last executing test programs: 10.228852788s ago: executing program 2 (id=4652): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @initdev}, &(0x7f0000000480)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000100000000a370f0cd4aadcf8a61100400000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', r0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r5, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0xd, 0x0, 0x3, 0x18, 0x1}, @jmp={0x5, 0x0, 0x5, 0x1, 0x0, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r2, r3], &(0x7f0000000340)=[{0x1, 0x1, 0xb, 0x7}, {0x2, 0x4, 0x2, 0xa}], 0x10, 0x5}, 0x94) 10.084302174s ago: executing program 2 (id=4654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) 9.782175272s ago: executing program 2 (id=4660): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x7d1841, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f00000008c0)=""/207, 0xcf}, {&(0x7f0000000a80)=""/252, 0xfc}], 0x4}, 0x2}], 0x1, 0x20, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1, 0x80}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x170, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xc5, 0x6, "7074129726201061f564575e5581b17e95fb69cc8f35fea142c32d1bc6a23a17311621c4420e437e6712f92daf97bf280d57911278b59e6221c33cf71cd510ab92ce2298352abe2bd93c63d4d7bfc7c1f6009513d903ded146e8e1a29359627451d7236310d778ca938e1e79cdd85d1132c46b7a990ad565998024c9124f4f235e8bbd8ededfa4ec610f845b9f9336261e57d76213b05a4886ea41773da331da0907f94aadae874d112d2de2b5bd59dbff81a2cc0638d061d0f4eaf17fb9e77a39"}, @NFTA_TABLE_USERDATA={0x27, 0x6, "5a255a4bf2f66c87e24c4bc487e3e0cbe7589ec854cbbe8ed730d09992e5ac630def7b"}, @NFTA_TABLE_USERDATA={0x6c, 0x6, "61808f10d65511d8cf7d8edbacaf6cb50f268b30c87caefd591d036db554a765075b9fa1efcb1a84662348790b0dcd363b299b1eb35c82878acf332111a7bd719f1d763bb7950c5a86c24dbd8c2f6abfed9157f6c635f72a86ab7cd2b7d5b8a52b099d980a5c8755"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x21c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.775801321s ago: executing program 2 (id=4676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000001a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="d3402a7577fb10b9d690ccffceaf860096e219dddbeac2357b219100f5edffcd68ea5eb4a884e644", 0x28}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x110, 0x117, 0x2, 0xf5, "7d1ea3aedd52dcecd91e708f2c67ec0e12ddfea1cc26c34d8bff1662db4a871bbfae2012803f13e697dc7d3fada57c9c31fb0d116e60ecd8b8a279f79f4d34ef2900f91614ce8c58e402061824f80cc64f9490cf2a05d5341fdfbdbc7f2739c58742b1cd151ba81effcdd5bcc0d6ae59a777ff8a68ef910812df2ddbc32f667e70b88193428ee4317be1b54c438e3de9d1c5fbb0b415fdb404c179cb013cd17af69da343858dee73e5de792b78da3a4b0480723d9ffd4d1e76894b8100105347a36c902cc5578aa9c569c025f288424f49824af97b8bf38256660fdd601111828571f7baf553870d5c924ef2560689efc47f1444f3"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x401}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18}, @iv={0xd0, 0x117, 0x2, 0xb5, "f5338d7354aec77629a21ded7ae63e717699e21222c37f5416059c95f3f21c9394e38f7e07e8e8bf7d84738df7b5e023a7308511b8f035e53125ca6a7886d342cd8be6be5e12d3b1bff2607d330d16eded94cd21b500139d046c5395690787f25ebc34d1dc37a97d56b85b5629a3c84507a336a81c2417d248c35d3fd7a9cbfbac043ab173483167611ec55c033a585456161f9b1a7ce13bbfaab63184dba9e1e0fb1c8ab59680710f79c1f0ad147c4d0702db2888"}, @iv={0x1018, 0x117, 0x2, 0x103b, "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"}], 0x1288, 0x2004c0c4}], 0x2, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2b, 0x80000, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r7}) bind$inet(r7, 0x0, 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="27fa98f5350a1998d7c630135c75af450eadd3ff45c5dd88f0424e0af3dcbab84a5c74bf59c7d53e3e708cf51b38a07501b3e9dfbce22476d038f1b2d60cdca28057f7955e19bd9cf16507993106fec8f58706d2206f4372ff971f758a4aca7337836f499a86dc683b0f3d565cce0c8430f5dc01a4258d6a5831552cf77bf0377c9dbb41bac69e24d23a93e022840b11c7d935c955803086aaac012dc361dedfa32aa29318f23cec828b4d0acf9b50d42cc88f230708e73ba2f022f07b4a2254b64003b3f69100823fd6328734"], 0xfdef) 8.393441525s ago: executing program 2 (id=4683): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x20801, 0x4) (async) socket$netlink(0x10, 0x3, 0x6) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) (async) close(r0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) close(0x3) 1.729072245s ago: executing program 3 (id=4738): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/57, &(0x7f0000000080)=0x39) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) pipe(&(0x7f0000002740)) 1.563099686s ago: executing program 3 (id=4741): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) (async) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) socketpair(0x28, 0x1, 0x6, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x81000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 1.424428083s ago: executing program 3 (id=4744): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) 1.327794122s ago: executing program 3 (id=4746): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004015}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet6(0xa, 0x3, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r11}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @func={0xe, 0x0, 0x0, 0xc, 0x5}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x61]}}, &(0x7f00000005c0)=""/244, 0x5c, 0xf4, 0x0, 0xffffffff}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 960.013262ms ago: executing program 4 (id=4749): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004840)={0x20, r1, 0x801, 0x70bd2d, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x24000090) 956.715586ms ago: executing program 1 (id=4750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000040000701fcffffff00000100037c0000040042800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 851.510013ms ago: executing program 3 (id=4752): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x27, 0x14, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r1, r1, 0x0, 0x8) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r5, 0x0, 0x12, &(0x7f0000000180)='./cgroup.cpu/syz0\x00'}, 0x30) 850.964231ms ago: executing program 4 (id=4753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1002}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x24}}, 0x40) 752.456736ms ago: executing program 3 (id=4754): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000340)={0x3, 'macvlan0\x00', {0x5}, 0x200}) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f00000002c0)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a400000", @ANYRES32=r7, @ANYBLOB="14e902d6d27ddf345b9a149052da391cf02300ff00000000"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a1f0000", @ANYRES32=r7, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r10, 0x80044942, &(0x7f0000000040)) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000380)={0x10, 0x9, 0xfc, 0x9, 0x22, 0x81, 0x7, 0x5, 0x8, 0x19, 0xc, 0x8, 0x0, 0x9}, 0xe) r12 = openat$cgroup_devices(r11, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000180)=ANY=[@ANYBLOB="62202a3a2a206d1b"], 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x24000084) 696.711969ms ago: executing program 1 (id=4756): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x40800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0xf, 0x80000000}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000140)={r0}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000180)={{0x9, 0x630}, 0x100, './file0\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @nfc={0x27, 0x0, 0x1, 0x6}, @phonet={0x23, 0xc6, 0x8, 0x8}, @qipcrtr={0x2a, 0x4, 0xffffc001}, 0x72, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)='wlan1\x00', 0xffffffff80000000, 0x5}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004011) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24040840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000006c0)) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000ac0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, 'syz0\x00', @bcast, 0x2, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000b40)={'filter\x00', 0x0, 0x0, 0x0, [0xe745, 0x1ff, 0xc, 0x2, 0x80000000, 0x62]}, &(0x7f0000000bc0)=0x78) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x37}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e7ee9dcec317d6c3a60c3d4662bac30036f7aa7153eb0e08"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "50599712f3658092daba457a89143109f736c9a79d45f6f2"}]]}, 0x90}, 0x1, 0x0, 0x0, 0x841}, 0x20000009) listen(r1, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$kcm(r1, &(0x7f0000001140)={&(0x7f0000000d80)=@caif=@dgm={0x25, 0x8, 0x92}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)="7ff2e1ab48fe0772e3d635616bfa8739495aa338afe845d2a885511adead54aa446593ab1fe9259f2423199c2351a1263c606856dd38497304aebcfc5cc6d82a5d944951e9d0d948959a59c4a7e5", 0x4e}, {&(0x7f0000000e80)="3829419c3786ebd7c0fb1599f07153c7b52c6233917dd7773053136d43209871be0b7be3d9fa36a5ea1e0d13ef9bdec6855003042fe453", 0x37}, {&(0x7f0000000ec0)="4d7b73032f73776ef59a4d19aabaf31a6931ff917ec381c5d8f30b5631eaddf6683b93c5151d663fc13fd16f5fc7aae2f4c08c39175818c7eca5758cd0cabf43c449c3f1f809e19c69ca7dbf000980173fa7c64f929907d29df93f21d758cf6465eca15587f754d8d6f29d9dd154c9e237755799f6bbb53033485ba00e36ebf207b156b773eb5efe15db938b464e0661f4a4f9624638da065b10a5eac4ac71a09b4fdf276bb202025bfd4fb5c9709f6f82ed9205953dbec89d7924f55a2d3cc932928ea3", 0xc4}, {&(0x7f0000000fc0)="0da256acaba027be8c9aace184", 0xd}], 0x4, &(0x7f0000001040)=[{0xe8, 0x1, 0x4, "1fb8217fc9c76183dc077c4355898acf522d9657fe4515e5aa8c70e6149cfbeb608a156d4819e8569cf13191b6087118f8a37dfe28334656a81164e8d13a229005ebd3d5e1f3b598cccb0d4f19d87ac42c536a89bc29a48623fa957096be545348ab9a4203f6fecf131e59bccef0d3c114a25a04ec6e622f4484c33a891db22137de90f72fdffdc4cdf42c97d2c8c1e84d86d66d117b128bae4f3e41577a91a472c74146b01a014bb4310cf1f04e67225d2646a898ccffe70ff86008cb277a4c3863fa035c183249f9fab554b910dc2e4197aa95f88871a2"}], 0xe8}, 0x4048090) write$nci(r1, &(0x7f0000001180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x7, {0x0, 0x8, 0xb}}, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f00000011c0), &(0x7f0000001200)=0x4) 695.967778ms ago: executing program 4 (id=4757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x931, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xb}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 558.752475ms ago: executing program 0 (id=4758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000000b000081000000000068b0e6197b00f4b58d0d9e9eef67e25cdf2cc4e02553dd1ebf0b"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x1d}, 0x6, 0x3, 0x1, 0x2, 0x1e, 'syz1\x00', "aee4b3cd6c9ae1364fbf600faa389d8d7883fd810b2312da79ff5f155db45344", "55743d7340f91dbdde6b66dc91d5a33bffe4a22e2c05694d24b0f4ef3cba74de", [{0x8001, 0x8, {0x0, 0x8}}, {0xfffd, 0x5, {0x0, 0x2}}, {0x0, 0x7, {0x1, 0x4}}, {0x1, 0x9, {0x3, 0x5}}, {0x9, 0x2, {0x1, 0x8}}, {0xf6f3, 0x0, {0x3, 0x5}}, {0x4, 0xfff, {0x2, 0xa0a}}, {0x5, 0xffff, {0x0, 0x5}}, {0x499d, 0x10, {0x1, 0x71f}}, {0x0, 0x7ff, {0x1, 0x8000}}, {0x6, 0x4, {0x3, 0x4}}, {0x1, 0x8000, {0x2, 0x7f}}, {0x2, 0x2, {0x2, 0x7}}, {0x1, 0x7, {0x2, 0x7}}, {0x4, 0x1ff, {0x2, 0x8}}, {0x4, 0xff15, {0x1, 0xe}}, {0x7, 0x7, {0x1, 0x7}}, {0x1, 0x5, {0x2, 0x8}}, {0x4, 0x2, {0x1, 0xc}}, {0x6, 0x0, {0x0, 0x6}}, {0x3, 0x4, {0x3, 0x2}}, {0x4ab7, 0x8, {0x0, 0x8}}, {0x7, 0x526, {0x0, 0x3000}}, {0x9, 0x80, {0x3, 0xfffffffc}}, {0x8, 0x5, {0x2, 0xb}}, {0x1000, 0x3c0, {0x3, 0x96}}, {0x5, 0x2, {0x3}}, {0x9, 0x9, {0x3, 0x7}}, {0x7, 0x7, {0x1, 0xc}}, {0xff, 0x254, {0x2, 0x6e}}, {0x5, 0x8, {0xefd0806fb56cdaff, 0x6}}, {0x8, 0xff, {0x2, 0x5}}, {0x5, 0x6, {0x0, 0x9}}, {0x8, 0x3, {0x1}}, {0x1, 0x83, {0x1, 0x3}}, {0x81, 0x7f96}, {0x1, 0x3, {0x1, 0x40}}, {0x8001, 0x401, {0x1, 0x2}}, {0x0, 0x7, {0x0, 0xa}}, {0x7f, 0x15, {0x0, 0x4eb}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x3, 0x5, 0x81, 0x5, 0x5, 'syz0\x00', "5be7fab5ef56e1a23eebf90d2bd16480ca3e6d68b081d331c421c85a1be338f9", "1140ecf891e49f5287dd3ad3e9b4bc82cc5eafbaba39041a1f006f3b52f19983", [{0x5, 0xfffc, {0x1, 0x7ff}}, {0x8, 0x41, {0x3, 0x3}}, {0x6, 0xcba2, {0x1, 0xfffffffc}}, {0x7, 0x5, {0x2, 0x7}}, {0x7ff, 0x6, {0x2, 0x5}}, {0x6, 0x1000, {0x1, 0x7f}}, {0x8000, 0x4, {0x0, 0x4}}, {0x1, 0x5, {0x1, 0x6}}, {0x401, 0x2, {0x3, 0xe}}, {0x5, 0x3, {0x2, 0x8}}, {0x0, 0x8, {0x2, 0x9}}, {0xe, 0x48b7, {0x1, 0x1a00000}}, {0x7, 0x2, {0x2, 0x3ff}}, {0x4, 0x6, {0x2, 0x40}}, {0x8, 0x3, {0x0, 0x6}}, {0x6, 0x500, {0x2, 0x81}}, {0x1, 0xa, {0x0, 0x5e8f}}, {0xc, 0x83f, {0x1, 0x7ff}}, {0x5, 0x0, {0x0, 0xe}}, {0x7f, 0x81, {0x2, 0x81}}, {0x7, 0x5, {0x2, 0x80000000}}, {0x3, 0x3, {0x3, 0x8}}, {0x10, 0x40, {0x3, 0x4}}, {0x859b, 0xb1a, {0x2, 0x80000000}}, {0x0, 0x8, {0x2, 0x7}}, {0x0, 0x6, {0x2, 0x4}}, {0xda, 0x5a06, {0x2, 0xfffffffa}}, {0x3ff, 0xfffe, {0x3, 0x1}}, {0x4926, 0x8, {0x0, 0x7fffffff}}, {0xd906, 0x5, {0x2, 0x3}}, {0xf, 0x4, {0x0, 0x1e}}, {0x0, 0xfff7, {0x3, 0x1}}, {0xfffe, 0x84}, {0xf, 0xc2d, {0x1, 0xd}}, {0x8, 0x5, {0x1, 0x1}}, {0xf800, 0x2, {0x2, 0x7}}, {0x8000, 0xe}, {0x1ce, 0x9, {0x1, 0x1}}, {0x7ff, 0x7, {0x3, 0xff}}, {0x7, 0x9, {0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24040010}, 0x4000000) 557.269339ms ago: executing program 4 (id=4759): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x97b8, @default, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r4}, 0x18) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002e00090026bd7000000000000400000024000800000000000000e0eff7e551cd3040c3a66adbc8caab96d3061d1fe91ff4f07d0ce803"], 0x38}, 0x1, 0x0, 0x0, 0x6854}, 0x4000000) 541.761695ms ago: executing program 1 (id=4760): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic', 0x2b) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYRES64=r2, @ANYRES32=r2], 0x90}}, 0x0) 441.599448ms ago: executing program 0 (id=4761): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0xfffffff6, 0x8, {{0x19, 0x4, 0x3, 0x29, 0x64, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x4a, 0x3, 0xf, [{@rand_addr=0x64010101, 0x7}, {@multicast1, 0x9}, {@empty, 0x3}]}, @rr={0x7, 0x13, 0x3b, [@multicast2, @broadcast, @multicast2, @loopback]}, @ssrr={0x89, 0xf, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @end, @rr={0x7, 0x7, 0x3f, [@broadcast]}, @noop, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_getnetconf={0x2c, 0x52, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0xffffff7d}, @NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81080000}, 0xc, &(0x7f0000000080)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) 389.689162ms ago: executing program 1 (id=4762): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010002000000fbdbdf2536000000080073000000000008400300000000000e0001406e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x40000005, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 384.046508ms ago: executing program 0 (id=4763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x7) listen(r0, 0x0) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) 276.961077ms ago: executing program 4 (id=4764): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000200000000000000000000000000950000000099a063bf5a5cbe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x60d3e9a0, 0x2, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @remote, @private=0xa010101, {[@noop, @lsrr={0x83, 0xb, 0xca, [@remote, @private=0xa010100]}, @end, @timestamp_addr={0x44, 0xc, 0x3f, 0x1, 0x4, [{@multicast2, 0xfffffffc}]}, @generic={0x89, 0x9, "1293424b9f8827"}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, r4, 0x2d, 0x0, @val=@netfilter={0x7, 0x4, 0xffffff1f, 0x1}}, 0x20) 276.610056ms ago: executing program 0 (id=4765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) 263.473543ms ago: executing program 1 (id=4766): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe15d, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000845}, 0x4) (async) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe15d, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000845}, 0x4) 193.352156ms ago: executing program 0 (id=4767): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000d40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x541b, 0x0) 76.951577ms ago: executing program 4 (id=4768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x4f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) 75.298043ms ago: executing program 1 (id=4769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="110000000000000000dc3406", @ANYRES32=r2, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000010000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0xc}, {[@lsrr={0x83, 0x7, 0xbb, [@loopback]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.556866ms ago: executing program 2 (id=4770): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="40ee030104cd080142"], 0x9) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x5, 0x0, 0x10000000, "c8119df9ba26"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r7, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random='vw'}, @NL80211_ATTR_KEYS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4804) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="40ee030104cd080142"], 0x9) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x5, 0x0, 0x10000000, "c8119df9ba26"}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r7, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random='vw'}, @NL80211_ATTR_KEYS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) 0s ago: executing program 0 (id=4771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005380)=ANY=[@ANYBLOB="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"], 0x258c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) kernel console output (not intermixed with test programs): syz.4.2934'. [ 462.749623][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 462.872698][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2942'. [ 463.066509][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 463.347329][T15981] netlink: 'syz.3.2945': attribute type 28 has an invalid length. [ 463.355672][T15981] netlink: 'syz.3.2945': attribute type 3 has an invalid length. [ 463.363548][T15981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2945'. [ 463.393739][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 463.406811][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.416327][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.427671][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.436167][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.473627][T15982] lo speed is unknown, defaulting to 1000 [ 463.644336][T15990] netlink: 'syz.3.2949': attribute type 8 has an invalid length. [ 463.812672][T15982] chnl_net:caif_netlink_parms(): no params data found [ 464.118918][T16006] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 464.128875][T15982] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.136913][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.144279][T15982] bridge_slave_0: entered allmulticast mode [ 464.153141][T15982] bridge_slave_0: entered promiscuous mode [ 464.184577][ T52] Bluetooth: hci0: command tx timeout [ 464.191804][T15982] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.201275][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.208950][T15982] bridge_slave_1: entered allmulticast mode [ 464.217340][T15982] bridge_slave_1: entered promiscuous mode [ 464.303986][T15982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.327871][T15982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.467890][T15982] team0: Port device team_slave_0 added [ 464.488416][T15982] team0: Port device team_slave_1 added [ 464.612870][T15982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.640099][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.711646][T15982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.741134][T15982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.764579][T15982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.813867][T15982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.975506][T15982] hsr_slave_0: entered promiscuous mode [ 464.982770][T15982] hsr_slave_1: entered promiscuous mode [ 464.991588][T15982] debugfs: 'hsr0' already exists in 'hsr' [ 464.997818][T15982] Cannot create hsr debugfs directory [ 465.022224][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2964'. [ 465.074834][T16042] hsr_slave_0: left promiscuous mode [ 465.090864][T16042] hsr_slave_1: left promiscuous mode [ 465.468799][ T52] Bluetooth: hci3: command tx timeout [ 465.802035][T15982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.817249][T15982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.836029][T15982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 465.847712][T15982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 465.889880][T16074] pimreg3: entered allmulticast mode [ 465.920453][T16077] IPv6: sit1: Disabled Multicast RS [ 465.946083][T16077] sit1: entered allmulticast mode [ 466.053280][T15982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.064185][T15982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.075178][T15982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 466.087536][T15982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 466.120513][T16085] tipc: MTU too low for tipc bearer [ 466.220542][T15982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.232912][T15982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.248159][T15982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 466.259654][T15982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 466.408105][T15982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.419118][T15982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.428864][T16104] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 466.445300][T15982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 466.459176][T15982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 466.667344][T16118] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 466.752495][T15982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.795981][T15982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.848351][T16121] __nla_validate_parse: 7 callbacks suppressed [ 466.848373][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2988'. [ 466.863950][T15982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.891127][T15982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.083934][T16138] Bluetooth: MGMT ver 1.23 [ 467.245969][T16133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2990'. [ 467.280329][T15982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.365281][T15982] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.468824][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.476068][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.490297][T16154] netlink: 'syz.4.2994': attribute type 2 has an invalid length. [ 467.491969][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.505354][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.545121][ T52] Bluetooth: hci3: command tx timeout [ 467.611360][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 467.686231][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 467.856109][T16170] lo speed is unknown, defaulting to 1000 [ 468.020157][T16182] netlink: 'syz.0.3004': attribute type 1 has an invalid length. [ 468.047335][T16182] netlink: 'syz.0.3004': attribute type 11 has an invalid length. [ 468.069584][T16181] pim6reg527: entered allmulticast mode [ 468.075421][T16182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3004'. [ 468.093811][T16184] lo speed is unknown, defaulting to 1000 [ 468.188111][T16181] syz_tun: tun_net_xmit 86 [ 468.328850][T16193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3005'. [ 468.458337][T15982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.553960][T15982] veth0_vlan: entered promiscuous mode [ 468.578690][T15982] veth1_vlan: entered promiscuous mode [ 468.669718][T15982] veth0_macvtap: entered promiscuous mode [ 468.731372][T15982] veth1_macvtap: entered promiscuous mode [ 468.803755][T15982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.853637][T15982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.895536][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.914937][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.935641][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.954105][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.033068][T16221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3013'. [ 469.085827][T11504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.108131][T11504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.222689][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.231135][ C1] syz_tun: tun_net_xmit 86 [ 469.259515][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.381886][T16232] netlink: 'syz.4.3019': attribute type 1 has an invalid length. [ 469.394694][T16237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'. [ 469.444920][T16232] bond0 (unregistering): Released all slaves [ 469.521441][T16232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3019'. [ 469.531393][T16244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3019'. [ 469.619212][T16248] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 469.641238][ T52] Bluetooth: hci3: command tx timeout [ 469.675838][T16248] team0: Port device geneve0 added [ 469.683188][ T1168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.708624][ T1168] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.720285][ T1168] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.730250][ T1168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.265395][ C1] syz_tun: tun_net_xmit 86 [ 470.292585][T16274] netlink: 'syz.0.3029': attribute type 2 has an invalid length. [ 470.314741][T16274] netlink: 'syz.0.3029': attribute type 1 has an invalid length. [ 470.626207][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.645030][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.654911][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.663590][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.673485][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.677968][T11504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.714896][T11504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.794625][T16288] lo speed is unknown, defaulting to 1000 [ 470.866421][T11504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.866498][T16293] xt_hashlimit: size too large, truncated to 1048576 [ 470.877253][T11504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.904745][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 471.002140][T16295] syzkaller0: entered promiscuous mode [ 471.008206][T16295] syzkaller0: entered allmulticast mode [ 471.076068][T11504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.087101][T11504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.232812][T16306] netlink: 'syz.2.3036': attribute type 4 has an invalid length. [ 471.707657][ T52] Bluetooth: hci3: command tx timeout [ 472.722041][T11504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.734504][T11504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.747004][ T52] Bluetooth: hci1: command tx timeout [ 472.943777][T16323] __nla_validate_parse: 7 callbacks suppressed [ 472.943798][T16323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 473.057021][T16323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3041'. [ 473.303535][T16288] chnl_net:caif_netlink_parms(): no params data found [ 473.550088][T11504] bridge_slave_1: left allmulticast mode [ 473.559799][T11504] bridge_slave_1: left promiscuous mode [ 473.576159][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.603078][T11504] bridge_slave_0: left allmulticast mode [ 473.613422][T11504] bridge_slave_0: left promiscuous mode [ 473.630929][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.693337][T11504] tipc: Resetting bearer [ 473.918857][T11504] tipc: Disabling bearer [ 474.033097][T11504] bond6 (unregistering): (slave gretap1): Releasing active interface [ 474.100657][T11504] dvmrp0 (unregistering): left allmulticast mode [ 474.527299][T11504] ` (unregistering): (slave 1!€ÿÛæ˜): Releasing backup interface [ 474.537983][T11504] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.547160][T11504] ` (unregistering): Released all slaves [ 474.651723][T11504] bond1 (unregistering): Released all slaves [ 474.753333][T11504] bond2 (unregistering): Released all slaves [ 474.825938][ T52] Bluetooth: hci1: command tx timeout [ 474.871053][T11504] bond3 (unregistering): Released all slaves [ 474.974305][T11504] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 474.985381][T11504] bond4 (unregistering): Released all slaves [ 474.998769][T11504] bond5 (unregistering): Released all slaves [ 475.012254][T11504] bond6 (unregistering): Released all slaves [ 475.120143][T11504] bond7 (unregistering): Released all slaves [ 475.134109][T11504] bond8 (unregistering): Released all slaves [ 475.149846][T11504] bond9 (unregistering): Released all slaves [ 475.253965][T11504] bond0 (unregistering): Released all slaves [ 475.356163][T11504] bond10 (unregistering): (slave veth5): Releasing active interface [ 475.367535][T11504] bond10 (unregistering): Released all slaves [ 475.480984][T16364] !€ÿ: renamed from bond_slave_0 [ 475.519466][T11504] : left promiscuous mode [ 475.942279][T16288] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.956030][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.995206][T16288] bridge_slave_0: entered allmulticast mode [ 476.007596][T16288] bridge_slave_0: entered promiscuous mode [ 476.043397][T11504] tipc: Disabling bearer [ 476.066713][T16288] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.068312][T11504] tipc: Left network mode [ 476.073975][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.086324][T16288] bridge_slave_1: entered allmulticast mode [ 476.095900][T16288] bridge_slave_1: entered promiscuous mode [ 476.151403][T11504] IPVS: stopping master sync thread 7780 ... [ 476.189603][T16393] syzkaller0: mtu less than device minimum [ 476.383322][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.485899][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.611885][T16418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.749857][T16288] team0: Port device team_slave_0 added [ 476.776601][T16288] team0: Port device team_slave_1 added [ 476.905109][ T52] Bluetooth: hci1: command tx timeout [ 476.917432][T16431] syzkaller1: entered promiscuous mode [ 476.923160][T16431] syzkaller1: entered allmulticast mode [ 476.951924][T11504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.963270][T11504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.972717][T11504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.980305][T11504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.988976][T11504] batman_adv: batadv0: Removing interface: macvtap0 [ 477.016273][T11504] veth0_macvtap: left allmulticast mode [ 477.023350][T11504] veth0_macvtap: left promiscuous mode [ 477.025160][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'. [ 477.029354][T11504] veth1_macvtap: left promiscuous mode [ 477.044033][T11504] veth1_vlan: left promiscuous mode [ 477.149188][T11504] pimreg3 (unregistering): left allmulticast mode [ 477.573581][T11504] team0 (unregistering): Port device team_slave_1 removed [ 477.617748][T11504] team0 (unregistering): Port device team_slave_0 removed [ 478.029372][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.036950][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.065223][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.078952][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.086380][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.114330][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.410630][T16288] hsr_slave_0: entered promiscuous mode [ 478.417974][T16288] hsr_slave_1: entered promiscuous mode [ 478.424911][T16288] debugfs: 'hsr0' already exists in 'hsr' [ 478.444489][T16288] Cannot create hsr debugfs directory [ 478.639208][T16465] syz_tun: entered allmulticast mode [ 478.731904][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3082'. [ 478.776586][T16465] syz_tun: left allmulticast mode [ 478.784076][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 478.795217][T16476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.802648][T16476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.811672][T16476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.843104][T16476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.857893][T16478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3085'. [ 478.877606][T16480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.892814][T16480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.911817][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3084'. [ 478.938466][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3086'. [ 478.954788][T11504] IPVS: stop unused estimator thread 0... [ 478.984635][ T52] Bluetooth: hci1: command tx timeout [ 478.989643][T16478] tipc: Started in network mode [ 478.995943][T16478] tipc: Node identity 5e9bd62ca75b, cluster identity 4711 [ 479.006223][T16478] tipc: Enabled bearer , priority 0 [ 479.093032][T16478] syzkaller0: entered promiscuous mode [ 479.103844][T16478] syzkaller0: entered allmulticast mode [ 479.147731][T16489] syzkaller1: entered promiscuous mode [ 479.153341][T16489] syzkaller1: entered allmulticast mode [ 479.169691][T16478] tipc: Resetting bearer [ 479.201585][T16477] tipc: Resetting bearer [ 479.248888][T16477] tipc: Disabling bearer [ 479.272948][T16499] sctp: [Deprecated]: syz.2.3089 (pid 16499) Use of int in max_burst socket option deprecated. [ 479.272948][T16499] Use struct sctp_assoc_value instead [ 479.919759][T16522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3093'. [ 479.963144][T16288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.032615][T16288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.048468][T16288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.066402][T16288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 480.382150][T16288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.460035][T16288] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.512346][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.519606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.574255][T16563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3103'. [ 480.586549][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.593807][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.878148][T16574] sctp: [Deprecated]: syz.4.3105 (pid 16574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.878148][T16574] Use struct sctp_sack_info instead [ 481.088637][T16585] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3107'. [ 481.161291][T16585] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 481.197732][T16585] team0: Port device batadv1 added [ 481.372561][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.522177][T16613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3114'. [ 481.558248][T16613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3114'. [ 481.610746][T16288] veth0_vlan: entered promiscuous mode [ 481.671887][T16288] veth1_vlan: entered promiscuous mode [ 481.748777][T16617] C: entered allmulticast mode [ 481.791764][T16288] veth0_macvtap: entered promiscuous mode [ 481.819361][T16288] veth1_macvtap: entered promiscuous mode [ 481.899195][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.942893][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.972699][T16616] C: left allmulticast mode [ 482.000192][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.042994][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.074097][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.111535][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.292756][T11506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.321411][T11506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.414199][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.445311][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.721264][T16661] netlink: 'syz.3.3025': attribute type 1 has an invalid length. [ 483.663583][ T5848] bond0: (slave syz_tun): Releasing backup interface [ 483.821036][ T134] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.853449][ T134] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.869403][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.881802][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.890194][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.899432][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.906987][T16717] __nla_validate_parse: 5 callbacks suppressed [ 483.907006][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 483.907026][T16717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3135'. [ 483.943627][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.047619][ T134] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.091333][ T134] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.169907][T16719] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 484.212005][T16710] lo speed is unknown, defaulting to 1000 [ 484.247819][ T134] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.271047][ T134] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.361321][ T134] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.371351][ T134] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.407824][T16734] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 484.416511][T16734] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.3141'. [ 485.059607][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3145'. [ 485.249968][ T134] dvmrp6 (unregistering): left allmulticast mode [ 485.355796][ T134] team0: Port device geneve0 removed [ 485.585174][T16790] netlink: 'syz.0.3149': attribute type 4 has an invalid length. [ 485.613224][ T134] bond3 (unregistering): (slave bridge1): Releasing active interface [ 485.623045][ T134] bond3 (unregistering): (slave bridge1): the permanent HWaddr of slave - a6:3e:1a:84:9b:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 485.688463][ T134] bond3 (unregistering): (slave bridge2): Releasing active interface [ 485.890171][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.901285][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.912671][ T134] bond0 (unregistering): (slave team0): Releasing backup interface [ 485.926310][ T134] bond0 (unregistering): Released all slaves [ 486.039063][T16772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.040222][ T5150] Bluetooth: hci4: command tx timeout [ 486.090188][ T134] bond1 (unregistering): (slave lo): Releasing backup interface [ 486.098971][ T134] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 486.113211][ T134] bond1 (unregistering): Released all slaves [ 486.251166][ T134] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 486.261687][ T134] bond2 (unregistering): Released all slaves [ 486.297264][ T134] bond3 (unregistering): Released all slaves [ 486.318997][T16763] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3145'. [ 486.343083][T16710] chnl_net:caif_netlink_parms(): no params data found [ 486.508289][T16784] syzkaller1: entered promiscuous mode [ 486.514078][T16784] syzkaller1: entered allmulticast mode [ 486.527338][ T8121] lo speed is unknown, defaulting to 1000 [ 486.533462][ T8121] syz1: Port: 1 Link DOWN [ 487.032678][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.065567][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.079647][T16710] bridge_slave_0: entered allmulticast mode [ 487.099507][T16710] bridge_slave_0: entered promiscuous mode [ 487.117997][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.145564][T16819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3155'. [ 487.145990][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.182344][T16710] bridge_slave_1: entered allmulticast mode [ 487.199469][T16710] bridge_slave_1: entered promiscuous mode [ 487.216953][T16822] netlink: 'syz.1.3157': attribute type 11 has an invalid length. [ 487.291100][T16822] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3157'. [ 487.320840][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.363637][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.368884][T16826] netlink: 'syz.0.3159': attribute type 8 has an invalid length. [ 487.556897][T16710] team0: Port device team_slave_0 added [ 487.583977][T16710] team0: Port device team_slave_1 added [ 487.655940][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3163'. [ 487.674004][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.692236][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.735605][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 487.745164][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.777546][T16839] syzkaller0: entered promiscuous mode [ 487.784160][T16839] syzkaller0: entered allmulticast mode [ 487.801765][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.810393][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.837040][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.934474][T16846] netlink: 'syz.0.3166': attribute type 13 has an invalid length. [ 487.942654][T16846] netlink: 'syz.0.3166': attribute type 58 has an invalid length. [ 487.952748][T16846] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3166'. [ 488.105462][ T5150] Bluetooth: hci4: command 0x041b tx timeout [ 488.127108][ T134] : left promiscuous mode [ 488.354300][ T134] tipc: Left network mode [ 488.383648][T16710] hsr_slave_0: entered promiscuous mode [ 488.401522][T16710] hsr_slave_1: entered promiscuous mode [ 488.411427][T16710] debugfs: 'hsr0' already exists in 'hsr' [ 488.419822][T16710] Cannot create hsr debugfs directory [ 488.895658][T16870] syzkaller1: entered promiscuous mode [ 488.901283][T16870] syzkaller1: entered allmulticast mode [ 488.992623][T16875] __nla_validate_parse: 1 callbacks suppressed [ 488.992645][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3177'. [ 489.076228][T16878] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3178'. [ 489.334022][T16881] syzkaller1: entered promiscuous mode [ 489.340474][T16881] syzkaller1: entered allmulticast mode [ 489.555028][T16897] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 489.574697][ T134] hsr_slave_0: left promiscuous mode [ 489.591545][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.592126][T16897] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 489.617597][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.673635][ T134] pim6reg527 (unregistering): left allmulticast mode [ 489.978696][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3187'. [ 490.189733][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 490.256593][ T134] team0 (unregistering): Port device team_slave_1 removed [ 490.316527][ T134] team0 (unregistering): Port device team_slave_0 removed [ 490.807517][ T134] vcan0 (unregistering): left allmulticast mode [ 490.865700][T16897] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 490.988068][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.004374][T16899] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.139642][T16899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.157526][T16899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.413051][T16920] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3188'. [ 491.443289][T16920] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3188'. [ 491.450218][T11506] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.483697][T11506] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.505006][T11506] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.513942][T11506] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.833285][T16931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3193'. [ 491.875443][T16934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3195'. [ 492.045466][T16939] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 492.064576][T16939] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3196'. [ 492.073668][T16939] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3196'. [ 492.125908][T16710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.157127][T16710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.198753][T16710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.251591][T16710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.265091][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 492.482918][T16963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3201'. [ 492.562777][T16963] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 492.595856][T16965] tipc: Enabled bearer , priority 0 [ 492.613557][T16965] syzkaller0: entered promiscuous mode [ 492.624476][T16965] syzkaller0: entered allmulticast mode [ 492.647717][T16710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.689634][T16965] tipc: Invalid UDP bearer configuration [ 492.689696][T16965] tipc: Enabling of bearer rejected, failed to enable media [ 492.838548][T16969] tipc: Resetting bearer [ 492.870859][T16964] tipc: Resetting bearer [ 492.934336][T16964] tipc: Disabling bearer [ 492.958976][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.990763][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.997997][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.072127][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.079400][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.379267][ T134] IPVS: stop unused estimator thread 0... [ 493.518702][T16997] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 493.562587][T16997] netlink: 'syz.1.3213': attribute type 7 has an invalid length. [ 493.582578][T16997] netlink: 'syz.1.3213': attribute type 8 has an invalid length. [ 493.654225][T16710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.787505][T16710] veth0_vlan: entered promiscuous mode [ 493.845371][T16710] veth1_vlan: entered promiscuous mode [ 493.931146][T16710] veth0_macvtap: entered promiscuous mode [ 493.977612][T16710] veth1_macvtap: entered promiscuous mode [ 494.023488][T16710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.040591][T16710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.099514][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.135497][ T134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.168949][ T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.228771][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.345288][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 494.380166][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.418950][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.621288][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.632880][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.948145][T17044] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 494.998963][T17051] __nla_validate_parse: 6 callbacks suppressed [ 494.998986][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3229'. [ 495.032108][T17044] bond1: (slave lo): Enslaving as a backup interface with an up link [ 495.050342][T17051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3229'. [ 495.090578][T17044] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 496.079111][T17080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.089269][ T8124] IPVS: starting estimator thread 0... [ 496.127755][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.139482][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.148366][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.159822][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.177651][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.195718][T17081] IPVS: using max 28 ests per chain, 67200 per kthread [ 496.813056][T17083] chnl_net:caif_netlink_parms(): no params data found [ 497.136439][T17088] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 497.181165][T17090] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 497.291758][T17083] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.307060][T17083] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.319641][T17083] bridge_slave_0: entered allmulticast mode [ 497.338086][T17083] bridge_slave_0: entered promiscuous mode [ 497.361026][ T1109] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.387094][T17124] netlink: 'syz.2.3248': attribute type 2 has an invalid length. [ 497.397972][ T1109] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.427426][T17117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.468064][T17083] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.491116][T17083] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.513779][T17083] bridge_slave_1: entered allmulticast mode [ 497.546355][T17083] bridge_slave_1: entered promiscuous mode [ 497.587606][T17124] sit1: entered promiscuous mode [ 497.592778][T17124] sit1: entered allmulticast mode [ 497.609374][ T1109] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.628835][ T1109] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.846085][T17083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.901417][T17083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.136285][T17155] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 498.187303][T17152] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 498.274538][ T5150] Bluetooth: hci2: command tx timeout [ 498.310188][T17083] team0: Port device team_slave_0 added [ 498.338175][T17083] team0: Port device team_slave_1 added [ 498.462046][T17143] netlink: 'syz.3.3254': attribute type 5 has an invalid length. [ 498.481813][T17148] tipc: Started in network mode [ 498.499680][T17148] tipc: Node identity ac14140f, cluster identity 4711 [ 498.518361][T17148] tipc: New replicast peer: 255.255.255.255 [ 498.535468][T17148] tipc: Enabled bearer , priority 10 [ 498.637385][T17083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.665446][T17083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.710746][T17141] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 498.713895][T17177] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3260'. [ 498.730444][T17083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.768616][T17170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3260'. [ 498.800055][T17172] IPVS: Unknown mcast interface: nicvf0 [ 498.819347][T17174] IPVS: Unknown mcast interface: nicvf0 [ 498.836891][T17083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.853908][T17083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.901081][T17083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.918897][T17173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3260'. [ 499.060874][T17186] netlink: 'syz.1.3265': attribute type 1 has an invalid length. [ 499.090549][T17186] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3265'. [ 499.173239][T17195] FAULT_INJECTION: forcing a failure. [ 499.173239][T17195] name failslab, interval 1, probability 0, space 0, times 0 [ 499.196992][T17083] hsr_slave_0: entered promiscuous mode [ 499.204033][T17083] hsr_slave_1: entered promiscuous mode [ 499.216396][T17195] CPU: 0 UID: 0 PID: 17195 Comm: syz.3.3266 Not tainted syzkaller #0 PREEMPT(full) [ 499.216425][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.216436][T17195] Call Trace: [ 499.216443][T17195] [ 499.216452][T17195] dump_stack_lvl+0x189/0x250 [ 499.216494][T17195] ? __pfx____ratelimit+0x10/0x10 [ 499.216526][T17195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.216551][T17195] ? __pfx__printk+0x10/0x10 [ 499.216578][T17195] ? __pfx___might_resched+0x10/0x10 [ 499.216608][T17195] ? fs_reclaim_acquire+0x7d/0x100 [ 499.216631][T17195] should_fail_ex+0x414/0x560 [ 499.216666][T17195] should_failslab+0xa8/0x100 [ 499.216687][T17195] kmem_cache_alloc_node_noprof+0x77/0x710 [ 499.216713][T17195] ? __alloc_skb+0x112/0x2d0 [ 499.216730][T17195] ? netlink_autobind+0xdb/0x300 [ 499.216754][T17195] __alloc_skb+0x112/0x2d0 [ 499.216777][T17195] netlink_sendmsg+0x5c6/0xb30 [ 499.216805][T17195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.216826][T17195] ? aa_sock_msg_perm+0xf1/0x1d0 [ 499.216855][T17195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.216873][T17195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.216893][T17195] __sock_sendmsg+0x21c/0x270 [ 499.216920][T17195] ____sys_sendmsg+0x52d/0x830 [ 499.216947][T17195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.216977][T17195] ? import_iovec+0x74/0xa0 [ 499.217004][T17195] ___sys_sendmsg+0x21f/0x2a0 [ 499.217027][T17195] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.217087][T17195] ? __fget_files+0x2a/0x420 [ 499.217105][T17195] ? __fget_files+0x3a0/0x420 [ 499.217135][T17195] __sys_sendmmsg+0x227/0x430 [ 499.217161][T17195] ? __pfx___sys_sendmmsg+0x10/0x10 [ 499.217203][T17195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.217247][T17195] ? ksys_write+0x22a/0x250 [ 499.217275][T17195] ? __pfx_ksys_write+0x10/0x10 [ 499.217304][T17195] __x64_sys_sendmmsg+0xa0/0xc0 [ 499.217327][T17195] do_syscall_64+0xfa/0xfa0 [ 499.217350][T17195] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.217373][T17195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.217389][T17195] ? clear_bhb_loop+0x60/0xb0 [ 499.217412][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.217428][T17195] RIP: 0033:0x7f7dc918f6c9 [ 499.217446][T17195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.217461][T17195] RSP: 002b:00007f7dc9f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 499.217481][T17195] RAX: ffffffffffffffda RBX: 00007f7dc93e5fa0 RCX: 00007f7dc918f6c9 [ 499.217494][T17195] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 499.217507][T17195] RBP: 00007f7dc9f97090 R08: 0000000000000000 R09: 0000000000000000 [ 499.217518][T17195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.217529][T17195] R13: 00007f7dc93e6038 R14: 00007f7dc93e5fa0 R15: 00007ffff13e3278 [ 499.217563][T17195] [ 499.515554][T17083] debugfs: 'hsr0' already exists in 'hsr' [ 499.521354][T17083] Cannot create hsr debugfs directory [ 499.591134][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.617649][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.646312][ T8121] tipc: Node number set to 2886997007 [ 499.742951][T17208] xt_policy: output policy not valid in PREROUTING and INPUT [ 499.817552][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.839749][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.005389][T17215] delete_channel: no stack [ 500.016114][T17215] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3275'. [ 500.102966][T17219] x_tables: unsorted underflow at hook 3 [ 500.189599][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.222961][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.244508][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.349627][ T5150] Bluetooth: hci2: command tx timeout [ 500.425880][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.651714][T17241] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3284'. [ 500.677403][T17246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3287'. [ 500.706033][T17240] netlink: 'syz.0.3285': attribute type 11 has an invalid length. [ 501.437148][T17262] tipc: Enabled bearer , priority 0 [ 501.551560][T17267] syzkaller0: entered promiscuous mode [ 501.579890][T17267] syzkaller0: entered allmulticast mode [ 501.642214][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.754701][ T8121] IPVS: starting estimator thread 0... [ 501.806910][T17255] tipc: Resetting bearer [ 501.873593][T17255] tipc: Disabling bearer [ 501.880440][T17284] IPVS: using max 25 ests per chain, 60000 per kthread [ 501.946473][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 502.003877][T17288] netlink: 'syz.2.3295': attribute type 2 has an invalid length. [ 502.021652][T17083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 502.032632][T17288] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3295'. [ 502.071681][T17083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 502.112302][T17083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 502.159500][T17289] syzkaller1: entered promiscuous mode [ 502.165919][T17289] syzkaller1: entered allmulticast mode [ 502.179325][T17083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 502.428191][ T5150] Bluetooth: hci2: command tx timeout [ 502.482007][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 502.498020][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 502.664025][T17083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.727850][T17083] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.770306][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.777563][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.836793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.843979][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.001469][T17083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.061623][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 503.074102][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3310'. [ 503.102247][ T134] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.102440][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 503.114193][ T134] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.143832][ T134] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.163253][ T134] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.555940][T17364] blkio.reset_stats is deprecated [ 503.557701][T17083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.905946][T17378] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.926978][T17380] netlink: 'syz.0.3322': attribute type 1 has an invalid length. [ 503.938007][T17378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.945383][T17378] IPv6: NLM_F_CREATE should be set when creating new route [ 503.952671][T17378] IPv6: NLM_F_CREATE should be set when creating new route [ 503.971874][T17380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.071211][T17378] netlink: 'syz.1.3321': attribute type 2 has an invalid length. [ 504.099168][T17384] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 504.170160][T17378] : entered promiscuous mode [ 504.398919][T17401] FAULT_INJECTION: forcing a failure. [ 504.398919][T17401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.399828][T17083] veth0_vlan: entered promiscuous mode [ 504.423421][T17401] CPU: 0 UID: 0 PID: 17401 Comm: syz.2.3327 Not tainted syzkaller #0 PREEMPT(full) [ 504.423450][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.423462][T17401] Call Trace: [ 504.423469][T17401] [ 504.423478][T17401] dump_stack_lvl+0x189/0x250 [ 504.423508][T17401] ? __pfx____ratelimit+0x10/0x10 [ 504.423534][T17401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.423558][T17401] ? __pfx__printk+0x10/0x10 [ 504.423577][T17401] ? __might_fault+0xb0/0x130 [ 504.423617][T17401] should_fail_ex+0x414/0x560 [ 504.423650][T17401] _copy_from_user+0x2d/0xb0 [ 504.423675][T17401] ___sys_sendmsg+0x158/0x2a0 [ 504.423700][T17401] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.423768][T17401] ? __might_fault+0xb0/0x130 [ 504.423798][T17401] __sys_sendmmsg+0x227/0x430 [ 504.423824][T17401] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.423854][T17401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.423901][T17401] ? ksys_write+0x22a/0x250 [ 504.423929][T17401] ? __pfx_ksys_write+0x10/0x10 [ 504.423959][T17401] __x64_sys_sendmmsg+0xa0/0xc0 [ 504.423982][T17401] do_syscall_64+0xfa/0xfa0 [ 504.424007][T17401] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.424030][T17401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.424047][T17401] ? clear_bhb_loop+0x60/0xb0 [ 504.424069][T17401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.424086][T17401] RIP: 0033:0x7efc4c58f6c9 [ 504.424113][T17401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.424128][T17401] RSP: 002b:00007efc4d42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.424149][T17401] RAX: ffffffffffffffda RBX: 00007efc4c7e5fa0 RCX: 00007efc4c58f6c9 [ 504.424162][T17401] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 504.424175][T17401] RBP: 00007efc4d42b090 R08: 0000000000000000 R09: 0000000000000000 [ 504.424185][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.424195][T17401] R13: 00007efc4c7e6038 R14: 00007efc4c7e5fa0 R15: 00007ffc0f34c398 [ 504.424227][T17401] [ 504.428677][T17405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.516078][T17083] veth1_vlan: entered promiscuous mode [ 504.525935][ T5150] Bluetooth: hci2: command tx timeout [ 504.562030][T17083] veth0_macvtap: entered promiscuous mode [ 504.588373][T17410] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 504.602576][T17083] veth1_macvtap: entered promiscuous mode [ 504.647082][T17410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.769047][T17083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.903002][T17083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.950664][T11506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.996236][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.023511][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.065169][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.186136][T17438] __nla_validate_parse: 9 callbacks suppressed [ 505.186158][T17438] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3336'. [ 505.298557][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.309972][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.390337][T17446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3338'. [ 505.435820][T17438] syzkaller0: entered promiscuous mode [ 505.441694][T17438] syzkaller0: entered allmulticast mode [ 505.615369][T17452] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3339'. [ 505.634836][T17452] netlink: 'syz.1.3339': attribute type 3 has an invalid length. [ 505.772327][T17460] Cannot find add_set index 0 as target [ 505.782465][T17460] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3342'. [ 507.244227][T11504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.252671][T11504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.260180][T17460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3342'. [ 507.443999][T17475] netlink: 'syz.1.3346': attribute type 39 has an invalid length. [ 507.497091][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'. [ 507.527788][T17472] bridge_slave_1: left allmulticast mode [ 507.533494][T17472] bridge_slave_1: left promiscuous mode [ 507.550416][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.563065][T17472] bridge_slave_0: left allmulticast mode [ 507.569423][T17472] bridge_slave_0: left promiscuous mode [ 507.575675][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.671992][T17486] tipc: Enabled bearer , priority 0 [ 507.697270][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3351'. [ 507.729692][T17478] tipc: Resetting bearer [ 507.973053][T17477] tipc: Disabling bearer [ 508.040900][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 508.068813][T17494] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 508.095851][T17494] netlink: 'syz.3.3352': attribute type 2 has an invalid length. [ 508.384697][T17528] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3362'. [ 508.494287][T17544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3367'. [ 508.514895][T17544] netlink: 'syz.2.3367': attribute type 2 has an invalid length. [ 508.705211][T17555] netlink: 'syz.2.3369': attribute type 1 has an invalid length. [ 508.873424][T17566] netlink: 'syz.0.3373': attribute type 1 has an invalid length. [ 509.013947][T17571] sctp: [Deprecated]: syz.3.3375 (pid 17571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.013947][T17571] Use struct sctp_sack_info instead [ 509.069815][T17573] tipc: New replicast peer: 255.255.255.255 [ 509.086961][T17573] tipc: Enabled bearer , priority 10 [ 509.166440][T17580] netlink: 'syz.3.3379': attribute type 21 has an invalid length. [ 509.585895][T17602] netlink: 'syz.0.3384': attribute type 1 has an invalid length. [ 509.597465][T17602] nbd: error processing sock list [ 509.602713][T17602] block nbd4: shutting down sockets [ 509.704091][T17606] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 510.132762][T17635] team0: Device wireguard0 is of different type [ 510.200870][T17646] netlink: 'syz.0.3396': attribute type 39 has an invalid length. [ 510.204889][ T8121] tipc: Node number set to 4190164524 [ 510.245571][T17648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.283559][T17648] __nla_validate_parse: 11 callbacks suppressed [ 510.283582][T17648] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3397'. [ 510.417189][T17651] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.507560][T17653] syzkaller0: entered promiscuous mode [ 510.519882][T17653] syzkaller0: entered allmulticast mode [ 510.784660][T17673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 510.798031][T17673] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 510.809997][T17673] gretap1: entered promiscuous mode [ 510.816018][T17673] gretap1: entered allmulticast mode [ 511.005775][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3411'. [ 511.043235][T17693] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 511.078281][T17693] netlink: 'syz.4.3412': attribute type 3 has an invalid length. [ 511.097774][T17693] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3412'. [ 511.226560][ T52] Bluetooth: hci2: command tx timeout [ 511.276319][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3416'. [ 511.304125][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 511.351107][T17706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3417'. [ 511.416469][T17701] hsr_slave_0 (unregistering): left promiscuous mode [ 511.512708][T17704] bridge_slave_0: left allmulticast mode [ 511.522279][T17704] bridge_slave_0: left promiscuous mode [ 511.532298][T17704] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.551686][T17704] bridge_slave_1: left allmulticast mode [ 511.557537][T17704] bridge_slave_1: left promiscuous mode [ 511.563290][T17704] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.575584][T17704] bond0: (slave bond_slave_0): Releasing backup interface [ 511.587570][T17704] bond0: (slave bond_slave_1): Releasing backup interface [ 511.590473][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 511.612991][T17704] team0: Port device team_slave_0 removed [ 511.627744][T17704] team0: Port device team_slave_1 removed [ 511.635599][T17704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.643182][T17704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.652361][T17704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.660496][T17704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.669449][T17704] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 511.712490][T17712] team0: Mode changed to "loadbalance" [ 511.735617][T17722] hsr_slave_0: left promiscuous mode [ 511.757311][T17722] hsr_slave_1: left promiscuous mode [ 511.824898][T17717] tipc: Started in network mode [ 511.829854][T17717] tipc: Node identity 26f62228a30e, cluster identity 4711 [ 511.843323][T17717] tipc: Enabled bearer , priority 0 [ 512.071501][T17721] syzkaller0: entered promiscuous mode [ 512.077437][T17721] syzkaller0: entered allmulticast mode [ 512.084019][T17721] tipc: Resetting bearer [ 512.090815][T11506] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.105083][T17744] netlink: 'syz.0.3426': attribute type 83 has an invalid length. [ 512.128824][T11506] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.173170][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 512.193221][T17716] tipc: Resetting bearer [ 513.803111][T17716] tipc: Disabling bearer [ 513.812366][T11506] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.822122][T11506] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.851920][ T8124] tipc: Node number set to 2247631400 [ 514.040780][T17762] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 514.069488][T17762] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 514.087718][T17762] gretap1: entered promiscuous mode [ 514.095638][T17762] gretap1: entered allmulticast mode [ 514.152702][T17768] pimreg3: entered allmulticast mode [ 514.179054][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.422706][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 514.687230][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 514.722914][T17800] geneve2: entered promiscuous mode [ 514.750863][T17800] geneve2: entered allmulticast mode [ 514.761483][T11506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.792642][T11506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.811959][T11506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.869974][T11506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.966043][T17811] netlink: 'syz.0.3451': attribute type 4 has an invalid length. [ 514.974185][T17814] netlink: 'syz.2.3452': attribute type 21 has an invalid length. [ 515.049426][T17823] netlink: 'syz.3.3455': attribute type 2 has an invalid length. [ 515.054021][T17814] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 515.074159][T17814] bond2 (unregistering): Released all slaves [ 515.085475][T17823] netlink: 'syz.3.3455': attribute type 2 has an invalid length. [ 515.099822][T17821] IPVS: set_ctl: invalid protocol: 255 172.30.1.5:20003 [ 515.467341][T17841] __nla_validate_parse: 2 callbacks suppressed [ 515.467360][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3460'. [ 515.505671][T17848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3462'. [ 515.617891][T17855] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3464'. [ 515.651249][T17855] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3464'. [ 515.709743][T17855] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3464'. [ 516.203346][T17887] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3476'. [ 516.213142][T17887] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3476'. [ 516.238780][T17887] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3476'. [ 516.434125][T17899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.471507][T17906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3479'. [ 516.493279][T17897] dvmrp6: entered allmulticast mode [ 516.811165][T17924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3489'. [ 517.193747][T17950] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 517.213839][T17950] x_tables: duplicate underflow at hook 1 [ 517.232462][T17950] netlink: 'syz.1.3499': attribute type 3 has an invalid length. [ 517.251806][T17954] tipc: Failed to obtain node identity [ 517.258147][T17950] netlink: 'syz.1.3499': attribute type 10 has an invalid length. [ 517.274556][T17954] tipc: Enabling of bearer rejected, failed to enable media [ 517.309789][T17957] netlink: 'syz.1.3499': attribute type 2 has an invalid length. [ 517.329448][T17950] team0: Device veth1_macvtap failed to register rx_handler [ 517.749842][T17948] syzkaller0: entered promiscuous mode [ 517.761536][T17976] nbd: must specify at least one socket [ 517.786181][T17948] syzkaller0: entered allmulticast mode [ 518.252182][T18004] netlink: 'syz.3.3508': attribute type 8 has an invalid length. [ 520.120856][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xf2 [ 520.290851][T18052] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 520.374117][T18052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.385778][T18052] bond2: (slave bond3): making interface the new active one [ 520.395278][T18052] bond2: (slave bond3): Enslaving as an active interface with an up link [ 520.414125][T18060] xt_l2tp: v2 doesn't support IP mode [ 520.630842][T18068] __nla_validate_parse: 7 callbacks suppressed [ 520.630857][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 521.075757][T18082] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3531'. [ 521.136325][T18085] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 521.139190][T18091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3533'. [ 521.161602][T18085] bond1 (unregistering): Released all slaves [ 521.174208][T18091] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3533'. [ 521.181511][T18095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3536'. [ 521.201748][T18093] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3535'. [ 521.221873][T18091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3533'. [ 521.221963][T18096] netlink: 'syz.2.3532': attribute type 3 has an invalid length. [ 521.353748][T18082] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 521.373071][T18082] gretap1: left promiscuous mode [ 521.646569][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3541'. [ 521.664611][T18116] nbd: must specify a size in bytes for the device [ 521.862487][T18131] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3545'. [ 521.876304][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3545'. [ 522.024092][T18144] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 522.306070][T18154] macvtap1: entered promiscuous mode [ 522.311613][T18154] vlan0: entered promiscuous mode [ 522.317541][T18154] macvtap1: entered allmulticast mode [ 522.323597][T18154] vlan0: entered allmulticast mode [ 522.329052][T18154] veth1_macvtap: entered allmulticast mode [ 522.478738][T18168] tipc: Started in network mode [ 522.483910][T18168] tipc: Node identity , cluster identity 4711 [ 522.490970][T18168] tipc: Failed to obtain node identity [ 522.498882][T18168] tipc: Enabling of bearer rejected, failed to enable media [ 522.619293][T18168] syzkaller0: entered promiscuous mode [ 522.625372][T18168] syzkaller0: entered allmulticast mode [ 522.632776][T18175] hsr_slave_0: left promiscuous mode [ 522.639396][T18175] hsr_slave_1: left promiscuous mode [ 525.453409][T18259] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 525.526816][T18259] bond4 (unregistering): Released all slaves [ 525.607204][T18272] vlan0: entered promiscuous mode [ 525.612612][T18272] vlan0: entered allmulticast mode [ 525.640257][T18272] hsr_slave_1: entered allmulticast mode [ 525.836966][T18287] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 525.845481][T18287] __nla_validate_parse: 9 callbacks suppressed [ 525.845499][T18287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3587'. [ 525.877192][T18288] ipt_ECN: cannot use operation on non-tcp rule [ 525.983569][T18298] netlink: 201852 bytes leftover after parsing attributes in process `syz.2.3588'. [ 526.029161][T18301] netlink: 'syz.3.3591': attribute type 13 has an invalid length. [ 526.081772][T18301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.178210][T18312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'. [ 526.900120][T18342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 526.937187][T18346] veth1_to_bond: entered allmulticast mode [ 526.998848][T18349] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 527.010854][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'. [ 527.096357][T18352] bond0: (slave bond_slave_1): Releasing backup interface [ 527.169598][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 527.176557][T18367] netlink: 'syz.3.3612': attribute type 1 has an invalid length. [ 527.189079][T18352] veth1_to_bond (unregistering): left allmulticast mode [ 527.220265][T18369] xt_NFQUEUE: number of total queues is 0 [ 527.267007][T18367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.349378][T18370] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 527.523266][T18379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3616'. [ 527.562866][T18379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3616'. [ 527.573405][T18379] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3616'. [ 527.574062][T18382] syzkaller0: entered promiscuous mode [ 527.604705][T18382] syzkaller0: entered allmulticast mode [ 527.712064][T18393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3620'. [ 527.727638][T18382] tipc: Started in network mode [ 527.732572][T18382] tipc: Node identity 36ec94858f72, cluster identity 4711 [ 527.761550][T18382] tipc: Enabled bearer , priority 0 [ 527.812843][T18381] tipc: Resetting bearer [ 527.892003][T18381] tipc: Disabling bearer [ 528.152311][T18414] netlink: 'syz.4.3625': attribute type 12 has an invalid length. [ 528.265310][T18422] syzkaller1: entered promiscuous mode [ 528.274493][T18422] syzkaller1: entered allmulticast mode [ 528.336506][T18426] netlink: 'syz.1.3628': attribute type 23 has an invalid length. [ 528.589547][T18438] sctp: [Deprecated]: syz.0.3630 (pid 18438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.589547][T18438] Use struct sctp_sack_info instead [ 528.718740][T18445] bond2: invalid ARP target 0.0.0.0 specified for addition [ 528.731925][T18445] bond2: option arp_ip_target: invalid value (0) [ 528.743791][T18445] bond2 (unregistering): Released all slaves [ 529.106924][T18473] delete_channel: no stack [ 529.983006][T18531] netlink: 'syz.2.3658': attribute type 1 has an invalid length. [ 530.015423][T18535] netlink: 'syz.0.3657': attribute type 7 has an invalid length. [ 530.083207][T18533] netlink: 'syz.3.3656': attribute type 5 has an invalid length. [ 530.104103][T18533] geneve2: entered promiscuous mode [ 530.115824][T18533] geneve2: entered allmulticast mode [ 530.123224][T11504] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 530.132326][T11504] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 530.154982][T18538] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 530.167681][T11504] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 530.177481][T11504] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 530.595148][T18568] netlink: 'syz.0.3667': attribute type 4 has an invalid length. [ 531.009335][T18589] netlink: 'syz.3.3675': attribute type 11 has an invalid length. [ 531.017481][T18589] __nla_validate_parse: 49 callbacks suppressed [ 531.017502][T18589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3675'. [ 532.357813][T18676] netlink: 'syz.0.3699': attribute type 26 has an invalid length. [ 532.368503][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3699'. [ 532.378662][T18676] netlink: 'syz.0.3699': attribute type 26 has an invalid length. [ 532.396579][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3699'. [ 532.436059][T18679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3698'. [ 532.458562][T18681] veth0: entered promiscuous mode [ 532.494302][T18677] veth0: left promiscuous mode [ 532.504554][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.504554][T18686] Use struct sctp_assoc_value instead [ 532.569023][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.569023][T18686] Use struct sctp_assoc_value instead [ 532.585100][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.585100][T18686] Use struct sctp_assoc_value instead [ 532.600233][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.600233][T18686] Use struct sctp_assoc_value instead [ 532.625625][T18689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3703'. [ 532.644683][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.644683][T18686] Use struct sctp_assoc_value instead [ 532.660717][ T5897] IPVS: starting estimator thread 0... [ 532.675609][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.675609][T18686] Use struct sctp_assoc_value instead [ 532.725736][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.725736][T18686] Use struct sctp_assoc_value instead [ 532.739821][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3706'. [ 532.760613][T18702] vlan2: entered allmulticast mode [ 532.766820][T18696] IPVS: using max 26 ests per chain, 62400 per kthread [ 532.774272][T18702] bridge_slave_0: entered allmulticast mode [ 532.802638][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.802638][T18686] Use struct sctp_assoc_value instead [ 532.848775][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.848775][T18686] Use struct sctp_assoc_value instead [ 532.868101][T18686] sctp: [Deprecated]: syz.4.3702 (pid 18686) Use of int in max_burst socket option. [ 532.868101][T18686] Use struct sctp_assoc_value instead [ 533.015728][T18716] tipc: Enabled bearer , priority 0 [ 533.074612][T18716] syzkaller0: entered promiscuous mode [ 533.080147][T18716] syzkaller0: entered allmulticast mode [ 533.092091][T18716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 533.109342][T18716] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 533.118701][T18716] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 533.129004][T18716] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3710'. [ 533.142197][T18716] tipc: Resetting bearer [ 533.283138][T18713] tipc: Resetting bearer [ 533.301654][T18713] tipc: Disabling bearer [ 533.335666][T18734] team0: Device wireguard0 is of different type [ 533.440420][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 533.802224][T18768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.936566][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3729'. [ 533.994811][T18777] syzkaller0: entered promiscuous mode [ 534.000348][T18777] syzkaller0: entered allmulticast mode [ 534.226836][T18797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.297943][T18800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.466760][T18812] tc_dump_action: action bad kind [ 534.859074][T18828] bond1: ARP target 1.0.0.0 is already present [ 534.865520][T18828] bond1: option arp_ip_target: invalid value (1) [ 534.877466][T18828] bond1 (unregistering): Released all slaves [ 535.389987][T18868] netlink: 'syz.2.3754': attribute type 21 has an invalid length. [ 535.411723][T18868] netlink: 'syz.2.3754': attribute type 5 has an invalid length. [ 535.420117][T18873] netlink: 'syz.2.3754': attribute type 21 has an invalid length. [ 535.457353][T18875] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.470854][T18873] netlink: 'syz.2.3754': attribute type 5 has an invalid length. [ 535.481568][T18875] netlink: 'syz.1.3756': attribute type 8 has an invalid length. [ 535.559555][T18879] sctp: [Deprecated]: syz.4.3757 (pid 18879) Use of int in maxseg socket option. [ 535.559555][T18879] Use struct sctp_assoc_value instead [ 535.646757][T18884] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.677045][T18884] dvmrp0: entered allmulticast mode [ 535.758685][T18889] tipc: Started in network mode [ 535.764024][T18889] tipc: Node identity , cluster identity 4711 [ 535.770537][T18889] tipc: Failed to set node id, please configure manually [ 535.778738][T18889] tipc: Enabling of bearer rejected, failed to enable media [ 535.819925][T18894] tipc: New replicast peer: 255.255.255.255 [ 535.827425][T18894] tipc: Enabled bearer , priority 10 [ 536.078743][T18912] __nla_validate_parse: 14 callbacks suppressed [ 536.078765][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 536.122651][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 557.308075][T18916] netlink: 15044 bytes leftover after parsing attributes in process `syz.2.3771'. [ 557.497645][T18931] bridge0: port 1(batadv1) entered blocking state [ 557.506081][T18931] bridge0: port 1(batadv1) entered disabled state [ 557.513900][T18931] batadv1: entered allmulticast mode [ 557.526344][T18931] batadv1: entered promiscuous mode [ 558.005467][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 558.015407][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 558.196128][T18962] vlan0: entered promiscuous mode [ 558.205412][T18962] vlan0: entered allmulticast mode [ 558.210678][T18962] veth0_vlan: entered allmulticast mode [ 558.237160][T18962] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3785'. [ 558.249871][T18964] netlink: 'syz.4.3786': attribute type 8 has an invalid length. [ 558.257913][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 558.277769][T18964] bond0: entered promiscuous mode [ 558.283010][T18964] bond_slave_0: entered promiscuous mode [ 558.289430][T18964] bond_slave_1: entered promiscuous mode [ 558.299886][T18964] gretap0: entered promiscuous mode [ 558.307717][T18964] hsr1: entered promiscuous mode [ 558.339431][T18968] netlink: 'syz.1.3787': attribute type 4 has an invalid length. [ 558.647059][T18982] batman_adv: batadv0: Adding interface: dummy0 [ 558.676746][T18982] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.708966][T18982] batman_adv: batadv0: Interface activated: dummy0 [ 558.835459][T18993] tipc: Enabling of bearer rejected, failed to enable media [ 558.858548][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'. [ 558.870148][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'. [ 558.892259][T18999] xt_l2tp: v2 doesn't support IP mode [ 558.938431][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 559.066988][T18995] macvtap1: entered promiscuous mode [ 559.072642][T18995] macvtap1: entered allmulticast mode [ 559.103658][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3798'. [ 559.244141][T19016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3803'. [ 559.426415][T19030] IPVS: Error connecting to the multicast addr [ 559.617993][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'. [ 559.683524][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'. [ 560.419302][T19090] netlink: 'syz.1.3817': attribute type 1 has an invalid length. [ 560.499042][T19090] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 560.515361][T19090] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 560.612540][T19099] bond2: (slave gretap1): making interface the new active one [ 560.637750][T19099] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 560.712346][T19099] gretap2: entered promiscuous mode [ 560.745650][T19099] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 560.808094][T19108] macvlan2: entered promiscuous mode [ 560.813553][T19108] macvlan2: entered allmulticast mode [ 560.868514][T19108] bond2: entered promiscuous mode [ 560.897241][T19108] gretap1: entered promiscuous mode [ 560.914175][T19108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 560.951043][T19108] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 560.974006][T19108] bond2: left promiscuous mode [ 560.984741][T19108] gretap1: left promiscuous mode [ 561.025901][T19113] v: renamed from vlan0 (while UP) [ 561.473634][T19156] xt_hashlimit: size too large, truncated to 1048576 [ 561.571183][T19160] tipc: Started in network mode [ 561.595076][T19160] tipc: Node identity b62d6dbba024, cluster identity 4711 [ 561.612699][T19160] tipc: Enabled bearer , priority 0 [ 561.760948][T19161] syzkaller0: entered promiscuous mode [ 561.762352][T19171] ieee802154 phy1 wpan1: encryption failed: -90 [ 561.780722][T19161] syzkaller0: entered allmulticast mode [ 561.789844][T19161] tipc: Resetting bearer [ 561.815396][T19159] tipc: Resetting bearer [ 563.070326][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.581636][T19159] tipc: Disabling bearer [ 563.675093][ T8117] tipc: Node number set to 369716667 [ 563.857179][T19212] __nla_validate_parse: 5 callbacks suppressed [ 563.857199][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 563.876792][T19211] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 564.062381][T19221] x_tables: duplicate entry at hook 1 [ 564.243159][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 564.264171][T19237] netlink: 'syz.3.3857': attribute type 1 has an invalid length. [ 564.298729][T19237] netlink: 'syz.3.3857': attribute type 2 has an invalid length. [ 564.383461][T19243] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 564.428148][T19243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.442123][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3859'. [ 564.451672][T19245] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3859'. [ 564.481953][T19243] veth5: entered promiscuous mode [ 564.491804][T19243] bond4: (slave veth5): Enslaving as an active interface with a down link [ 564.803126][T19258] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3864'. [ 564.979697][T19263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3866'. [ 564.997522][T19268] xt_TCPMSS: Only works on TCP SYN packets [ 565.117426][T19271] netlink: 'syz.0.3870': attribute type 39 has an invalid length. [ 565.954742][T19324] netlink: 13228 bytes leftover after parsing attributes in process `syz.3.3886'. [ 565.990531][T19326] syzkaller0: entered promiscuous mode [ 565.996492][T19326] syzkaller0: entered allmulticast mode [ 566.021380][T19331] sctp: [Deprecated]: syz.2.3888 (pid 19331) Use of int in maxseg socket option. [ 566.021380][T19331] Use struct sctp_assoc_value instead [ 566.370072][T19353] netlink: 'syz.1.3893': attribute type 2 has an invalid length. [ 566.379826][T19353] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3893'. [ 566.612683][T19371] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.622597][T19371] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.872551][T19384] dvmrp1: entered allmulticast mode [ 566.994145][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'. [ 567.230742][T19407] x_tables: unsorted entry at hook 2 [ 567.257735][T19411] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 567.628814][T19432] geneve3: entered promiscuous mode [ 567.634105][T19432] geneve3: entered allmulticast mode [ 567.766523][T19443] pim6reg1: entered promiscuous mode [ 567.777868][T19443] pim6reg1: entered allmulticast mode [ 567.848724][T19449] netlink: 'syz.4.3923': attribute type 13 has an invalid length. [ 567.910541][T19449] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.917987][T19449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.925773][T19449] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.932982][T19449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.962033][T19449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.227515][T19469] sctp: [Deprecated]: syz.4.3927 (pid 19469) Use of int in max_burst socket option deprecated. [ 568.227515][T19469] Use struct sctp_assoc_value instead [ 568.444788][T19486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 568.452088][T19486] IPv6: NLM_F_CREATE should be set when creating new route [ 568.459458][T19486] IPv6: NLM_F_CREATE should be set when creating new route [ 568.466867][T19486] IPv6: NLM_F_CREATE should be set when creating new route [ 568.743434][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3936'. [ 568.747462][T19499] : entered promiscuous mode [ 569.245540][T19520] tipc: Enabled bearer , priority 0 [ 569.253262][T19520] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 569.263412][T19520] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 569.285163][T19520] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 569.314021][T19520] __nla_validate_parse: 2 callbacks suppressed [ 569.314041][T19520] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3943'. [ 569.343723][T19520] tipc: Resetting bearer [ 569.542525][ T5897] hid-generic 0005:0458:05DF.0001: item fetching failed at offset 0/1 [ 569.553868][ T5897] hid-generic 0005:0458:05DF.0001: probe with driver hid-generic failed with error -22 [ 569.608536][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3953'. [ 569.620797][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 569.630628][T19539] netlink: 'syz.1.3953': attribute type 15 has an invalid length. [ 569.681012][T19546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3954'. [ 569.711166][T19548] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 569.720642][T19548] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 569.729530][T19549] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 569.737733][T19549] netlink: 'syz.1.3955': attribute type 1 has an invalid length. [ 569.749570][T19548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3955'. [ 569.846022][T19556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3957'. [ 569.906138][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3957'. [ 569.921188][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'. [ 570.013547][T19564] netlink: 'syz.1.3959': attribute type 9 has an invalid length. [ 570.220858][T19574] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 570.276549][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 570.294001][T19576] netlink: 'syz.1.3962': attribute type 5 has an invalid length. [ 570.307284][T19578] netlink: 'syz.1.3962': attribute type 5 has an invalid length. [ 570.319920][T19578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3962'. [ 570.371145][T19578] geneve2: entered promiscuous mode [ 570.382067][T19578] geneve2: entered allmulticast mode [ 570.406179][T11509] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 570.415695][T11509] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 570.437623][T19576] tipc: Enabling of bearer rejected, already enabled [ 570.457885][T11509] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 570.481971][T11509] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 571.309961][T19646] netlink: 'syz.3.3978': attribute type 1 has an invalid length. [ 571.450042][T19646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.502977][T19650] veth5: entered promiscuous mode [ 571.530672][T19650] bond2: (slave veth5): Enslaving as an active interface with a down link [ 571.922240][T19674] bond1: Removing last arp target with arp_interval on [ 572.355215][T19704] block nbd4: Unsupported socket: should be TCP or UNIX. [ 572.452441][T19711] netlink: 'syz.0.3992': attribute type 4 has an invalid length. [ 572.940926][T19751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.291239][T19764] tipc: Enabling of bearer rejected, already enabled [ 573.721960][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e146c00: rx timeout, send abort [ 573.730813][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e146c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 574.191973][T19811] syzkaller0: entered promiscuous mode [ 574.198687][T19811] syzkaller0: entered allmulticast mode [ 574.364911][T19816] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 574.377659][T19816] bond3 (unregistering): Released all slaves [ 574.450814][T19818] tipc: Enabling of bearer rejected, failed to enable media [ 574.576052][T19827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.739803][ T1147] bond0 (unregistering): Released all slaves [ 574.768983][T19834] __nla_validate_parse: 17 callbacks suppressed [ 574.769002][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4032'. [ 574.791983][T19832] validate_nla: 3 callbacks suppressed [ 574.792005][T19832] netlink: 'syz.3.4031': attribute type 13 has an invalid length. [ 574.792997][T19834] netlink: 'syz.4.4032': attribute type 83 has an invalid length. [ 574.856800][T19832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.076200][T19846] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 575.403657][T19868] bond1: (slave lo): Releasing backup interface [ 575.413476][T19868] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 575.474070][T19868] bridge_slave_0: left allmulticast mode [ 575.475110][T19870] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4043'. [ 575.524500][T19872] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 575.540065][T19876] openvswitch: netlink: IP tunnel dst address not specified [ 575.546580][T19868] bridge_slave_0: left promiscuous mode [ 575.575607][T19868] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.598983][T19868] bridge_slave_1: left allmulticast mode [ 575.608407][T19880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4046'. [ 575.622157][T19868] bridge_slave_1: left promiscuous mode [ 575.631728][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.673248][T19868] bond0: (slave bond_slave_0): Releasing backup interface [ 575.726181][T19868] bond0: (slave bond_slave_1): Releasing backup interface [ 575.751892][T19892] netlink: 'syz.2.4049': attribute type 2 has an invalid length. [ 575.763928][T19868] team0: Port device team_slave_0 removed [ 575.779440][T19868] team0: Port device team_slave_1 removed [ 575.800247][T19868] bond2: (slave gretap1): Releasing active interface [ 575.808822][T19868] bond2: (slave gretap2): making interface the new active one [ 575.828096][T19868] bond2: (slave gretap2): Releasing active interface [ 575.857858][T19870] team0: Mode changed to "loadbalance" [ 575.872897][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.039160][T19899] 8021q: VLANs not supported on ip6tnl0 [ 576.105070][T19907] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 576.113962][T19907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4052'. [ 576.154047][T19907] No such timeout policy "syz0" [ 576.157898][T19913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4054'. [ 576.291428][ T30] audit: type=1800 audit(1763368530.560:5): pid=19916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4055" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=838 res=0 errno=0 [ 576.376948][T19919] syzkaller1: entered promiscuous mode [ 576.382489][T19919] syzkaller1: entered allmulticast mode [ 576.479873][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4061'. [ 576.575275][T19943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4062'. [ 576.688402][T19944] veth3: entered allmulticast mode [ 576.770156][T19953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4066'. [ 576.820401][T19954] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 576.843691][T19958] Cannot find add_set index 1 as target [ 576.938644][T19963] syzkaller0: entered promiscuous mode [ 576.943805][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 576.944240][T19963] syzkaller0: entered allmulticast mode [ 576.989516][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 577.123417][T19983] gretap0: entered promiscuous mode [ 577.454408][T20005] netlink: 'syz.4.4081': attribute type 21 has an invalid length. [ 577.463562][T20006] netlink: 'syz.4.4081': attribute type 21 has an invalid length. [ 577.733271][T20020] lo: entered allmulticast mode [ 577.832882][T20027] x_tables: duplicate underflow at hook 4 [ 578.256109][T20056] netlink: 'syz.0.4094': attribute type 7 has an invalid length. [ 578.479185][T20066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.793648][T20082] IPVS: Error connecting to the multicast addr [ 578.976761][T20093] ipt_ECN: cannot use operation on non-tcp rule [ 579.237863][T20098] ipt_REJECT: TCP_RESET invalid for non-tcp [ 580.240183][T20147] syzkaller0: entered promiscuous mode [ 580.255903][T20147] syzkaller0: entered allmulticast mode [ 580.591474][T20169] tipc: Enabled bearer , priority 0 [ 580.617511][T20169] syzkaller0: entered promiscuous mode [ 580.627701][T20169] syzkaller0: entered allmulticast mode [ 580.645244][T20177] xt_l2tp: missing protocol rule (udp|l2tpip) [ 580.652159][T20169] tipc: Resetting bearer [ 580.684585][T20167] tipc: Resetting bearer [ 580.716232][T20167] tipc: Disabling bearer [ 580.729284][T20183] __nla_validate_parse: 5 callbacks suppressed [ 580.729303][T20183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4132'. [ 580.762049][T20186] netlink: 'syz.3.4133': attribute type 2 has an invalid length. [ 580.778506][T20181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.782721][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'. [ 580.836505][T20183] netlink: 'syz.4.4132': attribute type 1 has an invalid length. [ 581.162793][T20208] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4139'. [ 581.288615][T20214] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4142'. [ 581.324285][T20215] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4142'. [ 581.347188][T20214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4142'. [ 581.368306][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4141'. [ 581.499581][T20222] syzkaller0: entered promiscuous mode [ 581.506152][T20222] syzkaller0: entered allmulticast mode [ 581.517434][T20232] netlink: 'syz.4.4144': attribute type 29 has an invalid length. [ 581.555101][T20222] netlink: 'syz.4.4144': attribute type 29 has an invalid length. [ 581.564089][T20222] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4144'. [ 581.588898][T20222] syzkaller0: left promiscuous mode [ 581.607169][T20222] syzkaller0: left allmulticast mode [ 581.950834][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 582.130555][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 583.470114][T17999] Bluetooth: hci2: command 0x0405 tx timeout [ 583.755589][T20276] bridge0: entered allmulticast mode [ 584.302490][T20302] C: renamed from lo (while UP) [ 584.318600][T20302] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 584.490117][T20307] netlink: 'syz.2.4166': attribute type 1 has an invalid length. [ 584.573226][T20315] tipc: Enabled bearer , priority 0 [ 584.581990][T20315] syzkaller0: entered promiscuous mode [ 584.589574][T20315] syzkaller0: entered allmulticast mode [ 584.685538][T20315] tipc: Resetting bearer [ 584.698786][T20314] tipc: Resetting bearer [ 584.732364][T20314] tipc: Disabling bearer [ 584.741209][T20322] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 584.772955][T20322] team0: Device ip6gre1 is of different type [ 584.912482][T20329] sctp: [Deprecated]: syz.4.4173 (pid 20329) Use of int in maxseg socket option. [ 584.912482][T20329] Use struct sctp_assoc_value instead [ 585.207693][T20349] netlink: 'syz.0.4178': attribute type 1 has an invalid length. [ 585.220612][T20349] netlink: 'syz.0.4178': attribute type 19 has an invalid length. [ 585.586787][T20370] Bluetooth: MGMT ver 1.23 [ 585.634991][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 585.845902][T20386] netlink: 'syz.1.4189': attribute type 1 has an invalid length. [ 585.925665][T20392] __nla_validate_parse: 5 callbacks suppressed [ 585.925684][T20392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4189'. [ 585.929620][T20391] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4192'. [ 586.021519][T20392] bond3: (slave bridge4): making interface the new active one [ 586.031984][T20392] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 586.041434][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4193'. [ 586.098861][T20395] netlink: 'syz.2.4193': attribute type 11 has an invalid length. [ 586.220619][T20409] bridge_slave_0: default FDB implementation only supports local addresses [ 586.403280][T20420] geneve3: entered allmulticast mode [ 586.415616][ T50] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 586.462838][ T50] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 586.490958][ T50] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 586.502932][ T50] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 586.618483][T20434] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4205'. [ 586.654960][T20434] xt_policy: neither incoming nor outgoing policy selected [ 586.678636][T20436] bridge4: entered promiscuous mode [ 586.684186][T20436] bridge4: entered allmulticast mode [ 586.699214][T20439] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 586.711240][T20437] veth9: entered promiscuous mode [ 586.733520][T20440] bridge5: entered promiscuous mode [ 586.740864][T20440] bridge5: entered allmulticast mode [ 586.854676][T20439] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 586.862556][T20439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4208'. [ 586.908228][T20439] batadv0: entered promiscuous mode [ 586.913505][T20439] batadv0: entered allmulticast mode [ 586.928524][T20439] bridge0: port 2(batadv0) entered blocking state [ 586.940306][T20439] bridge0: port 2(batadv0) entered disabled state [ 586.951374][T20439] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 587.007941][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4211'. [ 587.368895][T20476] team0: Cannot enslave team device to itself [ 587.386634][T20481] netlink: 'syz.1.4219': attribute type 13 has an invalid length. [ 587.414123][T20484] : entered promiscuous mode [ 587.439322][T20481] veth0_macvtap: left promiscuous mode [ 587.461175][T20481] macvtap0: entered allmulticast mode [ 587.504025][T20481] macvtap0: refused to change device tx_queue_len [ 587.607773][T20495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4220'. [ 587.636822][T20498] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4221'. [ 587.746809][T20506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.194876][T20548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4231'. [ 588.305934][T20552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4232'. [ 588.442555][T20531] netlink: 'syz.4.4227': attribute type 11 has an invalid length. [ 589.087513][T20592] netlink: 'syz.4.4243': attribute type 4 has an invalid length. [ 589.493498][T20611] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 589.635487][T20622] batadv_slave_0: entered promiscuous mode [ 590.092434][T20652] only policy match revision 0 supported [ 590.092457][T20652] unable to load match [ 590.363138][T20668] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 590.380801][T20674] netlink: 'syz.4.4268': attribute type 21 has an invalid length. [ 590.385152][T20668] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 590.432760][T20674] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 590.453583][T20674] bond2 (unregistering): Released all slaves [ 591.267723][T20729] __nla_validate_parse: 39 callbacks suppressed [ 591.267745][T20729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4287'. [ 591.467906][T20738] netlink: 'syz.2.4289': attribute type 10 has an invalid length. [ 591.483530][T20738] veth1_macvtap: left promiscuous mode [ 591.554986][T20741] netlink: 'syz.3.4291': attribute type 21 has an invalid length. [ 591.573351][T20741] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4291'. [ 591.630630][T20736] netlink: 'syz.2.4289': attribute type 10 has an invalid length. [ 591.636992][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 591.640587][T20741] netlink: 'syz.3.4291': attribute type 4 has an invalid length. [ 591.654769][T20749] netlink: 'syz.3.4291': attribute type 21 has an invalid length. [ 591.663378][T20749] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4291'. [ 591.707921][T20741] netlink: 'syz.3.4291': attribute type 5 has an invalid length. [ 591.716025][T20741] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4291'. [ 591.842265][T20747] bond0: (slave bond_slave_1): Releasing backup interface [ 591.850428][T20747] bond_slave_1 (unregistering): left promiscuous mode [ 591.898305][T20752] netlink: 'syz.4.4290': attribute type 1 has an invalid length. [ 591.907842][T20749] netlink: 'syz.3.4291': attribute type 4 has an invalid length. [ 591.917091][T20749] netlink: 'syz.3.4291': attribute type 5 has an invalid length. [ 591.925909][T20749] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4291'. [ 591.940855][T20759] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 591.952341][T20759] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 592.186568][T20769] netlink: 'syz.4.4299': attribute type 1 has an invalid length. [ 592.269775][T20769] bond2: entered promiscuous mode [ 592.276182][T20769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.348305][T20788] vlan2: entered allmulticast mode [ 592.365241][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 592.376716][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 592.392327][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 592.415824][T20789] xt_TCPMSS: Only works on TCP SYN packets [ 592.422297][T20789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4303'. [ 592.565799][T20795] xt_hashlimit: size too large, truncated to 1048576 [ 595.864550][T17999] Bluetooth: hci1: command 0x0406 tx timeout [ 606.104979][T17999] Bluetooth: hci4: command 0x041b tx timeout [ 624.510791][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.566487][T20864] __nla_validate_parse: 3 callbacks suppressed [ 630.566511][T20864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4325'. [ 630.593855][T20870] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4327'. [ 630.647423][T20869] xt_CONNSECMARK: invalid mode: 0 [ 630.879502][T20892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4334'. [ 630.911535][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'. [ 630.972778][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4336'. [ 631.189529][T20909] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 631.193311][T20907] validate_nla: 2 callbacks suppressed [ 631.193327][T20907] netlink: 'syz.1.4342': attribute type 21 has an invalid length. [ 631.212833][T20907] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4342'. [ 631.257780][T20907] netlink: 'syz.1.4342': attribute type 5 has an invalid length. [ 631.383966][T20921] Bluetooth: MGMT ver 1.23 [ 631.558503][T20931] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 631.746717][T20943] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4350'. [ 631.756020][T20947] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4351'. [ 631.847898][T20945] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4352'. [ 632.089500][T20964] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 632.403902][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4367'. [ 632.511711][T20992] xt_hashlimit: max too large, truncated to 1048576 [ 632.523659][T20992] netlink: 'syz.2.4369': attribute type 6 has an invalid length. [ 632.533412][T20992] netlink: 'syz.2.4369': attribute type 6 has an invalid length. [ 632.562859][T20997] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 632.829677][T21013] netlink: 'syz.4.4374': attribute type 5 has an invalid length. [ 633.098937][T21025] netlink: 'syz.2.4380': attribute type 21 has an invalid length. [ 633.115402][T21025] netlink: 'syz.2.4380': attribute type 5 has an invalid length. [ 634.689388][T21074] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 634.740951][T21104] syzkaller0: entered promiscuous mode [ 634.766006][T21104] syzkaller0: entered allmulticast mode [ 634.944373][T21137] sctp: [Deprecated]: syz.1.4404 (pid 21137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.944373][T21137] Use struct sctp_sack_info instead [ 635.171188][T21146] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:5 [ 635.469003][T21165] IPVS: length: 234 != 424 [ 635.597676][T21174] netlink: 'syz.0.4416': attribute type 62 has an invalid length. [ 635.867670][T21191] __nla_validate_parse: 12 callbacks suppressed [ 635.867702][T21191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4421'. [ 635.930244][T21197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4423'. [ 635.944248][T21191] nbd: must specify an index to disconnect [ 635.955958][T21191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4421'. [ 636.432497][T21217] validate_nla: 3 callbacks suppressed [ 636.432518][T21217] netlink: 'syz.2.4429': attribute type 1 has an invalid length. [ 636.455057][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4428'. [ 636.464764][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4428'. [ 636.485280][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4428'. [ 636.517769][T21226] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4431'. [ 636.561077][T21217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.567118][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4431'. [ 636.768066][T21209] team0 (unregistering): Port device team_slave_0 removed [ 636.798398][T21209] team0 (unregistering): Port device team_slave_1 removed [ 636.830354][T21236] netlink: 'syz.3.4432': attribute type 7 has an invalid length. [ 636.844183][T21236] netlink: 'syz.3.4432': attribute type 8 has an invalid length. [ 636.892675][T21227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.908336][T21227] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 636.939845][T21227] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 636.973512][T21233] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 637.009453][T21233] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 637.162644][ T8117] IPVS: starting estimator thread 0... [ 637.232801][T21258] netlink: 'syz.1.4438': attribute type 6 has an invalid length. [ 637.254543][T21255] IPVS: using max 32 ests per chain, 76800 per kthread [ 637.419051][T21270] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4440'. [ 637.492925][T21268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4441'. [ 637.684164][T21279] bond4: invalid ARP target 0.0.0.0 specified for addition [ 637.695828][T21279] bond4: option arp_ip_target: invalid value (0) [ 637.719182][T21279] bond4 (unregistering): Released all slaves [ 637.787399][T21292] gretap2: entered promiscuous mode [ 637.887886][T21301] netlink: 'syz.0.4448': attribute type 1 has an invalid length. [ 638.124912][T21316] gretap0: entered promiscuous mode [ 638.143781][T21316] gretap0: left promiscuous mode [ 638.391199][T21327] lo: entered allmulticast mode [ 638.408238][T21327] lo: left allmulticast mode [ 639.356291][T21386] syzkaller0: entered promiscuous mode [ 639.369364][T21386] syzkaller0: entered allmulticast mode [ 639.404956][T21384] xt_CT: No such helper "pptp" [ 639.432200][T21390] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 639.688910][T21404] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 640.391166][T21436] sctp: [Deprecated]: syz.4.4486 (pid 21436) Use of int in maxseg socket option. [ 640.391166][T21436] Use struct sctp_assoc_value instead [ 640.782441][T21460] set match dimension is over the limit! [ 640.894981][T21466] syzkaller0: entered promiscuous mode [ 640.900602][T21466] syzkaller0: entered allmulticast mode [ 640.978358][T21477] __nla_validate_parse: 13 callbacks suppressed [ 640.978380][T21477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4500'. [ 640.992708][T21466] tipc: Enabled bearer , priority 0 [ 641.014208][T21465] tipc: Resetting bearer [ 641.056581][T21465] tipc: Disabling bearer [ 641.088264][T21477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4500'. [ 641.207302][T21483] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4502'. [ 641.227014][T21485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.291260][T21485] bond7: Removing last ns target with arp_interval on [ 641.478247][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4505'. [ 641.729721][T21508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.893988][T21527] syzkaller0: entered promiscuous mode [ 641.908987][T21527] syzkaller0: entered allmulticast mode [ 641.987997][T21539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4516'. [ 642.014054][T21538] vlan3: entered promiscuous mode [ 642.019666][T21538] hsr_slave_1: entered promiscuous mode [ 642.026735][T21538] vlan3: entered allmulticast mode [ 642.032101][T21538] hsr_slave_1: entered allmulticast mode [ 642.298959][T21550] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 642.506821][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4524'. [ 642.518321][T21563] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4524'. [ 642.555181][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4522'. [ 642.676459][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4527'. [ 643.870942][T21633] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 643.958101][T21635] tipc: Enabled bearer , priority 0 [ 643.970081][T21635] syzkaller0: entered promiscuous mode [ 643.976785][T21635] syzkaller0: entered allmulticast mode [ 643.995766][T21635] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 644.050533][T21635] tipc: Resetting bearer [ 644.085882][T21634] tipc: Resetting bearer [ 644.127669][T21634] tipc: Disabling bearer [ 644.545952][T21668] openvswitch: netlink: nsh attr 0 has unexpected len 128 expected 0 [ 644.574830][T21668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.365525][T21697] netlink: 'syz.1.4566': attribute type 10 has an invalid length. [ 645.373602][T21697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4566'. [ 645.459237][T21696] bond5: (slave gre0): Device is not bonding slave [ 645.500837][T21696] bond5: option active_slave: invalid value (gre0) [ 645.513865][T21696] bond5 (unregistering): Released all slaves [ 645.549328][T21697] dummy0: entered promiscuous mode [ 645.559033][T21697] bridge0: port 1(dummy0) entered blocking state [ 645.566031][T21697] bridge0: port 1(dummy0) entered disabled state [ 645.572755][T21697] dummy0: entered allmulticast mode [ 645.585308][T21707] netlink: 'syz.0.4570': attribute type 1 has an invalid length. [ 645.632565][T21707] bridge0: port 3(batadv1) entered blocking state [ 645.649568][T21707] bridge0: port 3(batadv1) entered disabled state [ 645.664638][T21707] batadv1: entered allmulticast mode [ 645.676861][T21707] batadv1: entered promiscuous mode [ 646.044027][T21729] can: request_module (can-proto-4) failed. [ 646.045790][T21737] vlan5: entered allmulticast mode [ 646.075065][T21737] bridge_slave_0: entered allmulticast mode [ 646.124433][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 646.133732][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 646.173937][T21741] __nla_validate_parse: 4 callbacks suppressed [ 646.173958][T21741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4582'. [ 646.536619][T21764] nbd: must specify at least one socket [ 646.549368][T21764] tunl0: entered promiscuous mode [ 646.555150][T21764] netlink: 'syz.0.4589': attribute type 3 has an invalid length. [ 646.562924][T21764] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4589'. [ 646.595399][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4591'. [ 646.629832][T21771] netlink: 'syz.1.4592': attribute type 1 has an invalid length. [ 646.644671][T21771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4592'. [ 646.659624][T21766] bond5: invalid ARP target 0.0.0.0 specified for addition [ 646.671456][T21766] bond5: option arp_ip_target: invalid value (0) [ 646.687501][T21766] bond5 (unregistering): Released all slaves [ 646.969594][T21784] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 647.070847][T21793] tipc: Enabling of bearer rejected, already enabled [ 647.166266][T21805] syzkaller1: entered promiscuous mode [ 647.182175][T21805] syzkaller1: entered allmulticast mode [ 647.271390][T21795] tipc: Enabling of bearer rejected, failed to enable media [ 647.544013][T21833] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4605'. [ 647.590453][T21837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4606'. [ 647.600245][T21837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4606'. [ 647.612021][T21837] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 647.620431][T21837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.793065][T21847] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 647.799623][T21847] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 647.806185][T21851] netlink: 'syz.3.4611': attribute type 2 has an invalid length. [ 647.814864][T21851] netlink: 'syz.3.4611': attribute type 1 has an invalid length. [ 647.823557][T21849] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4608'. [ 647.873920][T21853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4612'. [ 647.898884][T21854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 648.103520][T21872] netlink: 'syz.1.4618': attribute type 1 has an invalid length. [ 648.209693][T21886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4621'. [ 649.211089][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.245433][T21947] netlink: 'syz.0.4622': attribute type 10 has an invalid length. [ 649.256583][T21938] syzkaller1: entered promiscuous mode [ 649.263367][T21938] syzkaller1: entered allmulticast mode [ 649.279423][T21947] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 649.299016][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.345672][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.382259][T21950] : entered promiscuous mode [ 649.401688][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.418787][T21950] nftables ruleset with unbound chain [ 649.430051][T21952] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 649.560259][T21940] net_ratelimit: 13 callbacks suppressed [ 649.560281][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.599878][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.632400][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.651796][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.742011][T21956] bond5 (unregistering): Released all slaves [ 649.744130][T21964] openvswitch: netlink: IP tunnel dst address not specified [ 649.783947][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.811854][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.878887][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.920626][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 649.949055][T21940] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 650.152947][T21982] x_tables: duplicate underflow at hook 1 [ 650.225264][T21983] nbd: must specify a device to reconfigure [ 650.238543][T21988] netlink: 'syz.4.4644': attribute type 8 has an invalid length. [ 650.320533][T21997] netlink: 'syz.4.4644': attribute type 1 has an invalid length. [ 651.101354][T22042] delete_channel: no stack [ 651.106266][T22042] delete_channel: no stack [ 651.181155][T22048] ipt_ECN: cannot use operation on non-tcp rule [ 651.515386][T22066] __nla_validate_parse: 12 callbacks suppressed [ 651.515409][T22066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4662'. [ 651.978353][T22094] ip6gre0: Master is either lo or non-ether device [ 651.989730][T22094] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4668'. [ 652.310146][T22112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 652.328292][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4675'. [ 652.378213][T22114] netlink: 'syz.2.4676': attribute type 1 has an invalid length. [ 652.396345][T22114] netlink: 'syz.2.4676': attribute type 2 has an invalid length. [ 652.528717][T22124] netlink: 'syz.4.4678': attribute type 1 has an invalid length. [ 652.620019][T22124] bond3: entered promiscuous mode [ 652.654880][T22124] bond3: entered allmulticast mode [ 652.672234][T22124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.728015][T22132] netlink: 'syz.1.4682': attribute type 16 has an invalid length. [ 652.736243][T22132] netlink: 'syz.1.4682': attribute type 3 has an invalid length. [ 652.745436][T22132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4682'. [ 652.763022][T22129] macvlan0: entered promiscuous mode [ 652.784549][T22129] macvlan0: entered allmulticast mode [ 652.812586][T22129] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 652.918790][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 652.947464][T22142] gretap2: entered promiscuous mode [ 653.141631][T22159] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4688'. [ 653.164807][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4688'. [ 653.180257][T22159] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4688'. [ 653.182081][T22160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4690'. [ 653.204949][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4688'. [ 653.247002][T22160] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 653.743680][T22197] netlink: 'syz.3.4702': attribute type 13 has an invalid length. [ 653.782954][T22197] batadv0: left promiscuous mode [ 653.795198][T22197] batadv0: left allmulticast mode [ 653.883664][T22197] gretap1: left allmulticast mode [ 653.896364][T22197] geneve2: left promiscuous mode [ 653.901341][T22197] geneve2: left allmulticast mode [ 653.909567][T22197] geneve3: left promiscuous mode [ 653.915709][T22197] geneve3: left allmulticast mode [ 653.927292][T22197] veth5: left promiscuous mode [ 653.980571][T22203] syzkaller0: entered promiscuous mode [ 653.986405][T22203] syzkaller0: entered allmulticast mode [ 655.077099][T22235] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 655.093517][T22235] netlink: 'syz.1.4715': attribute type 4 has an invalid length. [ 658.838692][T22288] tipc: Enabling of bearer rejected, already enabled [ 659.045090][T22300] __nla_validate_parse: 8 callbacks suppressed [ 659.045113][T22300] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4733'. [ 659.120445][T22303] vlan0: entered promiscuous mode [ 659.126028][T22303] vlan0: entered allmulticast mode [ 659.131851][T22303] veth0_vlan: entered allmulticast mode [ 659.149277][T22310] net_ratelimit: 11 callbacks suppressed [ 659.149299][T22310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 659.204819][T22311] sctp: [Deprecated]: syz.4.4735 (pid 22311) Use of int in maxseg socket option. [ 659.204819][T22311] Use struct sctp_assoc_value instead [ 659.454824][T22323] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 659.472889][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4740'. [ 659.580562][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4742'. [ 659.838960][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 659.896474][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4747'. [ 659.938522][T22357] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4747'. [ 659.982069][T22357] netlink: 'syz.0.4747': attribute type 2 has an invalid length. [ 660.022730][T22346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4747'. [ 660.179448][T22366] openvswitch: netlink: Missing key (keys=40, expected=80) [ 660.224877][T22366] netlink: 'syz.1.4750': attribute type 23 has an invalid length. [ 660.358946][T22374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4757'. [ 660.430663][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4754'. [ 660.594140][T22391] tipc: Enabling of bearer rejected, already enabled [ 660.607367][T22391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4760'. [ 660.805457][T22402] netlink: 'syz.4.4764': attribute type 12 has an invalid length. [ 660.823379][T22402] netlink: 'syz.4.4764': attribute type 29 has an invalid length. [ 660.831893][T22402] netlink: 'syz.4.4764': attribute type 2 has an invalid length. [ 660.840340][T22402] netlink: 'syz.4.4764': attribute type 3 has an invalid length. [ 661.127937][T22420] ------------[ cut here ]------------ [ 661.133933][T22420] WARNING: CPU: 1 PID: 22420 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 661.142645][T22420] Modules linked in: [ 661.146902][T22420] CPU: 1 UID: 0 PID: 22420 Comm: syz.2.4770 Not tainted syzkaller #0 PREEMPT(full) [ 661.156358][T22420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.166497][T22420] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 661.171512][T22420] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 661.191445][T22420] RSP: 0018:ffffc9000ccc7180 EFLAGS: 00010286 [ 661.197613][T22420] RAX: bae34017b4ffdc00 RBX: ffff88804cbeedc0 RCX: bae34017b4ffdc00 [ 661.205835][T22420] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 661.213841][T22420] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 661.221890][T22420] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 661.230013][T22420] R13: dffffc0000000000 R14: ffff88804cbeedc0 R15: ffff88801b7f2580 [ 661.238066][T22420] FS: 00007efc4d42b6c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 661.247081][T22420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.253788][T22420] CR2: 0000001b2eb63fff CR3: 00000000780fc000 CR4: 00000000003526f0 [ 661.260146][ T1153] nci: nci_rsp_packet: unknown rsp opcode 0x2e [ 661.261845][T22420] Call Trace: [ 661.271502][T22420] [ 661.274514][T22420] ip_push_pending_frames+0xbe/0x150 [ 661.279845][T22420] __icmp_send+0xfc3/0x1320 [ 661.284536][T22420] ? __icmp_send+0x1b9/0x1320 [ 661.289258][T22420] ? __pfx___icmp_send+0x10/0x10 [ 661.294334][T22420] ? ip_route_input_noref+0x98/0x250 [ 661.299669][T22420] ? __pfx_ip_route_input_noref+0x10/0x10 [ 661.305488][T22420] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 661.310728][T22420] ip_options_compile+0x80/0xb0 [ 661.315699][T22420] ip_rcv_finish_core+0xaa2/0x1c00 [ 661.320878][T22420] ip_rcv_finish+0x14c/0x2f0 [ 661.321499][T22428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.325649][T22420] NF_HOOK+0x30c/0x3a0 [ 661.325680][T22420] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.325702][T22420] ? NF_HOOK+0x9a/0x3a0 [ 661.325721][T22420] ? __pfx_NF_HOOK+0x10/0x10 [ 661.325741][T22420] ? ip_rcv_core+0x7f7/0xd00 [ 661.325772][T22420] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.325805][T22420] ? __pfx_ip_rcv+0x10/0x10 [ 661.325823][T22420] __netif_receive_skb+0x143/0x380 [ 661.325858][T22420] ? netif_receive_skb+0x115/0x790 [ 661.325884][T22420] netif_receive_skb+0x1cb/0x790 [ 661.325909][T22420] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 661.325934][T22420] ? __pfx_netif_receive_skb+0x10/0x10 [ 661.325966][T22420] ? tun_rx_batched+0x160/0x730 [ 661.325994][T22420] tun_rx_batched+0x1b9/0x730 [ 661.326017][T22420] ? __lock_acquire+0xab9/0xd20 [ 661.326043][T22420] ? __pfx_tun_rx_batched+0x10/0x10 [ 661.326071][T22420] ? tun_get_user+0x272f/0x3e90 [ 661.326112][T22420] tun_get_user+0x2b65/0x3e90 [ 661.326145][T22420] ? tun_get_user+0x6f6/0x3e90 [ 661.326171][T22420] ? tun_get_user+0x272f/0x3e90 [ 661.326200][T22420] ? aa_file_perm+0x44d/0x1550 [ 661.326219][T22420] ? __pfx_tun_get_user+0x10/0x10 [ 661.326256][T22420] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 661.326283][T22420] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 661.454988][T22420] ? ref_tracker_alloc+0x318/0x460 [ 661.460120][T22420] ? __lock_acquire+0xab9/0xd20 [ 661.465108][T22420] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 661.470676][T22420] ? tun_get+0x1c/0x2f0 [ 661.475057][T22420] ? tun_get+0x1c/0x2f0 [ 661.479223][T22420] ? tun_get+0x1c/0x2f0 [ 661.483571][T22420] tun_chr_write_iter+0x113/0x200 [ 661.488640][T22420] vfs_write+0x5c9/0xb30 [ 661.492900][T22420] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 661.498470][T22420] ? __pfx_vfs_write+0x10/0x10 [ 661.503337][T22420] ? __fget_files+0x2a/0x420 [ 661.507955][T22420] ksys_write+0x145/0x250 [ 661.512294][T22420] ? __pfx_ksys_write+0x10/0x10 [ 661.517197][T22420] ? do_syscall_64+0xbe/0xfa0 [ 661.521991][T22420] do_syscall_64+0xfa/0xfa0 [ 661.526533][T22420] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.531741][T22420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.537950][T22420] ? clear_bhb_loop+0x60/0xb0 [ 661.542732][T22420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.548665][T22420] RIP: 0033:0x7efc4c58e17f [ 661.553081][T22420] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 661.572731][T22420] RSP: 002b:00007efc4d42b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 661.581196][T22420] RAX: ffffffffffffffda RBX: 00007efc4c7e5fa0 RCX: 00007efc4c58e17f [ 661.589280][T22420] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 661.597385][T22420] RBP: 00007efc4c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.605538][T22420] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 661.613602][T22420] R13: 00007efc4c7e6038 R14: 00007efc4c7e5fa0 R15: 00007ffc0f34c398 [ 661.621613][T22420] [ 661.624649][T22420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 661.631926][T22420] CPU: 1 UID: 0 PID: 22420 Comm: syz.2.4770 Not tainted syzkaller #0 PREEMPT(full) [ 661.641298][T22420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.651358][T22420] Call Trace: [ 661.654725][T22420] [ 661.657662][T22420] dump_stack_lvl+0x99/0x250 [ 661.662252][T22420] ? __asan_memcpy+0x40/0x70 [ 661.666840][T22420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.672034][T22420] ? __pfx__printk+0x10/0x10 [ 661.676627][T22420] vpanic+0x237/0x6d0 [ 661.680617][T22420] ? __pfx_vpanic+0x10/0x10 [ 661.685148][T22420] panic+0xb9/0xc0 [ 661.688906][T22420] ? __pfx_panic+0x10/0x10 [ 661.693388][T22420] __warn+0x31b/0x4b0 [ 661.697481][T22420] ? ip_rt_bug+0x2c/0x110 [ 661.701875][T22420] ? ip_rt_bug+0x2c/0x110 [ 661.706230][T22420] report_bug+0x2be/0x4f0 [ 661.710561][T22420] ? ip_rt_bug+0x2c/0x110 [ 661.714894][T22420] ? ip_rt_bug+0x2c/0x110 [ 661.719235][T22420] ? ip_rt_bug+0x2e/0x110 [ 661.723716][T22420] handle_bug+0x84/0x160 [ 661.728099][T22420] exc_invalid_op+0x1a/0x50 [ 661.732612][T22420] asm_exc_invalid_op+0x1a/0x20 [ 661.737528][T22420] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 661.742569][T22420] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 661.762355][T22420] RSP: 0018:ffffc9000ccc7180 EFLAGS: 00010286 [ 661.768530][T22420] RAX: bae34017b4ffdc00 RBX: ffff88804cbeedc0 RCX: bae34017b4ffdc00 [ 661.776722][T22420] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 661.784827][T22420] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 661.792846][T22420] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 661.800835][T22420] R13: dffffc0000000000 R14: ffff88804cbeedc0 R15: ffff88801b7f2580 [ 661.808835][T22420] ip_push_pending_frames+0xbe/0x150 [ 661.814229][T22420] __icmp_send+0xfc3/0x1320 [ 661.818800][T22420] ? __icmp_send+0x1b9/0x1320 [ 661.823499][T22420] ? __pfx___icmp_send+0x10/0x10 [ 661.828458][T22420] ? ip_route_input_noref+0x98/0x250 [ 661.833762][T22420] ? __pfx_ip_route_input_noref+0x10/0x10 [ 661.839494][T22420] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 661.844735][T22420] ip_options_compile+0x80/0xb0 [ 661.849639][T22420] ip_rcv_finish_core+0xaa2/0x1c00 [ 661.854797][T22420] ip_rcv_finish+0x14c/0x2f0 [ 661.859564][T22420] NF_HOOK+0x30c/0x3a0 [ 661.863750][T22420] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.868887][T22420] ? NF_HOOK+0x9a/0x3a0 [ 661.873075][T22420] ? __pfx_NF_HOOK+0x10/0x10 [ 661.877666][T22420] ? ip_rcv_core+0x7f7/0xd00 [ 661.882279][T22420] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.887512][T22420] ? __pfx_ip_rcv+0x10/0x10 [ 661.892034][T22420] __netif_receive_skb+0x143/0x380 [ 661.897156][T22420] ? netif_receive_skb+0x115/0x790 [ 661.902280][T22420] netif_receive_skb+0x1cb/0x790 [ 661.907314][T22420] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 661.913137][T22420] ? __pfx_netif_receive_skb+0x10/0x10 [ 661.918749][T22420] ? tun_rx_batched+0x160/0x730 [ 661.923801][T22420] tun_rx_batched+0x1b9/0x730 [ 661.928523][T22420] ? __lock_acquire+0xab9/0xd20 [ 661.933408][T22420] ? __pfx_tun_rx_batched+0x10/0x10 [ 661.938681][T22420] ? tun_get_user+0x272f/0x3e90 [ 661.943566][T22420] tun_get_user+0x2b65/0x3e90 [ 661.948259][T22420] ? tun_get_user+0x6f6/0x3e90 [ 661.953044][T22420] ? tun_get_user+0x272f/0x3e90 [ 661.958011][T22420] ? aa_file_perm+0x44d/0x1550 [ 661.962876][T22420] ? __pfx_tun_get_user+0x10/0x10 [ 661.967908][T22420] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 661.973800][T22420] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 661.980138][T22420] ? ref_tracker_alloc+0x318/0x460 [ 661.985255][T22420] ? __lock_acquire+0xab9/0xd20 [ 661.990131][T22420] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 661.995785][T22420] ? tun_get+0x1c/0x2f0 [ 662.000157][T22420] ? tun_get+0x1c/0x2f0 [ 662.004342][T22420] ? tun_get+0x1c/0x2f0 [ 662.008605][T22420] tun_chr_write_iter+0x113/0x200 [ 662.013641][T22420] vfs_write+0x5c9/0xb30 [ 662.018049][T22420] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 662.023699][T22420] ? __pfx_vfs_write+0x10/0x10 [ 662.028480][T22420] ? __fget_files+0x2a/0x420 [ 662.033087][T22420] ksys_write+0x145/0x250 [ 662.037426][T22420] ? __pfx_ksys_write+0x10/0x10 [ 662.042284][T22420] ? do_syscall_64+0xbe/0xfa0 [ 662.047082][T22420] do_syscall_64+0xfa/0xfa0 [ 662.051584][T22420] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.056784][T22420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.062858][T22420] ? clear_bhb_loop+0x60/0xb0 [ 662.067530][T22420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.073426][T22420] RIP: 0033:0x7efc4c58e17f [ 662.077872][T22420] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 662.097528][T22420] RSP: 002b:00007efc4d42b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 662.105944][T22420] RAX: ffffffffffffffda RBX: 00007efc4c7e5fa0 RCX: 00007efc4c58e17f [ 662.113911][T22420] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 662.121878][T22420] RBP: 00007efc4c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 662.129848][T22420] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 662.137822][T22420] R13: 00007efc4c7e6038 R14: 00007efc4c7e5fa0 R15: 00007ffc0f34c398 [ 662.145836][T22420] [ 662.149208][T22420] Kernel Offset: disabled [ 662.153531][T22420] Rebooting in 86400 seconds..