last executing test programs: 2.448276476s ago: executing program 3 (id=3660): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000101}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r6, 0x4) (async) close(0x4) (async, rerun: 64) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0xb}}}, 0x24}}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r9, 0x25, 0x0, @void}, 0x10) 2.234265471s ago: executing program 3 (id=3665): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x26, 0x2a, [@challenge={0x10, 0x1, 0xd8}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x5, 0x6, @device_a, 0x8, 0x80000000, 0x59}}, @tim={0x5, 0x3, {0x8, 0xef, 0xff}}, @challenge={0x10, 0x1, 0x30}]}, @NL80211_ATTR_IE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES64=r2], 0x70}}, 0x20000080) 1.815336452s ago: executing program 1 (id=3673): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) connect$vsock_stream(r0, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) sendmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000040)=@rc={0x1f, @none, 0x2c}, 0x80, &(0x7f0000001880)=[{&(0x7f00000000c0)="464d71f74268f587efdaf5d368137a082c1343200d29fdeabef5769edecc1b9195001de2e3fba6b378998c96576eab7eac785c806a414bc8e8bba2c74c087fa70e389c30f41eb6c875d874183b46f33fd89e72ca03868531b4be0909bb444785b5b45ad0406f3b695a77f7db6be480d9f5bd38a40b0f02f9944f1f8eeeaf7a63f4470948a21912e3b2455296076e5c106a131822a40b7cf793f92881e362e0ebdf3c342a1086a0b631d86acd7e621c19f56ceb7c213e5892b488f8ca1a12cdf0ee75222b5d2c3a8354c5473e1fa5c783f24148b27a117954fc820aa9b75535f65c07a279eef0dffe5f2d", 0xea}, {&(0x7f00000001c0)="f79898302ff972d9c963253f0d684f3ae64927e54e", 0x15}, {&(0x7f0000000200)="7f36b401aa744b8b540563fe901e9c4de2ba68e1c6d5e34b1b0631d660e9286d575909e7fdb30e1a1ffa8ec7df8062100a9e18de941ebc88446a70f702d5efcf5f35dc215233f555729330ef59f9a5e2ef932ab24c57d8d97511f511fe3d18ab544c4937f7b48a7b0707d4dbc3ac50484782e92e34ed6e28aca1fd73b347e0305a5d1cad81223b5b631af1a62e944738d0635c99050a4fbd957eeb8559b7d7e95e44fe725d1806ee2a3d4563558c27566cfc40e0ee7677925fe38ed28e49f935ddba4c1c9c817e5366bb312b4411afd800", 0xd1}, {&(0x7f0000000300)="fecd4e598d39e58685285a45bf4a8f2e392d5f691d0463a2b25ec52e83ed243ffe794f81c0aa298317b61bf97389621337a637def64a32a7b49f9fc772427ad7f42e3a608ca792c58c8a40464b0bf1c2402c42720f68857ae4eb477dd1132e49747ae13d451e2cae96abb9c2c39e5f85fe914de8266b5c19ed7334f3f91aabe184b5dbf1105cda7e60503c0dd8768304a820bfec537d3d08551e4b41a83f0b3ead95935696989dd5f8a5904beefafa82bacb45ddd42a4e76d033b2227b2345d750496e44db0a292a435f8865ef98d8340e1d4595b0d4568af723ba5d6e90f9bc7c67d44a", 0xe4}, {&(0x7f0000000400)="fabd25cd9792d657b8d8cae15b1339d94c0b32540837d64e9c3b2a702ecdcaaf78358cb4c8eae3ab463694d4bcb69da4f99ea8cc65c2b7de8956ba10c24a08e4a0d6dd6f4bcf3a1efcaacbf7b29dd99f956f93d75951053eeb0b02c149ace639a8cae0fccc01f6973f1f334de027109ad30d3f0552bfa00873cceae397a706c58d1c5ed9385cd0735b1dce90d9d5dd4e5ca808858326e9dd6ded4ecc33324e51aa0ee244b42aae1b5655cf4030f7735b6a9cfc9e1ec8405849da8b6cdbf285549ef27d8ba29bb22708f2bbb0b251255f7c555ab69be907d88fa177538a474522504bbf0311585845970a469fe1d70bfa8223e8", 0xf3}, {&(0x7f0000000500)="1a4a258be7f6bba6a6e554c70fce0faab8c7f07006e2db520a8bb6a60d6d14197b048ca646f38efd11ac8c93eb63af655384d0bf7786d349be70de0c7cc5842b467db05186516a3aa123fdb076912ba9c02a3ba25da93a00906b392cfd33db48101a0d72225e57962cac2edf68c8b5149e22db6c8a552705dd127db979b8fcc502db950d6d8cda1a0d961ffc6784c59d4fce41a02c53009c0ba877ebe18d5d25801071d56d4f5083ff616612c301f80d89fd1414242dc27e64f5064aadaab7f6a4851084902fcdd88939e7f5dd43e92aba0398761cfd7b4378ff388a3afa5cb5c9fb9b83d3f8f5d07dd3f5280f1d7a39498cd721ee6079f5", 0xf8}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000600)="4180e0866adfafd60cd2ac57c33997bba383d886e6bf0b885c6c7b2c2dc290a1d883a17b7ed533e67123052cc9067942fda07260b72521c8365816e5c5470760f0321229de15f3f45c94bf4c5595886cf3df4fe35b25a34d10578c3f3569dca4206418602b93efbaa099562f585cb0d0d72d27c53cab726a0f7153f637728a2e4e8a313bdccd2ba1012b0c596fef3f1ab143f7c1c1c440863426b1cff5c3f9ace8e8bdc16b45bca9ea0bedcc11670e355f2e69220fd142007f9f47881cd620c62a7941de2173a1f8b0028f445904728b1a92c595", 0xd4}, {&(0x7f0000000700)="de84e54174ddfdc53c1eb66dfec206457dd4a16bc9d266a63373c5b15bb819aeb219031ef5aba006b6fedef9da0394cd52786d6eb028f0e308e5e9bdff4e7f847d860a82facede51980e78f9e31a03aeb36dfcfc538053e1f5b7", 0x5a}, {&(0x7f0000001800)="86f08838d74e054dfc677c6f08b0d4006c3d879c1028aaaea63c3486b8485fec41de26a39711e7a4b10b1b12a6f8927c53a46f347914d1a426c3c47a81063b4ed2a8c6dddfcf05a75ae6aecec59eadf3d46c7561ec53841b6d7214d58c872ac6d2fe7bb93a92e97f58ba207bc451029d", 0x70}], 0xa, &(0x7f0000001940)=[{0x20, 0x1, 0x1, "c38fc1ae5973bc0f3e9dc47a04cc61"}, {0x18, 0x6, 0x1, ' '}, {0x30, 0x10b, 0x15578516, "7721a7ea7cac528a05ebfc79c079baa2cc2754599b2c45e9b5d4ff624e"}, {0xa0, 0x10f, 0x5, "ef71b5ad943daf02371d8af5ce54be927659a62a29550ee987e560572bcadd8e6323e90c133fdea9ba3cc8b6521759b82c21ea32a12e2443cca28109857d8baff51dec833e11e6dfbe3ec9bf316bfbb85b658af3dcee4e7315625e6211760799cfc9ccf1b432754469abde49c6be957f7e793b5e2ccca1f540ff67b7659cfd2381b923058f3801e5fbceaed428ab6f38"}], 0x108}}, {{&(0x7f0000001a80)=@rc={0x1f, @any, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001b00)="b108dbc6f2d84ef9de3e14e127145b14355ec3ed8bbc625ab9a9dfe52ed07b2824bb549e131456666df6202ad5a38ed51076a00b4798466fad2273aab536c44c077b0393529732953a8c6660c19bc0a3144bca2b82ade62a8a988f21014284ea0754fa90a84c5960ed2081ffdb7951b8b2ff42f8ae14ddf78a54f4aabcf9cd007197cc4723da589d2de0e9d2e3455ca324fca343eb97241f1e98398df371ce", 0x9f}, {&(0x7f0000001bc0)="2730af76d08f0d9f08273df9433c0bae369b35571504d469dfcf75304af5925efa5746555cbd243d53416bf75fc5981d49516f3b3df83e388a30e2d5378f62997dea129ac89d48c05249ac1d67779308a9ac3e66870633f8362b44305c43386ba2a09245d364b1df8797fb8b4e678cf3e702698ae9359e904a2ff3cd0cee908802332105d034fedf6da460afd6b676f7641b7cf3e35c0dc8dccff99a413cc8e5e2156d33eccb8a1b95888042beee12d9797e4d8d2a1c15924687dc85edc2415d8976364f265ba093223f37100614abb5ae6e4db88af72568254d6189c48aad4bdcccccc9ccc9f8abdbdce4d6c56d", 0xee}], 0x2, &(0x7f0000001cc0)=[{0x78, 0x335, 0x8001, "52c7eb46ed93291fb7b87c8bee8a7e2397dfaaff46224a8c8932adc15ccbd9e5594c215e5eae2334c3c04e388923ad553ee3a284947e0c4886c3e8822a5c904de4f83507efdc483b8d63b14dcb1e1836de9540cacad8c637cc5c95808be7be24454545fd"}, {0xa0, 0xb40d5c686e75a79c, 0x7ff, "e1b9e8c70f42980d02251d3158e59c35dfcf53e07cd910ee894c8b67cce62fffc2fa10336696d3415ed258709afcf3537dd9df2abc9c047a68d240a1e1db17c127362415ee90688d88e170f7eea06c579b86085a29746e9b379a2220054b153298a9e0058078510fb3382acfff54c283a41ef8ed4692fbf0f05fd5004e572464133879ec6b569013a822cce8396d"}, {0x80, 0x104, 0x3, "0f33ac32733b7acae98edc607b67eed6ae09be0c771b97d6d78385002bff219c9b453c31f0b90ae0b7dce3a116091aa7f13434571b80acfe06f26cc48c5678c468ebabbf8bc515f4b56d03906e95e24e16014452d97d7b95e9c6eb3548f207d10a73d80bcb1bc13ed32819ae25cc2d98"}], 0x198}}], 0x2, 0x8001) 1.533065528s ago: executing program 1 (id=3675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x10, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280100006800010020000000000000000a0000003c370900000000000000060007000800", @ANYRES32=r10, @ANYBLOB], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) 1.531928693s ago: executing program 2 (id=3676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) (async) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) (async) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 1.531538616s ago: executing program 4 (id=3677): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg1\x00', {0x4}, 0x7}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x2b, 0x6, 0xd, 0x29, @loopback, @mcast2, 0x1, 0x0, 0x7, 0x200}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000880)=@migrate={0x26c, 0x21, 0x20, 0x70bd27, 0x25dfdbfd, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x179d7186545d9522, 0x0, 0x1, r1, r2}, 0x6e6bbc, 0x2}, [@coaddr={0x14, 0xe, @in6=@private1}, @algo_crypt={0xcc, 0x2, {{'ctr-twofish-3way\x00'}, 0x420, "3de6f5c3cb07b155e87d01767cba886243a147f99c9e5f63acb958fc19df9aaf72726eb81c4b70b47ee45442e3d51eae5ce7a77ccf0c45ee3637ceca238313f47abd1a84a768a54b4ac17cceb674d6b48b0f384f0ad178642c454bf2cc9186ca7092dcb8c2e96259dea47b8c7f77d32536ddaf6e82952c2a1f3ce532926d9d9b6b81eb93"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x81}, @migrate={0x134, 0x11, [{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, @in=@broadcast, 0x9c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, @in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0xb, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x2, 0x0, 0x0, 0xa, 0x2}]}]}, 0x26c}}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) (async) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=r5], 0x4c}}, 0x4000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a00001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000040000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c0400000200000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3500000003060500000000000000000007c9e81a790000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c008}, 0x4000880) 1.44847613s ago: executing program 2 (id=3678): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000040), 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xad, "4f37796ee6823153e9a0ab16ca1d277284a0f58b862e82a2c8d291208c1b111a9d5054664bd298917ed53e2236c46268a0048de37c09e98b19db48d7795d32dbf34a51f3a53848e2acee77a9800481ca9e57039ea6e3a1d24639b6d6c81eff6239555aeb940e0a5fa9ebe421d02bb5f10bcc74101454d07c979bd4ebbd5def7c71e344bf454d4cac944157ae5c72389004b41b56173d2934baaf70c4fdae776a7da214b53fae5e2d812c8c928a"}, &(0x7f0000000140)=0xb5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f00000001c0)) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @none}, 0x8) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000b40)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9f}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.438540962s ago: executing program 4 (id=3679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xc0, 0x4a, &(0x7f0000000000)="5baaae0f3d141ef6f1a90ed26f6a4ed00bde6074f41708797c8869d7666a966dda5f098905c72683d80c42575265e8cb8b83e5240fd4e2187e25dcc5f27308b450a435082ebe8f9776c3108adb484de7d52ed86f97ada86c3824cbaa9e6cf9794ecac212726f4f90754d350f2d95083305d4899089246457de337c4d5089bd91bece342d49621693db54f81a45112cd99db8f7687036e72eda68a94b01e4302b224d827c224892d3935fb2815b58a98229e239aa23d9766ba5c94fa9d8f3e4de", &(0x7f0000000200)=""/74, 0x7, 0x0, 0xd9, 0xe1, &(0x7f00000003c0)="12541209ed895cd4b558d407f228d5c25e2265828a74ceb6e8dde3b57b156f009aae30590af4d51ed76b1f41e9d6af453664cf0eb6034913ca316ccf676c24c3e82501550bf9c05e5c13d9a25680909ad0567d5f51c36fc46164197d087721e3f7ac2372a45dd9911b8323a1cce35b3d7ad895ed7ddbdaffe2cca9263fae67bfed6dff575af6c693b1dce58f544e417aebc4dde59cb33416d73e66c58a25be43d2fdd29ea5d96401531cf104aac5c242f0770d65fb2427f93fc9fbb223553437363aeb76ca5a99ab9a670a45732432aba2ad58b014ea76affa", &(0x7f00000004c0)="3aa4cb0571052bea7a755269a32e03c2b4c5975bf917c26276581d745165e8f89d310e496d96d360763d4aa07f48c7f670f348dafed5a101bd1e28822cab6b4af819ce7512b5034fa8aa6fea01235dfb92c56c87df4ce0b3f92315177e7d0c4dca93a0a737698c8cb3a5517bca9aa29c7869770b70f23e7d3f80793203033fae0e53efc9009aad0d969393364240a80d75b36add1ac6e82f85717cd58abb04178ef92f1e6a351792214151f1a25d5f27cc568b1adb45afbc18b5a175a2eff1038646f74f4c5b2e2cb5a791958acc566f3e07ae271a3868680b80396d8b58e41888", 0x1, 0x0, 0xdb3}, 0x50) 1.29618691s ago: executing program 1 (id=3680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) 1.294915971s ago: executing program 2 (id=3681): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x7ff}, 0xe) shutdown(r1, 0x1) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.278962392s ago: executing program 4 (id=3682): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x1, @null, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @null, 0x7fffffff, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 1.096053894s ago: executing program 4 (id=3684): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000700)={r4}, &(0x7f0000000740)=0x8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) clock_gettime(0x6, &(0x7f0000001980)) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000019c0)={0x0, 0x3, 0x1, [0x0, 0x5, 0x7f, 0x7, 0x401], [0xeb8, 0x1b, 0x8, 0x0, 0x1, 0x4, 0x0, 0x4, 0x9, 0xb39, 0x5, 0x8, 0xad0, 0x26d, 0xf2, 0x9, 0x8001, 0xffffffffffffd49b, 0xffffffffffffe8bf, 0xac75, 0x1, 0x95a8, 0xb, 0x1, 0x6, 0xfffffffffffffeff, 0xa0a8, 0xc00000000, 0x4, 0x7, 0x6, 0x5, 0x3, 0x4, 0x5bc, 0xffffffff, 0x1c2c00000000, 0xffffffffffffe0dd, 0x10001, 0x7, 0x8000, 0x80, 0x0, 0x3, 0xffff, 0x3, 0xffffffffffffff10, 0x6, 0xd00, 0xd1, 0x800, 0x1, 0x6, 0x2, 0x10, 0x81, 0xc1, 0x800, 0x5, 0x0, 0x7ff, 0xffffffffffffffff, 0x2, 0x5, 0x7f, 0x5, 0x6, 0x8001, 0xfffffffffffff819, 0x6, 0x80000001, 0x4, 0x4, 0x4, 0x6f40, 0xb88d, 0x3ff, 0xcb3f, 0xad, 0x96, 0x1, 0x5, 0x9, 0x9, 0x7, 0xe, 0xfffffffffffffffd, 0x0, 0x3, 0xddf, 0x4, 0x0, 0x5, 0xfffffffffffffff9, 0x8, 0x7fffffffffffffff, 0x8, 0x3840000000, 0x7, 0x3, 0x9, 0x0, 0x0, 0x5, 0x7, 0x8000000000000001, 0x9, 0x1, 0x100000000, 0x0, 0x8000000000000000, 0x39, 0x0, 0x3, 0x7, 0x7, 0x9, 0xc7, 0x9, 0x10000, 0x1000]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001e00)={r7, 0xffff, 0x1, [0x0, 0x9, 0x80000001, 0x10001, 0x3ff], [0x2, 0x9, 0x7fffffffffffffff, 0x9, 0xc00000000000, 0x0, 0x0, 0x7, 0x7ff, 0x20000, 0xb539, 0xf, 0x4, 0x6207, 0xde1, 0x8f, 0x0, 0x1, 0x1, 0x1, 0x7, 0x3, 0x1ff, 0x4, 0xc, 0x0, 0x6, 0x3, 0x4100000000000000, 0x2, 0x400, 0xd717, 0x2, 0x6, 0x7, 0x5, 0x1, 0x5, 0x9, 0x8, 0x9bb, 0x9, 0x3ff, 0x8, 0x8b5, 0x7, 0xdd, 0x9d13, 0x6ea9, 0x2, 0x4, 0x0, 0x4, 0xfffffffffffffffe, 0xffffffffffffff30, 0x4, 0x9, 0x1, 0x9, 0x6, 0x7fffffffffffffff, 0x7fff, 0xffffffff, 0x101, 0x9, 0x9, 0x9, 0x8000000000000001, 0x5bc, 0x3, 0xfffffffffffffff8, 0x0, 0xffffffffffffff97, 0xfffffffffffffffa, 0x1, 0x8, 0x100, 0x401, 0x4, 0x9, 0x6, 0x3, 0x2, 0x9, 0x3ff, 0x2, 0x8, 0x9, 0x0, 0x8, 0x2, 0xfff, 0x6, 0x8, 0x2, 0x8, 0xc, 0x1, 0x100, 0x6, 0xc9, 0x5, 0x7, 0x8, 0x908, 0xffffffffffffffff, 0x8, 0x69b, 0xe3, 0x2, 0x2, 0x6, 0x200, 0x80000001, 0xffffffff, 0x7, 0x1, 0xf18, 0x3c534fe7, 0xff]}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001900)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002240)={{r6}, r8, 0xe, @unused=[0x661, 0x3d14, 0x8, 0x4], @name="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"}) recvmmsg(r6, &(0x7f0000001840)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/189, 0xbd}], 0x4, &(0x7f0000000380)=""/115, 0x73}, 0x8}, {{&(0x7f0000000400)=@phonet, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/90, 0x5a}], 0x3}, 0x8}, {{&(0x7f0000001600)=@caif=@rfm, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)=""/253, 0xfd}], 0x1, &(0x7f00000017c0)=""/108, 0x6c}, 0x1f1f}], 0x3, 0x10002, &(0x7f0000001940)) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0x30}, 0x2, 0x3}, 0x20) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) 1.095680441s ago: executing program 1 (id=3685): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x400c090) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000000000000000344f0e1e6c32d929000000000000000000000a"], 0xb8}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x0, 0x40000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x51}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r4) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf8ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x49f00000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9e1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000080)=0xa40, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket(0x2d, 0x2, 0x0) recvmmsg(r11, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r3, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010020, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1}, 0x28) write$tun(r9, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) socket$netlink(0x10, 0x3, 0xb) 859.927807ms ago: executing program 1 (id=3688): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$rose(r2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000140)={r0}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000084ffffffff0000000000020009030000000000000000000006020000000000"], 0x0, 0x3e}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000014c0)=""/185, 0xb9}, {&(0x7f0000001580)=""/105, 0x69}], 0x4, &(0x7f0000001680)=""/25, 0x19}, 0x2000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 851.107466ms ago: executing program 3 (id=3689): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x100000000, 0x209) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x66, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@noop, @timestamp_prespec={0x44, 0x3c, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1, 0x6}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1}, {@empty, 0x8001}]}]}}}}}}}, 0x0) 756.358323ms ago: executing program 3 (id=3691): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x800, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0xc000) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}]}, 0x48}}, 0x0) 734.142945ms ago: executing program 3 (id=3692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r0, &(0x7f0000000080)=@ethernet={0x0, @random}, 0x0, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r8, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x40}}, 0x20) (async) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc0000000000000000000000000000002001d6af0b17c67e19080ef33c2cd0b692000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000002b000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200000000000000000014000e00"/188], 0x104}}, 0x0) 683.595394ms ago: executing program 0 (id=3693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r1, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x1008}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 620.328014ms ago: executing program 3 (id=3694): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) 619.987068ms ago: executing program 0 (id=3695): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000004c0)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) (async) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) 584.067742ms ago: executing program 0 (id=3696): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x245}, 0x1c) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r5, 0x34de5000) connect(r0, &(0x7f0000000100)=@xdp={0x2c, 0x2, r1, 0x3d}, 0x80) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000200)}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000300)="ddb48e215fd52d0eda2ed194fd42edecefca0b45a53f5715e4ba4dd55e49688cc8f13860cf7024e7176cbdaeb6f343e60060d391606df75b0cbcee29d5bb7cf06e0b42592195fd1b7061c17ca5b0d0c4bd3ff73e883efc0c31c2de2b9aab685fd8049b92e40cc8b4e921f208d616c6c499a70d31214abb8e8a7bf6c2821b89f248694d0a2bb2876eb4", &(0x7f0000000180)=""/58, &(0x7f00000003c0)="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", &(0x7f00000004c0)="ee9c770188fb6958db2afdf6777ffe89c47a78e8a8856c861f3d8d42adc2ab072e6aa98b6b62ed836e48ac9e11458834dc6dc5fec2a4ef4692eb3308cff037a5eaf48f676dca886544bbf5f21b7f1ba87fb4776edab10c459c31f196ce34f2c118f0c61c0eb553", 0x3, r8}, 0x38) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200000000240, 0x200000000270, 0x2000000002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 538.691532ms ago: executing program 0 (id=3697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x28c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa100000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20021102}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a80)={@multicast2, @empty, 0x0}, &(0x7f0000000ac0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000b00)={@private2, 0x0}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000500)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000540)="dfaa9cefaaf4b5491c0e46abfcb10bdca7fd92ae36d0867c23994dd60e56cd2b63383e19f079b71b809b9a7f1d094c37c8df75a8e1ba779e718c8aed580c210aaa2db280751e6e23d1448fae0f743ad52b3f718381698547c001debb3e07cfba9334d5dcca667969c7767a17311952196af023a82314731a69ae2e12064409898465c625cc2afcbd159dd0dbff000c12bb3a8cfc0629a4f217b4cf051934ffa3b79819b95503075b1ca2d50e9a99671ef050", 0xb2}, {&(0x7f0000000600)="11f4365b92545c7eacb71f47ff33cf7a282ac297a3e164b7055bcddaacfeda64218e1569ef7b225975ae0e40d83c7b14af2cf46e3462ef166ab7d5de88f27f855c5720183a1f0e7381590e55744305629d1e1b82f908f263f2262eaf33a997fd1c6b4b07b7e1d9443dcaecb207b82e5b250d4063a826f293f46a50424496db98d0f3cae315742bb6d5a50373f867be1db8d0a6bc41fbc4905d53aa9eaf962a6d2a3736658509e6ee16e8a1879093407700a7834f1f87b3e3a63acf661a6ccbd530d85b650bc3e1587c95e22d0deb08298d695ded3d126c2875438e9f65a09c91a497026ffbef1ca04ded", 0xea}, {&(0x7f0000000700)}, {&(0x7f0000000740)="bb3d282ed09c469d23e9e950a956bd66bc4950957a0291080bf0f4c062e2cefccddd7aebaaf7879c265ff4493a5d4e18f7f18bf9f96f9ff488e2c614ad717fc1a9f9c5180d927d911cb07180bcbc2380246f5b7286bf7d2b5f81f7b99c3d61e0547a9d746122fb5c6602327d7ee6c39900b68a19c362163bdf614f6d1dac39f4cb27f95e8cc3c89ddc857e1474b874d7606355341365c8b85f", 0x99}, {&(0x7f0000000800)="ddb3464581f88193d4fff7637bcbb001381a4fdd963c0604bf45d647461032553b9f411f23745344ac310697f9f2909f1a3eca10fe7dcb1d", 0x38}, {&(0x7f0000000840)="09b0d29e07a5345d458c4b59f7008be1eba5b35dc2a2b6ccc2a12bdbe9782b6a784980edbc51e616bb00c86947ffa9fe90db23181c600253801e03fd2a0d8cda4d6ddd7d1e26862023e02611c60f9133ab5b245be4e30b06e36fe7472919bdfecca6b0e45a1060297914b40728c9d56f9f009a9e01a0aa78a8669c1179e713abb291c0670a99751226887f8bfe47945917937d724834", 0x96}, {&(0x7f0000000900)="d58bd52fc8bda0a714854a32b04d60ebc3c24e2efa281a1c97ad3bfb6bf7115b83e190e9d9ae1c3d4beac55651efcd240454d18996027b336f3470a92a5c39a39da110bcb3e27378bd8a2125453d7cecfcb1beff0db1a9c86d74bf65ffd29c5d8a6f7c0b2586754462e6a59757489af01d3f", 0x72}, {&(0x7f0000000980)="8f888b740014e29e80cc2d39572f6e6b2b41b691a826562a60d4859348e81ce53cbcc8cbf41f9d537c5340f2362eee51e59714797caaa9b0a17a5428a2521cb2c06f80", 0x43}], 0x8, &(0x7f0000000bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@rr={0x7, 0x27, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @rand_addr=0x64010102]}, @lsrr={0x83, 0x13, 0x50, [@multicast2, @local, @broadcast, @broadcast]}, @rr={0x7, 0x7, 0xc1, [@dev={0xac, 0x14, 0x14, 0x39}]}, @cipso={0x86, 0x3e, 0x1, [{0x0, 0x4, "48f9"}, {0x2, 0xe, "6b82137470f19460c7584814"}, {0x5, 0xa, "8b3c8d1d3a1571de"}, {0x7, 0xe, "0b09d67ca387ca816224ed88"}, {0x0, 0xc, "688584cd08ceee2351c9"}, {0x6, 0x2}]}, @ssrr={0x89, 0x1b, 0xaf, [@rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @local, @broadcast]}, @noop, @cipso={0x86, 0x41, 0x1, [{0x0, 0x9, "3c949b77b4467b"}, {0x7, 0x6, "1cc5e77a"}, {0x7, 0xd, "49c920522644e9cce737e9"}, {0x5, 0x2}, {0x2, 0x3, "ae"}, {0x5, 0x2}, {0x1, 0x4, "9679"}, {0x1, 0x3, "a5"}, {0x2, 0x11, "9e24973585f88a636b22e131e645dd"}]}, @generic={0x88, 0x10, "eb63dfe5b9797b0be577851d0d38"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xd0, 0x3, 0x7, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@empty, 0x4}]}, @generic={0x94, 0x9, "f1254f25fd0af6"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast2}}}], 0x1c8}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000000) r8 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000f80)={{0x3, @bcast}, [@rose, @rose, @rose, @netrom, @rose, @default, @default, @rose]}, &(0x7f0000001000)=0x48, 0x80800) recvmmsg(r8, &(0x7f0000007500)=[{{&(0x7f0000001040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000010c0)=""/136, 0x88}, {&(0x7f0000001180)=""/94, 0x5e}, {&(0x7f0000001200)=""/177, 0xb1}, {&(0x7f00000012c0)=""/196, 0xc4}, {&(0x7f00000013c0)=""/250, 0xfa}], 0x5, &(0x7f0000001540)=""/199, 0xc7}, 0x6}, {{&(0x7f0000001640)=@rc, 0x80, &(0x7f00000018c0)=[{&(0x7f00000016c0)=""/233, 0xe9}, {&(0x7f00000017c0)=""/36, 0x24}, {&(0x7f0000001800)=""/168, 0xa8}], 0x3, &(0x7f0000001900)=""/122, 0x7a}, 0x1}, {{&(0x7f0000001980)=@nfc_llcp, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/240, 0xf0}, {&(0x7f0000001b00)=""/166, 0xa6}, {&(0x7f0000001bc0)=""/168, 0xa8}, {&(0x7f0000001c80)=""/38, 0x26}, {&(0x7f0000001cc0)=""/60, 0x3c}], 0x5}, 0x9}, {{&(0x7f0000001d80)=@alg, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001e00)=""/175, 0xaf}, {&(0x7f0000001ec0)=""/116, 0x74}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x3, &(0x7f0000002f80)=""/180, 0xb4}, 0x9}, {{&(0x7f0000003040)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=""/189, 0xbd}, 0x6}, {{&(0x7f00000031c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003340)=[{&(0x7f0000003240)=""/200, 0xc8}], 0x1, &(0x7f0000003380)=""/43, 0x2b}, 0x180}, {{&(0x7f00000033c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003440)=""/94, 0x5e}, {&(0x7f00000034c0)=""/107, 0x6b}, {&(0x7f0000003540)=""/88, 0x58}, {&(0x7f00000035c0)=""/71, 0x47}], 0x4, &(0x7f0000003680)=""/216, 0xd8}, 0x9}, {{&(0x7f0000003780)=@isdn, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003800)=""/51, 0x33}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/62, 0x3e}, {&(0x7f0000004880)=""/85, 0x55}, {&(0x7f0000004900)=""/19, 0x13}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/158, 0x9e}, {&(0x7f0000004b00)=""/12, 0xc}], 0x8, &(0x7f0000004bc0)=""/205, 0xcd}, 0x7}, {{&(0x7f0000004cc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004d40)=""/236, 0xec}, {&(0x7f0000004e40)=""/200, 0xc8}, {&(0x7f0000004f40)=""/91, 0x5b}, {&(0x7f0000004fc0)=""/142, 0x8e}, {&(0x7f0000005080)=""/104, 0x68}, {&(0x7f0000005100)=""/244, 0xf4}, {&(0x7f0000005200)=""/3, 0x3}], 0x7, &(0x7f00000052c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000062c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006340)=""/102, 0x66}, {&(0x7f00000063c0)=""/199, 0xc7}], 0x2, &(0x7f0000006500)=""/4096, 0x1000}, 0xfffffbff}], 0xa, 0x40, &(0x7f0000007780)={0x0, 0x3938700}) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f00000078c0)={&(0x7f00000077c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007880)={&(0x7f0000007800)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0xd6, 0x5]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5c4, 0x4a65]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008000) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000007ac0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000007a80)={&(0x7f0000007940)={0x134, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3e, 0x3, "ae2fcbf732dc19f917decf36d23d8887cdf9ba159262677045f0488cac3f54a03c8ff3448b957013d584070724c1a78e9f8c354c52f6a8fed7bf"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "e0d9767e49bc98a613a8e6119e453fe2c7ef9680f5a9e3b006ca9c88efc2"}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r11 = socket(0x3, 0x80000, 0x91d8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r11, &(0x7f0000007bc0)={&(0x7f0000007b00), 0xc, &(0x7f0000007b80)={&(0x7f0000007b40)={0x38, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x8400}, 0x4008804) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000007ec0)={&(0x7f0000007c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007e80)={&(0x7f0000007c40)={0x204, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xe}, {0x6, 0x16, 0x45b}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9125}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x10}, 0x9071909169237fad) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f40), r6) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000007f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f00000080c0)={&(0x7f0000007f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000008080)={&(0x7f0000007fc0)={0xa8, r13, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_ATTR_IE={0x7d, 0x2a, [@fast_bss_trans={0x37, 0x77, {0x2, 0x3, "f85924d409bfe075e159f448396df25d", "bdbaaffb9ea5aa720d0edf8165e877f159861eb3aacc4855b534842250227473", "fd9134ab49e00f8a422f3a272cc1a687d358c757b0e4ae310ac3284f4bd11541", [{0x4, 0xe, "78175bc74b218c966ad304e12ed6"}, {0x2, 0xe, "40c991c56fa925eaa99e2c859850"}, {0x3, 0x3, "36f035"}]}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004040}, 0xc004) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000008140), r6) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000008200)={&(0x7f0000008100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000081c0)={&(0x7f0000008180)={0x1c, r15, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000008240), r6) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r9, 0x89f4, &(0x7f00000082c0)={'sit0\x00', &(0x7f0000008280)={@broadcast, 0x1, 0x0, 0x30, 0x0, [{@initdev}, {@initdev}, {@initdev}]}}) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000008300)=0x4, &(0x7f0000008340)=0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000008480)={'gretap0\x00', &(0x7f0000008380)=@ethtool_drvinfo={0x3, "f820b633269ea459522b137369884cdb7ba3f2d27a4008e997cc9398c6429767", "bf9401041d007a9cff7fca86a4e8f4503d487ee8c4b1f1f423ff12c81d9406d8", "fdbae483cfece2c8986661dfa09e527e00f3d3b3600b031a6806752398d3abda", "7825b52591dcb698081fbfe1e4e2b8b49b3fb16f4232f14727a89b4385b126e5", "d7e468da7af59554978afd6f37112d376fa8c8055972a232856e7680d6f169a6", "63860a91a088257f3bf8e92e", 0x5, 0xb, 0x7, 0x9, 0xfd}}) getsockname$packet(r9, &(0x7f00000084c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008500)=0x14) 452.34565ms ago: executing program 0 (id=3698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a32000000001400000011", @ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x140d, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000004) syz_emit_ethernet(0xfc6, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c890f902c00fe800000000000000000000000000024ff0200000000000000000000000000018400"], 0x0) 446.695596ms ago: executing program 0 (id=3699): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="00000000842ae104e895c8cb000000518c61ea1d788a581eb91207120fbc00000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r6, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket(0xf, 0x6, 0x80) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00671b9da7ae1d207668d0f9638c193567054bae4bde2f62e50780ca2cd0db307a6b9738830c7e4da23ce024a44cc4fd0e5b010ae89c30f48cc56251"], 0x0, 0x34}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800110000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="02000000050000c80005000000000000000000000010000000000000"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r0, 0x1000}, {r0, 0x400e}, {r0, 0x12c6}, {r0, 0x8144}, {r4, 0x9038}, {r0, 0x100}, {r0}, {r0, 0x6004}, {r10, 0x2040}], 0x6, 0x3) socket(0x1, 0x803, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x11) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="080090ba421d40d8b19c3178d90a00936fb1af1defd947b80ebb91162e64f215f3c4108e39a1471da01fd5a3a4b6a8aa646eb26252ceae33d4565a1fa24b8a", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0) 421.582383ms ago: executing program 2 (id=3700): r0 = socket(0x4, 0x800, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0xa, 0x0, 0x1ff, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 300.807783ms ago: executing program 2 (id=3701): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x3, 0x0, 0x0, 0x67b}]}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x1010, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xa, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfcf}, [@generic={0x90, 0x3, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000400)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x29, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x6, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x5, 0x5, 0x5, 0x6}], 0x10, 0x3}, 0x94) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbee0000000000008001489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cce1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000500)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbba0000007e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe12158713ef8864796df4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e99927685000000000000", 0x9e}, {&(0x7f0000000a80)="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", 0x1b0}, {&(0x7f0000000dc0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93d56681", 0xdb}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="fcbed7e57e1228", 0x7}], 0x1}}], 0x3, 0x2000c044) writev(r1, &(0x7f0000000640)=[{&(0x7f00000001c0)="7a76663f4889d470b45705a0288f1ebe8b509127b8b587b2fce7daff32f61d0a58688a27989f9510f283840ddef411b1e61a2988b93e0c93ff9937b0819569976c09e9b1", 0x44}, {&(0x7f0000000080)="b36451453419d8fb697fa8f800497bd7a1e3510d13670076a261420e9a30da094ed964a2a7ea37244499041d", 0x2c}, {&(0x7f0000000440)="7399aec3e67ca47a", 0x8}, {&(0x7f0000000700)="3533abcadaa3f1cfbea1aad6d82ac66dc15aa510d66d388a3b6a8943ea8153c0dd61a95ef79ec44fb8439c0b2abd84bd384ce481aa2c7174781d59e9aebb42e2f21b2c6c743dcd42c170e5c5243e43f466f99323aa5a938c3b01a303ccee7dc188975353403432c37f685d572a94bf89875f6ef90cda115c3908add60b98c7b91abd344adac1c5b75b0bf910ed05d6718e7f7b9e6ef87570587269a6", 0x9c}, {&(0x7f00000017c0)="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", 0x4b4}], 0x5) 156.326828ms ago: executing program 4 (id=3702): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x97c1, 0x0, 0x0, 0x0, 0xfc0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @alu={0x7, 0x1, 0x2, 0xa, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7725, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 155.747484ms ago: executing program 2 (id=3703): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000c40)={{r1}, "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"}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x1f0, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1d4, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x1}, @value=@ver_80211n={0x0, 0x357b, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0xa143, 0x7, {0x0, 0x5, @random="bf250afdd6"}, @val={0x1, 0x1, [{0x3}]}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x1, 0x0, {0xffffffff, 0x434, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x800, 0x8}}, [{0xdd, 0x6e, "4e94daabe940ed63da8b89231c3a7bf00ca1b6ce685dd451c5a17e723f3719a163ed95cabb46062929ffe859e9385099afcd57a79969df6a08958a8e9a6c4fdf1b13c9f703a93bdfb5c775d7fd47fc7c8036d32df49bc398d57ee98a2bb7dc04fcad9aea2dab84b268fe2b347e11"}, {0xdd, 0x59, "c2982e6d634b1aab71de0eb4fe7399eb50dd275c200d30f213349250233af8c9d175641c09c8777cda396fa06728c4eeb6d17c4c536459bed859817dcc4f4df9a6205d9f90401e017e973d2b46d55f0cf1eeddd1f56c2f9248"}, {0xdd, 0xbd, "ddf1ed7b01bdd1c8d9431da7f0689014d3ddfc662b42361e047a5087b567f0c0ea1888f805cb8d485843f4c77b00b9fb197fd95ac2385f60b46020ca6c650ffe3f58008ca649234886d2ec5bdc312dcc311afd9ca737918a956bb71a41c4376cd81ba0bfaac5e13d3e19a516a011c986491f376893fe82ecdb5c27a0a10d6c9215a609eade48c1da1da99ccfc29d111810b1c40d769e5eca5c5d60a88e3cb5df9e49a542e677f385a166094c307b057ddc23b6b6c2056f29a55cc38550"}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0xe58b0b5a1d638ed9}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 103.063312ms ago: executing program 4 (id=3704): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) sendfile(r2, r2, 0x0, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 0s ago: executing program 1 (id=3705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) (async) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r2}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (rerun: 64) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.1.1871'. [ 220.617741][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 220.687193][T12581] bridge_slave_0: left allmulticast mode [ 220.692878][T12581] bridge_slave_0: left promiscuous mode [ 220.731040][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.991239][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 221.368464][T12634] bond3: entered promiscuous mode [ 221.377108][T12634] bond3: entered allmulticast mode [ 221.404133][T12634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.524584][T12642] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.814146][T12665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.879219][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.126355][T12695] validate_nla: 1 callbacks suppressed [ 222.126371][T12695] netlink: 'syz.1.1898': attribute type 7 has an invalid length. [ 222.147607][T12695] netlink: 'syz.1.1898': attribute type 8 has an invalid length. [ 222.209969][T12698] syzkaller0: entered promiscuous mode [ 222.216041][T12698] syzkaller0: entered allmulticast mode [ 222.453270][T12712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.466326][T12712] openvswitch: netlink: IP tunnel dst address not specified [ 222.830316][T12737] netlink: 'syz.3.1913': attribute type 4 has an invalid length. [ 222.905814][T12749] netlink: 'syz.1.1915': attribute type 2 has an invalid length. [ 223.201194][T12761] pim6reg1: entered promiscuous mode [ 223.221244][T12761] pim6reg1: entered allmulticast mode [ 223.256042][T12759] __nla_validate_parse: 13 callbacks suppressed [ 223.256061][T12759] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1919'. [ 223.330814][T12759] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 223.953592][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'. [ 223.974948][T12822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.065302][T12819] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 224.072465][T12819] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 224.160872][T12828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.361813][T12845] ip6tnl0: entered allmulticast mode [ 224.397555][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 224.657229][T12856] xt_CT: No such helper "snmp_trap" [ 224.727484][T12868] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1944'. [ 224.862475][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'. [ 224.943716][T12879] xfrm1: entered promiscuous mode [ 224.975206][T12879] xfrm1: entered allmulticast mode [ 225.018119][T12889] netlink: 'syz.3.1949': attribute type 33 has an invalid length. [ 225.026175][T12889] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1949'. [ 225.271065][T12901] x_tables: duplicate underflow at hook 1 [ 225.284657][T12904] netlink: 'syz.3.1956': attribute type 10 has an invalid length. [ 225.326674][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1955'. [ 225.336946][T12909] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1954'. [ 225.590006][T12930] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1964'. [ 225.599529][T12930] xt_policy: neither incoming nor outgoing policy selected [ 225.721329][T12938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.728552][T12943] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 225.730067][T12938] bond1: entered promiscuous mode [ 225.743453][T12938] bond0: (slave bond1): Enslaving as an active interface with an up link [ 225.752150][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 225.958477][T12954] ksmbd: Unknown IPC event: 3, ignore. [ 226.011711][T12958] netlink: 'syz.0.1973': attribute type 10 has an invalid length. [ 226.018145][T12956] xt_TCPMSS: Only works on TCP SYN packets [ 226.213225][T12970] ip6gretap2: entered promiscuous mode [ 226.229411][T12970] ip6gretap2: entered allmulticast mode [ 226.302465][T12973] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 226.334223][T12976] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 226.346535][T12976] bond2: entered promiscuous mode [ 226.351596][T12976] bond2: entered allmulticast mode [ 226.357242][T12976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.609699][T12999] tipc: Enabled bearer , priority 0 [ 226.618499][T12999] syzkaller0: entered promiscuous mode [ 226.635758][T12999] syzkaller0: entered allmulticast mode [ 226.682910][T12999] tipc: Resetting bearer [ 226.769298][T13007] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 226.826723][T13007] bond6 (unregistering): Released all slaves [ 226.860078][T12998] tipc: Resetting bearer [ 226.924294][T12998] tipc: Disabling bearer [ 227.058085][T13024] netlink: 'syz.2.1994': attribute type 2 has an invalid length. [ 227.316183][T13046] 8021q: VLANs not supported on ip6_vti0 [ 227.362625][T13053] Bluetooth: hci0: unsupported parameter 512 [ 227.370078][T13053] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 227.550385][T13063] openvswitch: netlink: IP tunnel dst address not specified [ 227.597952][T13067] netlink: 'syz.3.2006': attribute type 2 has an invalid length. [ 227.622127][T13067] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 228.249152][T13093] netlink: 'syz.4.2014': attribute type 1 has an invalid length. [ 228.309831][T13093] netlink: 'syz.4.2014': attribute type 2 has an invalid length. [ 228.383119][T13091] netlink: 'syz.4.2014': attribute type 24 has an invalid length. [ 228.462614][T13108] sctp: [Deprecated]: syz.3.2017 (pid 13108) Use of int in max_burst socket option deprecated. [ 228.462614][T13108] Use struct sctp_assoc_value instead [ 228.951499][T13122] veth0_to_team: entered promiscuous mode [ 228.957651][T13122] veth0_to_team: entered allmulticast mode [ 229.097144][T13135] netlink: 'syz.2.2025': attribute type 13 has an invalid length. [ 229.200266][T13144] __nla_validate_parse: 15 callbacks suppressed [ 229.200285][T13144] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2028'. [ 229.512234][T13166] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2034'. [ 229.589541][T13164] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 229.607565][T13164] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 229.850895][T13184] netlink: 'syz.4.2042': attribute type 2 has an invalid length. [ 229.861728][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 230.056179][T13199] netlink: 'syz.4.2047': attribute type 11 has an invalid length. [ 230.192147][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 230.286314][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 230.307938][T13216] netlink: 'syz.2.2051': attribute type 1 has an invalid length. [ 230.410146][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 230.510121][T13233] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2057'. [ 230.674035][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 230.702635][T13242] batadv_slave_0: entered promiscuous mode [ 230.755636][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 230.802398][T13255] xt_ecn: cannot match TCP bits for non-tcp packets [ 230.836746][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2059'. [ 231.064093][T13237] batadv_slave_0: left promiscuous mode [ 231.199628][T13266] netlink: 'syz.3.2062': attribute type 9 has an invalid length. [ 231.300132][T13282] syzkaller0: entered promiscuous mode [ 231.307374][T13282] syzkaller0: entered allmulticast mode [ 231.318604][T13283] team0: Device ipvlan1 failed to register rx_handler [ 232.177657][T13340] veth0: entered promiscuous mode [ 232.231886][T13340] veth0 (unregistering): left promiscuous mode [ 232.507907][T13366] tipc: Enabled bearer , priority 0 [ 232.522674][T13366] syzkaller0: entered promiscuous mode [ 232.528568][T13366] syzkaller0: entered allmulticast mode [ 232.642092][T13370] validate_nla: 5 callbacks suppressed [ 232.642110][T13370] netlink: 'syz.0.2095': attribute type 7 has an invalid length. [ 232.713323][T13377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.748349][T13380] netlink: 'syz.2.2097': attribute type 30 has an invalid length. [ 232.794816][T13380] bond4: option arp_missed_max: invalid value (0) [ 232.802658][T13380] bond4: option arp_missed_max: allowed values 1 - 255 [ 232.818447][T13380] bond4 (unregistering): Released all slaves [ 232.887847][T13380] netlink: 'syz.2.2097': attribute type 30 has an invalid length. [ 232.942554][T13380] bond4: option arp_missed_max: invalid value (0) [ 232.950097][T13380] bond4: option arp_missed_max: allowed values 1 - 255 [ 232.973417][T13380] bond4 (unregistering): Released all slaves [ 233.041844][T13380] netlink: 'syz.2.2097': attribute type 30 has an invalid length. [ 233.072827][T13365] tipc: Resetting bearer [ 233.089948][T13365] tipc: Disabling bearer [ 233.121636][T13380] bond4: option arp_missed_max: invalid value (0) [ 233.128756][T13380] bond4: option arp_missed_max: allowed values 1 - 255 [ 233.172538][T13380] bond4 (unregistering): Released all slaves [ 233.217791][T13399] geneve1: entered promiscuous mode [ 233.232538][ T3589] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.243810][T13380] netlink: 'syz.2.2097': attribute type 30 has an invalid length. [ 233.259303][ T6765] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.278854][ T6765] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.336304][T13380] bond4: option arp_missed_max: invalid value (0) [ 233.342959][T13380] bond4: option arp_missed_max: allowed values 1 - 255 [ 233.360517][T13380] bond4 (unregistering): Released all slaves [ 233.400947][ T6765] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 233.427049][T13380] netlink: 'syz.2.2097': attribute type 30 has an invalid length. [ 233.508674][T13380] bond4: option arp_missed_max: invalid value (0) [ 233.526835][T13380] bond4: option arp_missed_max: allowed values 1 - 255 [ 233.549132][T13380] bond4 (unregistering): Released all slaves [ 233.619473][T13423] tipc: Enabled bearer , priority 0 [ 233.658475][T13421] syzkaller0: entered promiscuous mode [ 233.663979][T13421] syzkaller0: entered allmulticast mode [ 233.820584][T13438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.824659][T13423] tipc: Resetting bearer [ 233.853610][T13437] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 233.855424][T13439] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 233.865691][T13437] netlink: 'syz.0.2107': attribute type 2 has an invalid length. [ 233.935071][T13439] netlink: 'syz.0.2107': attribute type 2 has an invalid length. [ 234.360039][T13419] tipc: Resetting bearer [ 234.395893][T13419] tipc: Disabling bearer [ 234.425364][T13462] __nla_validate_parse: 8 callbacks suppressed [ 234.425383][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2113'. [ 235.176773][T13512] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 235.197891][T13512] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 235.215918][T13512] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 235.660202][T13538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.710673][T13557] ip6gre0: Master is either lo or non-ether device [ 235.770283][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2138'. [ 235.803189][T13538] veth9: entered promiscuous mode [ 235.985148][T13574] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2142'. [ 236.042623][T13577] bond2: option mode: unable to set because the bond device has slaves [ 236.105729][T13577] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 236.126582][ T3066] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0c57:68ff:fe09:ff2a error=-28 [ 236.141746][T13577] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 236.151525][T13587] syz1: rxe_newlink: already configured on syz_tun [ 236.352994][T13597] x_tables: unsorted underflow at hook 3 [ 236.538686][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2153'. [ 236.568096][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 236.590226][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2153'. [ 236.628547][T13611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2154'. [ 236.649816][T13601] gretap2: entered promiscuous mode [ 236.655184][T13601] gretap2: entered allmulticast mode [ 237.025559][T13632] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 237.287907][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 237.426698][T13656] vcan0: entered allmulticast mode [ 237.566397][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2172'. [ 239.416016][T13713] validate_nla: 6 callbacks suppressed [ 239.416042][T13713] netlink: 'syz.4.2184': attribute type 13 has an invalid length. [ 239.461291][T13713] veth0_macvtap: left promiscuous mode [ 239.478554][T13713] macvtap0: entered allmulticast mode [ 239.509839][T13713] macvtap0: refused to change device tx_queue_len [ 239.527860][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 239.552078][T13719] tipc: Enabled bearer , priority 0 [ 239.567411][T13727] syzkaller0: entered promiscuous mode [ 239.615203][T13727] syzkaller0: entered allmulticast mode [ 239.745661][T13727] tipc: Resetting bearer [ 239.766458][T13716] tipc: Resetting bearer [ 239.839949][T13716] tipc: Disabling bearer [ 239.884530][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2192'. [ 239.923157][T13737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2192'. [ 240.292773][T13770] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.298664][T13769] xt_addrtype: ipv6 does not support BROADCAST matching [ 240.318368][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2204'. [ 240.333079][T13775] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 240.477118][T13781] xt_SECMARK: invalid mode: 9 [ 240.532682][T13785] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2210'. [ 240.543203][T13788] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 240.731733][T13800] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2215'. [ 240.854093][T13809] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 240.861336][T13806] ksmbd: Unknown IPC event: 3, ignore. [ 240.940787][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 240.965744][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'. [ 240.991929][T13815] IPVS: set_ctl: invalid protocol: 24946 0.0.0.0:0 [ 241.509716][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 241.782886][T13870] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 241.880864][T13875] syzkaller0: entered promiscuous mode [ 241.886618][T13875] syzkaller0: entered allmulticast mode [ 241.910499][T13876] tipc: Enabled bearer , priority 0 [ 241.920341][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 241.940895][T13874] tipc: Resetting bearer [ 241.978700][T13874] tipc: Disabling bearer [ 241.990199][T13878] tipc: Enabled bearer , priority 0 [ 242.013760][T13877] tipc: Resetting bearer [ 242.038901][T13877] tipc: Disabling bearer [ 242.120353][T13923] x_tables: duplicate underflow at hook 4 [ 242.126669][T13923] tipc: Enabling of bearer rejected, failed to enable media [ 242.298905][T13852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.593642][T13951] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 242.705096][T13955] openvswitch: netlink: IP tunnel dst address not specified [ 242.765490][T13957] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 242.773264][T13957] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 243.068504][T13983] 8021q: VLANs not supported on ip6_vti0 [ 243.548144][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 244.726626][T14029] tipc: Enabled bearer , priority 0 [ 244.736861][T14029] syzkaller0: entered promiscuous mode [ 244.742362][T14029] syzkaller0: entered allmulticast mode [ 244.745886][T14031] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 244.801754][T14029] tipc: Resetting bearer [ 244.818702][T14028] tipc: Resetting bearer [ 244.858005][T14028] tipc: Disabling bearer [ 244.872632][T14037] __nla_validate_parse: 4 callbacks suppressed [ 244.872649][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 244.911081][T14033] pim6reg1: entered promiscuous mode [ 244.916970][T14033] pim6reg1: entered allmulticast mode [ 245.125223][T14053] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2271'. [ 245.215852][T14054] tipc: Enabled bearer , priority 0 [ 245.223818][T14054] syzkaller0: entered promiscuous mode [ 245.230367][T14054] syzkaller0: entered allmulticast mode [ 245.243631][T14054] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.278499][T14054] tipc: Resetting bearer [ 245.293951][T14052] tipc: Resetting bearer [ 245.327748][T14052] tipc: Disabling bearer [ 245.369857][T14070] syzkaller0: entered promiscuous mode [ 245.384800][T14070] syzkaller0: entered allmulticast mode [ 245.430912][T14073] sctp: [Deprecated]: syz.4.2277 (pid 14073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.430912][T14073] Use struct sctp_sack_info instead [ 245.606342][T14090] tc_dump_action: action bad kind [ 245.636315][T14091] tc_dump_action: action bad kind [ 245.798439][T14103] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 245.834839][T14108] sctp: [Deprecated]: syz.0.2285 (pid 14108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.834839][T14108] Use struct sctp_sack_info instead [ 245.899907][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 245.944899][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 245.978318][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 246.443106][T14147] syzkaller0: entered promiscuous mode [ 246.455334][T14147] syzkaller0: entered allmulticast mode [ 246.843652][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 247.407986][T14188] tipc: Enabled bearer , priority 0 [ 247.445239][T14178] syzkaller0: mtu less than device minimum [ 247.489519][T14189] syzkaller0: entered promiscuous mode [ 247.527372][T14189] syzkaller0: entered allmulticast mode [ 247.537526][T14200] netlink: 'syz.0.2310': attribute type 2 has an invalid length. [ 247.545766][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'. [ 247.560959][T14196] bridge0: port 1(ipvlan2) entered blocking state [ 247.567733][T14196] bridge0: port 1(ipvlan2) entered disabled state [ 247.574365][T14196] ipvlan2: entered allmulticast mode [ 247.579796][T14196] bridge0: entered allmulticast mode [ 247.587043][T14196] ipvlan2: left allmulticast mode [ 247.592078][T14196] bridge0: left allmulticast mode [ 247.603237][T14177] tipc: Resetting bearer [ 247.641246][T14177] tipc: Disabling bearer [ 247.643428][T14204] xt_l2tp: v2 tid > 0xffff: 1114244 [ 247.717473][T14212] netlink: 'syz.2.2315': attribute type 6 has an invalid length. [ 247.774133][T14214] netlink: 'syz.2.2315': attribute type 6 has an invalid length. [ 247.913979][T14227] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 247.921702][T14227] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 247.997477][T14232] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2320'. [ 248.137478][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2322'. [ 248.159270][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 249.435885][T14310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.620769][T14325] : entered promiscuous mode [ 249.980934][T14355] netlink: 'syz.0.2354': attribute type 32 has an invalid length. [ 250.021563][T14360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.049672][T14356] netlink: 'syz.0.2354': attribute type 32 has an invalid length. [ 250.164783][T14373] __nla_validate_parse: 5 callbacks suppressed [ 250.164801][T14373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2357'. [ 250.250924][T14376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2356'. [ 250.264781][T14376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2356'. [ 250.313924][T14380] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 250.326483][T14380] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 250.363050][T14384] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 250.723093][T14410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.917316][T14421] Bluetooth: hci0: unsupported parameter 512 [ 250.924194][T14421] Bluetooth: hci0: invalid length 11, exp 1 for type 31 [ 250.942597][T14426] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 251.035944][T14426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.088521][T14432] bond4: (slave geneve2): making interface the new active one [ 251.126748][T14432] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 251.144927][T13915] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.173727][T13915] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.203635][T13915] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.223149][T13915] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.668796][T14471] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 251.799837][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 251.953115][T14484] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2391'. [ 251.962319][T14484] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2391'. [ 251.988330][T14477] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2391'. [ 252.009582][T14483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2392'. [ 252.020389][T14477] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2391'. [ 252.020870][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'. [ 252.697400][T14523] syzkaller1: entered promiscuous mode [ 252.702921][T14523] syzkaller1: entered allmulticast mode [ 252.734350][T14523] netlink: 'syz.2.2403': attribute type 4 has an invalid length. [ 252.914658][T14545] netem: unknown loss type 0 [ 252.935410][T14545] netem: change failed [ 253.109761][T13914] tipc: Subscription rejected, illegal request [ 253.433551][T14579] geneve2: entered promiscuous mode [ 253.441823][T14579] geneve2: entered allmulticast mode [ 253.825798][T14610] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 253.959844][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.548832][T14666] netlink: 'syz.1.2451': attribute type 9 has an invalid length. [ 254.565092][T14670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 254.663312][T14669] netlink: 'syz.0.2453': attribute type 10 has an invalid length. [ 254.811191][T14683] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 255.033857][T14707] tipc: Enabling of bearer rejected, failed to enable media [ 255.145255][T14713] IPVS: set_ctl: invalid protocol: 79 255.255.255.255:20004 [ 255.567403][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 255.580128][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 255.597503][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 255.639761][T14756] __nla_validate_parse: 28 callbacks suppressed [ 255.639779][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2475'. [ 255.733299][T14764] tipc: Enabled bearer , priority 0 [ 255.765724][T14762] tipc: Enabling of bearer rejected, already enabled [ 255.818038][T14765] syzkaller0: entered promiscuous mode [ 255.827924][T14765] syzkaller0: entered allmulticast mode [ 255.869180][T14748] infiniband syz2: set active [ 255.874034][T14748] infiniband syz2: added vxcan1 [ 255.948879][T14748] RDS/IB: syz2: added [ 255.962898][T14748] smc: adding ib device syz2 with port count 1 [ 255.971509][T14748] smc: ib device syz2 port 1 has no pnetid [ 255.978991][ T5893] vxcan1 speed is unknown, defaulting to 1000 [ 255.985480][T14765] tipc: Resetting bearer [ 255.993418][T14759] tipc: Resetting bearer [ 256.014543][T14759] tipc: Disabling bearer [ 256.031393][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 256.093959][ T5879] vxcan1 speed is unknown, defaulting to 1000 [ 256.117347][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 256.332681][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 256.589877][T14812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2490'. [ 256.620695][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2492'. [ 256.638277][T14814] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 256.649537][T14814] netlink: 'syz.2.2492': attribute type 3 has an invalid length. [ 256.659366][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2493'. [ 256.703621][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 256.705089][T14814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2492'. [ 256.982724][T14827] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2498'. [ 257.089370][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2501'. [ 257.145522][T14837] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 257.157941][T14835] netlink: 'syz.4.2501': attribute type 1 has an invalid length. [ 257.229980][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 257.603716][T14857] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2507'. [ 257.667848][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 258.140446][T14748] vxcan1 speed is unknown, defaulting to 1000 [ 258.169102][T14889] netlink: 'syz.3.2515': attribute type 24 has an invalid length. [ 258.656713][T14916] batadv_slave_0: entered promiscuous mode [ 258.662658][T14916] batadv_slave_0: entered allmulticast mode [ 258.703933][T14917] tipc: Enabled bearer , priority 10 [ 259.043907][T14936] netlink: 'syz.4.2533': attribute type 13 has an invalid length. [ 259.060786][T14936] netlink: 'syz.4.2533': attribute type 58 has an invalid length. [ 259.459849][T14914] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 260.650585][T14968] pim6reg1: entered promiscuous mode [ 260.651697][T14969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.659083][T14968] pim6reg1: entered allmulticast mode [ 260.715767][T14975] netlink: 'syz.2.2548': attribute type 1 has an invalid length. [ 260.723610][T14975] __nla_validate_parse: 8 callbacks suppressed [ 260.723625][T14975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2548'. [ 260.731868][T14976] netlink: 'syz.4.2547': attribute type 2 has an invalid length. [ 260.751441][T14979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.814380][T14969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.901607][T14990] sock: sock_set_timeout: `syz.2.2550' (pid 14990) tries to set negative timeout [ 261.106748][T15006] netlink: 'syz.0.2554': attribute type 23 has an invalid length. [ 261.188290][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 261.321822][T15017] 0: reclassify loop, rule prio 0, protocol 800 [ 261.509623][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 261.541132][T15026] syz_tun: left allmulticast mode [ 261.555116][T15026] syz_tun: left promiscuous mode [ 261.566230][T15026] bridge0: port 3(syz_tun) entered disabled state [ 261.643826][T15039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2564'. [ 261.666873][T15026] bridge_slave_0: left allmulticast mode [ 261.708117][T15043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2561'. [ 261.735522][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.849538][T15050] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 261.860352][T15026] bond0: (slave bridge0): Releasing backup interface [ 261.959640][T15050] bond0: (slave wlan1): Opening slave failed [ 262.122793][T15063] netlink: 'syz.0.2571': attribute type 1 has an invalid length. [ 262.148522][T15063] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2571'. [ 262.589920][T15088] IPv6: sit1: Disabled Multicast RS [ 262.603446][T15090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.748873][T15099] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2583'. [ 262.779323][T15101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2584'. [ 262.802623][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'. [ 262.838271][T15103] syzkaller1: entered promiscuous mode [ 262.844253][T15103] syzkaller1: entered allmulticast mode [ 262.845140][T15104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2584'. [ 262.951301][T15106] pimreg: left allmulticast mode [ 263.158924][T15113] bond3 (unregistering): Released all slaves [ 263.226544][T15120] netlink: 'syz.2.2590': attribute type 2 has an invalid length. [ 263.372479][T15125] openvswitch: netlink: IP tunnel dst address not specified [ 263.434755][T15129] tipc: Enabled bearer , priority 0 [ 263.487640][T15130] syzkaller0: entered promiscuous mode [ 263.513833][T15130] syzkaller0: entered allmulticast mode [ 263.646283][T15130] tipc: Resetting bearer [ 263.653160][T15140] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 263.726734][T15130] tipc: Disabling bearer [ 263.764426][T15147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.796731][T15145] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 263.809637][T15145] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 263.890926][T15167] team0: Device ip6gre2 is of different type [ 263.998238][T15158] bond10: (slave bridge5): Enslaving as an active interface with a down link [ 264.016645][T15140] gretap2: entered promiscuous mode [ 264.017597][T15176] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 264.021996][T15140] gretap2: entered allmulticast mode [ 264.038939][T15140] bond10: (slave gretap2): making interface the new active one [ 264.048707][T15140] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 264.065370][T15174] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 264.122009][T15177] netlink: 'syz.3.2604': attribute type 4 has an invalid length. [ 264.667726][T15227] xt_CT: No such helper "pptp" [ 264.739391][T15229] xt_CT: No such helper "pptp" [ 264.882939][T15246] netlink: 'syz.0.2624': attribute type 4 has an invalid length. [ 264.907542][T15246] wlan1: mtu less than device minimum [ 265.107164][T15264] delete_channel: no stack [ 265.176581][T15272] net veth1_virt_wifi .: renamed from virt_wifi0 [ 265.465440][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 265.489024][T15291] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 265.497761][T15291] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 265.520604][T15293] tipc: Enabled bearer , priority 0 [ 265.646322][T15291] tipc: Disabling bearer [ 265.713280][T15304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.049057][T15327] __nla_validate_parse: 12 callbacks suppressed [ 266.049075][T15327] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2645'. [ 266.157935][T15334] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2648'. [ 266.163574][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 266.269441][T15336] hsr_slave_0 (unregistering): left promiscuous mode [ 266.373627][T15343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.743912][T15347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2651'. [ 266.778263][T15354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2653'. [ 266.795829][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2653'. [ 266.804853][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2653'. [ 266.988648][T15364] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2656'. [ 267.018580][T15364] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2656'. [ 267.063296][T15367] syz.0.2657 (15367) used obsolete PPPIOCDETACH ioctl [ 267.192657][T15380] validate_nla: 66 callbacks suppressed [ 267.192674][T15380] netlink: 'syz.2.2663': attribute type 26 has an invalid length. [ 267.195869][T15378] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2661'. [ 267.217526][T15380] nftables ruleset with unbound set [ 267.236717][T15378] openvswitch: netlink: Message has 512 unknown bytes. [ 267.283794][T15378] netlink: 'syz.4.2661': attribute type 10 has an invalid length. [ 267.452414][T15396] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 267.701458][T15408] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 268.011539][T15417] vlan0: entered promiscuous mode [ 268.027633][T15417] bond0: entered promiscuous mode [ 268.035318][T15417] bond_slave_0: entered promiscuous mode [ 268.041221][T15417] bond_slave_1: entered promiscuous mode [ 268.684872][T15459] netlink: 'syz.0.2685': attribute type 21 has an invalid length. [ 268.884016][T15449] netem: incorrect gi model size [ 268.902706][T15449] netem: change failed [ 270.101648][T15476] bond5 (unregistering): Released all slaves [ 270.240622][T15484] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.280991][T15484] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 270.306930][T15484] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 270.392359][T15484] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.408074][T15484] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 270.428822][T15484] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 270.503429][T15513] veth9: entered allmulticast mode [ 270.546208][T15484] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.566884][T15484] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 270.606248][T15484] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 270.658085][T15523] Bluetooth: hci0: unsupported parameter 28 [ 270.682115][T15484] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.684407][T15523] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 270.706158][T15528] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 270.725403][T15484] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 270.750872][T15484] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 270.822143][T15528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.836198][T15536] netlink: 'syz.1.2707': attribute type 11 has an invalid length. [ 270.919586][T15534] bond4: (slave veth9): Enslaving as an active interface with a down link [ 271.022354][T15537] veth11: entered promiscuous mode [ 271.054920][T15537] bond4: (slave veth11): Enslaving as an active interface with a down link [ 271.108240][T15534] vlan0: entered allmulticast mode [ 271.121359][T15534] bond4: entered allmulticast mode [ 271.132193][T15534] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 271.309249][T13915] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.321027][T13915] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.332359][T13915] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 271.378584][T13908] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.392181][T13908] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.400845][T13908] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 271.427557][T13908] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.436360][T13908] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.444554][T13908] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 271.463964][T13908] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.473422][T13908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.483975][T13908] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 271.620131][T15571] veth1_to_hsr: default FDB implementation only supports local addresses [ 271.672480][T15569] syzkaller0: entered promiscuous mode [ 271.678530][T15569] syzkaller0: entered allmulticast mode [ 271.699749][T15569] netlink: 'syz.2.2719': attribute type 4 has an invalid length. [ 271.728932][T15579] xt_limit: Overflow, try lower: 604147548/4200216962 [ 271.880578][T15592] __nla_validate_parse: 10 callbacks suppressed [ 271.880596][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 273.051874][T15584] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 273.127136][T15601] sctp: [Deprecated]: syz.3.2725 (pid 15601) Use of int in maxseg socket option. [ 273.127136][T15601] Use struct sctp_assoc_value instead [ 273.367961][T15614] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2731'. [ 273.379085][T15617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2732'. [ 273.636766][T15626] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 273.662170][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 273.690080][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 273.702590][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 273.743461][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 273.752551][T15626] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 273.913445][T15653] netlink: 'syz.4.2743': attribute type 6 has an invalid length. [ 273.970343][T15657] netlink: 'syz.4.2743': attribute type 6 has an invalid length. [ 274.312093][T15633] vxcan1 speed is unknown, defaulting to 1000 [ 274.484387][T15680] veth0_to_team: left promiscuous mode [ 274.544032][T15680] batadv_slave_0: left promiscuous mode [ 274.592909][T15680] gretap2: left promiscuous mode [ 274.601977][T15680] xfrm1: left promiscuous mode [ 274.607781][T15680] bond2: left promiscuous mode [ 274.614152][T15680] geneve2: left promiscuous mode [ 274.634903][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 274.644772][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2752'. [ 274.654770][T15693] netlink: 'syz.0.2752': attribute type 11 has an invalid length. [ 274.667224][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 274.676715][T15693] netlink: 'syz.0.2752': attribute type 11 has an invalid length. [ 274.811390][T15696] netlink: 'syz.0.2753': attribute type 8 has an invalid length. [ 274.824141][T15696] bridge0: entered promiscuous mode [ 274.862453][T15696] netlink: 'syz.0.2753': attribute type 8 has an invalid length. [ 275.322965][T15722] IPVS: set_ctl: invalid protocol: 44 172.20.20.21:20000 [ 275.588427][T15735] netlink: 'syz.2.2764': attribute type 7 has an invalid length. [ 275.599780][T15733] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 276.067231][T15759] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 276.231668][T15780] tipc: Enabling of bearer rejected, already enabled [ 276.249769][T15780] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 276.257264][T15780] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 276.283680][T15780] ipt_REJECT: TCP_RESET invalid for non-tcp [ 276.499344][T15799] netlink: 'syz.1.2784': attribute type 10 has an invalid length. [ 276.698334][T15816] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 276.716072][T15816] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 276.728819][T15816] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 276.834574][T15823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.053747][T15835] 8021q: VLANs not supported on ip6_vti0 [ 277.072922][T15835] veth1: left promiscuous mode [ 277.088236][T15835] batadv_slave_0: left promiscuous mode [ 277.104180][T15835] sit2: left promiscuous mode [ 277.109863][T15840] __nla_validate_parse: 12 callbacks suppressed [ 277.109880][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2798'. [ 277.113776][T15835] ip6gretap2: left promiscuous mode [ 277.145819][T15839] delete_channel: no stack [ 277.213214][T15844] tipc: Enabling of bearer rejected, failed to enable media [ 277.227176][T15843] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2799'. [ 277.294558][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 277.333390][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 277.498696][T15863] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 277.662572][T15868] bond11: (slave gretap3): making interface the new active one [ 277.686704][T15868] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 277.915980][T15886] netlink: 'syz.0.2808': attribute type 9 has an invalid length. [ 278.205417][T15895] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2814'. [ 278.449463][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.459375][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.471687][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.480503][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.488576][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.516932][T15906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2818'. [ 278.723440][T15914] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 278.849720][T15903] vxcan1 speed is unknown, defaulting to 1000 [ 278.888336][T15921] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2825'. [ 278.998180][T15926] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2827'. [ 279.065260][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 279.236499][T15943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2831'. [ 279.255600][T15945] validate_nla: 4 callbacks suppressed [ 279.255619][T15945] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 279.509373][T15959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2837'. [ 279.775630][T15903] chnl_net:caif_netlink_parms(): no params data found [ 279.876351][T15991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.568306][T15903] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.590061][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.590133][ T5845] Bluetooth: hci3: command tx timeout [ 280.601048][T15903] bridge_slave_0: entered allmulticast mode [ 280.633797][T15903] bridge_slave_0: entered promiscuous mode [ 280.650481][T15903] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.666614][T15903] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.673881][T15903] bridge_slave_1: entered allmulticast mode [ 280.694787][T15903] bridge_slave_1: entered promiscuous mode [ 280.733619][T16021] veth0: entered promiscuous mode [ 280.859664][T16034] netlink: 'syz.4.2854': attribute type 1 has an invalid length. [ 280.872984][T16034] netlink: 'syz.4.2854': attribute type 3 has an invalid length. [ 280.884190][T16034] NCSI netlink: No device for ifindex 0 [ 280.900579][T15903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.939467][T16030] pim6reg: entered allmulticast mode [ 281.004234][T15903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.041739][T16030] pim6reg: left allmulticast mode [ 281.063857][T16042] bond0: Device is already in use. [ 281.157818][T15903] team0: Port device team_slave_0 added [ 281.189249][T15903] team0: Port device team_slave_1 added [ 281.318161][T15903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.335034][T15903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.380699][T15903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.407055][T15903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.417652][T15903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.444540][T15903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.457922][ T5845] block nbd0: Receive control failed (result -32) [ 281.743679][T16079] ip6t_srh: unknown srh invflags 4000 [ 281.755959][T15903] hsr_slave_0: entered promiscuous mode [ 281.762728][T15903] hsr_slave_1: entered promiscuous mode [ 281.792325][T15903] debugfs: 'hsr0' already exists in 'hsr' [ 281.801172][T15903] Cannot create hsr debugfs directory [ 281.958561][T16093] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 281.994637][T16087] bond5: Invalid ad_actor_system MAC address. [ 282.001710][T16087] bond5: option ad_actor_system: invalid value (1) [ 282.011601][T16087] bond5 (unregistering): Released all slaves [ 282.194101][T16107] __nla_validate_parse: 10 callbacks suppressed [ 282.194118][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 282.273841][T16110] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 282.659039][T15903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.665294][ T5845] Bluetooth: hci3: command tx timeout [ 282.680689][T15903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.789372][T15903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.800355][T15903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.835729][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'. [ 282.872245][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 282.945452][T15903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.967479][T15903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.989484][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'. [ 283.074802][T16147] netlink: 'syz.2.2889': attribute type 10 has an invalid length. [ 283.113530][T15903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.124188][T15903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.141860][T16144] tipc: Enabled bearer , priority 0 [ 283.150900][T16147] batman_adv: batadv0: Adding interface: team0 [ 283.158669][T16147] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.185177][T16147] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 283.211792][T16136] tipc: Disabling bearer [ 283.424155][T15903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.446822][T15903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.467253][T15903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.489868][T15903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.515876][T16167] tipc: Enabled bearer , priority 0 [ 283.569340][T16166] tipc: Disabling bearer [ 283.723113][T15903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.760514][T16142] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 283.773261][T15903] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.781158][T16184] xt_socket: unknown flags 0x50 [ 283.796148][T16187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2898'. [ 283.803982][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.812277][T13912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.858226][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.865443][T13912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.983536][T15903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.192284][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 284.246508][T16212] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 284.289919][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'. [ 284.292138][T16219] netlink: 'syz.4.2907': attribute type 10 has an invalid length. [ 284.301272][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 284.319095][T16219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2907'. [ 284.329325][T16212] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 284.365864][T16219] team0: Port device geneve0 added [ 284.412215][T15903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.482268][T16225] netlink: 'syz.0.2909': attribute type 1 has an invalid length. [ 284.491478][T16225] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2909'. [ 284.547907][T15903] veth0_vlan: entered promiscuous mode [ 284.568625][T16231] netlink: 'syz.1.2908': attribute type 21 has an invalid length. [ 284.571119][T15903] veth1_vlan: entered promiscuous mode [ 284.587196][T16231] netlink: 'syz.1.2908': attribute type 5 has an invalid length. [ 284.673676][T15903] veth0_macvtap: entered promiscuous mode [ 284.697079][T15903] veth1_macvtap: entered promiscuous mode [ 284.721328][T15903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.746525][ T5845] Bluetooth: hci3: command tx timeout [ 284.755507][T15903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.767242][T16235] sctp: [Deprecated]: syz.1.2911 (pid 16235) Use of int in maxseg socket option. [ 284.767242][T16235] Use struct sctp_assoc_value instead [ 284.782352][T13908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.854292][T13908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.871911][T13908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.893207][T13908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.065743][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 285.141236][T13908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.169012][T13908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.236724][T13912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.244698][T13912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.317800][T16260] syzkaller1: entered promiscuous mode [ 285.338221][T16260] syzkaller1: entered allmulticast mode [ 285.942929][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.960199][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.968951][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.977697][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.985658][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.350758][T16281] vxcan1 speed is unknown, defaulting to 1000 [ 286.826339][ T5845] Bluetooth: hci3: command tx timeout [ 286.968268][T16333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.054913][T16333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.119905][T16333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.165431][T16333] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.189061][T16325] vxcan1 speed is unknown, defaulting to 1000 [ 287.243657][T16343] ip6erspan1: entered promiscuous mode [ 287.252573][T16343] ip6erspan1: entered allmulticast mode [ 287.293192][T16333] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.300634][T16333] __nla_validate_parse: 13 callbacks suppressed [ 287.300649][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2935'. [ 287.369757][T16333] 8021q: adding VLAN 0 to HW filter on device bond10 [ 287.378757][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2935'. [ 287.449680][T16333] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.462900][T16354] netlink: 'syz.1.2938': attribute type 4 has an invalid length. [ 287.481154][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2935'. [ 287.605117][T16333] 8021q: adding VLAN 0 to HW filter on device bond12 [ 287.621966][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2935'. [ 287.648048][T16334] lo speed is unknown, defaulting to 1000 [ 287.680909][T16333] 8021q: adding VLAN 0 to HW filter on device bond13 [ 287.701038][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2935'. [ 287.747477][T16365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2941'. [ 287.758373][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2941'. [ 287.765375][T16333] 8021q: adding VLAN 0 to HW filter on device bond14 [ 287.774257][T16365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2941'. [ 287.780403][T16334] lo speed is unknown, defaulting to 1000 [ 287.795974][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2941'. [ 287.829317][T16365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2941'. [ 287.850258][T16334] lo speed is unknown, defaulting to 1000 [ 288.030548][ T5845] Bluetooth: hci5: command tx timeout [ 288.098881][T16375] IPVS: persistence engine module ip_vs_pe_À not found [ 288.203215][T16281] chnl_net:caif_netlink_parms(): no params data found [ 288.226574][T16380] tipc: Enabled bearer , priority 0 [ 288.282699][T16379] tipc: Disabling bearer [ 288.546159][T16334] infiniband syz0: set down [ 288.550779][T16334] infiniband syz0: added lo [ 288.567578][T16334] syz0: rxe_create_cq: returned err = -12 [ 288.577724][T16334] infiniband syz0: Couldn't create ib_mad CQ [ 288.583889][T16334] infiniband syz0: Couldn't open port 1 [ 288.703517][T16334] RDS/IB: syz0: added [ 288.718379][T16334] smc: adding ib device syz0 with port count 1 [ 288.726277][T16334] smc: ib device syz0 port 1 has no pnetid [ 288.733173][ T1556] lo speed is unknown, defaulting to 1000 [ 288.742463][T16399] bridge5: entered allmulticast mode [ 288.761786][ T1556] lo speed is unknown, defaulting to 1000 [ 288.761965][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.777034][T16281] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.784328][T16281] bridge_slave_0: entered allmulticast mode [ 288.795208][T16281] bridge_slave_0: entered promiscuous mode [ 288.804898][T16334] lo speed is unknown, defaulting to 1000 [ 288.857856][T16405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.870430][T16405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 288.902004][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.909799][ T5845] Bluetooth: hci3: command tx timeout [ 288.916026][T16281] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.923395][T16281] bridge_slave_1: entered allmulticast mode [ 288.931901][T16281] bridge_slave_1: entered promiscuous mode [ 288.992875][T16405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.003401][T16405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.061451][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.103196][T16405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.113868][T16405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.129344][T16334] lo speed is unknown, defaulting to 1000 [ 289.131985][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.217848][T16405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.246119][T16405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.301383][T16281] team0: Port device team_slave_0 added [ 289.322735][T16281] team0: Port device team_slave_1 added [ 289.374465][T16410] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 289.438108][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.456166][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.504748][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.523476][T16334] lo speed is unknown, defaulting to 1000 [ 289.531478][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.555019][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.591925][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.670126][T13912] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.678777][T13912] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 289.827359][T13913] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.837033][T13913] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 289.869460][T16281] hsr_slave_0: entered promiscuous mode [ 289.878828][T16281] hsr_slave_1: entered promiscuous mode [ 289.885538][T16281] debugfs: 'hsr0' already exists in 'hsr' [ 289.891315][T16281] Cannot create hsr debugfs directory [ 289.897219][T13913] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.906964][T13913] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 289.918061][T16433] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 289.947123][T13912] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.955568][T13912] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.046447][T16334] lo speed is unknown, defaulting to 1000 [ 290.066572][T16439] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 290.085725][T16439] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 290.093773][T16439] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 290.113486][ T5845] Bluetooth: hci5: command tx timeout [ 290.119773][T16439] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 290.156245][T16436] syzkaller0: entered promiscuous mode [ 290.161763][T16436] syzkaller0: entered allmulticast mode [ 291.726084][T16334] lo speed is unknown, defaulting to 1000 [ 291.879330][T16281] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.900564][T16281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.925340][T16281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.033008][T16281] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.049392][T16281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.064307][T16281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.187264][ T5845] Bluetooth: hci5: command tx timeout [ 292.268088][T16281] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.303379][T16281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.346207][T16281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.391300][T16334] lo speed is unknown, defaulting to 1000 [ 292.451445][T16281] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.474718][T16281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.536090][T16281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.584238][T16506] __nla_validate_parse: 68 callbacks suppressed [ 292.584257][T16506] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2975'. [ 292.655986][T16507] veth0_to_team: entered promiscuous mode [ 292.841805][T16517] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 292.947707][T16281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.972341][T16281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.068622][T16526] netlink: 'syz.4.2980': attribute type 10 has an invalid length. [ 293.128897][T16281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.140974][T16281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.326095][T16334] lo speed is unknown, defaulting to 1000 [ 293.661817][T16281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.754750][T16281] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.796402][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.803549][T13913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.851557][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.858800][T13913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.210690][T16565] 8021q: VLANs not supported on sit0 [ 294.271326][ T5845] Bluetooth: hci5: command tx timeout [ 294.342444][T16575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2990'. [ 294.457295][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.612812][T16281] veth0_vlan: entered promiscuous mode [ 294.613051][T16588] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 294.652562][T16588] nbd: couldn't find a device at index 7274755 [ 294.666938][T16281] veth1_vlan: entered promiscuous mode [ 294.771832][T16281] veth0_macvtap: entered promiscuous mode [ 294.798936][T16281] veth1_macvtap: entered promiscuous mode [ 294.876317][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.902414][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.013066][T13913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.052386][T13913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.090033][T13909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.167214][T13909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.232875][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2998'. [ 295.425244][T13912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.445180][T13912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.548924][T13912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.585618][T13912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.806462][T16598] vxcan1 speed is unknown, defaulting to 1000 [ 295.983155][T16628] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.3003'. [ 296.144367][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 296.257262][T16598] lo speed is unknown, defaulting to 1000 [ 296.459048][T16642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3009'. [ 297.464892][T16678] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 297.553529][T16682] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 297.796192][T16686] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.3022'. [ 297.797784][T16678] 8021q: adding VLAN 0 to HW filter on device bond15 [ 297.851052][T16682] batman_adv: batadv0: Adding interface: netdevsim0 [ 297.905083][T16682] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.005190][T16682] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 298.099827][T16684] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 298.123147][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.145713][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.154892][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.171621][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.181930][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.308045][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3027'. [ 298.734225][T16702] nbd1: detected capacity change from 0 to 127 [ 299.108105][ T5148] block nbd1: Receive control failed (result -104) [ 299.337246][T13913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.400504][T13913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.733590][T16694] vxcan1 speed is unknown, defaulting to 1000 [ 299.740876][T16720] SET target dimension over the limit! [ 299.761081][T16721] SET target dimension over the limit! [ 300.077596][T16694] lo speed is unknown, defaulting to 1000 [ 300.266431][ T5148] Bluetooth: hci0: command tx timeout [ 300.564913][T13913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.594324][T13913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.638038][ T5886] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 300.646033][ T5886] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 300.656392][ T5886] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 300.666431][ T5886] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 300.674098][ T5886] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 300.681868][ T5886] hid-generic 0005:0C45:1012.0001: unexpected long global item [ 300.692612][ T5886] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 300.791591][T13913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.821773][T13913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.863320][T16694] chnl_net:caif_netlink_parms(): no params data found [ 300.927948][T13913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.947207][T13913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.110307][T16771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3044'. [ 301.202697][T16694] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.208587][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049ca9400: rx timeout, send abort [ 301.211926][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.218120][ C0] vcan0: j1939_tp_rxtimer: 0xffff888049ca9800: rx timeout, send abort [ 301.220141][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888049ca9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.227301][T16694] bridge_slave_0: entered allmulticast mode [ 301.277121][T16775] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 301.284591][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 301.303399][T16694] bridge_slave_0: entered promiscuous mode [ 301.307197][ T7441] IPVS: starting estimator thread 0... [ 301.353651][T16694] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.373778][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.384685][T16694] bridge_slave_1: entered allmulticast mode [ 301.394521][T16694] bridge_slave_1: entered promiscuous mode [ 301.407015][T16777] IPVS: using max 27 ests per chain, 64800 per kthread [ 301.552102][T16694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.574348][T16786] netlink: 'syz.1.3049': attribute type 10 has an invalid length. [ 301.579405][T16694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.646607][T16786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3049'. [ 301.649201][T13913] batman_adv: batadv0: Interface deactivated: gretap1 [ 302.228889][T13913] batman_adv: batadv0: Removing interface: gretap1 [ 302.345694][ T5148] Bluetooth: hci0: command tx timeout [ 302.372693][T13913] dvmrp1 (unregistering): left allmulticast mode [ 302.410446][T13913] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 302.419627][T13913] geneve1 (unregistering): left promiscuous mode [ 302.440579][T13913] team0: Port device geneve0 removed [ 302.833975][T13913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.843515][T13913] bond_slave_0: left promiscuous mode [ 302.852190][T13913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.861599][T13913] bond_slave_1: left promiscuous mode [ 302.868846][T13913] bond0 (unregistering): (slave bond1): Releasing backup interface [ 302.877865][T13913] bond1 (unregistering): left promiscuous mode [ 302.884268][T13913] bond0 (unregistering): Released all slaves [ 302.982862][T13913] bond1 (unregistering): Released all slaves [ 303.077383][T13913] bond2 (unregistering): Released all slaves [ 303.171034][T13913] bond3 (unregistering): Released all slaves [ 303.192970][T16786] geneve0: left promiscuous mode [ 303.198535][T16786] geneve0: left allmulticast mode [ 303.209832][T16786] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 303.409373][T16694] team0: Port device team_slave_0 added [ 303.433864][T16694] team0: Port device team_slave_1 added [ 303.441248][T16816] netlink: 'syz.3.3053': attribute type 1 has an invalid length. [ 303.516714][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'. [ 303.532195][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3055'. [ 303.558975][T16816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.567250][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 303.595733][T16824] bond1: (slave geneve2): making interface the new active one [ 303.608218][T16824] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 303.629551][T16823] veth0_macvtap: left promiscuous mode [ 303.692478][T16694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.700937][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.765076][T16694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.787744][T16694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.797924][T16837] netlink: 'syz.1.3058': attribute type 1 has an invalid length. [ 303.806828][T16694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.840632][T16694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.851745][T16837] netlink: 'syz.1.3058': attribute type 3 has an invalid length. [ 303.863811][T16837] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3058'. [ 303.880070][T13912] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.913273][T13912] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.988522][T16846] x_tables: duplicate underflow at hook 2 [ 304.007336][T13912] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.026777][T13912] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.223745][T16694] hsr_slave_0: entered promiscuous mode [ 304.237947][T16694] hsr_slave_1: entered promiscuous mode [ 304.250324][T16694] debugfs: 'hsr0' already exists in 'hsr' [ 304.266679][T16694] Cannot create hsr debugfs directory [ 304.427396][ T5148] Bluetooth: hci0: command tx timeout [ 304.455817][T16863] 0ªî{X¹¦: left allmulticast mode [ 304.930257][T16863] bridge_slave_0: left allmulticast mode [ 304.938938][T16863] bridge_slave_0: left promiscuous mode [ 304.944962][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.979920][T16863] bond_slave_1: left promiscuous mode [ 304.991913][T16863] bond_slave_1: left allmulticast mode [ 305.024832][T16863] batadv_slave_0: left promiscuous mode [ 305.030802][T16863] batadv_slave_0: left allmulticast mode [ 305.054477][T16863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.213553][ T5893] vxcan1 speed is unknown, defaulting to 1000 [ 305.237402][ T5893] syz2: Port: 1 Link DOWN [ 305.242964][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 305.483972][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3073'. [ 305.508669][T16908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.526361][T16908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.542876][T16908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.582749][T16908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.653988][T16920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.720514][T13913] tipc: Left network mode [ 305.741993][T16913] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 305.767357][T13913] IPVS: stopping master sync thread 9790 ... [ 306.008470][T16931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 306.142622][T16935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3080'. [ 306.178637][T16935] netlink: 'syz.2.3080': attribute type 21 has an invalid length. [ 306.342980][T16935] bond16: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 306.358022][T16935] bond16 (unregistering): Released all slaves [ 306.400840][T16945] netlink: 'syz.1.3082': attribute type 1 has an invalid length. [ 306.421908][T16947] syz.0.3084: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 306.446005][T16947] CPU: 0 UID: 0 PID: 16947 Comm: syz.0.3084 Not tainted syzkaller #0 PREEMPT(full) [ 306.446033][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.446050][T16947] Call Trace: [ 306.446058][T16947] [ 306.446067][T16947] dump_stack_lvl+0x189/0x250 [ 306.446096][T16947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.446117][T16947] ? __pfx__printk+0x10/0x10 [ 306.446137][T16947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 306.446158][T16947] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 306.446179][T16947] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 306.446202][T16947] warn_alloc+0x214/0x310 [ 306.446225][T16947] ? stack_depot_save_flags+0x40/0x860 [ 306.446248][T16947] ? __pfx_warn_alloc+0x10/0x10 [ 306.446272][T16947] ? kasan_save_track+0x3e/0x80 [ 306.446290][T16947] ? __kasan_kmalloc+0x93/0xb0 [ 306.446312][T16947] ? xsk_setsockopt+0x4dc/0x8d0 [ 306.446335][T16947] ? do_sock_setsockopt+0x17c/0x1b0 [ 306.446360][T16947] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 306.446383][T16947] ? do_syscall_64+0xfa/0xfa0 [ 306.446400][T16947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.446429][T16947] __vmalloc_node_range_noprof+0x125/0x12d0 [ 306.446481][T16947] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.446505][T16947] ? __kasan_kmalloc+0x93/0xb0 [ 306.446532][T16947] vmalloc_user_noprof+0xad/0xf0 [ 306.446552][T16947] ? xskq_create+0xbf/0x170 [ 306.446578][T16947] xskq_create+0xbf/0x170 [ 306.446607][T16947] xsk_init_queue+0xb0/0x110 [ 306.446635][T16947] xsk_setsockopt+0x4dc/0x8d0 [ 306.446663][T16947] ? __pfx_xsk_setsockopt+0x10/0x10 [ 306.446691][T16947] ? __pfx_aa_sk_perm+0x10/0x10 [ 306.446712][T16947] ? aa_sock_opt_perm+0xff/0x1b0 [ 306.446742][T16947] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 306.446765][T16947] ? __pfx_xsk_setsockopt+0x10/0x10 [ 306.446791][T16947] do_sock_setsockopt+0x17c/0x1b0 [ 306.446822][T16947] __x64_sys_setsockopt+0x13f/0x1b0 [ 306.446853][T16947] do_syscall_64+0xfa/0xfa0 [ 306.446869][T16947] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.446886][T16947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.446904][T16947] ? clear_bhb_loop+0x60/0xb0 [ 306.446926][T16947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.446944][T16947] RIP: 0033:0x7fc85318efc9 [ 306.446960][T16947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.446976][T16947] RSP: 002b:00007fc854018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.446997][T16947] RAX: ffffffffffffffda RBX: 00007fc8533e5fa0 RCX: 00007fc85318efc9 [ 306.447010][T16947] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 306.447022][T16947] RBP: 00007fc853211f91 R08: 0000000000000004 R09: 0000000000000000 [ 306.447034][T16947] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.447046][T16947] R13: 00007fc8533e6038 R14: 00007fc8533e5fa0 R15: 00007fff2121c948 [ 306.447079][T16947] [ 306.447086][T16947] Mem-Info: [ 306.528801][ T5148] Bluetooth: hci0: command tx timeout [ 306.534897][T16947] active_anon:5745 inactive_anon:0 isolated_anon:0 [ 306.534897][T16947] active_file:2821 inactive_file:39963 isolated_file:0 [ 306.534897][T16947] unevictable:768 dirty:53 writeback:0 [ 306.534897][T16947] slab_reclaimable:12430 slab_unreclaimable:120218 [ 306.534897][T16947] mapped:29279 shmem:1367 pagetables:1227 [ 306.534897][T16947] sec_pagetables:0 bounce:0 [ 306.534897][T16947] kernel_misc_reclaimable:0 [ 306.534897][T16947] free:1294882 free_pcp:16446 free_cma:0 [ 306.829370][T16947] Node 0 active_anon:23100kB inactive_anon:0kB active_file:11284kB inactive_file:159648kB unevictable:4648kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:132kB writeback:24kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16000kB pagetables:5056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.968204][T16947] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.021805][T16963] netlink: 1176 bytes leftover after parsing attributes in process `syz.2.3088'. [ 307.024809][T16947] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.129299][T16947] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 307.138515][T16947] Node 0 DMA32 free:1264372kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33536kB inactive_anon:0kB active_file:11284kB inactive_file:159648kB unevictable:3748kB writepending:156kB zspages:0kB present:3129332kB managed:2561620kB mlocked:2100kB bounce:0kB free_pcp:45608kB local_pcp:25516kB free_cma:0kB [ 307.221780][T16947] lowmem_reserve[]: 0 0 1 1 1 [ 307.233577][T16947] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.291228][T16947] lowmem_reserve[]: 0 0 0 0 0 [ 307.297275][T16947] Node 1 Normal free:3891368kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17324kB local_pcp:6572kB free_cma:0kB [ 307.335125][T16963] hsr_slave_1 (unregistering): left promiscuous mode [ 307.360854][T16947] lowmem_reserve[]: 0 0 0 0 0 [ 307.376932][T16947] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 307.391489][T16947] Node 0 DMA32: 521*4kB (ME) 454*8kB (UME) 153*16kB (M) 343*32kB (UM) 68*64kB (UME) 51*128kB (UM) 22*256kB (UME) 12*512kB (UME) 3*1024kB (ME) 1*2048kB (U) 300*4096kB (UM) = 1275716kB [ 307.430010][T16947] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 307.463828][T16947] Node 1 Normal: 192*4kB (UME) 49*8kB (UME) 42*16kB (UME) 98*32kB (UME) 37*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891368kB [ 307.486889][T16947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.515778][T16694] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.544065][T16947] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.567434][T16694] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.574341][T16947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.587092][T16985] netlink: 'syz.1.3092': attribute type 1 has an invalid length. [ 307.634564][T16947] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.676500][T16947] 44147 total pagecache pages [ 307.681353][T16947] 0 pages in swap cache [ 307.711593][T16947] Free swap = 124996kB [ 307.721843][T16947] Total swap = 124996kB [ 307.726506][T16947] 2097051 pages RAM [ 307.730327][T16947] 0 pages HighMem/MovableOnly [ 307.736484][T16947] 424556 pages reserved [ 307.740661][T16947] 0 pages cma reserved [ 307.798305][T16985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.823909][T16694] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.839631][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3095'. [ 307.930114][T16981] bond5: (slave veth1): Enslaving as an active interface with a down link [ 307.947244][T16990] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 307.977833][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 308.085476][T16694] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.147440][T17014] netlink: 'syz.2.3099': attribute type 5 has an invalid length. [ 308.166876][T17016] netlink: 'syz.1.3098': attribute type 5 has an invalid length. [ 308.405714][T17038] netlink: 'syz.2.3101': attribute type 33 has an invalid length. [ 308.682503][T17038] bond16: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 308.709267][T17038] bond16 (unregistering): Released all slaves [ 308.972929][T13913] hsr_slave_0: left promiscuous mode [ 309.007946][T13913] hsr_slave_1: left promiscuous mode [ 309.019923][T13913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.062594][T13913] veth1_macvtap: left promiscuous mode [ 309.569609][T13913] team0 (unregistering): Port device team_slave_1 removed [ 309.613084][T13913] team0 (unregistering): Port device team_slave_0 removed [ 310.108958][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 310.367889][T17103] ip6gre2: entered allmulticast mode [ 310.662158][T16694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.792696][T17129] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 310.797202][T16694] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.891380][T17129] netlink: 'syz.1.3118': attribute type 29 has an invalid length. [ 310.921159][T17138] netlink: 'syz.1.3118': attribute type 29 has an invalid length. [ 310.944534][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.951752][T17020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.967453][T17129] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3118'. [ 311.016523][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.023685][T17020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.118243][T17154] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 311.147887][T17154] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 311.169421][T17154] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3123'. [ 311.287133][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3126'. [ 311.348733][T17169] sctp: [Deprecated]: syz.0.3128 (pid 17169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.348733][T17169] Use struct sctp_sack_info instead [ 311.510307][T17174] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 311.606244][T17186] Bluetooth: MGMT ver 1.23 [ 311.612675][T17186] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 311.626305][T17188] netlink: 'syz.2.3131': attribute type 21 has an invalid length. [ 311.676465][T17174] macvlan2: entered promiscuous mode [ 311.693217][T17174] macvlan2: entered allmulticast mode [ 311.737013][T17174] bond2: entered promiscuous mode [ 311.748805][T17174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.776478][T17174] bond2: left promiscuous mode [ 311.913973][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3133'. [ 311.960691][T17204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3133'. [ 311.971277][T16694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.300649][T17228] tipc: Started in network mode [ 312.315455][T17228] tipc: Node identity ac14142f, cluster identity 4711 [ 312.331690][T17228] tipc: New replicast peer: 0.0.0.0 [ 312.351059][T17228] tipc: Enabled bearer , priority 10 [ 312.372374][T17232] tipc: New replicast peer: 255.255.255.255 [ 312.761529][T17248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3140'. [ 312.785764][T17248] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 312.820363][T17254] syzkaller0: entered promiscuous mode [ 312.835513][T17254] syzkaller0: entered allmulticast mode [ 312.899859][T16694] veth0_vlan: entered promiscuous mode [ 312.912829][T16694] veth1_vlan: entered promiscuous mode [ 312.962172][T17263] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 313.022095][T17268] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 313.069647][T16694] veth0_macvtap: entered promiscuous mode [ 313.116609][T16694] veth1_macvtap: entered promiscuous mode [ 313.238220][T17280] netlink: 'syz.3.3144': attribute type 21 has an invalid length. [ 313.243575][T16694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.282040][T17280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3144'. [ 313.320276][T16694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.511746][ T7481] tipc: Node number set to 2886997039 [ 313.552667][ T6765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.586623][ T6765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.627758][T13908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.656975][T13908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.809300][T13904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.827552][T13904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.919171][T13904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.939509][T13904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.159984][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 314.179023][T17311] netlink: 'syz.4.3018': attribute type 1 has an invalid length. [ 314.646449][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3151'. [ 315.180005][T13905] smc: removing ib device syz1 [ 315.241600][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.252143][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.262048][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.272816][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.280948][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.391138][T17362] IPVS: length: 86 != 24 [ 315.422677][T17355] vxcan1 speed is unknown, defaulting to 1000 [ 316.271409][T17355] lo speed is unknown, defaulting to 1000 [ 316.350759][T17403] __nla_validate_parse: 2 callbacks suppressed [ 316.350787][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 316.716315][T17421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3177'. [ 317.236112][T17451] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3188'. [ 317.300360][T17451] vlan2: entered allmulticast mode [ 317.305523][ T5148] Bluetooth: hci1: command tx timeout [ 317.324352][T17451] gretap0: entered allmulticast mode [ 317.417881][T17454] ip6_vti0: entered allmulticast mode [ 317.445691][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3189'. [ 317.627086][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3192'. [ 318.031084][T17482] netlink: 'syz.0.3195': attribute type 2 has an invalid length. [ 318.051730][T17489] netlink: 'syz.1.3197': attribute type 1 has an invalid length. [ 318.143062][T17355] chnl_net:caif_netlink_parms(): no params data found [ 318.165602][T17496] sctp: [Deprecated]: syz.0.3199 (pid 17496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.165602][T17496] Use struct sctp_sack_info instead [ 318.196922][T17492] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.208214][T17492] bond6: (slave bond7): making interface the new active one [ 318.219129][T17492] bond6: (slave bond7): Enslaving as an active interface with an up link [ 318.353980][T17496] vxcan1 speed is unknown, defaulting to 1000 [ 318.440249][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.464608][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.481219][T17355] bridge_slave_0: entered allmulticast mode [ 318.494285][T17355] bridge_slave_0: entered promiscuous mode [ 318.516517][T17514] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3202'. [ 318.576397][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.593935][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.603448][T17355] bridge_slave_1: entered allmulticast mode [ 318.618814][T17355] bridge_slave_1: entered promiscuous mode [ 318.664859][T17496] lo speed is unknown, defaulting to 1000 [ 318.690361][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 318.698600][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.702252][T17519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3204'. [ 318.778338][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.833587][T17523] : renamed from bridge_slave_0 (while UP) [ 318.875816][T17355] team0: Port device team_slave_0 added [ 318.893903][T17355] team0: Port device team_slave_1 added [ 318.937042][T17529] netlink: 'syz.1.3206': attribute type 10 has an invalid length. [ 319.010893][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.025935][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.052889][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.070712][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.079361][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.106052][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.275398][T17355] hsr_slave_0: entered promiscuous mode [ 319.284059][T17355] hsr_slave_1: entered promiscuous mode [ 319.311237][T17355] debugfs: 'hsr0' already exists in 'hsr' [ 319.325040][T17355] Cannot create hsr debugfs directory [ 319.387731][ T5148] Bluetooth: hci1: command tx timeout [ 319.820319][T17548] vxcan1 speed is unknown, defaulting to 1000 [ 319.860810][T17564] netlink: 'syz.3.3213': attribute type 11 has an invalid length. [ 319.897448][T17564] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3213'. [ 319.987773][T17566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'. [ 320.173512][T17570] tipc: Started in network mode [ 320.182807][T17570] tipc: Node identity 0a8e7da0609e, cluster identity 4711 [ 320.191078][T17570] tipc: Enabled bearer , priority 0 [ 320.240402][T17355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.272547][T17573] tipc: Enabling of bearer rejected, already enabled [ 320.295888][T17570] syzkaller0: entered promiscuous mode [ 320.310869][T17570] syzkaller0: entered allmulticast mode [ 320.362828][T17578] IPVS: length: 4096 != 24 [ 320.386375][T17355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.403572][T17574] tipc: Resetting bearer [ 320.424743][T17574] tipc: Disabling bearer [ 320.452879][T17548] lo speed is unknown, defaulting to 1000 [ 320.470335][T17580] Bluetooth: MGMT ver 1.23 [ 320.492196][T17355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.551120][T17582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 320.609217][T17355] batman_adv: batadv0: Removing interface: netdevsim0 [ 320.822529][T17355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.846032][T17355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.869594][T17355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.903430][T17355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.318214][T17355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.381703][T17355] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.422942][T13915] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.430170][T13915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.481202][ T5148] Bluetooth: hci1: command tx timeout [ 321.759858][T13915] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.767087][T13915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.380983][T17355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.497360][T17355] veth0_vlan: entered promiscuous mode [ 322.524300][T17659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.539619][T17355] veth1_vlan: entered promiscuous mode [ 322.612362][T17355] veth0_macvtap: entered promiscuous mode [ 322.637079][T17355] veth1_macvtap: entered promiscuous mode [ 322.674884][T17665] __nla_validate_parse: 1 callbacks suppressed [ 322.674901][T17665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3240'. [ 322.693705][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.781493][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.804254][T17668] netlink: 'syz.1.3241': attribute type 4 has an invalid length. [ 322.858007][ T6765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.868268][ T6765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.902238][ T6765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.921215][ T6765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.054390][T13915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.075547][T13915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.126526][T17686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.145440][T13915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.153408][T13915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.165321][T17686] netlink: 'syz.4.3248': attribute type 1 has an invalid length. [ 323.292350][T17692] bond1: (slave bridge1): making interface the new active one [ 323.292796][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 323.300800][T17692] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 323.523780][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3253'. [ 323.534114][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3253'. [ 323.543772][T17711] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 323.556129][ T5148] Bluetooth: hci1: command tx timeout [ 323.704231][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 323.718799][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 323.835931][T17719] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3255'. [ 324.001040][T17740] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 324.037968][T17741] tipc: Started in network mode [ 324.045561][T17741] tipc: Node identity 6ab32e1a1abf, cluster identity 4711 [ 324.052869][T17741] tipc: Enabled bearer , priority 0 [ 324.080017][T17741] syzkaller0: entered promiscuous mode [ 324.086080][T17741] syzkaller0: entered allmulticast mode [ 324.149292][T17741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3263'. [ 324.181972][T17741] veth1_to_team: mtu less than device minimum [ 324.213584][T17739] tipc: Resetting bearer [ 324.258558][T17739] tipc: Disabling bearer [ 324.534208][T17748] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3267'. [ 324.736545][T17758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3271'. [ 324.754138][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.763988][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.773574][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.781969][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.790468][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.871061][T17757] vxcan1 speed is unknown, defaulting to 1000 [ 325.134079][T17778] netlink: 'syz.3.3276': attribute type 12 has an invalid length. [ 325.279050][T17757] lo speed is unknown, defaulting to 1000 [ 326.071648][T17757] chnl_net:caif_netlink_parms(): no params data found [ 326.381401][T17834] tc_dump_action: action bad kind [ 326.503974][T17757] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.520012][T17757] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.534661][T17757] bridge_slave_0: entered allmulticast mode [ 326.552878][T17757] bridge_slave_0: entered promiscuous mode [ 326.565647][T17757] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.586029][T17757] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.601939][T17757] bridge_slave_1: entered allmulticast mode [ 326.610294][T17757] bridge_slave_1: entered promiscuous mode [ 326.743098][T17846] syzkaller0: entered promiscuous mode [ 326.753185][T17846] syzkaller0: entered allmulticast mode [ 326.777502][T17857] netlink: 'syz.4.3295': attribute type 1 has an invalid length. [ 326.832518][ T5845] Bluetooth: hci2: command tx timeout [ 326.883400][T17757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.900465][T17757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.514557][T17857] bond2: entered promiscuous mode [ 328.519854][T17857] bond2: entered allmulticast mode [ 328.526271][T17857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.542390][T17869] gretap1: entered promiscuous mode [ 328.570219][T17869] bond2: (slave gretap1): making interface the new active one [ 328.580171][T17869] gretap1: entered allmulticast mode [ 328.590518][T17869] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 328.627999][T17881] __nla_validate_parse: 7 callbacks suppressed [ 328.628018][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3299'. [ 328.664582][T17757] team0: Port device team_slave_0 added [ 328.769461][T17757] team0: Port device team_slave_1 added [ 328.863737][T17757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.879420][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.905476][ T5845] Bluetooth: hci2: command tx timeout [ 328.915918][T17757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.921330][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 328.929427][T17757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.944162][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.973931][T17757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.078500][T17900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3303'. [ 329.133184][T17757] hsr_slave_0: entered promiscuous mode [ 329.141128][T17757] hsr_slave_1: entered promiscuous mode [ 329.158263][T17757] debugfs: 'hsr0' already exists in 'hsr' [ 329.164165][T17757] Cannot create hsr debugfs directory [ 329.170991][T17906] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.3306'. [ 329.181117][T17906] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 329.282719][T17911] netlink: 'syz.0.3308': attribute type 25 has an invalid length. [ 329.322855][ T95] block nbd1: Possible stuck request ffff888025227000: control (read@0,1024B). Runtime 30 seconds [ 329.337132][ T95] block nbd1: Possible stuck request ffff8880252271c0: control (read@1024,1024B). Runtime 30 seconds [ 329.350106][ T95] block nbd1: Possible stuck request ffff888025227380: control (read@2048,1024B). Runtime 30 seconds [ 329.362306][ T95] block nbd1: Possible stuck request ffff888025227540: control (read@3072,1024B). Runtime 30 seconds [ 329.503221][T17757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.521354][T17757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.562234][T17921] batadv1: entered allmulticast mode [ 329.586537][T17757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.597196][T17757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.653672][T17757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.665254][T17757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.771803][T17757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.799653][T17757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.824858][T17940] netlink: 'syz.3.3315': attribute type 39 has an invalid length. [ 329.921731][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3317'. [ 330.124436][T17757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.141352][T17757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.151467][T17757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.161423][T17757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.233596][T17757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.254181][T17757] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.268251][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.275439][ T6765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.292305][T13886] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.299562][T13886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.591361][T17980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3323'. [ 330.801077][T17757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.878205][T17996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3326'. [ 330.924370][T17996] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3326'. [ 330.961419][T17757] veth0_vlan: entered promiscuous mode [ 330.985310][ T5845] Bluetooth: hci2: command tx timeout [ 330.993431][T17757] veth1_vlan: entered promiscuous mode [ 331.059097][T18000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 331.076495][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 331.087550][T17757] veth0_macvtap: entered promiscuous mode [ 331.116368][T17757] veth1_macvtap: entered promiscuous mode [ 331.169122][T17757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.199020][T17757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.242161][T13915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.259857][T13915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.316470][T13915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.334574][T13915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.666383][T13909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.688230][T13909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.795219][T13912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.808319][T13912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.089930][T18037] : entered promiscuous mode [ 332.103775][T18041] xt_l2tp: v2 doesn't support IP mode [ 332.466789][T18066] tipc: Enabled bearer , priority 0 [ 332.495719][T18066] syzkaller0: entered promiscuous mode [ 332.514244][T18066] syzkaller0: entered allmulticast mode [ 332.549455][T18071] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 332.592284][T18066] tipc: Resetting bearer [ 332.642025][T18064] tipc: Resetting bearer [ 332.728937][T18064] tipc: Disabling bearer [ 332.880276][T18088] veth0_to_bridge: entered promiscuous mode [ 332.893592][T18088] veth0_to_bridge: entered allmulticast mode [ 332.901912][T18091] tipc: Started in network mode [ 332.908762][T18091] tipc: Node identity ac1414aa, cluster identity 4711 [ 332.916484][T18091] tipc: Enabling of bearer rejected, failed to enable media [ 332.949521][T18097] team_slave_0: entered promiscuous mode [ 332.955578][T18097] team_slave_1: entered promiscuous mode [ 332.963270][T18097] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 333.001434][T18099] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 333.066896][ T5845] Bluetooth: hci2: command tx timeout [ 333.103881][T18104] syz_tun: entered allmulticast mode [ 333.238459][T18104] syz_tun: left allmulticast mode [ 333.647987][T18154] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 333.659001][T18114] __nla_validate_parse: 3 callbacks suppressed [ 333.659019][T18114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3359'. [ 333.703160][T18159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3370'. [ 333.741838][T18159] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 334.279968][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 334.430053][T18210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'. [ 334.470022][T18208] syzkaller1: entered promiscuous mode [ 334.476926][T18208] syzkaller1: entered allmulticast mode [ 334.519472][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 334.555677][T18211] netlink: 'syz.1.3383': attribute type 1 has an invalid length. [ 334.603753][T18211] netlink: 'syz.1.3383': attribute type 1 has an invalid length. [ 334.662579][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'. [ 334.730556][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'. [ 334.888867][T18235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3390'. [ 334.980512][T18233] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 335.029100][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 335.083306][T18242] veth0_macvtap: left promiscuous mode [ 335.085274][T18248] Cannot find add_set index 0 as target [ 335.301944][T18260] siw: device registration error -23 [ 335.377566][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3399'. [ 335.418449][T18268] veth0: entered promiscuous mode [ 335.427705][T18267] veth0: left promiscuous mode [ 336.086351][T18313] netlink: 'syz.1.3412': attribute type 7 has an invalid length. [ 336.120070][T18313] netlink: 'syz.1.3412': attribute type 11 has an invalid length. [ 336.372726][T18321] tipc: Enabled bearer , priority 0 [ 336.380781][T18321] syzkaller0: entered promiscuous mode [ 336.381421][T18325] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 336.389845][T18321] syzkaller0: entered allmulticast mode [ 336.401050][T18325] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 336.423464][T18325] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 336.427507][T18323] syzkaller0: entered promiscuous mode [ 336.451132][T18323] syzkaller0: entered allmulticast mode [ 336.486440][T18320] tipc: Resetting bearer [ 336.536638][T18320] tipc: Disabling bearer [ 336.677582][T18342] x_tables: duplicate underflow at hook 1 [ 336.836550][T18351] netlink: 'syz.1.3422': attribute type 11 has an invalid length. [ 336.847787][T18351] netlink: 'syz.1.3422': attribute type 11 has an invalid length. [ 336.939091][T18356] netlink: 'syz.1.3422': attribute type 11 has an invalid length. [ 336.979245][T18356] netlink: 'syz.1.3422': attribute type 11 has an invalid length. [ 337.472986][T18391] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 337.486961][T18391] bond3 (unregistering): Released all slaves [ 337.659494][T18400] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 337.813457][T18409] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 337.823468][T18409] netlink: 'syz.2.3437': attribute type 3 has an invalid length. [ 337.834567][T18409] NCSI netlink: No device for ifindex 0 [ 338.560607][T18462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.568622][T18462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.992927][T18471] __nla_validate_parse: 19 callbacks suppressed [ 338.992946][T18471] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3455'. [ 339.133422][T18462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.151102][T18462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.424593][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 339.456239][T18494] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 339.623495][T18497] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 339.782204][T18517] netlink: 'syz.0.3466': attribute type 10 has an invalid length. [ 340.149915][T18538] netlink: 'syz.3.3474': attribute type 2 has an invalid length. [ 340.166016][T18540] netlink: 'syz.4.3475': attribute type 16 has an invalid length. [ 340.178613][T18540] netlink: 'syz.4.3475': attribute type 17 has an invalid length. [ 340.271655][T18540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.397874][T18550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3477'. [ 340.483507][T18560] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 340.493110][T18560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3480'. [ 340.519612][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3481'. [ 340.529284][T18557] netlink: 'syz.2.3481': attribute type 7 has an invalid length. [ 340.548129][T18557] netlink: 'syz.2.3481': attribute type 8 has an invalid length. [ 340.566652][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 340.570578][T18560] team0: Port device geneve0 added [ 340.718810][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3484'. [ 340.840064][T18574] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3487'. [ 340.949236][T18577] vxcan1 speed is unknown, defaulting to 1000 [ 340.984890][T18586] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3490'. [ 341.546374][T18610] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004 [ 341.831220][T18615] can: request_module (can-proto-0) failed. [ 341.910261][T18577] lo speed is unknown, defaulting to 1000 [ 341.940833][T18628] netlink: 'syz.1.3499': attribute type 1 has an invalid length. [ 341.949095][T18628] netlink: 'syz.1.3499': attribute type 2 has an invalid length. [ 342.228070][T18639] netlink: 'syz.4.3503': attribute type 11 has an invalid length. [ 342.795191][T18668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3512'. [ 343.562017][ T30] audit: type=1800 audit(1760869277.043:5): pid=18709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3523" name="memory.events" dev="tmpfs" ino=625 res=0 errno=0 [ 343.676918][T18714] netlink: 'syz.4.3524': attribute type 4 has an invalid length. [ 344.127555][T18740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.128692][T18739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.379291][T13909] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.409072][T13909] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.436961][T13909] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.462160][T13909] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.528644][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3540'. [ 344.559109][T13904] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.559264][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3540'. [ 344.569391][T13904] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.588911][T13904] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.750609][T13904] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.857997][T18780] syzkaller1: entered promiscuous mode [ 344.863522][T18780] syzkaller1: entered allmulticast mode [ 344.934205][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3545'. [ 345.111361][T18806] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.132261][T18808] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.158693][T18806] validate_nla: 3 callbacks suppressed [ 345.158709][T18806] netlink: 'syz.3.3549': attribute type 2 has an invalid length. [ 345.238232][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 345.271262][T18816] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 345.312605][T18820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3552'. [ 345.323014][T18806] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3549'. [ 345.337432][T18822] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3549'. [ 345.351501][T18821] netlink: 'syz.1.3554': attribute type 3 has an invalid length. [ 345.365973][T18824] xt_bpf: check failed: parse error [ 345.380198][T18824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3553'. [ 345.411374][T18824] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 345.944204][T18851] netlink: 'syz.2.3562': attribute type 11 has an invalid length. [ 346.084986][T18863] x_tables: duplicate underflow at hook 2 [ 346.179075][T18867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3565'. [ 346.381239][T18880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3569'. [ 346.402870][T18870] syzkaller0: entered promiscuous mode [ 346.413577][T18870] syzkaller0: entered allmulticast mode [ 346.430735][T18881] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 346.977943][T18920] No such timeout policy "syz1" [ 347.023912][T18924] ªªªªªª: renamed from vlan0 (while UP) [ 347.862222][T18987] xt_l2tp: v2 sid > 0xffff: 1114112 [ 348.307386][T19005] netlink: 'syz.4.3604': attribute type 5 has an invalid length. [ 348.327211][T19006] netlink: 'syz.3.3603': attribute type 4 has an invalid length. [ 348.998379][T19034] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 349.132369][T19031] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 349.165243][T19031] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 349.593723][T19069] x_tables: duplicate underflow at hook 2 [ 349.622204][T19072] __nla_validate_parse: 13 callbacks suppressed [ 349.622223][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3620'. [ 349.821702][T19081] netlink: 'syz.0.3622': attribute type 1 has an invalid length. [ 349.867797][T19081] tipc: Enabled bearer , priority 0 [ 349.882403][T19081] syzkaller0: entered promiscuous mode [ 349.901481][T19081] syzkaller0: entered allmulticast mode [ 349.960563][T19081] tipc: Resetting bearer [ 349.977826][T19091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.006904][T19080] tipc: Resetting bearer [ 350.070114][T19099] netlink: 'syz.1.3627': attribute type 1 has an invalid length. [ 350.078538][T19099] netlink: 'syz.1.3627': attribute type 1 has an invalid length. [ 350.109113][T19080] tipc: Disabling bearer [ 350.290233][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'. [ 350.301408][T19109] xt_NFQUEUE: number of total queues is 0 [ 350.366015][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 350.991357][T19153] bond1: Removing last arp target with arp_interval on [ 351.012383][T19150] syzkaller1: entered promiscuous mode [ 351.025547][T19150] syzkaller1: entered allmulticast mode [ 351.177705][T19168] IPVS: set_ctl: invalid protocol: 151 224.0.0.1:20000 [ 351.387780][T19186] tipc: Enabling of bearer rejected, failed to enable media [ 351.436342][T19190] netlink: 'syz.1.3651': attribute type 1 has an invalid length. [ 351.474693][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 351.524534][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 351.573794][T13915] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.597648][T13915] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.643152][T19202] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3655'. [ 351.678475][T13915] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.699456][T13915] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.858611][T19213] netlink: 'syz.1.3658': attribute type 1 has an invalid length. [ 352.010870][T19224] netlink: 'syz.0.3663': attribute type 33 has an invalid length. [ 352.024342][T19227] netlink: 'syz.1.3662': attribute type 15 has an invalid length. [ 352.213592][T19240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 352.262355][T19241] vxcan1 speed is unknown, defaulting to 1000 [ 352.277224][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 352.562898][T19261] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3672'. [ 352.776329][T19274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3677'. [ 352.838350][T19241] lo speed is unknown, defaulting to 1000 [ 353.065426][T19286] netlink: 'syz.4.3682': attribute type 33 has an invalid length. [ 353.205331][T19292] nbd: couldn't find a device at index -373156329 [ 354.274855][T19352] ------------[ cut here ]------------ [ 354.280776][T19352] WARNING: CPU: 0 PID: 19352 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 354.289456][T19352] Modules linked in: [ 354.293745][T19352] CPU: 0 UID: 0 PID: 19352 Comm: syz.4.3704 Not tainted syzkaller #0 PREEMPT(full) [ 354.303166][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.313277][T19352] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 354.318366][T19352] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 354.338037][T19352] RSP: 0018:ffffc9000eccf180 EFLAGS: 00010286 [ 354.344156][T19352] RAX: c76fd238e4ac4600 RBX: ffff888052fe9c80 RCX: c76fd238e4ac4600 [ 354.352231][T19352] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 354.360267][T19352] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 354.368319][T19352] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 354.376354][T19352] R13: dffffc0000000000 R14: ffff888052fe9c80 R15: ffff88801fe81e00 [ 354.384347][T19352] FS: 00007fc370d816c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 354.393333][T19352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.399972][T19352] CR2: 000000110c297ab8 CR3: 00000000569ea000 CR4: 00000000003526f0 [ 354.407998][T19352] Call Trace: [ 354.411292][T19352] [ 354.414236][T19352] ip_push_pending_frames+0xbe/0x150 [ 354.419587][T19352] __icmp_send+0xfc3/0x1320 [ 354.424128][T19352] ? __icmp_send+0x1b9/0x1320 [ 354.428869][T19352] ? __pfx___icmp_send+0x10/0x10 [ 354.433858][T19352] ? ip_route_input_noref+0x98/0x250 [ 354.439217][T19352] ? __pfx_ip_route_input_noref+0x10/0x10 [ 354.444993][T19352] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 354.450218][T19352] ip_options_compile+0x80/0xb0 [ 354.455129][T19352] ip_rcv_finish_core+0xaa2/0x1c00 [ 354.460289][T19352] ip_rcv_finish+0x14c/0x2f0 [ 354.464954][T19352] NF_HOOK+0x30c/0x3a0 [ 354.469056][T19352] ? __pfx_ip_rcv_finish+0x10/0x10 [ 354.474197][T19352] ? NF_HOOK+0x9a/0x3a0 [ 354.478413][T19352] ? __pfx_NF_HOOK+0x10/0x10 [ 354.483024][T19352] ? ip_rcv_core+0x7f7/0xd00 [ 354.487667][T19352] ? __pfx_ip_rcv_finish+0x10/0x10 [ 354.492814][T19352] ? __pfx_ip_rcv+0x10/0x10 [ 354.497370][T19352] __netif_receive_skb+0x143/0x380 [ 354.502513][T19352] ? netif_receive_skb+0x115/0x790 [ 354.507686][T19352] netif_receive_skb+0x1cb/0x790 [ 354.512668][T19352] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 354.518549][T19352] ? __pfx_netif_receive_skb+0x10/0x10 [ 354.524038][T19352] ? tun_rx_batched+0x160/0x730 [ 354.528948][T19352] tun_rx_batched+0x1b9/0x730 [ 354.533649][T19352] ? __lock_acquire+0xab9/0xd20 [ 354.538574][T19352] ? __pfx_tun_rx_batched+0x10/0x10 [ 354.543800][T19352] ? tun_get_user+0x272f/0x3e90 [ 354.548731][T19352] tun_get_user+0x2b65/0x3e90 [ 354.553443][T19352] ? tun_get_user+0x6f6/0x3e90 [ 354.558273][T19352] ? tun_get_user+0x272f/0x3e90 [ 354.563187][T19352] ? aa_file_perm+0x44d/0x1550 [ 354.568007][T19352] ? __pfx_tun_get_user+0x10/0x10 [ 354.573054][T19352] ? __futex_wait+0x34a/0x3d0 [ 354.577807][T19352] ? __pfx___futex_wait+0x10/0x10 [ 354.582868][T19352] ? ref_tracker_alloc+0x318/0x460 [ 354.588029][T19352] ? __lock_acquire+0xab9/0xd20 [ 354.592922][T19352] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 354.598447][T19352] ? tun_get+0x1c/0x2f0 [ 354.602635][T19352] ? tun_get+0x1c/0x2f0 [ 354.606847][T19352] ? tun_get+0x1c/0x2f0 [ 354.611034][T19352] tun_chr_write_iter+0x113/0x200 [ 354.616113][T19352] vfs_write+0x5c9/0xb30 [ 354.620378][T19352] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 354.625969][T19352] ? __pfx_vfs_write+0x10/0x10 [ 354.630767][T19352] ? __fget_files+0x2a/0x420 [ 354.635427][T19352] ksys_write+0x145/0x250 [ 354.639783][T19352] ? __pfx_ksys_write+0x10/0x10 [ 354.644661][T19352] ? do_syscall_64+0xbe/0xfa0 [ 354.649394][T19352] do_syscall_64+0xfa/0xfa0 [ 354.653907][T19352] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.659171][T19352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.665284][T19352] ? clear_bhb_loop+0x60/0xb0 [ 354.669983][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.675932][T19352] RIP: 0033:0x7fc36ff8da7f [ 354.680364][T19352] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 354.700026][T19352] RSP: 002b:00007fc370d81000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 354.708501][T19352] RAX: ffffffffffffffda RBX: 00007fc3701e5fa0 RCX: 00007fc36ff8da7f [ 354.716544][T19352] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 354.724536][T19352] RBP: 00007fc370011f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.732572][T19352] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 354.740599][T19352] R13: 00007fc3701e6038 R14: 00007fc3701e5fa0 R15: 00007ffcc5df56e8 [ 354.748656][T19352] [ 354.751708][T19352] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.758996][T19352] CPU: 0 UID: 0 PID: 19352 Comm: syz.4.3704 Not tainted syzkaller #0 PREEMPT(full) [ 354.768366][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.778416][T19352] Call Trace: [ 354.781689][T19352] [ 354.784612][T19352] dump_stack_lvl+0x99/0x250 [ 354.789198][T19352] ? __asan_memcpy+0x40/0x70 [ 354.793776][T19352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.798968][T19352] ? __pfx__printk+0x10/0x10 [ 354.803558][T19352] vpanic+0x237/0x6d0 [ 354.807536][T19352] ? __pfx_vpanic+0x10/0x10 [ 354.812042][T19352] panic+0xb9/0xc0 [ 354.815760][T19352] ? __pfx_panic+0x10/0x10 [ 354.820180][T19352] __warn+0x31b/0x4b0 [ 354.824167][T19352] ? ip_rt_bug+0x2c/0x110 [ 354.828515][T19352] ? ip_rt_bug+0x2c/0x110 [ 354.832847][T19352] report_bug+0x2be/0x4f0 [ 354.837165][T19352] ? ip_rt_bug+0x2c/0x110 [ 354.841489][T19352] ? ip_rt_bug+0x2c/0x110 [ 354.845807][T19352] ? ip_rt_bug+0x2e/0x110 [ 354.850129][T19352] handle_bug+0x84/0x160 [ 354.854379][T19352] exc_invalid_op+0x1a/0x50 [ 354.858883][T19352] asm_exc_invalid_op+0x1a/0x20 [ 354.863728][T19352] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 354.868657][T19352] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 354.888258][T19352] RSP: 0018:ffffc9000eccf180 EFLAGS: 00010286 [ 354.894318][T19352] RAX: c76fd238e4ac4600 RBX: ffff888052fe9c80 RCX: c76fd238e4ac4600 [ 354.902279][T19352] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 354.910242][T19352] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 354.918211][T19352] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 354.926181][T19352] R13: dffffc0000000000 R14: ffff888052fe9c80 R15: ffff88801fe81e00 [ 354.934161][T19352] ip_push_pending_frames+0xbe/0x150 [ 354.939446][T19352] __icmp_send+0xfc3/0x1320 [ 354.943956][T19352] ? __icmp_send+0x1b9/0x1320 [ 354.948632][T19352] ? __pfx___icmp_send+0x10/0x10 [ 354.953581][T19352] ? ip_route_input_noref+0x98/0x250 [ 354.958869][T19352] ? __pfx_ip_route_input_noref+0x10/0x10 [ 354.964593][T19352] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 354.969781][T19352] ip_options_compile+0x80/0xb0 [ 354.974625][T19352] ip_rcv_finish_core+0xaa2/0x1c00 [ 354.979741][T19352] ip_rcv_finish+0x14c/0x2f0 [ 354.984346][T19352] NF_HOOK+0x30c/0x3a0 [ 354.988432][T19352] ? __pfx_ip_rcv_finish+0x10/0x10 [ 354.993549][T19352] ? NF_HOOK+0x9a/0x3a0 [ 354.997700][T19352] ? __pfx_NF_HOOK+0x10/0x10 [ 355.002282][T19352] ? ip_rcv_core+0x7f7/0xd00 [ 355.006866][T19352] ? __pfx_ip_rcv_finish+0x10/0x10 [ 355.011979][T19352] ? __pfx_ip_rcv+0x10/0x10 [ 355.016474][T19352] __netif_receive_skb+0x143/0x380 [ 355.021582][T19352] ? netif_receive_skb+0x115/0x790 [ 355.026688][T19352] netif_receive_skb+0x1cb/0x790 [ 355.031615][T19352] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 355.037415][T19352] ? __pfx_netif_receive_skb+0x10/0x10 [ 355.042874][T19352] ? tun_rx_batched+0x160/0x730 [ 355.047719][T19352] tun_rx_batched+0x1b9/0x730 [ 355.052385][T19352] ? __lock_acquire+0xab9/0xd20 [ 355.057233][T19352] ? __pfx_tun_rx_batched+0x10/0x10 [ 355.062427][T19352] ? tun_get_user+0x272f/0x3e90 [ 355.067295][T19352] tun_get_user+0x2b65/0x3e90 [ 355.071974][T19352] ? tun_get_user+0x6f6/0x3e90 [ 355.076734][T19352] ? tun_get_user+0x272f/0x3e90 [ 355.081582][T19352] ? aa_file_perm+0x44d/0x1550 [ 355.086337][T19352] ? __pfx_tun_get_user+0x10/0x10 [ 355.091356][T19352] ? __futex_wait+0x34a/0x3d0 [ 355.096032][T19352] ? __pfx___futex_wait+0x10/0x10 [ 355.101060][T19352] ? ref_tracker_alloc+0x318/0x460 [ 355.106158][T19352] ? __lock_acquire+0xab9/0xd20 [ 355.111002][T19352] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 355.116463][T19352] ? tun_get+0x1c/0x2f0 [ 355.120626][T19352] ? tun_get+0x1c/0x2f0 [ 355.124770][T19352] ? tun_get+0x1c/0x2f0 [ 355.128922][T19352] tun_chr_write_iter+0x113/0x200 [ 355.133942][T19352] vfs_write+0x5c9/0xb30 [ 355.138181][T19352] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 355.143720][T19352] ? __pfx_vfs_write+0x10/0x10 [ 355.148481][T19352] ? __fget_files+0x2a/0x420 [ 355.153071][T19352] ksys_write+0x145/0x250 [ 355.157393][T19352] ? __pfx_ksys_write+0x10/0x10 [ 355.162238][T19352] ? do_syscall_64+0xbe/0xfa0 [ 355.166913][T19352] do_syscall_64+0xfa/0xfa0 [ 355.171409][T19352] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.176598][T19352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.182650][T19352] ? clear_bhb_loop+0x60/0xb0 [ 355.187320][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.193201][T19352] RIP: 0033:0x7fc36ff8da7f [ 355.197610][T19352] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 355.217211][T19352] RSP: 002b:00007fc370d81000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 355.225621][T19352] RAX: ffffffffffffffda RBX: 00007fc3701e5fa0 RCX: 00007fc36ff8da7f [ 355.233584][T19352] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 355.241542][T19352] RBP: 00007fc370011f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.249509][T19352] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 355.257469][T19352] R13: 00007fc3701e6038 R14: 00007fc3701e5fa0 R15: 00007ffcc5df56e8 [ 355.265467][T19352] [ 355.268754][T19352] Kernel Offset: disabled [ 355.273068][T19352] Rebooting in 86400 seconds..