last executing test programs: 1.888423421s ago: executing program 2 (id=2421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r2}) getsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffac1414bb060002000000000014001f00fe8000000000000000000000000000aa08000a000000000006001b004e240000"], 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x1) socket(0x1e, 0x80000, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x11) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x1, 0x2, 0x3, 0x4}}, 0x2e) 1.748520515s ago: executing program 2 (id=2423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) 1.667519533s ago: executing program 2 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r2, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa588, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "877bdbbc0330ccc0d35c27abf0ed2dbc886003c558790e0963ca138a1d4d117e8e68a2a93e19de9bcd76c7f748c4bd656414852df6e143870bf6268f48d8c5346d3af35600e3c79add29f9609790bc9e05fb33a77710d3dea585ba06180a09d5dea1644dae21b77d01225e96ab192ec43d0e80d254ad278daa"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@fwd={0x1}, @ptr={0xe}, @enum64={0xe, 0x2, 0x0, 0x13, 0x0, 0x9, [{0x4, 0x81, 0x80000000}, {0x2, 0xb, 0xe0d}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xd, 0x5}, {0xd, 0x5}, {0x3, 0x4}, {0x6, 0x1}, {0x1}, {0x1, 0x4}]}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @volatile={0xd}, @enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0x0, 0xd296}, {0x10}, {0xb, 0x9}, {0x9, 0x200}, {0x0, 0x7f}, {0xd, 0x3}, {0x8, 0xff}, {0x0, 0x4a6d}, {0x9, 0x4}]}]}, {0x0, [0x61]}}, &(0x7f00000002c0)=""/21, 0x107, 0x15}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x4, 0xc, 0x990, 0x40, 0x1, 0xf09, '\x00', r7, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000100), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x1, 0x1, 0x6, 0x4, 0x8, 0xfffffffffffffff0}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1.097554818s ago: executing program 2 (id=2432): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x2, 0x5, 0xa, 0x3, 0x7ff}, @call={0x85, 0x0, 0x0, 0x82}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @generic={0x1, 0xb, 0x6, 0x6, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x1ff, 0xb6, &(0x7f0000000540)=""/182, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xf, 0x7, 0x6}, 0x10, 0x9a53, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[r2, r2, r2, r3, r2, r3, r2, r3], &(0x7f0000000680)=[{0x3, 0x2, 0xe}, {0x1, 0x4, 0xc, 0x4}, {0x5, 0x1, 0xa, 0x5}, {0x4, 0x1, 0x5, 0x2}], 0x10, 0x3376}, 0x94) pipe(&(0x7f0000000780)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r7, r8, 0x1b, 0x0, @val=@uprobe_multi={&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=[0x100, 0x2], &(0x7f0000000840)=[0x2], 0x7, 0x2, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@ptr, @const, @typedef={0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x0, 0x5f]}}, &(0x7f0000001400)=""/149, 0x5e, 0x95, 0x1}, 0x20) r9 = socket(0x10, 0x3, 0x0) socket(0x1a, 0xa, 0x8) sendto$inet6(r9, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000d0a20268fa095d42000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r10, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xe8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x8, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 1.097007698s ago: executing program 3 (id=2433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x1, 0x1ff}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x0, 0x8}, 0x48) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000001800)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x11, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 902.384815ms ago: executing program 2 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff1a, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdbe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xc0c4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x8, 0x0, 0x0, @private1, @local, {[@fragment={0x0, 0x0, 0x76}]}}}}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 901.687857ms ago: executing program 0 (id=2437): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x70bd29, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}]}, 0x60}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x1) 900.593546ms ago: executing program 1 (id=2438): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x26080, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'ipvlan1\x00', {0x2, 0x4e23, @private=0xac141436}}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x482000, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r5, 0x0, r1}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) select(0x40, &(0x7f0000000480)={0x3, 0x5, 0x7, 0x9, 0x3, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x7fffffffffffffff, 0x7, 0x3, 0x4, 0x5, 0x77e3f733, 0x5, 0xa242}, &(0x7f0000000540)={0xe, 0xf, 0x401, 0x5, 0x7e4af4b3, 0x9, 0x45}, &(0x7f0000000700)) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x800}, @void, @ipv4=@icmp={{0xf, 0x4, 0x2, 0x2f, 0xee, 0x68, 0x0, 0xb5, 0x1, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x2}]}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x5, [0x100, 0x0, 0x0]}]}}, @dest_unreach={0x3, 0x2, 0x0, 0x0, 0xd, 0x100, {0x2a, 0x4, 0x0, 0x4, 0x2, 0x67, 0x3, 0x4, 0x67, 0x4, @rand_addr=0x64010101, @empty, {[@noop, @timestamp={0x44, 0x10, 0xfa, 0x0, 0x2, [0x6, 0x2667, 0xe49]}, @generic={0x89, 0xc, "0d7306db3f1c534dbddd"}, @rr={0x7, 0xb, 0xe0, [@empty, @broadcast]}, @timestamp_addr={0x44, 0x44, 0xd, 0x1, 0xb, [{@multicast1, 0x7}, {@empty, 0x1}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@multicast2, 0x8}, {@empty, 0x101}, {@rand_addr=0x64010102, 0xf6}, {@local, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x8, [{@private=0xa010100, 0x81}, {@empty, 0x4}]}, @timestamp={0x44, 0x14, 0x20, 0x0, 0xc, [0x2, 0x5, 0x0, 0x8]}]}}, "9821"}}}, 0xf2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x11, 0x2, [@TCA_FLOW_KEYS={0x0, 0x1, 0x17996}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) 845.254427ms ago: executing program 3 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r3, 0x0, 0x15, 0x0, &(0x7f0000000280)) sendto$inet6(r1, &(0x7f0000000080)="e106aaae660470127b9ac742e73805442fa2389f463d96db23ecf83c28367339877ef0379c8f73b826cf71ed29db10e99328b30662826cc6b2628ad02fb9ecea62c11ed554dc77ca29ab6a3037bb325f", 0x50, 0x20000000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x100, 0x70bd2a, 0x25dfdbff, {0xa, 0x18, 0x4, 0x1, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x1ff, 0x4000, 0x7, 0x4}}]}, 0x2c}}, 0x4040000) 809.470904ms ago: executing program 2 (id=2440): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000d0a01030000000000000000050000000900020073797a9642f2b3b4f4b45c0073797a3200000000080004c0000010000900010073797a30000000000800044000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) syz_emit_ethernet(0x41, &(0x7f00000002c0)={@remote, @local, @void, {@generic={0x1, "c77b93b0924dace18ea2caf8e4de2d614d51ec9cd58ae5559e524d3a3cad7f7cd78812878a72d5fac3dd82362380aa9ce8002c"}}}, &(0x7f0000000100)={0x1, 0x1, [0x4fe, 0x4b7, 0x2e, 0x84]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x101, @remote, 0x7}]}, &(0x7f0000000280)=0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r4, 0x2}, &(0x7f00000000c0)=0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 706.15642ms ago: executing program 4 (id=2441): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001b00)=@generic={0x0, 0x8001, 0x571}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x13, 0x602c}, 0x54) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x13, 0x602c}, 0x54) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x125, 0xfffffffc, 0x1000, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x125, 0xfffffffc, 0x1000, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x140f, 0x400, 0x0, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r6) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r6) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000001ac0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)={0x2a0, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa484}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0304}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa16}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d647621ff5e23c67df3a0a8b5664155c96eefae4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5b0b}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x81}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c00), r6) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r14 = ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x6c, r12, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r13}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="36f60000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x14e0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="36f60000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x14e0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)='memory.events.local\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE64(r15, 0x8010743f, &(0x7f0000001b80)) 682.000116ms ago: executing program 1 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1) 664.067984ms ago: executing program 3 (id=2443): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa9881da07fc0b86dd6100000000303a0020010000000000000000000000000002ff0200000000000000000000000000010200907800000005663a794500023afffc020000000000000000000000000001fe880000000048c47645000000000001"], 0x0) r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r4, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e22, @empty}}, 0x7fff, 0x8f49}, &(0x7f0000000240)=0x90) 606.358496ms ago: executing program 0 (id=2444): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5, 0x1}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000b40)="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", 0x1000) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f4cc15d37c31c7880089f333dc906488e243976f66ec0626e8c3f1f2cefff421369c72da05d73ef4e816ae220d70be23c902968113bf318adfdee8959e903d29e90fed14b94849eb8af69f04fd484acaedada0cb92678684a99898a6771e00685225b3415ad3b76903bcd089b3200007ffb22eaf2f1feb2cfaad2f1", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 551.369209ms ago: executing program 4 (id=2445): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r6, 0x25, 0x0, @val=@tcx}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000380), &(0x7f0000000580)=r8}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) socket$kcm(0x10, 0x2, 0x4) r10 = socket(0x2b, 0x1, 0x1) listen(r10, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 532.037235ms ago: executing program 3 (id=2446): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aaff83fc101560e0a0b040000000000002000020000002c0004802800018007000100637400001c0002800800044000000000080002400000000d05000300000000000900010073797a30000000000900020073797a3200000000140000001100a632310300000000002e1cfc980a"], 0x80}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0xffd8}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000014000180060001000a000000082709ede16200050003000000a1637a3400000000000000063692c04d4e2da75dc40887477ba70ee81348925f05424167ad5f928cc29a3265761b08389c187a99a664f2e6be456c632c5e5fbb122333fc570b4e860f0199e612bc41bc15e7299fc50835eca7fcef201f5a"], 0x28}}, 0x0) 478.411969ms ago: executing program 1 (id=2447): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x8c, r1, 0x1, 0xfffbfffe, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200130001"], 0x70}}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x8c, r1, 0x1, 0xfffbfffe, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 451.414066ms ago: executing program 0 (id=2448): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) r2 = socket$inet6(0xa, 0xa, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad353e600000000040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x88bd, r4, 0x1, 0xcc, 0x6, @multicast}, 0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@rand_addr=0x64010100, 0x4e24, 0x3, 0x4e24, 0x5, 0xa, 0x80, 0x60, 0x2f, r4, r6}, {0x7, 0x6a, 0xaa, 0xfff, 0x5, 0x4, 0xffffffffffffffff, 0x40}, {0xa, 0x7, 0x9f, 0x4}, 0x7f, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3505, 0x4, 0x2, 0x3, 0xfffffffb, 0x1ff, 0x7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51, 0x1b7b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, r1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) (async) socket$inet6(0xa, 0xa, 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r5, &(0x7f0000000140)="bad353e600000000040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x88bd, r4, 0x1, 0xcc, 0x6, @multicast}, 0x14) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@rand_addr=0x64010100, 0x4e24, 0x3, 0x4e24, 0x5, 0xa, 0x80, 0x60, 0x2f, r4, r6}, {0x7, 0x6a, 0xaa, 0xfff, 0x5, 0x4, 0xffffffffffffffff, 0x40}, {0xa, 0x7, 0x9f, 0x4}, 0x7f, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3505, 0x4, 0x2, 0x3, 0xfffffffb, 0x1ff, 0x7}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x51, 0x1b7b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, r1}, 0x94) (async) 420.929647ms ago: executing program 4 (id=2449): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x0) 310.370117ms ago: executing program 1 (id=2450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 310.107812ms ago: executing program 4 (id=2451): accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9b", @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000a001f000000"], 0x34}}, 0x0) 269.771505ms ago: executing program 0 (id=2452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c00018008001080240010800c00020000000000000000005f99a192af337ea09ba8b3b0c07d"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 204.183098ms ago: executing program 3 (id=2453): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800200000ff000000000008000100ac141400"], 0x2c}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2abe9ca9d4217c5, 0x2, 0x2, 0x6c, 0x4, @mcast2, @empty, 0x10, 0x80, 0xffffffff, 0xfffffff4}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x5196aeaf7349721d}, 0x8800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @multicast}]}, 0x40}}, 0x0) 146.844966ms ago: executing program 1 (id=2454): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e23, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x480c1df7, 0x2, 0x3423, 0x6, 0xff, 0x1, 0x5, 0x1]}}, 0x5c) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x4, 0x0, 0x0) getsockopt$inet6_tcp_int(r4, 0x11c, 0x4, 0x0, &(0x7f0000000380)) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@isdn={0x22, 0x8, 0x65, 0x6}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000780)=[{0x98, 0xfe, 0x0, "8faab0711ac0f0618383351168aca47f94b70b5bf432661f539b8c9fcf6847ced6c2d2c9f6fe7c61415df68c7ef09f7ddafcad08c7defe85fb461616a5c3811829de3f160c582a51d8bd85482ed3a03cb485e12538090b2d06c4391622e9b441268c0c497694941670a655e92856e38d73fd2e3e6fa3f3c565e0924a1d66557ffa34be9c"}, {0xfffffea6, 0x3a, 0xffffef7f, "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"}, {0x58, 0x113, 0x8, "03a1b5289d38f60379e00720e48f59f827a6dd5965647a525084029fdf7a2bcd305bfe5759bdcc4f3f812c1b1f0893a0d33b940db3e868815754f832c40edcd7da7a8dc06753ad"}, {0xa8, 0x102, 0x2, "c5d83668717c71f1e69716c030fc966515ea10e18a8c2eb4e55327f470812633395efedd3a2378fd67c0a469987aee9b066278f95897dba97c79a60f81db736c8022ec8de75a1c00e817b59359733e9f55e26a62153e7238978de31ba7edde41b868718d24cc5cc43ea3d60b47628f215576aadb89c02a9341c8f363f1c35df68b4311d87cea8603534863b4aa28f45518fceb7f9c1cf4"}, {0x110, 0x88, 0x3, "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"}, {0x58, 0x107, 0xfffffff9, "3fec44360437ebc7de185f180b2bf0656a4c74172005e7c25fdd7a4d7ca471523e37c38d244198cb3ea12d36010df9e74db9eac808c46566d20de0b879963c06d08ea6d5"}], 0x1310}, 0xd0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000140)={0x7d, 0xd}) 146.632999ms ago: executing program 4 (id=2455): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) 122.454561ms ago: executing program 0 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getstats={0x1c, 0x5e, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x5}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 93.932057ms ago: executing program 3 (id=2457): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r6, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x2000007, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xc, 0x5, 0x3}, 0x10}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.314389ms ago: executing program 1 (id=2458): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xffffff6b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x298, 0x200, 0x298, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 10.013919ms ago: executing program 4 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x10001, 0x100000000}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x10001, 0x100000000}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=2460): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0da, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x800, 0x2}}, 0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) kernel console output (not intermixed with test programs): 9602][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.551398][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.563604][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.631322][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.650785][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.672792][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.684334][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.772535][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.783927][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.799886][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.830033][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.921513][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.933947][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.953692][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.970531][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.991919][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.032677][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.045870][ T5840] Bluetooth: hci0: command tx timeout [ 81.070599][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.092089][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.099727][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.124885][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.132826][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.181613][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.207302][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.227189][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.234482][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.260830][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.267982][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.285595][ T5840] Bluetooth: hci2: command tx timeout [ 81.285676][ T5842] Bluetooth: hci1: command tx timeout [ 81.322067][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.332054][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.359290][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.366431][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.374227][ T5842] Bluetooth: hci3: command tx timeout [ 81.375466][ T5840] Bluetooth: hci4: command tx timeout [ 81.398997][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.429588][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.436818][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.482652][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.490073][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.522296][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.529625][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.552010][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.583583][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.669083][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.722213][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.729538][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.750063][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.757503][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.794000][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.037827][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.046659][ T5829] veth0_vlan: entered promiscuous mode [ 82.109709][ T5829] veth1_vlan: entered promiscuous mode [ 82.279012][ T5836] veth0_vlan: entered promiscuous mode [ 82.290304][ T5829] veth0_macvtap: entered promiscuous mode [ 82.307631][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.332677][ T5829] veth1_macvtap: entered promiscuous mode [ 82.358209][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.378234][ T5836] veth1_vlan: entered promiscuous mode [ 82.398881][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.432041][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.458764][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.486063][ T4493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.509505][ T4493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.529963][ T4493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.576275][ T4493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.596811][ T5836] veth0_macvtap: entered promiscuous mode [ 82.626602][ T5837] veth0_vlan: entered promiscuous mode [ 82.632914][ T5836] veth1_macvtap: entered promiscuous mode [ 82.682871][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.722969][ T5834] veth0_vlan: entered promiscuous mode [ 82.744474][ T5837] veth1_vlan: entered promiscuous mode [ 82.757024][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.815932][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.824915][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.852002][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.866011][ T4441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.879900][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.887549][ T5834] veth1_vlan: entered promiscuous mode [ 82.897843][ T4441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.980353][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.988979][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.038118][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.065756][ T5839] veth0_vlan: entered promiscuous mode [ 83.075963][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.079272][ T5839] veth1_vlan: entered promiscuous mode [ 83.100140][ T5837] veth0_macvtap: entered promiscuous mode [ 83.126958][ T5840] Bluetooth: hci0: command tx timeout [ 83.144169][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.152246][ T5837] veth1_macvtap: entered promiscuous mode [ 83.187236][ T5834] veth0_macvtap: entered promiscuous mode [ 83.196834][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.204762][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.222970][ T5834] veth1_macvtap: entered promiscuous mode [ 83.302499][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.328164][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.331245][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.355028][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.365903][ T5840] Bluetooth: hci2: command tx timeout [ 83.365912][ T5842] Bluetooth: hci1: command tx timeout [ 83.387548][ T5839] veth0_macvtap: entered promiscuous mode [ 83.419626][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.446441][ T5840] Bluetooth: hci4: command tx timeout [ 83.446449][ T5842] Bluetooth: hci3: command tx timeout [ 83.478740][ T4441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.488444][ T4441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.514128][ T5839] veth1_macvtap: entered promiscuous mode [ 83.541306][ T4441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.568011][ T4441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600880][ T4441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626101][ T4441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.672205][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.701053][ T4441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.719003][ T4441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.738193][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.747480][ T5953] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.808838][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.824588][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.843658][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 83.862416][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.895851][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.015580][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.031379][ T5960] x_tables: duplicate underflow at hook 1 [ 84.037543][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.109408][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.135801][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.175265][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.183845][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.275463][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.283427][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.391980][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.427691][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 84.450389][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.519167][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.559072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.696128][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 84.873703][ T5986] Zero length message leads to an empty skb [ 85.019696][ T5995] tipc: Started in network mode [ 85.071667][ T5995] tipc: Node identity de74fd203d8c, cluster identity 4711 [ 85.087961][ T5995] tipc: Enabled bearer , priority 0 [ 85.163851][ T5996] syzkaller0: entered promiscuous mode [ 85.189400][ T5996] syzkaller0: entered allmulticast mode [ 85.205415][ T5842] Bluetooth: hci0: command tx timeout [ 85.254241][ T6008] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 85.303113][ T6005] bond1: entered promiscuous mode [ 85.315115][ T6005] bond1: entered allmulticast mode [ 85.330527][ T6005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.338764][ T6010] netlink: 'syz.4.19': attribute type 4 has an invalid length. [ 85.345664][ T6012] netlink: 272 bytes leftover after parsing attributes in process `syz.1.20'. [ 85.357758][ T6010] netlink: 152 bytes leftover after parsing attributes in process `syz.4.19'. [ 85.412881][ T6010] `: renamed from bond0 (while UP) [ 85.445557][ T5842] Bluetooth: hci1: command tx timeout [ 85.449419][ T5840] Bluetooth: hci2: command tx timeout [ 85.499981][ T5996] tipc: Resetting bearer [ 85.528952][ T5840] Bluetooth: hci3: command tx timeout [ 85.528960][ T5842] Bluetooth: hci4: command tx timeout [ 85.580972][ T5996] tipc: Disabling bearer [ 85.841084][ T6032] netlink: 'syz.0.29': attribute type 28 has an invalid length. [ 85.909265][ T6032] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 85.995128][ T6032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.29'. [ 86.119242][ T6045] netlink: 'syz.3.31': attribute type 12 has an invalid length. [ 86.266833][ T6048] netlink: 96 bytes leftover after parsing attributes in process `syz.2.32'. [ 86.343358][ T6048] vlan2: entered allmulticast mode [ 86.355273][ T6048] gretap0: entered allmulticast mode [ 86.392498][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 86.537654][ T6059] syzkaller0: entered promiscuous mode [ 86.557100][ T6059] syzkaller0: entered allmulticast mode [ 86.717729][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 86.856038][ T6080] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 87.023148][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.117942][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.595232][ T6113] x_tables: duplicate entry at hook 1 [ 87.668404][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.700058][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.710325][ T6121] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 87.724398][ T6117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.794180][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.112038][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.201202][ T6134] sctp: [Deprecated]: syz.4.54 (pid 6134) Use of int in maxseg socket option. [ 88.201202][ T6134] Use struct sctp_assoc_value instead [ 88.423292][ T6154] __nla_validate_parse: 3 callbacks suppressed [ 88.423311][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 88.443490][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 88.462062][ T6154] netlink: 'syz.1.62': attribute type 14 has an invalid length. [ 88.517690][ T6154] netlink: 'syz.1.62': attribute type 13 has an invalid length. [ 88.627783][ T6163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.753065][ T6174] netlink: 'syz.2.67': attribute type 21 has an invalid length. [ 88.772198][ T6163] syzkaller0: entered promiscuous mode [ 88.780688][ T6163] syzkaller0: entered allmulticast mode [ 88.813247][ T6159] tipc: Started in network mode [ 88.818471][ T6159] tipc: Node identity ca866d6d4223, cluster identity 4711 [ 88.828858][ T6159] tipc: Enabled bearer , priority 0 [ 88.852023][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 88.870681][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.67'. [ 88.894743][ T6159] tipc: Resetting bearer [ 88.962331][ T6158] tipc: Resetting bearer [ 88.983520][ T6158] tipc: Disabling bearer [ 89.306560][ T6192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.364027][ T6192] netlink: 'syz.2.73': attribute type 2 has an invalid length. [ 89.367982][ T6198] netlink: 272 bytes leftover after parsing attributes in process `syz.4.74'. [ 89.411575][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.74'. [ 89.945528][ T6224] netlink: 'syz.2.82': attribute type 13 has an invalid length. [ 89.948105][ T6226] xt_hashlimit: max too large, truncated to 1048576 [ 89.953664][ T6224] netlink: 152 bytes leftover after parsing attributes in process `syz.2.82'. [ 90.020722][ T6226] tipc: Started in network mode [ 90.047972][ T6226] tipc: Node identity 010000000000000007, cluster identity 4711 [ 90.556390][ T6260] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 90.580423][ T6260] bond1 (unregistering): Released all slaves [ 90.626646][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 90.685725][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 90.759791][ T6278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.96'. [ 90.976188][ T6287] syzkaller1: entered promiscuous mode [ 90.984415][ T6287] syzkaller1: entered allmulticast mode [ 91.329492][ T6301] validate_nla: 1 callbacks suppressed [ 91.329535][ T6301] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 92.113305][ T983] cfg80211: failed to load regulatory.db [ 92.699290][ T6354] syzkaller0: entered promiscuous mode [ 92.709975][ T6354] syzkaller0: entered allmulticast mode [ 94.360454][ T6364] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 94.708887][ T6417] netlink: 'syz.4.137': attribute type 5 has an invalid length. [ 95.019874][ T6430] __nla_validate_parse: 6 callbacks suppressed [ 95.019890][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 95.179851][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 95.203381][ T6438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.225333][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.227488][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.144'. [ 95.255295][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.264408][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.267693][ T6438] netlink: 31 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.284175][ T6438] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 95.299702][ T6438] netlink: 31 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.337827][ T6439] tipc: Started in network mode [ 95.347015][ T6439] tipc: Node identity 42d635fa593b, cluster identity 4711 [ 95.366786][ T6439] tipc: Enabled bearer , priority 0 [ 95.461526][ T6438] syzkaller0: entered promiscuous mode [ 95.492546][ T6438] syzkaller0: entered allmulticast mode [ 95.507175][ T6438] tipc: Resetting bearer [ 95.596409][ T3647] tipc: Resetting bearer [ 95.612216][ T6438] tipc: Resetting bearer [ 96.250565][ T6467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.253582][ T6466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.736234][ T6438] tipc: Disabling bearer [ 96.744872][ T6449] pim6reg1: entered promiscuous mode [ 96.752076][ T6449] pim6reg1: entered allmulticast mode [ 96.814780][ T5904] tipc: Node number set to 468530682 [ 97.344231][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 97.353873][ T6489] bridge_slave_1: left allmulticast mode [ 97.362205][ T6489] bridge_slave_1: left promiscuous mode [ 97.374634][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.462679][ T6489] bridge_slave_0: left allmulticast mode [ 97.484544][ T6489] bridge_slave_0: left promiscuous mode [ 97.495714][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.557154][ T6495] netlink: 'syz.4.159': attribute type 3 has an invalid length. [ 97.593371][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 97.611317][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 97.621066][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 97.651720][ T6506] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.737434][ T6506] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.782366][ T6513] macvtap1: entered promiscuous mode [ 97.820186][ T6513] macvtap1: entered allmulticast mode [ 97.854850][ T6513] veth1_vlan: entered allmulticast mode [ 97.866096][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 97.898531][ T6518] macvtap2: entered promiscuous mode [ 97.904055][ T6518] macvtap2: entered allmulticast mode [ 97.955219][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 98.006189][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 98.033847][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 98.064163][ T6506] wlan0 speed is unknown, defaulting to 1000 [ 98.308268][ T6532] team0: Port device team_slave_0 removed [ 98.361464][ T6545] tipc: Started in network mode [ 98.377496][ T6548] netlink: 'syz.1.175': attribute type 28 has an invalid length. [ 98.381506][ T6545] tipc: Node identity f2d6e424e81f, cluster identity 4711 [ 98.393025][ T6548] netlink: 'syz.1.175': attribute type 3 has an invalid length. [ 98.398542][ T6545] tipc: Enabled bearer , priority 0 [ 98.471474][ T6538] tipc: Disabling bearer [ 98.551225][ T6561] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 98.744731][ T6567] lo: entered allmulticast mode [ 98.764074][ T6567] lo: left allmulticast mode [ 98.890097][ T6576] syzkaller0: entered promiscuous mode [ 98.926967][ T6576] syzkaller0: entered allmulticast mode [ 99.319532][ T6603] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 99.499047][ T6603] 9: entered promiscuous mode [ 99.519605][ T6608] 0{X: renamed from gretap0 (while UP) [ 99.533981][ T6608] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 99.965527][ T6627] wlan0 speed is unknown, defaulting to 1000 [ 100.147719][ T6640] __nla_validate_parse: 14 callbacks suppressed [ 100.147735][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.202'. [ 100.546401][ T6657] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004 [ 100.665860][ T6664] netlink: 112 bytes leftover after parsing attributes in process `syz.1.210'. [ 100.783649][ T6668] syzkaller1: entered allmulticast mode [ 101.257654][ T6696] xt_TCPMSS: Only works on TCP SYN packets [ 101.461426][ T983] IPVS: starting estimator thread 0... [ 101.566529][ T6704] IPVS: using max 39 ests per chain, 93600 per kthread [ 101.948570][ T6728] wlan0 speed is unknown, defaulting to 1000 [ 102.416120][ T6754] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.554916][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.232'. [ 102.620375][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 102.681682][ T6771] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 103.075454][ T6794] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 103.119256][ T6798] Illegal XDP return value 4278559053 on prog (id 48) dev syz_tun, expect packet loss! [ 103.203575][ T6802] netlink: 144 bytes leftover after parsing attributes in process `syz.1.245'. [ 103.230272][ T6802] netlink: 232 bytes leftover after parsing attributes in process `syz.1.245'. [ 103.251928][ T6802] netlink: 144 bytes leftover after parsing attributes in process `syz.1.245'. [ 103.276104][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.246'. [ 103.277000][ T6808] netlink: 232 bytes leftover after parsing attributes in process `syz.1.245'. [ 103.336421][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.392312][ T6821] netlink: 'syz.1.249': attribute type 23 has an invalid length. [ 103.417055][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'. [ 103.677011][ T6828] tipc: Failed to remove unknown binding: 66,0,0/0:194138908/194138909 [ 103.717955][ T6828] tipc: Failed to remove unknown binding: 66,0,0/0:194138908/194138909 [ 103.784504][ T6833] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 103.955522][ T6840] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 104.389011][ T6867] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 104.535920][ T6867] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 104.661982][ T6867] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 104.667708][ T6879] vxcan2: entered allmulticast mode [ 104.756057][ T6884] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 104.766810][ T6884] netlink: 'syz.3.268': attribute type 2 has an invalid length. [ 104.776529][ T6883] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 104.784623][ T6883] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 104.792886][ T6883] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 105.378103][ T6930] __nla_validate_parse: 72 callbacks suppressed [ 105.378121][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 105.560338][ T6940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.718165][ T6937] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 105.768253][ T6937] bond2 (unregistering): Released all slaves [ 105.828630][ T6956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.288'. [ 106.033617][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 106.099924][ T6963] openvswitch: netlink: Flow key attr not present in new flow. [ 106.120809][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 106.146415][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 106.312344][ T6971] netlink: 224 bytes leftover after parsing attributes in process `syz.3.295'. [ 106.596768][ T6988] netlink: 'syz.3.299': attribute type 11 has an invalid length. [ 106.619255][ T6988] netlink: 'syz.3.299': attribute type 11 has an invalid length. [ 106.665247][ T6988] netlink: 204 bytes leftover after parsing attributes in process `syz.3.299'. [ 106.715751][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 106.724665][ T6994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.299'. [ 106.789532][ T7002] openvswitch: netlink: IP tunnel dst address not specified [ 106.898295][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.906356][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.942307][ T7011] xt_addrtype: ipv6 does not support BROADCAST matching [ 106.962837][ T6994] geneve3: entered promiscuous mode [ 106.979721][ T6994] geneve3: entered allmulticast mode [ 107.005571][ T152] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 107.019710][ T152] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 107.040512][ T152] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 107.065570][ T152] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 107.166984][ T7017] sctp: [Deprecated]: syz.2.305 (pid 7017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.166984][ T7017] Use struct sctp_sack_info instead [ 107.319353][ T7022] can: request_module (can-proto-0) failed. [ 107.365324][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 107.378476][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.308'. [ 107.391710][ T7028] IPv6: addrconf: prefix option has invalid lifetime [ 107.724399][ T7037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.867181][ T7042] bond1: (slave geneve2): making interface the new active one [ 107.881284][ T7042] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 107.890843][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.933022][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.966287][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.024855][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.093546][ T7061] tipc: Enabled bearer , priority 0 [ 108.102452][ T7061] syzkaller0: entered promiscuous mode [ 108.108581][ T7061] syzkaller0: entered allmulticast mode [ 108.111276][ T7058] validate_nla: 44 callbacks suppressed [ 108.111291][ T7058] netlink: 'syz.4.316': attribute type 2 has an invalid length. [ 108.120081][ T7061] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 108.158947][ T7059] netlink: 'syz.4.316': attribute type 2 has an invalid length. [ 108.219731][ T7061] tipc: Resetting bearer [ 108.269695][ T7060] tipc: Resetting bearer [ 108.280814][ T7060] tipc: Disabling bearer [ 132.627105][ T7080] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.633873][ T7084] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.647962][ T7084] Cannot find add_set index 0 as target [ 132.655465][ T7083] netlink: 'syz.3.321': attribute type 9 has an invalid length. [ 132.820396][ T7094] __nla_validate_parse: 3 callbacks suppressed [ 132.820415][ T7094] netlink: 2 bytes leftover after parsing attributes in process `syz.4.322'. [ 132.943057][ T7098] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 132.965247][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 132.990621][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 133.009647][ T7098] netlink: 212 bytes leftover after parsing attributes in process `syz.4.322'. [ 133.034514][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 133.048655][ T7098] netlink: 5 bytes leftover after parsing attributes in process `syz.4.322'. [ 133.058957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.134571][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 133.162408][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 133.689233][ T7138] netlink: 9 bytes leftover after parsing attributes in process `syz.1.339'. [ 133.745706][ T7138] gretap0: entered promiscuous mode [ 133.779434][ T7138] gretap0: left promiscuous mode [ 133.852813][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.872622][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 133.876796][ T7146] netlink: 'syz.2.342': attribute type 11 has an invalid length. [ 134.419170][ T7179] netlink: 'syz.2.353': attribute type 2 has an invalid length. [ 134.712344][ T7184] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 134.755776][ T7184] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 134.821087][ T7203] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20002 [ 134.844401][ T7203] C: renamed from lo (while UP) [ 134.889901][ T7203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 134.978750][ T7207] netlink: 'syz.0.361': attribute type 12 has an invalid length. [ 135.056967][ T7216] openvswitch: netlink: Invalid VLAN frame [ 135.153692][ T7222] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 135.187865][ T7224] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 135.455888][ T7237] syzkaller0: entered allmulticast mode [ 135.504942][ T7242] nbd: couldn't find a device at index 1 [ 135.872698][ T7268] netlink: 'syz.0.378': attribute type 4 has an invalid length. [ 136.172596][ T7287] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 136.180288][ T7286] syzkaller0: entered promiscuous mode [ 136.193690][ T7286] syzkaller0: entered allmulticast mode [ 136.237858][ T7286] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 136.273313][ T7286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.607355][ T7300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.682485][ T7302] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.153150][ T7332] openvswitch: netlink: EtherType 0 is less than min 600 [ 137.340544][ T7333] Bluetooth: MGMT ver 1.23 [ 137.612408][ T7351] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 137.746069][ T847] IPVS: starting estimator thread 0... [ 137.793850][ T7361] bond10: (slave geneve2): making interface the new active one [ 137.802916][ T7361] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 137.813516][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.825269][ T7370] trusted_key: syz.3.403 sent an empty control message without MSG_MORE. [ 137.835509][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.844351][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.856125][ T152] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 137.866286][ T7366] IPVS: using max 29 ests per chain, 69600 per kthread [ 137.900473][ T7372] __nla_validate_parse: 43 callbacks suppressed [ 137.900491][ T7372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 137.944550][ T7372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.408'. [ 138.313392][ T7394] netlink: 10 bytes leftover after parsing attributes in process `syz.4.415'. [ 138.412433][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 138.462537][ T7403] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 138.470016][ T7400] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 138.524086][ T7403] netlink: 11 bytes leftover after parsing attributes in process `syz.2.417'. [ 138.551382][ T7403] netlink: 11 bytes leftover after parsing attributes in process `syz.2.417'. [ 138.675799][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 138.725545][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 139.021519][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 139.038540][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 139.109552][ T3647] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.132494][ T3647] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.145722][ T3647] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.154573][ T3647] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.186111][ T7396] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 139.644015][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c713c00: rx timeout, send abort [ 139.654142][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c713c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.871174][ T7480] netlink: 'syz.2.439': attribute type 12 has an invalid length. [ 140.250812][ T7499] syzkaller0: entered promiscuous mode [ 140.266499][ T7499] syzkaller0: entered allmulticast mode [ 140.383205][ T7502] openvswitch: netlink: Actions may not be safe on all matching packets [ 140.945352][ T7538] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 141.110188][ T7542] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 141.283299][ T7554] xt_l2tp: v2 doesn't support IP mode [ 141.349049][ T7548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.879559][ T7578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.681647][ T7612] openvswitch: netlink: Tunnel attr 12 has unexpected len 256 expected 16 [ 142.701499][ T7605] syzkaller0: entered promiscuous mode [ 142.725218][ T7605] syzkaller0: entered allmulticast mode [ 142.990781][ T7627] tipc: Enabled bearer , priority 0 [ 143.000708][ T7625] syzkaller0: entered promiscuous mode [ 143.007614][ T7625] syzkaller0: entered allmulticast mode [ 143.023257][ T7625] syzkaller0: tun_net_xmit 14 [ 143.114259][ T7627] syzkaller0: entered promiscuous mode [ 143.124726][ T7627] syzkaller0: entered allmulticast mode [ 143.141261][ T7627] tipc: Resetting bearer [ 143.150070][ T3647] syzkaller0: tun_net_xmit 70 [ 143.197286][ T7626] tipc: Resetting bearer [ 143.847432][ T7657] __nla_validate_parse: 13 callbacks suppressed [ 143.847451][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 143.856790][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 144.253601][ T7626] tipc: Disabling bearer [ 144.275383][ T6194] tipc: Node number set to 2292542829 [ 144.509167][ T7673] syzkaller0: entered promiscuous mode [ 144.522236][ T7673] syzkaller0: entered allmulticast mode [ 144.523365][ T7680] netlink: 'syz.3.499': attribute type 4 has an invalid length. [ 144.599511][ T7680] netlink: 17 bytes leftover after parsing attributes in process `syz.3.499'. [ 144.613566][ T7684] netlink: 'syz.1.500': attribute type 11 has an invalid length. [ 144.959818][ T7708] netlink: 'syz.2.505': attribute type 2 has an invalid length. [ 144.963391][ T7709] netlink: 'syz.2.505': attribute type 2 has an invalid length. [ 144.972923][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 144.991957][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 145.138015][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 145.216956][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 145.229856][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'. [ 145.334274][ T7726] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 145.344210][ T7726] netlink: 96 bytes leftover after parsing attributes in process `syz.0.512'. [ 145.370037][ T7726] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 145.378666][ T7726] netlink: 638 bytes leftover after parsing attributes in process `syz.0.512'. [ 145.566999][ T7733] : renamed from hsr0 (while UP) [ 145.573459][ T7743] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 145.722357][ T7753] l2tp_ppp: sess 2/0: no socket in recv [ 146.217565][ T7778] xt_l2tp: v2 sid > 0xffff: 1114112 [ 146.479363][ T7794] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 146.504926][ T7794] netlink: 'syz.1.536': attribute type 3 has an invalid length. [ 146.505442][ T7792] netlink: 'syz.0.534': attribute type 178 has an invalid length. [ 146.539713][ T7794] NCSI netlink: No device for ifindex 813332851 [ 146.896275][ T7813] bond2: (slave ip6gretap1): making interface the new active one [ 146.905250][ T7813] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 147.001606][ T7817] bond5: (slave sit0): The slave device specified does not support setting the MAC address [ 147.023422][ T7817] bond5: (slave sit0): Error -95 calling set_mac_address [ 147.054879][ T7825] bond5: entered promiscuous mode [ 147.073997][ T7825] bond5: entered allmulticast mode [ 147.292611][ T7839] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.526464][ T7854] sch_fq: defrate 0 ignored. [ 148.687263][ T7916] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 148.784378][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.793765][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.804834][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.815958][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.933205][ T7931] __nla_validate_parse: 9 callbacks suppressed [ 148.933222][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.571'. [ 149.036452][ T7929] wlan0 speed is unknown, defaulting to 1000 [ 149.263831][ T7943] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 149.349681][ T7955] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.576'. [ 149.478794][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.578'. [ 149.509232][ T7964] netlink: 43 bytes leftover after parsing attributes in process `syz.2.578'. [ 149.534494][ T7967] netlink: 209808 bytes leftover after parsing attributes in process `syz.0.580'. [ 149.546005][ T7964] validate_nla: 6 callbacks suppressed [ 149.546022][ T7964] netlink: 'syz.2.578': attribute type 5 has an invalid length. [ 149.603290][ T7964] netlink: 43 bytes leftover after parsing attributes in process `syz.2.578'. [ 149.833336][ T7976] netlink: 44 bytes leftover after parsing attributes in process `syz.2.585'. [ 149.911813][ T7982] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 149.985788][ T7988] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.588'. [ 150.065477][ T7992] xt_TCPMSS: Only works on TCP SYN packets [ 150.088649][ T7992] xt_hashlimit: overflow, rate too high: 0 [ 150.184544][ T7988] bond7: Unable to set up delay as MII monitoring is disabled [ 150.196095][ T7988] bond7 (unregistering): Released all slaves [ 150.224571][ T7994] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 150.512762][ T8008] siw: device registration error -23 [ 150.519724][ T8011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.595'. [ 150.569246][ T8013] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 150.598462][ T8013] bond2 (unregistering): Released all slaves [ 150.606674][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 150.724303][ T8025] macvtap1: entered promiscuous mode [ 150.752764][ T8025] vlan0: entered promiscuous mode [ 150.773743][ T8025] macvtap1: entered allmulticast mode [ 150.797141][ T8025] vlan0: entered allmulticast mode [ 150.812204][ T8025] veth0_vlan: entered allmulticast mode [ 151.490875][ T8065] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 151.507653][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880565f9c00: rx timeout, send abort [ 151.516851][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880565f9c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 151.683569][ T8072] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 152.034508][ T8098] syzkaller0: entered promiscuous mode [ 152.050820][ T8098] syzkaller0: entered allmulticast mode [ 152.068849][ T8098] 0: reclassify loop, rule prio 0, protocol 800 [ 152.081053][ T8100] netlink: 'syz.4.619': attribute type 1 has an invalid length. [ 152.088196][ T8102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.098754][ T8102] netlink: 'syz.0.621': attribute type 11 has an invalid length. [ 152.319525][ T8100] 8021q: adding VLAN 0 to HW filter on device bond11 [ 153.595287][ T8129] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.611148][ T8129] bond1: (slave lo): Enslaving as a backup interface with an up link [ 153.624942][ T8129] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 153.691365][ T8138] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.381849][ T8183] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 154.470663][ T8190] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 155.004210][ T8208] bond3: ARP target 1.0.0.0 is already present [ 155.053983][ T8208] bond3: option arp_ip_target: invalid value (1) [ 155.070589][ T8208] bond3 (unregistering): Released all slaves [ 155.097419][ T8172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.103903][ T8172] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 155.113232][ T8183] wlan0 speed is unknown, defaulting to 1000 [ 155.121122][ T8172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.123267][ T8213] netlink: 'syz.0.649': attribute type 26 has an invalid length. [ 155.128117][ T8172] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 155.200040][ T8172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.230868][ T8172] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 155.356104][ T8172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.366800][ T8172] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 155.385386][ T8172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.391324][ T8172] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 155.590979][ T6194] wlan0 speed is unknown, defaulting to 1000 [ 155.610233][ T6194] syz0: Port: 1 Link DOWN [ 155.973029][ T8253] ieee802154 phy1 wpan1: encryption failed: -22 [ 155.992826][ T8253] __nla_validate_parse: 8 callbacks suppressed [ 155.992843][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 156.036702][ T8256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.658'. [ 156.130394][ T8266] tipc: Enabled bearer , priority 10 [ 156.200398][ T8266] tipc: Enabling of bearer rejected, failed to enable media [ 156.349090][ T8275] wlan0 speed is unknown, defaulting to 1000 [ 156.431526][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 156.497526][ T8285] veth1_macvtap: left promiscuous mode [ 156.503047][ T8285] macsec0: entered promiscuous mode [ 156.547986][ T8285] macsec0: entered allmulticast mode [ 156.669633][ T8290] veth1_macvtap: entered promiscuous mode [ 156.685375][ T8290] veth1_macvtap: entered allmulticast mode [ 156.727992][ T8290] macsec0: left promiscuous mode [ 156.755418][ T8290] macsec0: left allmulticast mode [ 156.765213][ T8290] veth1_macvtap: left allmulticast mode [ 157.150800][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.158475][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.194023][ T8320] bridge0: entered allmulticast mode [ 157.342371][ T8326] bridge_slave_1: left allmulticast mode [ 157.361202][ T8326] bridge_slave_1: left promiscuous mode [ 157.389034][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.446964][ T8326] bridge_slave_0: left allmulticast mode [ 157.455844][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.902108][ T8357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.236583][ T8382] netlink: 44 bytes leftover after parsing attributes in process `syz.3.684'. [ 158.298071][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.684'. [ 158.310304][ T8383] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.684'. [ 158.494215][ T8397] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 158.670409][ T8408] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 158.705345][ T8408] netlink: 96 bytes leftover after parsing attributes in process `syz.3.693'. [ 158.744471][ T8408] netlink: 658 bytes leftover after parsing attributes in process `syz.3.693'. [ 158.753644][ T8408] netlink: 1 bytes leftover after parsing attributes in process `syz.3.693'. [ 158.776915][ T8402] wlan0 speed is unknown, defaulting to 1000 [ 158.952631][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 160.100316][ T8472] netlink: 'syz.4.708': attribute type 3 has an invalid length. [ 160.123485][ T8472] netlink: 'syz.4.708': attribute type 3 has an invalid length. [ 160.153111][ T8472] tipc: Enabled bearer , priority 11 [ 160.937767][ T8528] tipc: Enabling of bearer rejected, failed to enable media [ 160.956290][ T8527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.957723][ T8531] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 161.120562][ T8537] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.243509][ T8547] __nla_validate_parse: 10 callbacks suppressed [ 161.243527][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'. [ 161.302361][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'. [ 161.706189][ T8568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.735'. [ 161.837532][ T8574] tipc: Enabling of bearer rejected, failed to enable media [ 161.847957][ T8576] tipc: Enabling of bearer rejected, failed to enable media [ 162.276490][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 162.298261][ T8600] netlink: 284 bytes leftover after parsing attributes in process `syz.0.744'. [ 162.329231][ T8597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.745'. [ 163.515245][ T8621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.524237][ T8621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.584618][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 163.616288][ T8621] netlink: 128 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.686947][ T8625] syzkaller0: entered promiscuous mode [ 163.711026][ T8625] syzkaller0: entered allmulticast mode [ 163.896239][ T8651] syzkaller0: entered promiscuous mode [ 163.907914][ T8651] syzkaller0: entered allmulticast mode [ 164.108391][ T8662] sit0: entered promiscuous mode [ 164.135690][ T8662] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 164.260797][ T8668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.261123][ T8672] netlink: 'syz.0.765': attribute type 4 has an invalid length. [ 164.484898][ T8686] ipt_REJECT: TCP_RESET invalid for non-tcp [ 164.582233][ T8693] batadv0: mtu less than device minimum [ 164.659951][ T8697] netlink: 'syz.4.771': attribute type 10 has an invalid length. [ 164.672900][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.682700][ T8697] bridge_slave_1: left allmulticast mode [ 164.688802][ T8697] bridge_slave_1: left promiscuous mode [ 164.696402][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.733457][ T8697] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 165.105429][ T8715] netlink: 'syz.3.778': attribute type 32 has an invalid length. [ 165.194962][ T8715] bond7: option coupled_control: invalid value (52) [ 165.244232][ T8715] bond7 (unregistering): Released all slaves [ 165.360415][ T8730] IPVS: set_ctl: invalid protocol: 41 172.30.4.3:19999 [ 165.362032][ T8728] bridge_slave_1: left allmulticast mode [ 165.373039][ T8728] bridge_slave_1: left promiscuous mode [ 165.391353][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.416453][ T8728] bridge_slave_0: left allmulticast mode [ 165.422135][ T8728] bridge_slave_0: left promiscuous mode [ 165.428661][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.817660][ T8762] syzkaller0: entered promiscuous mode [ 165.825486][ T8762] syzkaller0: entered allmulticast mode [ 166.029641][ T8772] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 166.044840][ T8772] netlink: 'syz.0.793': attribute type 16 has an invalid length. [ 166.302922][ T8780] syzkaller0: entered promiscuous mode [ 166.316206][ T8780] syzkaller0: entered allmulticast mode [ 166.323329][ T8787] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 166.330280][ T8787] syzkaller1: linktype set to 823 [ 166.396449][ T8785] nbd0: detected capacity change from 0 to 127 [ 166.421673][ T8778] __nla_validate_parse: 9 callbacks suppressed [ 166.421698][ T8778] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.797'. [ 166.448088][ T8778] netlink: Conntrack attr has 4 unknown bytes [ 166.538940][ T8798] netlink: 5496 bytes leftover after parsing attributes in process `syz.3.802'. [ 167.134208][ T5840] block nbd0: Receive control failed (result -104) [ 167.686638][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 167.702474][ T8808] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 167.721240][ T8808] netlink: 264 bytes leftover after parsing attributes in process `syz.3.805'. [ 167.778359][ T8806] gre1: entered promiscuous mode [ 167.795257][ T8806] gre1: entered allmulticast mode [ 167.888350][ T8808] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 167.905799][ T8808] netlink: 264 bytes leftover after parsing attributes in process `syz.3.805'. [ 168.086285][ T8832] dvmrp6: entered allmulticast mode [ 168.139153][ T8840] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.814'. [ 168.271032][ T8842] syzkaller0: entered promiscuous mode [ 168.276655][ T8842] syzkaller0: entered allmulticast mode [ 168.452443][ T8854] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 168.499819][ T8858] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 168.614539][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 168.655906][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 168.718249][ T8876] netlink: 128 bytes leftover after parsing attributes in process `syz.4.825'. [ 168.813909][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 169.070204][ T8894] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 169.154549][ T8904] : entered promiscuous mode [ 169.231454][ T8905] Unsupported ieee802154 address type: 0 [ 170.043613][ T8965] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 170.559573][ T5904] IPVS: starting estimator thread 0... [ 170.606076][ T8991] IPVS: dh: FWM 3 0x00000003 - no destination available [ 170.666239][ T8994] IPVS: using max 27 ests per chain, 64800 per kthread [ 171.011656][ T9017] netlink: 'syz.1.860': attribute type 21 has an invalid length. [ 171.332148][ T9040] netlink: 'syz.4.863': attribute type 16 has an invalid length. [ 171.355157][ T9040] netlink: 'syz.4.863': attribute type 17 has an invalid length. [ 171.430780][ T9040] sit0: left promiscuous mode [ 171.510794][ T9040] 8021q: adding VLAN 0 to HW filter on device ` [ 171.529092][ T9040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.583701][ T9054] __nla_validate_parse: 13 callbacks suppressed [ 171.583718][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'. [ 171.641812][ T9054] openvswitch: netlink: Flow key attr not present in new flow. [ 171.667325][ T9049] tc_dump_action: action bad kind [ 171.998648][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 172.390366][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 172.454278][ T9100] netlink: 'syz.2.879': attribute type 29 has an invalid length. [ 172.490830][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 172.549051][ T9109] team0: Cannot enslave team device to itself [ 172.647730][ T9111] netlink: 48 bytes leftover after parsing attributes in process `syz.4.883'. [ 172.904086][ T9121] macvtap2: entered promiscuous mode [ 172.925420][ T9121] macvtap2: entered allmulticast mode [ 172.945230][ T9121] veth1_vlan: entered allmulticast mode [ 172.982470][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'. [ 172.988238][ T9122] macvtap3: entered promiscuous mode [ 172.998217][ T9122] macvtap3: entered allmulticast mode [ 173.012561][ T9127] netlink: 80 bytes leftover after parsing attributes in process `syz.3.885'. [ 173.031370][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'. [ 173.122417][ T9132] syzkaller0: entered promiscuous mode [ 173.128311][ T9132] syzkaller0: entered allmulticast mode [ 173.277883][ T9150] tipc: Enabled bearer , priority 0 [ 173.425479][ T9155] syzkaller0: entered promiscuous mode [ 173.431285][ T9155] syzkaller0: entered allmulticast mode [ 173.438567][ T9155] tipc: Resetting bearer [ 173.451166][ T9149] tipc: Resetting bearer [ 173.466787][ T9157] netlink: 'syz.1.897': attribute type 11 has an invalid length. [ 174.610499][ T9149] tipc: Disabling bearer [ 174.633045][ T9165] kthread_run failed with err -4 [ 174.865422][ T9186] openvswitch: netlink: IPv4 tunnel dst address is zero [ 176.510062][ T9233] veth0: entered promiscuous mode [ 176.553744][ T9233] team0: Device gtp0 is up. Set it down before adding it as a team port [ 176.739219][ T9250] netlink: 'syz.0.918': attribute type 13 has an invalid length. [ 176.746916][ T9237] netlink: 'syz.4.915': attribute type 39 has an invalid length. [ 176.832546][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 176.897756][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 176.915839][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 177.153623][ T9263] sctp: [Deprecated]: syz.3.921 (pid 9263) Use of int in max_burst socket option. [ 177.153623][ T9263] Use struct sctp_assoc_value instead [ 177.444401][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.483561][ T9250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.025321][ T9233] veth0: left promiscuous mode [ 178.042513][ T9261] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 178.078885][ T9262] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 178.124101][ T9262] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 178.153389][ T152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.177033][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.187609][ T152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.205858][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.225350][ T4493] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.243025][ T4493] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.296222][ T9275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.925'. [ 178.324481][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.348771][ T9275] netlink: 'syz.0.925': attribute type 13 has an invalid length. [ 178.383641][ T9273] tap0: tun_chr_ioctl cmd 1074025676 [ 178.390420][ T9273] tap0: owner set to 0 [ 178.592463][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 178.858449][ T9304] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 178.992057][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 179.236184][ T9324] nbd: must specify a device to reconfigure [ 179.255822][ T9324] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 179.351228][ T9329] wg1: Master is either lo or non-ether device [ 179.412726][ T9331] blkio.reset_stats is deprecated [ 179.648083][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 179.769760][ T9357] tipc: MTU too low for tipc bearer [ 179.778288][ T9359] tipc: MTU too low for tipc bearer [ 179.957693][ T9368] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 179.992000][ T9368] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.023006][ T9368] gretap0: entered promiscuous mode [ 180.053159][ T9368] gretap0: entered allmulticast mode [ 180.243654][ T9395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.308892][ T9395] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 180.375200][ T9395] netlink: 'syz.2.961': attribute type 3 has an invalid length. [ 180.382888][ T9395] netlink: 'syz.2.961': attribute type 7 has an invalid length. [ 180.419634][ T9395] netlink: 'syz.2.961': attribute type 8 has an invalid length. [ 180.432093][ T9395] NCSI netlink: No device for ifindex 131092 [ 180.633499][ T9415] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 181.569494][ T9451] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 181.913347][ T9473] __nla_validate_parse: 8 callbacks suppressed [ 181.913365][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 181.959894][ T9473] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.120515][ T9484] netlink: 22 bytes leftover after parsing attributes in process `syz.2.990'. [ 182.140334][ T9486] netlink: 22 bytes leftover after parsing attributes in process `syz.2.990'. [ 182.169736][ T9489] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 182.186355][ T9489] netlink: 'syz.3.992': attribute type 2 has an invalid length. [ 182.198302][ T9489] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 182.206523][ T9489] netlink: 'syz.3.992': attribute type 2 has an invalid length. [ 182.254283][ T9495] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 182.284237][ T9495] bond8: entered promiscuous mode [ 182.289835][ T9495] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.528759][ T9509] syzkaller0: entered promiscuous mode [ 182.541950][ T9509] syzkaller0: entered allmulticast mode [ 182.819352][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057899000: rx timeout, send abort [ 182.828033][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057899000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.927082][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'. [ 183.171972][ T9529] netlink: 'syz.2.1004': attribute type 11 has an invalid length. [ 183.180072][ T9529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1004'. [ 183.244610][ T9531] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1003'. [ 183.383408][ T9535] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1004'. [ 184.467323][ T9530] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1003'. [ 184.501931][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 184.511233][ T9532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.729481][ T9547] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1008'. [ 184.939445][ T9563] syzkaller0: entered promiscuous mode [ 184.955457][ T9563] syzkaller0: entered allmulticast mode [ 185.812979][ T9615] wlan0 speed is unknown, defaulting to 1000 [ 186.625245][ T9656] gre0: entered promiscuous mode [ 186.630259][ T9656] gre0: entered allmulticast mode [ 186.679009][ T9669] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 186.863795][ T9672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.551871][ T9722] net veth1_virt_wifi .: renamed from virt_wifi0 [ 187.581948][ T9722] __nla_validate_parse: 5 callbacks suppressed [ 187.581966][ T9722] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1061'. [ 187.593408][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 187.710156][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 187.866030][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 187.998565][ T9765] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.119299][ T9760] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 188.127822][ T9760] bond3: option packets_per_slave: allowed values 0 - 65535 [ 188.144898][ T9760] bond3 (unregistering): Released all slaves [ 188.176103][ T9767] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1071'. [ 188.291011][ T9785] netlink: 'syz.1.1080': attribute type 17 has an invalid length. [ 188.316962][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 188.390958][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 188.426035][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 188.444081][ T9795] netlink: 'syz.2.1082': attribute type 29 has an invalid length. [ 188.456830][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 188.511628][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 189.055772][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.450302][ T9828] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 189.531433][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.556108][ T9788] tipc: Resetting bearer [ 189.989577][ T9788] vlan0: left allmulticast mode [ 189.994598][ T9788] veth0_vlan: left allmulticast mode [ 190.000528][ T9788] vlan0: left promiscuous mode [ 190.011811][ T9788] macvtap1: left promiscuous mode [ 190.031947][ T9788] veth1_vlan: left allmulticast mode [ 190.039946][ T9788] macvtap2: left promiscuous mode [ 190.137222][ T8249] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.191248][ T8249] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.215430][ T8249] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.229977][ T8249] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.238971][ T8249] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.259523][ T8249] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.289135][ T8249] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.353671][ T8249] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.376820][ T8249] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.389773][ T8249] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.402095][ T8249] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.431144][ T8249] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.826787][ T9886] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 191.129034][ T9899] xt_cgroup: invalid path, errno=-2 [ 191.484911][ T9911] tipc: Enabled bearer , priority 0 [ 191.499856][ T9919] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 191.584727][ T9908] tipc: Disabling bearer [ 191.607003][ T9930] netlink: 'syz.4.1112': attribute type 2 has an invalid length. [ 191.631384][ T9929] netlink: 'syz.4.1112': attribute type 2 has an invalid length. [ 191.680612][ T9929] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 191.841051][ T9942] vxcan2: entered allmulticast mode [ 191.855500][ T9946] openvswitch: netlink: Unknown key attributes 2 [ 192.229710][ T9973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.312609][ T9975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.358637][ T9979] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 192.378393][ T9975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.613798][ T9994] syzkaller0: entered promiscuous mode [ 192.639572][ T9994] syzkaller0: entered allmulticast mode [ 192.684762][ T9994] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 192.698325][ T9994] __nla_validate_parse: 18 callbacks suppressed [ 192.698344][ T9994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1131'. [ 192.727859][T10001] netlink: 'syz.0.1134': attribute type 1 has an invalid length. [ 192.735795][T10001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1134'. [ 192.757197][ T9994] netlink: 532 bytes leftover after parsing attributes in process `syz.2.1131'. [ 192.812363][T10012] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 192.918502][T10012] 8021q: adding VLAN 0 to HW filter on device bond9 [ 192.952120][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1136'. [ 192.969787][T10012] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1136'. [ 192.980398][T10012] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1136'. [ 192.994026][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1139'. [ 193.109092][T10029] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.1142'. [ 193.126680][T10029] netlink: Unknown conntrack attr (type=2304, max=9) [ 193.319694][T10036] netlink: 'syz.4.1144': attribute type 10 has an invalid length. [ 193.380610][T10042] x_tables: duplicate underflow at hook 2 [ 193.458740][T10046] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1148'. [ 193.478971][T10045] Bluetooth: MGMT ver 1.23 [ 193.507149][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1149'. [ 193.558518][T10048] netlink: 'syz.1.1146': attribute type 1 has an invalid length. [ 193.616300][T10046] netlink: 'syz.0.1148': attribute type 2 has an invalid length. [ 193.753704][T10058] syzkaller1: entered promiscuous mode [ 193.759319][T10058] syzkaller1: entered allmulticast mode [ 194.014874][T10074] veth1_vlan: left promiscuous mode [ 194.021870][T10074] veth1_vlan: entered promiscuous mode [ 194.028385][T10074] veth1_vlan: entered allmulticast mode [ 194.489918][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.540043][T10112] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 194.590233][T10099] team0 (unregistering): Port device team_slave_1 removed [ 195.230496][T10141] syzkaller0: entered promiscuous mode [ 195.236302][T10141] syzkaller0: entered allmulticast mode [ 195.912293][T10187] Cannot find add_set index 2 as target [ 197.046586][ T25] block nbd0: Possible stuck request ffff888024a38000: control (read@0,1024B). Runtime 30 seconds [ 197.059464][ T25] block nbd0: Possible stuck request ffff888024a38200: control (read@1024,1024B). Runtime 30 seconds [ 197.071532][ T25] block nbd0: Possible stuck request ffff888024a38400: control (read@2048,1024B). Runtime 30 seconds [ 197.082710][ T25] block nbd0: Possible stuck request ffff888024a38600: control (read@3072,1024B). Runtime 30 seconds [ 198.049678][T10227] netlink: 'syz.4.1203': attribute type 10 has an invalid length. [ 198.139549][T10229] __nla_validate_parse: 18 callbacks suppressed [ 198.139666][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'. [ 198.171846][T10229] team0: Device gtp0 is up. Set it down before adding it as a team port [ 198.311235][T10237] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 198.561105][T10251] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 198.629912][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 199.398210][T10270] netlink: 'syz.1.1219': attribute type 2 has an invalid length. [ 199.461044][T10270] xt_socket: unknown flags 0x50 [ 199.789509][T10275] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20000 [ 200.071290][T10296] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 200.078015][T10295] gtp0: entered promiscuous mode [ 200.097551][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 200.107520][T10295] gtp0: entered allmulticast mode [ 200.250008][T10304] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1231'. [ 200.404346][T10316] wg1: entered promiscuous mode [ 200.432489][T10316] wg1: entered allmulticast mode [ 200.533516][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 200.546185][T10330] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 200.580358][T10334] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 200.598387][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1241'. [ 200.605234][T10337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1241'. [ 200.608452][T10334] netlink: 'syz.1.1242': attribute type 2 has an invalid length. [ 200.626106][T10334] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 200.642178][T10334] netlink: 'syz.1.1242': attribute type 3 has an invalid length. [ 200.646500][T10339] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 200.658200][T10339] netlink: 'syz.4.1240': attribute type 4 has an invalid length. [ 200.674906][T10339] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.1240'. [ 200.892159][T10352] sctp: [Deprecated]: syz.3.1244 (pid 10352) Use of int in max_burst socket option deprecated. [ 200.892159][T10352] Use struct sctp_assoc_value instead [ 200.990909][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 201.011363][T10357] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1248'. [ 201.163843][T10368] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 201.258524][ T1097] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.279865][ T1097] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.303275][ T1097] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.329118][ T1097] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.430310][T10386] netlink: 'syz.2.1257': attribute type 3 has an invalid length. [ 201.590619][T10397] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 201.800562][ T9837] IPVS: starting estimator thread 0... [ 201.808465][T10405] tipc: Enabled bearer , priority 10 [ 201.908052][T10406] IPVS: using max 29 ests per chain, 69600 per kthread [ 202.123043][T10423] geneve4: entered promiscuous mode [ 202.129026][T10423] geneve4: entered allmulticast mode [ 202.146028][ T4493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 202.158576][ T4493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 202.178409][ T4493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 202.187147][ T4493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 202.387219][T10435] nbd2: detected capacity change from 0 to 127 [ 202.398285][ T5840] block nbd2: Receive control failed (result -32) [ 202.480826][T10439] vlan2: entered promiscuous mode [ 202.486587][T10439] `: entered promiscuous mode [ 202.491386][T10439] bond_slave_0: entered promiscuous mode [ 202.498305][T10439] bond_slave_1: entered promiscuous mode [ 202.504123][T10439] bridge_slave_1: entered promiscuous mode [ 202.512524][T10439] vlan2: entered allmulticast mode [ 202.518551][T10439] `: entered allmulticast mode [ 202.535614][T10439] bond_slave_0: entered allmulticast mode [ 202.538438][T10444] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.541381][T10439] bond_slave_1: entered allmulticast mode [ 202.541401][T10439] bridge_slave_1: entered allmulticast mode [ 202.890691][T10463] netlink: Unknown conntrack attr (0) [ 203.012177][T10470] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 203.246893][T10477] __nla_validate_parse: 18 callbacks suppressed [ 203.246907][T10477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1286'. [ 203.660084][T10508] openvswitch: netlink: Message has -2 unknown bytes. [ 203.783684][T10517] dvmrp0: entered allmulticast mode [ 204.002474][T10523] syzkaller0: entered promiscuous mode [ 204.008417][T10523] syzkaller0: entered allmulticast mode [ 205.528948][T10561] syzkaller0: entered promiscuous mode [ 205.555764][T10561] syzkaller0: entered allmulticast mode [ 205.579341][T10561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1318'. [ 205.612408][T10572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 205.662379][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 205.716200][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 205.749957][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'. [ 205.890170][T10596] ksmbd: Unknown IPC event: 1, ignore. [ 206.246119][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 206.261647][T10593] syzkaller1: entered promiscuous mode [ 206.268443][T10593] syzkaller1: entered allmulticast mode [ 206.335528][T10606] validate_nla: 5 callbacks suppressed [ 206.335545][T10606] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 206.531659][T10612] pim6reg1: entered promiscuous mode [ 206.539050][T10612] pim6reg1: entered allmulticast mode [ 206.560033][T10614] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 206.707496][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'. [ 206.776799][T10637] syzkaller0: entered promiscuous mode [ 206.782303][T10637] syzkaller0: entered allmulticast mode [ 206.806832][T10639] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 206.857514][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 206.886119][T10639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.928113][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 206.972677][T10630] bond5: (slave veth0_to_bond): making interface the new active one [ 206.997329][T10652] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 207.022234][T10630] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.191449][T10660] macsec4: entered promiscuous mode [ 207.200044][T10660] bridge0: entered promiscuous mode [ 207.206570][T10660] macsec4: entered allmulticast mode [ 207.212872][T10660] bridge0: entered allmulticast mode [ 207.220675][T10660] bridge0: port 1(macsec4) entered blocking state [ 207.232181][T10660] bridge0: port 1(macsec4) entered disabled state [ 207.249026][T10660] bridge0: left allmulticast mode [ 207.256006][T10660] bridge0: left promiscuous mode [ 207.509038][T10676] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 207.527558][T10677] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 207.734834][T10694] xt_TCPMSS: Only works on TCP SYN packets [ 207.797394][T10697] tipc: Enabled bearer , priority 0 [ 207.959147][T10710] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 208.080003][T10720] tipc: Enabled bearer , priority 10 [ 208.164648][T10731] netlink: 'syz.0.1363': attribute type 11 has an invalid length. [ 208.227466][T10733] geneve4: left promiscuous mode [ 208.232467][T10733] geneve4: left allmulticast mode [ 208.272501][T10733] vlan2: left promiscuous mode [ 208.278698][T10733] `: left promiscuous mode [ 208.287831][T10733] bond_slave_0: left promiscuous mode [ 208.306706][T10733] bond_slave_1: left promiscuous mode [ 208.320250][T10733] bridge_slave_1: left promiscuous mode [ 208.358029][T10733] vlan2: left allmulticast mode [ 208.363005][T10733] `: left allmulticast mode [ 208.370440][T10733] bond_slave_0: left allmulticast mode [ 208.392976][T10733] bond_slave_1: left allmulticast mode [ 208.403218][T10733] bridge_slave_1: left allmulticast mode [ 208.425352][ T1097] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 208.448923][ T1097] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 208.475194][ T1097] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 208.496748][ T1097] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 208.578125][ T152] tipc: Resetting bearer [ 208.649994][T10764] IPVS: length: 24 != 221208 [ 208.857874][ T5932] tipc: Node number set to 449438756 [ 208.915466][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.154437][T10803] __nla_validate_parse: 8 callbacks suppressed [ 209.154457][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 209.543399][T10821] bond4: option all_slaves_active: invalid value (222) [ 209.589531][T10821] bond4 (unregistering): Released all slaves [ 209.774004][T10845] bridge0: port 2(veth0_to_bridge) entered blocking state [ 209.814264][T10845] bridge0: port 2(veth0_to_bridge) entered disabled state [ 209.840009][T10845] veth0_to_bridge: entered allmulticast mode [ 209.863538][T10845] veth0_to_bridge: entered promiscuous mode [ 210.794692][T10912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1418'. [ 210.821121][T10912] TCP: TCP_TX_DELAY enabled [ 210.846688][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 210.876629][T10919] netlink: 'syz.2.1419': attribute type 4 has an invalid length. [ 210.884677][T10912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1418'. [ 211.070655][T10930] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 211.154405][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 211.172247][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 211.182194][T10933] gre2: entered promiscuous mode [ 211.188906][T10933] gre2: entered allmulticast mode [ 211.409430][T10945] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1428'. [ 211.473001][T10949] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 211.505508][T10951] pim6reg1: entered promiscuous mode [ 211.510833][T10951] pim6reg1: entered allmulticast mode [ 211.584681][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 211.647578][T10958] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1434'. [ 211.738550][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 211.946791][T10977] v: renamed from ipvlan1 [ 212.719895][T11040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.739921][T11040] netlink: 'syz.2.1459': attribute type 2 has an invalid length. [ 213.288361][T11083] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 213.466435][T11101] netlink: 'syz.2.1473': attribute type 83 has an invalid length. [ 213.613058][T11111] tun0: tun_chr_ioctl cmd 1074025675 [ 213.623741][T11107] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 213.634864][T11111] tun0: persist disabled [ 213.752823][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.830558][T11124] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20001 [ 213.886554][T11129] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 214.343570][T11149] openvswitch: netlink: Message has 4 unknown bytes. [ 214.351560][T11149] xt_recent: Unsupported userspace flags (000000b1) [ 214.370304][T11151] __nla_validate_parse: 8 callbacks suppressed [ 214.370321][T11151] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1486'. [ 214.408460][T11155] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1488'. [ 214.426106][T11151] openvswitch: netlink: IP tunnel dst address not specified [ 214.448947][T11151] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1486'. [ 214.449938][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 214.458641][T11155] syzkaller0: entered promiscuous mode [ 214.474432][T11155] syzkaller0: entered allmulticast mode [ 214.569134][T11151] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1486'. [ 214.618236][T11162] bond12: Removing last arp target with arp_interval on [ 214.633473][T11161] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1490'. [ 214.711105][T11171] dvmrp1: entered allmulticast mode [ 214.799336][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 214.831490][T11173] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1494'. [ 214.841700][T11175] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 214.868748][T11175] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 215.150936][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 215.150936][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 215.515971][T11224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.154493][T11287] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 216.162840][T11277] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 216.179876][T11277] bond7 (unregistering): Released all slaves [ 216.263204][T11290] team0: Device ip6gre1 is of different type [ 216.364095][T11296] vlan1: entered promiscuous mode [ 216.375907][T11296] bridge0: entered promiscuous mode [ 216.932035][T11337] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 216.957673][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.964963][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.972529][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.979725][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.989847][T11345] netlink: 'syz.1.1538': attribute type 11 has an invalid length. [ 216.999578][T11333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.220297][T11359] netlink: 'syz.2.1544': attribute type 64 has an invalid length. [ 217.924206][T11418] netlink: 'syz.4.1566': attribute type 83 has an invalid length. [ 218.114900][T11440] netlink: 'syz.1.1572': attribute type 12 has an invalid length. [ 218.398908][T11457] bond13: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 218.412465][T11457] bond13 (unregistering): Released all slaves [ 218.688075][T11485] tipc: Enabling of bearer rejected, failed to enable media [ 218.914713][T11499] netlink: 'syz.1.1589': attribute type 7 has an invalid length. [ 218.924416][T11499] netlink: 'syz.1.1589': attribute type 7 has an invalid length. [ 219.022007][T11509] : entered promiscuous mode [ 219.129797][T11513] tipc: Enabling of bearer rejected, media not registered [ 219.255453][T11523] tipc: Enabled bearer , priority 0 [ 219.281589][T11523] tipc: Resetting bearer [ 219.333456][T11531] netlink: 'syz.0.1597': attribute type 39 has an invalid length. [ 219.343177][T11522] tipc: Disabling bearer [ 219.615314][T11554] __nla_validate_parse: 23 callbacks suppressed [ 219.615332][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1604'. [ 219.773837][T11567] wireguard0: entered promiscuous mode [ 219.788026][T11567] wireguard0: entered allmulticast mode [ 219.827257][T11567] team0: Device wireguard0 is of different type [ 219.887545][T11572] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1609'. [ 219.917736][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 219.928582][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 220.174670][T11596] IPv6: sit2: Disabled Multicast RS [ 220.181548][T11596] sit2: entered allmulticast mode [ 220.505882][T11622] smc: net device team0 applied user defined pnetid SYZ2 [ 221.217783][T11676] x_tables: duplicate underflow at hook 3 [ 221.226144][T11675] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1640'. [ 221.229947][T11676] netlink: 'syz.0.1639': attribute type 11 has an invalid length. [ 221.254677][T11678] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1640'. [ 221.261188][T11676] netlink: 'syz.0.1639': attribute type 4 has an invalid length. [ 221.289586][T11676] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.1639'. [ 221.312538][T11678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1640'. [ 221.529833][T11694] bond0: option ad_select: unable to set because the bond device is up [ 221.574542][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 222.117391][T11745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1654'. [ 222.370056][T11763] nbd: illegal input index 2958377 [ 222.404622][T11766] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 222.440102][T11763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.448145][T11763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.466376][T11763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.473789][T11763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.534443][T11780] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 222.552402][T11782] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 223.276133][T11841] netlink: 'syz.2.1680': attribute type 8 has an invalid length. [ 223.397253][T11850] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 223.718493][T11876] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 223.880020][T11889] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 223.995705][T11895] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.091176][T11895] bond7: (slave lo): Enslaving as a backup interface with an up link [ 224.128341][T11895] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 224.276566][T11914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.340592][T11920] sctp: [Deprecated]: syz.1.1701 (pid 11920) Use of int in max_burst socket option. [ 224.340592][T11920] Use struct sctp_assoc_value instead [ 224.406819][T11923] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 224.490577][T11923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.509799][T11930] xfrm1: entered promiscuous mode [ 224.514890][T11930] xfrm1: entered allmulticast mode [ 224.602175][T11923] bond4: (slave gretap1): making interface the new active one [ 224.618152][T11923] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 224.930977][T11965] __nla_validate_parse: 16 callbacks suppressed [ 224.930995][T11965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1713'. [ 224.984626][T11966] : entered promiscuous mode [ 225.012677][T11970] xt_hashlimit: overflow, try lower: 6/0 [ 225.030208][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 225.041351][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'. [ 225.051224][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'. [ 225.066229][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 225.085436][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 225.173498][T11983] tipc: Resetting bearer [ 225.262771][T11981] tipc: Resetting bearer [ 225.408872][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 225.457708][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 225.576751][ T3647] tipc: Resetting bearer [ 226.010438][T12031] netlink: 'syz.1.1730': attribute type 3 has an invalid length. [ 226.019639][T12031] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 226.030793][T12031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1730'. [ 226.152102][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 226.186996][T12038] dvmrp0: left allmulticast mode [ 226.316377][T12045] wireguard0: entered promiscuous mode [ 226.322810][T12045] wireguard0: entered allmulticast mode [ 226.342141][T12045] team0: Device wireguard0 is of different type [ 226.647291][T12068] netlink: 'syz.1.1742': attribute type 4 has an invalid length. [ 226.748184][T12070] team0: Device ip6gre1 is of different type [ 226.896670][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.923615][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.942080][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.951788][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.978829][T12089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.003171][T12091] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 227.020217][T12092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.081387][T12088] pim6reg1: entered promiscuous mode [ 227.087232][T12088] pim6reg1: entered allmulticast mode [ 227.142764][ T25] block nbd0: Possible stuck request ffff888024a38000: control (read@0,1024B). Runtime 60 seconds [ 227.153516][ T25] block nbd0: Possible stuck request ffff888024a38200: control (read@1024,1024B). Runtime 60 seconds [ 227.165277][ T25] block nbd0: Possible stuck request ffff888024a38400: control (read@2048,1024B). Runtime 60 seconds [ 227.179365][ T25] block nbd0: Possible stuck request ffff888024a38600: control (read@3072,1024B). Runtime 60 seconds [ 227.438846][T12120] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 227.450554][T12120] dummy0: entered promiscuous mode [ 227.461312][T12120] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 227.677569][T12139] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.698078][T12139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.705736][T12139] IPv6: NLM_F_CREATE should be set when creating new route [ 228.097598][T12173] veth0: entered promiscuous mode [ 228.373048][T12184] veth0: left promiscuous mode [ 228.681358][ T4493] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.713859][ T4493] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.751346][ T4493] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.793934][ T4493] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.947212][T12226] syzkaller0: entered promiscuous mode [ 228.969470][T12226] syzkaller0: entered allmulticast mode [ 229.060245][T12232] tipc: Enabling of bearer rejected, already enabled [ 229.500954][T12267] netlink: 'syz.3.1799': attribute type 5 has an invalid length. [ 230.178409][T12319] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 230.192761][T12320] __nla_validate_parse: 23 callbacks suppressed [ 230.192779][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 230.247852][T12325] netlink: 'syz.3.1816': attribute type 24 has an invalid length. [ 230.422597][T12319] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.429820][T12319] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.666270][T12334] netlink: 'syz.1.1817': attribute type 10 has an invalid length. [ 231.121433][T12319] tipc: Resetting bearer [ 231.198880][T12334] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 231.225084][ T1097] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.237643][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 231.259167][ T1097] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.276974][ T1097] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.305834][ T1097] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.344528][ T1097] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.361747][ T1097] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.372258][ T1097] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.383308][ T1097] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.531379][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 231.912908][T12395] netlink: 'syz.1.1835': attribute type 10 has an invalid length. [ 231.945295][T12395] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 231.966575][T12395] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.233046][T12418] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 232.233364][T12416] IPVS: stopping master sync thread 12418 ... [ 232.290209][T12420] netlink: 'syz.4.1841': attribute type 4 has an invalid length. [ 232.404820][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 232.430907][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 232.465705][T12424] netlink: 'syz.0.1843': attribute type 2 has an invalid length. [ 232.473467][T12424] netlink: 'syz.0.1843': attribute type 8 has an invalid length. [ 232.490685][T12424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1843'. [ 232.553363][T12430] netlink: 'syz.1.1845': attribute type 9 has an invalid length. [ 232.572154][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 232.714176][T12440] netlink: 'syz.2.1849': attribute type 1 has an invalid length. [ 232.726002][T12442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1847'. [ 232.840391][T12446] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 233.006265][T12446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.475497][T12467] bond9: (slave gretap1): making interface the new active one [ 233.497969][T12476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1860'. [ 233.509907][T12467] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 233.786316][T12494] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 233.854770][T12490] wlan0 speed is unknown, defaulting to 1000 [ 233.912783][T12499] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1869'. [ 233.981368][T12499] unsupported nla_type 58 [ 234.074649][T12512] tipc: New replicast peer: 255.255.255.255 [ 234.095400][T12512] tipc: Enabled bearer , priority 10 [ 234.353878][T12533] wlan0 speed is unknown, defaulting to 1000 [ 234.388158][T12535] 8021q: VLANs not supported on gre0 [ 234.459620][T12538] syzkaller0: entered promiscuous mode [ 234.465391][T12538] syzkaller0: entered allmulticast mode [ 234.646591][T12546] validate_nla: 4 callbacks suppressed [ 234.646608][T12546] netlink: 'syz.4.1883': attribute type 83 has an invalid length. [ 234.665844][ T30] audit: type=1800 audit(1768238259.677:2): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1883" name="memory.events" dev="tmpfs" ino=1913 res=0 errno=0 [ 234.672101][T12546] : entered promiscuous mode [ 234.775870][ T30] audit: type=1804 audit(1768238259.737:3): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1883" name="/newroot/373/memory.events" dev="tmpfs" ino=1913 res=1 errno=0 [ 234.901099][T12558] 8021q: VLANs not supported on gre0 [ 234.948890][T12328] IPVS: starting estimator thread 0... [ 235.035852][T12563] IPVS: using max 26 ests per chain, 62400 per kthread [ 235.166515][T12328] tipc: Node number set to 3824745760 [ 235.295745][T12582] tipc: Resetting bearer [ 235.324184][T12583] pimreg: entered allmulticast mode [ 235.425947][T12583] tipc: Resetting bearer [ 235.431341][T12597] __nla_validate_parse: 7 callbacks suppressed [ 235.431358][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'. [ 235.448517][T12597] block nbd3: Unsupported socket: should be TCP or UNIX. [ 235.494590][ T152] IPVS: stop unused estimator thread 0... [ 235.643063][T12612] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20001 [ 235.691451][T12619] xt_nat: multiple ranges no longer supported [ 235.834541][ T8249] tipc: Resetting bearer [ 235.854932][T12610] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 235.867636][T12624] tipc: Resetting bearer [ 235.898711][T12636] netlink: 'syz.1.1910': attribute type 11 has an invalid length. [ 235.952498][T12638] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.084819][T12646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.125421][T12622] tipc: Resetting bearer [ 236.264533][T12654] netlink: 'syz.2.1915': attribute type 1 has an invalid length. [ 236.378159][T12654] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.701910][T12692] netlink: 4164 bytes leftover after parsing attributes in process `syz.1.1923'. [ 236.711568][T12692] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.713003][T12666] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 236.733061][T12666] bond11 (unregistering): Released all slaves [ 236.813115][T12675] bridge0: entered promiscuous mode [ 236.833650][T12675] bridge0: entered allmulticast mode [ 236.852893][ T49] tipc: Resetting bearer [ 236.868919][T12689] bridge0: entered promiscuous mode [ 236.875398][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 237.033211][T12709] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1930'. [ 237.041136][T12704] syzkaller0: entered promiscuous mode [ 237.054092][T12704] syzkaller0: entered allmulticast mode [ 237.089076][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1927'. [ 237.159797][T12714] dvmrp0: entered allmulticast mode [ 237.218243][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 237.227492][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1934'. [ 237.259078][T12721] geneve2: entered promiscuous mode [ 237.264330][T12721] geneve2: entered allmulticast mode [ 237.283110][ T1097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.299850][ T1097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.334850][ T1097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.377428][ T1097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.420116][T12721] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1934'. [ 237.429940][T12721] gretap0: entered promiscuous mode [ 237.469435][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 237.480376][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1936'. [ 237.541017][T12739] xt_limit: Overflow, try lower: 604147548/4200216962 [ 237.609401][T12743] netlink: 'syz.1.1940': attribute type 13 has an invalid length. [ 237.617263][T12744] netlink: 'syz.1.1940': attribute type 13 has an invalid length. [ 237.647171][T12744] dummy0: left promiscuous mode [ 237.731391][T12744] macvtap1: left promiscuous mode [ 237.737437][T12744] macvtap1: left allmulticast mode [ 237.742568][T12744] veth1_vlan: left allmulticast mode [ 237.829428][T12748] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 237.892004][T12748] wlan0 speed is unknown, defaulting to 1000 [ 238.323556][T12777] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.340304][T12777] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 238.354356][T12777] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 238.562695][T12802] netlink: 'syz.1.1957': attribute type 16 has an invalid length. [ 238.571532][T12802] netlink: 'syz.1.1957': attribute type 17 has an invalid length. [ 238.617366][T12802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.750275][T12805] bridge0: entered allmulticast mode [ 238.979863][T12820] wlan0 speed is unknown, defaulting to 1000 [ 239.726619][T12891] openvswitch: netlink: Flow actions attr not present in new flow. [ 239.739181][T12890] openvswitch: netlink: Flow actions attr not present in new flow. [ 239.771938][T12893] C: renamed from team_slave_0 (while UP) [ 239.783467][T12893] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 239.804913][T12893] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 240.051957][T12917] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 240.144900][T12925] netlink: 'syz.2.1991': attribute type 2 has an invalid length. [ 240.164752][T12917] bond4 (unregistering): Released all slaves [ 240.283691][T12938] netlink: 'syz.3.1995': attribute type 1 has an invalid length. [ 240.662111][T12959] tipc: Enabling of bearer rejected, already enabled [ 240.943140][T12979] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.974680][T12979] bond5: (slave lo): Enslaving as a backup interface with an up link [ 240.996428][T12992] __nla_validate_parse: 18 callbacks suppressed [ 240.996444][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'. [ 241.024169][T12979] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 241.056639][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2007'. [ 241.142409][T13000] tipc: Enabling of bearer rejected, already enabled [ 241.157999][T13000] tipc: Resetting bearer [ 241.183048][T13000] tipc: Resetting bearer [ 241.352462][T13018] netlink: 'syz.2.2016': attribute type 10 has an invalid length. [ 241.365665][T13018] bridge_slave_1: left allmulticast mode [ 241.372209][T13018] bridge_slave_1: left promiscuous mode [ 241.379198][T13018] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.406433][T13018] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 241.553404][T13031] bridge5: entered promiscuous mode [ 241.564962][T13031] bridge5: entered allmulticast mode [ 241.584321][T13031] team0: Port device bridge5 added [ 241.596877][T13031] bridge0: port 2(team0) entered blocking state [ 241.603420][T13031] bridge0: port 2(team0) entered disabled state [ 241.611811][T13031] team0: entered allmulticast mode [ 241.617301][T13031] team_slave_0: entered allmulticast mode [ 241.628564][T13031] team_slave_1: entered allmulticast mode [ 241.648527][T13031] team0: entered promiscuous mode [ 241.657665][T13031] team_slave_0: entered promiscuous mode [ 241.669498][T13031] team_slave_1: entered promiscuous mode [ 241.911231][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 242.151507][T13073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2032'. [ 242.186768][T13080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2032'. [ 242.206801][T13073] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2032'. [ 242.219085][T13080] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2032'. [ 242.449447][T13106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2039'. [ 242.459679][T13106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2039'. [ 242.673378][T13125] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 242.791867][T13135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2045'. [ 243.199280][T13158] syzkaller0: entered promiscuous mode [ 243.207654][T13158] syzkaller0: entered allmulticast mode [ 243.472522][T13172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.525916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.645327][T13183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.654850][T13181] tipc: Enabled bearer , priority 0 [ 243.737060][T13181] syzkaller0: entered promiscuous mode [ 243.742556][T13181] syzkaller0: entered allmulticast mode [ 243.749096][T13181] tipc: Resetting bearer [ 243.769165][T13192] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 243.908200][T13207] xt_hashlimit: size too large, truncated to 1048576 [ 243.915297][T13179] tipc: Resetting bearer [ 243.978080][T13212] delete_channel: no stack [ 245.103911][T13179] tipc: Disabling bearer [ 245.263956][T13230] x_tables: duplicate underflow at hook 1 [ 245.274317][T13228] IPVS: length: 78 != 24 [ 245.383790][T13236] bridge_slave_0: left allmulticast mode [ 245.394303][T13236] bridge_slave_0: left promiscuous mode [ 245.402490][T13236] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.589809][T13254] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 245.659626][T13254] 8021q: adding VLAN 0 to HW filter on device bond14 [ 245.673692][T13258] bond14: (slave geneve4): making interface the new active one [ 245.724252][T13258] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 245.761938][T13268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.913143][T13277] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 245.955540][T13282] tipc: Enabling of bearer rejected, failed to enable media [ 246.023121][T13287] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.147503][T13291] nbd3: detected capacity change from 0 to 127 [ 246.158677][T13294] team0: Device ip6gre1 is of different type [ 246.169226][ T5840] block nbd3: Receive control failed (result -32) [ 246.235843][T13296] __nla_validate_parse: 8 callbacks suppressed [ 246.235860][T13296] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2096'. [ 246.349285][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 246.665416][T13335] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 246.696956][T13338] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 4, id = 0 [ 246.772857][T13347] geneve1: entered promiscuous mode [ 246.863909][T13350] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 246.893619][T13350] x_tables: duplicate underflow at hook 1 [ 247.003063][T13361] syzkaller1: entered promiscuous mode [ 247.014929][T13361] syzkaller1: entered allmulticast mode [ 247.487949][T13398] ip6t_REJECT: ECHOREPLY is not supported [ 248.334787][T13444] netlink: 'syz.4.2140': attribute type 21 has an invalid length. [ 248.464479][T13449] syz.1.2144 uses old SIOCAX25GETINFO [ 248.565705][T13459] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.605813][T13459] bond13: (slave lo): Enslaving as an active interface with an up link [ 248.647355][T13459] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 248.707372][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 248.999284][T13488] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 249.008071][T13488] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2155'. [ 249.038910][T13489] sctp: [Deprecated]: syz.3.2154 (pid 13489) Use of int in max_burst socket option. [ 249.038910][T13489] Use struct sctp_assoc_value instead [ 249.097897][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2156'. [ 249.316221][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 249.679864][T13540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.713103][T13540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.762010][T13556] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2174'. [ 249.783231][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 249.822920][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'. [ 249.855397][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'. [ 250.044066][T13581] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 250.130930][T13590] raw_sendmsg: syz.2.2183 forgot to set AF_INET. Fix it! [ 250.516416][T13618] netlink: 'syz.1.2191': attribute type 33 has an invalid length. [ 250.554678][T13618] netlink: 'syz.1.2191': attribute type 33 has an invalid length. [ 250.923514][T13645] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 251.043153][T13653] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 251.103070][T13661] nbd: illegal input index -8454144 [ 251.135925][T13653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.166768][T13662] bond6: (slave geneve3): making interface the new active one [ 251.176045][T13662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.185070][T13662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.193899][T13662] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 251.248010][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.278483][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.289793][T13661] wlan0 speed is unknown, defaulting to 1000 [ 251.477852][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.539157][T13688] wg1: entered promiscuous mode [ 251.558429][T13688] wg1: entered allmulticast mode [ 251.778959][T13710] __nla_validate_parse: 9 callbacks suppressed [ 251.778977][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2214'. [ 251.975821][T13717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2218'. [ 252.034852][T13723] wlan0 speed is unknown, defaulting to 1000 [ 252.104379][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2224'. [ 252.167767][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.245503][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.283095][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'. [ 252.292692][T13739] netlink: 'syz.0.2225': attribute type 7 has an invalid length. [ 252.387751][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'. [ 252.407396][T13739] netlink: 'syz.0.2225': attribute type 7 has an invalid length. [ 252.582084][T13749] bridge0: port 1(veth0_to_bridge) entered blocking state [ 252.593948][T13749] bridge0: port 1(veth0_to_bridge) entered disabled state [ 252.622671][T13749] veth0_to_bridge: entered allmulticast mode [ 252.632016][T13749] veth0_to_bridge: entered promiscuous mode [ 252.668688][T13754] tipc: Resetting bearer [ 252.739073][T13754] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2230'. [ 252.922712][T13750] tipc: Resetting bearer [ 252.997168][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 253.027201][T13771] syzkaller1: entered promiscuous mode [ 253.036196][T13771] syzkaller1: entered allmulticast mode [ 253.247949][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 253.663731][ T4441] tipc: Resetting bearer [ 253.691017][T13819] : renamed from batadv_slave_0 [ 254.204312][T13839] tipc: Trying to set illegal importance in message [ 254.351704][T13850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.570233][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 254.630991][T13868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.965750][T13894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'. [ 255.018899][T13899] unsupported nlmsg_type 40 [ 255.168325][T13912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 255.421308][T13933] xt_hashlimit: size too large, truncated to 1048576 [ 255.595826][ T8249] net_ratelimit: 10 callbacks suppressed [ 255.595844][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.855773][T13961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.867154][T13963] netlink: 'syz.1.2292': attribute type 2 has an invalid length. [ 255.888525][T13958] netlink: 'syz.3.2290': attribute type 2 has an invalid length. [ 255.929139][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966650][T13963] netlink: 'syz.1.2292': attribute type 2 has an invalid length. [ 256.140510][T13978] tipc: Resetting bearer [ 256.294827][T13984] tipc: Resetting bearer [ 256.325434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.725332][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.747975][T14001] netlink: 'syz.1.2301': attribute type 4 has an invalid length. [ 256.888780][ T152] tipc: Resetting bearer [ 257.012474][T14030] __nla_validate_parse: 14 callbacks suppressed [ 257.012494][T14030] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2308'. [ 257.080400][T14035] x_tables: duplicate underflow at hook 1 [ 257.209773][ T25] block nbd0: Possible stuck request ffff888024a38000: control (read@0,1024B). Runtime 90 seconds [ 257.217026][T14043] tipc: Enabled bearer , priority 10 [ 257.221956][ T25] block nbd0: Possible stuck request ffff888024a38200: control (read@1024,1024B). Runtime 90 seconds [ 257.237406][ T25] block nbd0: Possible stuck request ffff888024a38400: control (read@2048,1024B). Runtime 90 seconds [ 257.248808][ T25] block nbd0: Possible stuck request ffff888024a38600: control (read@3072,1024B). Runtime 90 seconds [ 257.623800][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 257.637937][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 257.688927][T14083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2324'. [ 257.702959][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 257.714010][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 257.757359][T14083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.776116][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 257.856327][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.875843][T14101] syzkaller0: entered promiscuous mode [ 257.881541][T14101] syzkaller0: entered allmulticast mode [ 258.281667][T14114] bond11: entered promiscuous mode [ 258.287634][T14114] bond11: entered allmulticast mode [ 258.293331][T14114] 8021q: adding VLAN 0 to HW filter on device bond11 [ 258.364887][T14131] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.2335'. [ 258.492558][T14131] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 258.624330][T14140] xt_hashlimit: max too large, truncated to 1048576 [ 258.650194][T14145] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2342'. [ 258.985804][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.499936][T14209] tipc: Can't bind to reserved service type 0 [ 259.533993][T14209] netlink: 'syz.4.2357': attribute type 19 has an invalid length. [ 260.118984][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.767022][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2360'. [ 260.849692][T14233] !: renamed from bond_slave_0 [ 261.209217][T14250] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 261.210344][T14242] 8021q: VLANs not supported on sit0 [ 261.235564][ T1097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.296077][T14253] bond15: (slave ip6gretap1): making interface the new active one [ 261.316570][T14253] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 261.352994][T14255] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 261.717555][T14278] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 261.729639][T14278] bond7 (unregistering): Released all slaves [ 261.881617][T14299] openvswitch: netlink: Flow key attr not present in new flow. [ 261.963942][T14302] netlink: 'syz.0.2383': attribute type 33 has an invalid length. [ 262.034744][T14308] netlink: 'syz.3.2385': attribute type 11 has an invalid length. [ 262.062368][T14308] netlink: 'syz.3.2385': attribute type 11 has an invalid length. [ 262.107488][T14308] __nla_validate_parse: 7 callbacks suppressed [ 262.107506][T14308] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2385'. [ 262.176475][T14314] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 262.187156][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2385'. [ 262.401415][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.453547][T14336] netlink: 'syz.3.2393': attribute type 2 has an invalid length. [ 262.462144][T14336] netlink: 'syz.3.2393': attribute type 8 has an invalid length. [ 262.470403][T14336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2393'. [ 262.486926][T14341] tipc: Resetting bearer [ 262.492752][ T30] audit: type=1107 audit(1768238287.507:4): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 262.778003][T14363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2400'. [ 262.820073][T14364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2399'. [ 262.950981][T14369] netlink: 'syz.4.2403': attribute type 8 has an invalid length. [ 263.117580][ T8249] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 263.118678][T14378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2405'. [ 263.136557][ T8249] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.157396][ T8249] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.177714][T14378] geneve1: entered promiscuous mode [ 263.182971][T14378] geneve1: entered allmulticast mode [ 263.218828][ T4493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.239532][T14378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2405'. [ 263.245100][ T8249] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.532993][ T3647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.943388][T14430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2417'. [ 263.957027][T14432] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.964135][T14432] syzkaller1: Refused to change device type [ 264.020348][T14428] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 264.106426][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 264.176759][T14450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.245294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.272664][T14455] wireguard0: entered promiscuous mode [ 264.305867][T14455] wireguard0: entered allmulticast mode [ 264.350163][T14455] team0: Device wireguard0 is of different type [ 264.378666][T14464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.426306][T14461] erspan0: entered allmulticast mode [ 264.648151][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.784143][T14484] netlink: 'syz.2.2432': attribute type 5 has an invalid length. [ 264.792494][T14484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 264.807908][T14484] ipt_REJECT: TCP_RESET invalid for non-tcp [ 264.928529][T14495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 264.959908][T14499] netlink: 'syz.2.2436': attribute type 10 has an invalid length. [ 265.003820][T14503] tipc: New replicast peer: 255.255.255.255 [ 265.022661][T14503] tipc: Enabled bearer , priority 10 [ 265.197209][T14516] netlink: 'syz.2.2440': attribute type 3 has an invalid length. [ 265.274135][T14522] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 265.349368][T14527] netlink: 'syz.0.2444': attribute type 4 has an invalid length. [ 265.622924][T14551] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 265.671526][T14553] tipc: Failed to remove unknown binding: 66,0,0/3824745760:2883734249/2883734250 [ 265.686313][T14553] tipc: Failed to remove unknown binding: 66,0,0/3824745760:2883734249/2883734250 [ 265.789566][T14563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.796846][T14563] IPv6: NLM_F_CREATE should be set when creating new route [ 265.804222][T14563] IPv6: NLM_F_CREATE should be set when creating new route [ 265.811501][T14563] IPv6: NLM_F_CREATE should be set when creating new route [ 265.839562][T14563] ------------[ cut here ]------------ [ 265.845496][T14563] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#1: syz.3.2457/14563 [ 265.856550][T14563] Modules linked in: [ 265.860494][T14563] CPU: 1 UID: 0 PID: 14563 Comm: syz.3.2457 Not tainted syzkaller #0 PREEMPT(full) [ 265.870614][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.881490][T14563] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 265.887820][T14563] Code: fa be 02 00 00 00 eb 0a e8 65 d2 d7 fa be 01 00 00 00 4c 89 f7 e8 18 d4 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 49 d2 d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 265.908191][T14563] RSP: 0018:ffffc9000c8f6f08 EFLAGS: 00010293 [ 265.914388][T14563] RAX: ffffffff86e92577 RBX: 0000000000000001 RCX: ffff888049f9bd00 [ 265.922891][T14563] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 265.931472][T14563] RBP: dffffc0000000000 R08: ffff88805580042f R09: 1ffff1100ab00085 [ 265.940308][T14563] R10: dffffc0000000000 R11: ffffed100ab00086 R12: ffff8880564e4000 [ 265.948857][T14563] R13: ffffc9000c8f7080 R14: 0000000000000000 R15: ffffc9000c8f7098 [ 265.957371][T14563] FS: 00007fc5ea57c6c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 265.967292][T14563] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.973902][T14563] CR2: 00007ffab19156c0 CR3: 000000003389e000 CR4: 00000000003526f0 [ 265.982425][T14563] Call Trace: [ 265.986295][T14563] [ 265.989247][T14563] notifier_call_chain+0x19d/0x3a0 [ 265.994379][T14563] ? atomic_notifier_call_chain+0x26/0x180 [ 266.000999][T14563] atomic_notifier_call_chain+0xda/0x180 [ 266.007187][T14563] call_fib_notifiers+0x31/0x60 [ 266.012076][T14563] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 266.018787][T14563] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 266.024088][T14563] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 266.031954][T14563] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 266.037804][T14563] inet6_rtm_newroute+0x12f5/0x18c0 [ 266.043023][T14563] ? kasan_quarantine_put+0xbb/0x1f0 [ 266.048871][T14563] ? lockdep_hardirqs_on+0x7b/0x110 [ 266.054094][T14563] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 266.060197][T14563] ? kmem_cache_free+0x197/0x620 [ 266.065607][T14563] ? nlmon_xmit+0xb0/0x100 [ 266.070036][T14563] ? lockdep_hardirqs_on+0x7b/0x110 [ 266.075732][T14563] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 266.081296][T14563] rtnetlink_rcv_msg+0x7cf/0xb70 [ 266.087110][T14563] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 266.092241][T14563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.098093][T14563] ? ref_tracker_free+0x63a/0x7d0 [ 266.103111][T14563] ? __asan_memcpy+0x40/0x70 [ 266.108186][T14563] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.113564][T14563] netlink_rcv_skb+0x208/0x470 [ 266.118910][T14563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.124369][T14563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.130163][T14563] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.135806][T14563] netlink_unicast+0x82f/0x9e0 [ 266.140577][T14563] ? __pfx_netlink_unicast+0x10/0x10 [ 266.146223][T14563] ? __alloc_skb+0x198/0x3a0 [ 266.150823][T14563] ? netlink_sendmsg+0x642/0xb30 [ 266.155821][T14563] ? skb_put+0x11b/0x210 [ 266.160071][T14563] netlink_sendmsg+0x805/0xb30 [ 266.164847][T14563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.171725][T14563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.177217][T14563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.182497][T14563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.188276][T14563] __sock_sendmsg+0x21c/0x270 [ 266.192957][T14563] ____sys_sendmsg+0x52d/0x820 [ 266.198173][T14563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.203477][T14563] ? import_iovec+0x74/0xa0 [ 266.208647][T14563] ___sys_sendmsg+0x21f/0x2a0 [ 266.213343][T14563] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.219003][T14563] ? preempt_schedule_common+0x83/0xd0 [ 266.224475][T14563] ? preempt_schedule_thunk+0x16/0x30 [ 266.230364][T14563] ? __fget_files+0x2a/0x420 [ 266.235006][T14563] ? __fget_files+0x3a0/0x420 [ 266.239697][T14563] __sys_sendmmsg+0x227/0x430 [ 266.244364][T14563] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.250418][T14563] ? do_futex+0x395/0x420 [ 266.254767][T14563] ? fd_install+0x95/0x3d0 [ 266.259786][T14563] ? lock_acquire+0x107/0x340 [ 266.264483][T14563] ? rcu_is_watching+0x15/0xb0 [ 266.269637][T14563] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.274493][T14563] do_syscall_64+0xec/0xf80 [ 266.279578][T14563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.286202][T14563] ? trace_irq_disable+0x37/0x100 [ 266.291246][T14563] ? clear_bhb_loop+0x60/0xb0 [ 266.296421][T14563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.302307][T14563] RIP: 0033:0x7fc5e978f749 [ 266.307491][T14563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.327544][T14563] RSP: 002b:00007fc5ea57c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.336484][T14563] RAX: ffffffffffffffda RBX: 00007fc5e99e6090 RCX: 00007fc5e978f749 [ 266.344455][T14563] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 266.352893][T14563] RBP: 00007fc5e9813f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.361322][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.369849][T14563] R13: 00007fc5e99e6128 R14: 00007fc5e99e6090 R15: 00007ffe459573e8 [ 266.378313][T14563] [ 266.381342][T14563] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.388606][T14563] CPU: 1 UID: 0 PID: 14563 Comm: syz.3.2457 Not tainted syzkaller #0 PREEMPT(full) [ 266.397965][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.408018][T14563] Call Trace: [ 266.411300][T14563] [ 266.414223][T14563] vpanic+0x1e0/0x670 [ 266.418219][T14563] panic+0xb9/0xc0 [ 266.421952][T14563] ? __pfx_panic+0x10/0x10 [ 266.426390][T14563] __warn+0x317/0x4b0 [ 266.430374][T14563] ? nsim_fib_event_nb+0xed8/0x1080 [ 266.435579][T14563] ? nsim_fib_event_nb+0xed8/0x1080 [ 266.440774][T14563] __report_bug+0x288/0x500 [ 266.445276][T14563] ? inet6_rtm_newroute+0x12f5/0x18c0 [ 266.450637][T14563] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 266.455739][T14563] ? netlink_rcv_skb+0x208/0x470 [ 266.460668][T14563] ? nsim_fib_event_nb+0xed8/0x1080 [ 266.465867][T14563] ? __pfx___report_bug+0x10/0x10 [ 266.470899][T14563] ? nsim_fib_event_nb+0xed8/0x1080 [ 266.476093][T14563] report_bug+0x16a/0x220 [ 266.480413][T14563] ? nsim_fib_event_nb+0xed8/0x1080 [ 266.485605][T14563] ? nsim_fib_event_nb+0xeda/0x1080 [ 266.490803][T14563] handle_bug+0x98/0x200 [ 266.495050][T14563] exc_invalid_op+0x1a/0x50 [ 266.499547][T14563] asm_exc_invalid_op+0x1a/0x20 [ 266.504389][T14563] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 266.510193][T14563] Code: fa be 02 00 00 00 eb 0a e8 65 d2 d7 fa be 01 00 00 00 4c 89 f7 e8 18 d4 a4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 49 d2 d7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 266.529788][T14563] RSP: 0018:ffffc9000c8f6f08 EFLAGS: 00010293 [ 266.535867][T14563] RAX: ffffffff86e92577 RBX: 0000000000000001 RCX: ffff888049f9bd00 [ 266.543831][T14563] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 266.551786][T14563] RBP: dffffc0000000000 R08: ffff88805580042f R09: 1ffff1100ab00085 [ 266.559754][T14563] R10: dffffc0000000000 R11: ffffed100ab00086 R12: ffff8880564e4000 [ 266.567717][T14563] R13: ffffc9000c8f7080 R14: 0000000000000000 R15: ffffc9000c8f7098 [ 266.575689][T14563] ? nsim_fib_event_nb+0xed7/0x1080 [ 266.580890][T14563] ? nsim_fib_event_nb+0xed7/0x1080 [ 266.586091][T14563] notifier_call_chain+0x19d/0x3a0 [ 266.591199][T14563] ? atomic_notifier_call_chain+0x26/0x180 [ 266.596999][T14563] atomic_notifier_call_chain+0xda/0x180 [ 266.602625][T14563] call_fib_notifiers+0x31/0x60 [ 266.607468][T14563] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 266.613887][T14563] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 266.619262][T14563] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 266.626410][T14563] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 266.631690][T14563] inet6_rtm_newroute+0x12f5/0x18c0 [ 266.636885][T14563] ? kasan_quarantine_put+0xbb/0x1f0 [ 266.642162][T14563] ? lockdep_hardirqs_on+0x7b/0x110 [ 266.647355][T14563] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 266.652906][T14563] ? kmem_cache_free+0x197/0x620 [ 266.657937][T14563] ? nlmon_xmit+0xb0/0x100 [ 266.662378][T14563] ? lockdep_hardirqs_on+0x7b/0x110 [ 266.667610][T14563] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 266.673350][T14563] rtnetlink_rcv_msg+0x7cf/0xb70 [ 266.678308][T14563] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 266.683442][T14563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.688900][T14563] ? ref_tracker_free+0x63a/0x7d0 [ 266.693923][T14563] ? __asan_memcpy+0x40/0x70 [ 266.698514][T14563] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.703903][T14563] netlink_rcv_skb+0x208/0x470 [ 266.708663][T14563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.714116][T14563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.719402][T14563] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.724600][T14563] netlink_unicast+0x82f/0x9e0 [ 266.729362][T14563] ? __pfx_netlink_unicast+0x10/0x10 [ 266.734637][T14563] ? __alloc_skb+0x198/0x3a0 [ 266.739218][T14563] ? netlink_sendmsg+0x642/0xb30 [ 266.744148][T14563] ? skb_put+0x11b/0x210 [ 266.748382][T14563] netlink_sendmsg+0x805/0xb30 [ 266.753147][T14563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.758424][T14563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.763356][T14563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.768631][T14563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.773928][T14563] __sock_sendmsg+0x21c/0x270 [ 266.778605][T14563] ____sys_sendmsg+0x52d/0x820 [ 266.783364][T14563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.788646][T14563] ? import_iovec+0x74/0xa0 [ 266.793143][T14563] ___sys_sendmsg+0x21f/0x2a0 [ 266.797812][T14563] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.803006][T14563] ? preempt_schedule_common+0x83/0xd0 [ 266.808451][T14563] ? preempt_schedule_thunk+0x16/0x30 [ 266.813844][T14563] ? __fget_files+0x2a/0x420 [ 266.818425][T14563] ? __fget_files+0x3a0/0x420 [ 266.823111][T14563] __sys_sendmmsg+0x227/0x430 [ 266.827785][T14563] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.832971][T14563] ? do_futex+0x395/0x420 [ 266.837305][T14563] ? fd_install+0x95/0x3d0 [ 266.841711][T14563] ? lock_acquire+0x107/0x340 [ 266.846391][T14563] ? rcu_is_watching+0x15/0xb0 [ 266.851156][T14563] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.856001][T14563] do_syscall_64+0xec/0xf80 [ 266.860494][T14563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.866547][T14563] ? trace_irq_disable+0x37/0x100 [ 266.871565][T14563] ? clear_bhb_loop+0x60/0xb0 [ 266.876246][T14563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.882127][T14563] RIP: 0033:0x7fc5e978f749 [ 266.886534][T14563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.906132][T14563] RSP: 002b:00007fc5ea57c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.914540][T14563] RAX: ffffffffffffffda RBX: 00007fc5e99e6090 RCX: 00007fc5e978f749 [ 266.922500][T14563] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 266.930459][T14563] RBP: 00007fc5e9813f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.938421][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.946390][T14563] R13: 00007fc5e99e6128 R14: 00007fc5e99e6090 R15: 00007ffe459573e8 [ 266.954470][T14563] [ 266.957847][T14563] Kernel Offset: disabled [ 266.962162][T14563] Rebooting in 86400 seconds..