ C0] Call Trace: [ 368.767802][ C0] [ 368.770707][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 368.776287][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 368.781467][ C0] kfree+0x115/0x6d0 [ 368.785415][ C0] rose_timer_expiry+0x4cb/0x600 [ 368.790431][ C0] ? call_timer_fn+0x155/0x5f0 [ 368.795210][ C0] call_timer_fn+0x17e/0x5f0 [ 368.799862][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 368.805330][ C0] ? call_timer_fn+0xbe/0x5f0 [ 368.810053][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 368.815196][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.820442][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.825656][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 368.831239][ C0] __run_timer_base+0x61a/0x860 [ 368.836176][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 368.841667][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 368.847994][ C0] run_timer_softirq+0xb7/0x180 [ 368.852962][ C0] handle_softirqs+0x283/0x870 [ 368.857771][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 368.862636][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 368.867964][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 368.873268][ C0] __irq_exit_rcu+0xca/0x1f0 [ 368.877902][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 368.883205][ C0] irq_exit_rcu+0x9/0x30 [ 368.887497][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 368.893236][ C0] [ 368.896205][ C0] [ 368.899231][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.905281][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 368.911115][ C0] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 368.930826][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 368.936940][ C0] RAX: a463be3669f38b00 RBX: ffffffff81960c17 RCX: a463be3669f38b00 [ 368.945008][ C0] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 368.953059][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 368.961109][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e0f70 [ 368.969183][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 368.977217][ C0] ? do_idle+0x1e7/0x510 [ 368.981573][ C0] default_idle+0x13/0x20 [ 368.985960][ C0] default_idle_call+0x73/0xb0 [ 368.990827][ C0] do_idle+0x1e7/0x510 [ 368.994947][ C0] ? __pfx_do_idle+0x10/0x10 [ 368.999684][ C0] cpu_startup_entry+0x44/0x60 [ 369.004534][ C0] rest_init+0x2de/0x300 [ 369.008894][ C0] start_kernel+0x3ae/0x410 [ 369.013470][ C0] x86_64_start_reservations+0x24/0x30 [ 369.019016][ C0] x86_64_start_kernel+0x143/0x1c0 [ 369.024158][ C0] common_startup_64+0x13e/0x147 [ 369.029170][ C0] [ 369.032212][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.039514][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 369.048472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.058542][ C0] Call Trace: [ 369.061851][ C0] [ 369.064708][ C0] dump_stack_lvl+0x99/0x250 [ 369.069326][ C0] ? __asan_memcpy+0x40/0x70 [ 369.073937][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.079143][ C0] ? __pfx__printk+0x10/0x10 [ 369.083782][ C0] vpanic+0x237/0x6d0 [ 369.087780][ C0] ? __pfx_vpanic+0x10/0x10 [ 369.092317][ C0] panic+0xb9/0xc0 [ 369.096077][ C0] ? __pfx_panic+0x10/0x10 [ 369.100508][ C0] __warn+0x31b/0x4b0 [ 369.104493][ C0] ? debug_print_object+0x16b/0x1e0 [ 369.109696][ C0] ? debug_print_object+0x16b/0x1e0 [ 369.114895][ C0] report_bug+0x2be/0x4f0 [ 369.119227][ C0] ? debug_print_object+0x16b/0x1e0 [ 369.124449][ C0] ? debug_print_object+0x16b/0x1e0 [ 369.129669][ C0] ? debug_print_object+0x16d/0x1e0 [ 369.134880][ C0] handle_bug+0x84/0x160 [ 369.139145][ C0] exc_invalid_op+0x1a/0x50 [ 369.143680][ C0] asm_exc_invalid_op+0x1a/0x20 [ 369.148544][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 369.154375][ C0] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 369.174012][ C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00010296 [ 369.180097][ C0] RAX: a463be3669f38b00 RBX: dffffc0000000000 RCX: ffffffff8de95200 [ 369.188077][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 369.196077][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 369.204075][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c40 [ 369.212067][ C0] R13: ffffffff8bc08000 R14: ffff88805b35ec90 R15: ffffffff8b6cf600 [ 369.220136][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 369.225892][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 369.231517][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 369.236655][ C0] kfree+0x115/0x6d0 [ 369.240568][ C0] rose_timer_expiry+0x4cb/0x600 [ 369.245518][ C0] ? call_timer_fn+0x155/0x5f0 [ 369.250295][ C0] call_timer_fn+0x17e/0x5f0 [ 369.254913][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 369.260397][ C0] ? call_timer_fn+0xbe/0x5f0 [ 369.265101][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 369.270247][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.275454][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.280658][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 369.286135][ C0] __run_timer_base+0x61a/0x860 [ 369.291022][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 369.296418][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 369.302688][ C0] run_timer_softirq+0xb7/0x180 [ 369.307554][ C0] handle_softirqs+0x283/0x870 [ 369.312335][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 369.317113][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 369.322426][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 369.327655][ C0] __irq_exit_rcu+0xca/0x1f0 [ 369.332265][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 369.337515][ C0] irq_exit_rcu+0x9/0x30 [ 369.341779][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 369.347437][ C0] [ 369.350373][ C0] [ 369.353309][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.359305][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 369.365051][ C0] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 369.384679][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 369.390774][ C0] RAX: a463be3669f38b00 RBX: ffffffff81960c17 RCX: a463be3669f38b00 [ 369.398758][ C0] RDX: 0000000000000001 RSI: ffffffff8d7e8769 RDI: ffffffff8bc074e0 [ 369.406745][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 369.414727][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9e0f70 [ 369.422702][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 369.430690][ C0] ? do_idle+0x1e7/0x510 [ 369.434968][ C0] default_idle+0x13/0x20 [ 369.439314][ C0] default_idle_call+0x73/0xb0 [ 369.444097][ C0] do_idle+0x1e7/0x510 [ 369.448180][ C0] ? __pfx_do_idle+0x10/0x10 [ 369.452793][ C0] cpu_startup_entry+0x44/0x60 [ 369.457560][ C0] rest_init+0x2de/0x300 [ 369.461814][ C0] start_kernel+0x3ae/0x410 [ 369.466327][ C0] x86_64_start_reservations+0x24/0x30 [ 369.471785][ C0] x86_64_start_kernel+0x143/0x1c0 [ 369.476905][ C0] common_startup_64+0x13e/0x147 [ 369.481874][ C0] [ 369.485062][ C0] Kernel Offset: disabled [ 369.489380][ C0] Rebooting in 86400 seconds..