last executing test programs: 11.889367117s ago: executing program 0 (id=3146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000680)=""/8, &(0x7f0000000340)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x7f, 0x10001, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x57, 0x0}, 0x1, 0x40, 0x383f, 0xffffffbc}}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@local, @loopback, r1}, 0xc) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x7f, 0x8, 0xfffffffa, 0x9b, 0xfffffffd, 0x3}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x7, 0x8001, 0x3, 0x3, 0xfff, 0x0, 0x8, r3}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000002c0)={{r2}, 0x400, 0xfffffffffffffffc, 0x81}) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="14010000330001fff00000000000000003"], 0x114}], 0x1}, 0x20005000) 11.699820579s ago: executing program 0 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004340), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001ab26671ccc41769f5b99cd5995c31aca96c2166942687851c9fe47b0d4422ad0466be88f5c3566f9d15b2f3c1be58d6574b95a79b", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a80180001801400030024000700080001000800b40405000f00"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082dbd7000fcdbdf251700000048000680440004"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc) sendmsg$nl_xfrm(r6, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) 11.184419931s ago: executing program 0 (id=3157): socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb00000000320000002001000000000000000000000000000200000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0xe000, 0x1000, 0x6, 0x1}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$MRT6_FLUSH(r4, 0x29, 0x24, &(0x7f0000000000)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="33d702f6741d64298eab3dc282428f8a", 0x10}], 0x1, 0x0, 0x0, 0x18800}], 0x1, 0x20044000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'ip6gre0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5, 0x600}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006700010001000000000000009a7a0000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000580)=""/167, &(0x7f0000000200)=0xa7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200448c0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 10.742914534s ago: executing program 0 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x303, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)={0x9}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xfec7) r6 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB], 0x50) shutdown(r4, 0x1) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) syz_emit_ethernet(0x95, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x87, 0x0, 0x0, 0x4, 0x1, 0x0, @multicast1, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7f, 0x0, {0x19, 0x4, 0x0, 0x1a, 0x355, 0x65, 0x1, 0xa9, 0x6, 0x900, @rand_addr=0x64010100, @broadcast, {[@cipso={0x86, 0x22, 0x1, [{0x1, 0xc, "f30d339acf16847558e9"}, {0x0, 0x8, "1d239a199c45"}, {0x0, 0x8, "a86280af69a1"}]}, @timestamp_prespec={0x44, 0x2c, 0x31, 0x3, 0x7, [{@broadcast, 0x10000}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x8}, {@local, 0x1ff}]}]}}, "74c429d50079c3"}}}}}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvfrom(r9, &(0x7f0000000000)=""/21, 0x15, 0x40, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x20f, @local, 0x3014}}, 0x80) 2.854735102s ago: executing program 4 (id=3256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x100) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_defer\x00', r1, 0x0, 0x7}, 0x18) r3 = socket(0x2a, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x820, 0x9, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {0x9}, {0xa, 0xb}}}, 0xfffffffffffffedf}, 0x1, 0x0, 0x0, 0x20000014}, 0x404c8e1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}], 0x2, 0x0) 2.744217318s ago: executing program 1 (id=3257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl(r2, 0x101, &(0x7f0000000000)="739d929ce0a9eaa6e318577976a2d3cbfc5de5a981268f975046d1d769682f5772543c042ebfe552fe7fbaa7315c5390b05613adda83559cfbc8c97ebb15cd1824f88d8b404e066335fec97b61f6e459e8e1cc566877ec8b59f81bc3f145249e68f0f7865746ff1c79f82ef2695651bb0a8608ef86aaa48bcd7eb2b2df0a5dabf80db5e4") 2.659028808s ago: executing program 4 (id=3259): r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x10) unshare(0x2c060000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELTABLE={0xfc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x87, 0x6, "3e57a1dffb71978db931622baed29bf39aa947b12fc0195ca0664784af8c65fb74f0dc6ac6a12fa5c32c172b75691686602c6a62ad0172f4373b752de70c0375ee0b32eb0fc32a5d57a02fde6d0ca92508a2331867bca77d84d1557417209e50ea7db5a7787ee9de6c8274c31e01a1092a898a480a1d01120b6c18f42684f529fe0f2b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) 2.074526613s ago: executing program 4 (id=3261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x72, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x10, 0x40, 0x8, 0x10000}}) r4 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x6c, r2, 0x110, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="4000000009060101000000000000000002000008100008800c00078108000940000007ff050001000700000008000940000000050900020073797a3100"], 0x40}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) 1.992802155s ago: executing program 3 (id=3262): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x4, 0x80000001}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x34, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x34, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r12, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) (async) connect$netrom(r12, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r12, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0x4, 0x57, 0x7}) sendto$inet6(r2, &(0x7f0000000080)='8', 0x1, 0x65014, &(0x7f0000000340)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) 1.76024041s ago: executing program 1 (id=3263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f00000014c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0x1}, 0x18) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000140)="812626a8585ef87d99720a538f7478835e3f67a8f3eccb5a4e336f4af7430ed48787d202cde3ee577c3bcefbb6b7abfefca277b14dec6208bb059e9fe301009403d3854510c8172774289dfef2d92656cfb1ffe3542709f8fbf9f857a8ff91a6285ce5335faa545f84c4181800c82320898f76c0cf945f09bc2a5cea2901388af97ecdc80f50b18943df113aa6c9b7482d1337c1a191a03173b058fd7f5487d547911cc531dd66a68821c9ffe2c2ff8ba5854ad06a66389e200baec3ed4b630afabef5e6329442999c2be9463a52deff73b767c59000cfaac77816e171b4167ee18c8a305cf3b904bf71eb0363a78446904b", 0xf2, 0x0, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x3, 0x6, @remote}, 0x14) 1.738634338s ago: executing program 4 (id=3264): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept(r3, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000000)=0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r6, 0x1, 0x70bd28}, 0x14}}, 0x4000080) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30040040}, 0x40010) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x40}}, 0x20) 1.675943278s ago: executing program 1 (id=3265): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1}}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) 1.598368028s ago: executing program 4 (id=3266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x32, 0x3c, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010101, @multicast1}, "28afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea2"}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x808000}, 0x8) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) write$rfkill(r1, &(0x7f0000000140)={0x2, 0x8, 0x3}, 0x8) socket(0x10, 0x6, 0x8001) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@sco={0x1f, @fixed}, &(0x7f0000000200)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0008004500002400000000002f9078ac141408e000f90100f665580401907800d8621b002c17a9950db077a6b62c626cdb16ab81e607ffc33354f61e4f6315fd8412172ea4303e7b831b2dcc1d00f7477100e69a0a930604ca2ca2f001f77f12aa648ec29ec2e56041299378092dba6a7ba947405a965f4014bef1262111dd99fcd6fe05e0b2801953a115c385d94de97f10265673f64ea06aac770030cc5a83c4498dfaa3501eab3e7dc13bf3277a5c387e14f7551b5c8b9c3a703d54e89f93213cf6fd6099dab223e066a718b462b921e68d72c346fc3e867ebbeb692a8a9db2878386d7f125872b66edb7b303107ba2b9cbb7a017b0444c96bf8b842e64dc536596ae085dcf273f2ed6b311fd8c5c734e4e6d7a02f1cd3473df75df63d212b7b4c4ae1b316b81d561adceecd62471d42d6ff8c91ab555706382d190a04877d7107755a9450883f0c45fa84f7813d587dd3261af9499b688537e6a47ec7219db8f6df3ec25e16f860ff43e4b34579c94d5306189ede3f0569a6dd2f5270af613147b2cc3b6c1903d"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r7, &(0x7f0000000280)={0x1d, r5, 0x3, {0x2, 0x1, 0x1}, 0xfe}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$bt_l2cap(r8, &(0x7f0000001100)={0x1f, 0x7, @any, 0x129}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000010c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.361148336s ago: executing program 1 (id=3269): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.256041914s ago: executing program 4 (id=3270): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendto$inet6(r3, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local, 0xffffffff}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x88}, 0x20004001) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b003dd108000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000300050800800030002ac0f0011000100cabee339084eeef16f162471f40000000500090002000000050002"], 0x58}}, 0x0) 1.253793358s ago: executing program 3 (id=3271): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) 1.235505084s ago: executing program 2 (id=3272): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000280)=[{&(0x7f00000001c0)="b77375e5dc1d74becd2fcc787b022dde75b63baa3a1b0623fb995e7f920ae8cf8a62f0f5225b223c6909a502bd4ec883fc49a915457b75ce789aa2cc9005fcebea2ef8b9fb2f79a284ca83e4ea6bd9f60e3d3572bcad4cced362aafec924f8a4d7d6cbb6dd8f0aa3c1ff1b980b4959d85a2924c48690d6b7f7cb1ebf03a2504dfe421bdf2d34e49d508865146527b64c77b123973248a81b658a2a4009fefee24bdc659901db56a08c264f0975db868e63", 0xb1}, {&(0x7f0000000380)="71863ebba534e060bd39e4f6692c84c08a63b64ac56c694ef54a47d3ba2f226be8861c48495c1721de513739e949ca4456c704767db81fa6f2c03b1db7df459a57e6b83e6f4d5f5dd11caaccff87143af4f5fcec8ee13f2fe93697c1a334323edb74a423b352b58208ef5894173ed8022b7b739b73e7f7f3a65ba5e3ef3a0b90d42146e1eb9b9dba0e1e3c106fd0f5c84cf17ef1c8e0fa6e54d8df63ae341b3c83abbe70423084a847d835720886ec3645dcc240b6577a1a7d828b1fc576c942286bd05974db6e7182fca8fc26449e3d370083dd07e4d6bde6c732e9762196e2ca29aa694ffae640be0979e7b5da43606e573a325097f544683d302e3c1462c40be3725d603d7f0bdfb8c1fede018a4007cd89bfbc1944df174ff8c72245403ce1b8523cd620fbdc64682c5a1b5c3bad73e033d09bb0de8065bbac983b3dbaad29c0ca9eac69b242f164552b8f03a1462282035ff2ced1c94c5e7335e7cbb8d3fe489490d94b5b67a02eb0a5ed02db239a24414442ec30b088d405b1aff4cfe784ec9beb6d9155769442b6cf197198e7c0426117b0714b7a5d36908ef899c1453b2c2a926e2af59ddbaf8996d7231af75af8698ca00ea800ab75b6aa29443126514c00beda15d70c2465521582b66cec9d4ba839621ade2bbf4b80a546cf59e3b9adcffb77aab166c3e2b21d176fda911144cb2e34d2ded0ab98ff8724eb4d000dbb250e94fa95be6961e2080407ca3f541687335c7bd68b5439901b2802c611d1de85808adad84882679df6093e246d70c656a2c53b3461031bb4a40b3ef36ef51bfc995bc5f1e87e649ef774a0d6bb897f6056c5fc73281d78f2b830624e12cc613ea894d22e8e023155dc616b8c4237b4925afd439a51b2e8026ad40f6ec4aab66d8ba0590d0f02bf0deffa7a3925ae896318a38c374736cf606daf5f0bf0ce7981d0650fce1c9608028f160cd4b63a3718b974ad5aded472702ccb0962f56cfe1b1cdf5591b1ef040acee901465ca2c5e773a6d1097d68ca4941508d47410de42d93d5ffd4ec49fc5bef753b97a6d5379f97db7219063ea246605132ab5e3cd0b40d5eb87b26a9e00b080e112192ddcffbdc660f151241f481a87ece4af3ab246ffb0fcbed5887fd36b760c640fd1154bb8c656098bf0fb55014179f20ef971a2fa59dab7cf36a7d02697f4e9e61c5304e4c30500a5a26ae93da0bd665e29ffbddc094440752e0df77d0babba355e05520fbc1d8b245defaf87721a2a76efb89f1687af81ffeb9df421dc70fbde1a4dd87083c7ed973caae57492cb42762e57827108156ce29ab8cfaef7150a62e73d1d8739e36d91b7b0a3de95bcee0d2fecfc8f204d015fa0d84185d2fa72dfc1aae435e0910061986f5b5b9c2b9e8cb483db15405fb489dbf1e9a62b2e87407846efbde0520793222da8b53893780d3d2ffc90ec1d10ff4b5c8391d846b2a0656a65d541c07b8279c5f8b344c3f3873dedd8dd5f23d1b39789409035eebbae83e535ed116edf6ada407a27d86b9aaf9abe050333716c75ba2c1d26883f2313233634863787c7c288b69052754cc4eab1deb3fe247c60f73bc09b698e2d616b9f8262f3a3c6ad05c8c71fb9fd380cc743465d6aad69a2034ad7bf101b546101734512cb6a4ae5a231a6e834e5cba7eb2fda176e2ce2d6758d868a6ccea036fb1e246cfed0cf47eeca19e452b52c062728fb17a6d46ccc5db4cd0e79f54e81117879129c5359e21c7e310efec6d9d6bd7b38739e3b8171f08d993e4af33fbdf9754ac5555e13c427e6c1f8c49c2bed94381053e60eed33d103a256aa1605dedbb0beab93dbb1cb0e46725f50427e660960572c23caaadb9a82ba62d7535939bda39c65033a7fbba8403c1d55a90a62cc7cc6ce733d1eada40a9fff718b81e607f304a782ca5501c05fde822239a2f506e03e771a71cf3a2250996721338765f2b7b19c8a5f15cd950673db135662cc9c1dd68213e0529c35759c3285b65147eddc8eff23c0b6e592fe9fe8f09a1d636a83164f7c96220a2c4a01cd7029cfb1c44e34beda733d8878e066b42b2a34fe60facc007643214475fcb196fffe6f51643c8afad3b45f912a3d645470942fc560ca078f9a3bd559ddba6262db6fc2a7f10b53b8f7562918aeab631dd11635b5ec4107cbdd7abb066ed0a670ffd9968ec4c145a79dd97c7efb81b780ec56f4030eb8ad3ddbd0dd117be697f8324ab55e37a4448d0cc4cb0c73f9de05ff02e1e5fe417ea1b552eef9879a29d24884305adb036c74aec534b1dfc1b3453804f39f2327ffa5839fdb544d2ce3606a68fc435a714603c8dafd51a3e8594cabe5370e93e0908eebae20d9651e571401020211408153b39382bfcd6675ffc40af15100e29be18222953d2c9fbf1bc6613fbd208690b7ac86f45df492d2ea5442ccfeba7392f222e356d434b4397bd032488b908de35dcfa44ce0270d4d0c6b84380b2694aa89f5a83d6662ec01ec746fd5052138b5ecd2f9e521878b7492a748a707add7db12b1e5da2c9ea63525dfdc714d30c410be069c9cc2a9c088c4f9361befcdb7bfe8ec7bfa95ca23c88021863ad8157b87cb498125c2f99face586bf0c2162c96017d2b88e36bb8a0d2819093ec0db6b4916d3ffc92706d05992ee7e7461c482eb5742838c0905c572285d5b3de3df5fd1d38371456ae99acf7c33b2d8cef5b3a19d79ce63b687d46e5b20a0052ef4a23045a3c96b59d919a13bbcbd1b64de9e174fc6f0b22053d80675715f9ce758f3e743644c87970d8c7e413df01424c410c517d22e563e80552c4a0b97da32e172252f7c720924693b38149f36a51517be646571a006d925aca98f9211e57ff9032399adc65f12f9617bfaed0e8d386fb45f0559692bff4dc19d4212c11858dbfc0c89fd351362a58f1ce950fa116fbe2b90213449cde14896721fb4f7957d43fa42aabca0db8bc007981d00c5a60048ef83076585667fa0a3f20fb0f681b4226e1d291f38d1a6e566fd1b093f3ee4bd2c7304e44eaacf95e786da82c805033695d882e51c0ffaf4977d0304a45f30f287fd0faf645e66d6c022b7ae8e682706a9f83eaa3e89702a71a2645a3381fb1d4620d20af6b854e16343838430fd764fe1fa9bee9c2563f0258b5bad76532c0a80e39cd6f427dbe42a6fdeab96ec577f4556c8e0ad1ba7d268ae78f5f0dee8c6c212b41b1aa2e29987925c25a148c65599122808f46fc44f9bac7d8a8372e65294e4b5cc32f38bb2b87d425c1ccbbdcf006c0b8c5db7108220abe194dfcfd2cc6eee3f7d44094816ef0aed2ba975b1fd91895fc57139e4fe9592dda3ed02cc11ee743852fa073e77d1f40c7cd5cad738fecc56015aa6ee0b25469958680e2f8bfd70df0ef965704d1a8cdcf77a8c7fb8cdda79a1811144801ebc8000aea7c2bae67ec50eefb1da2ebd17ae894f8c74bc7a534680d53757f673a5b976babfdaf076c1daf73875450a37a9cb6d88f46d56665cf4c1d42dcf354b0621f1f8a2b1f93b494d1f6a953b39724dd8b6eb6a227bec64770e2c6f0176a39693818465e21b20d2c0875463937c40c3df190b1fc39b0717b67d76747bfc3ab34f19411617546cd8e918cb14c39c46011dcd177adbea49d8490243d9f10820f9bb3260419fce84283e29d28c3765ae7ab7896f02a144e19e6ab1866872835f039a13d0be8d706206fb0fcc4a5f81981534ff996cfbcf457821fea20d009ff3ccd11b0a1e3a8b97f425cf2d49f4af9877596a60b0da2b98876e04225c0b0f6a03edc718ea3aab58ff0ec36f6269eb023e7187962bebccfd913b65da7b81d1b6da18743f4fc5543f71c8cbe754d7fbe88366aff86ed2391d9fe103c8ef5aac0752a2faac7da189c96b41437ca3b3a6cc1588fa06fbd947d1ce3e692f5589c2a685528d061c5cba78ec13db6c8335d1a96b4521f9bb7c9c136f8cff00c49e051ea51e129af63d09bbd922bd25db55ef4fce377006b755f95f08b7754e2f14e917a1be841043755ccdd6bf4d3a2fce2b680fa5422ec7c0d5155d08eb358a6ea0142770a85847d9735795b985546901fa15ab294b5c971426828a1fef6f9099fb2e05afb8728fbf80a3fb3464f23dcfc91d3628fdd6b7ed3af7938073863ddc255b8a0c393a438d4909c7f4b21d7a72fa0a473f973ccad7cc34a8b4800d54510f8ddfd26e8a623dca3135e4257d08e363c5b356fe3f0688c41095831372d5500d4281ebceae27facfb9ecaeda79493c7538d45a1d772c267f64431cc254c123d2634c163791d9a6cfc696cd2e2af97446ea551ea2197ac8c70dbf7ce902b479b97752d1ffd1c4abe36dee56c57455cec5aeea12a706f85c9356a0aaf6dae50090f561c03022b8b09142ac18120a89689736f05899fe42cf61c134e4dbac4b9661b20b9129b810e2f1b7d5d46d4ed8f6af73f3307bc81bd2d09b1e132009d0654cbd64b46a5173fb80ff6b92db04232ce00c4bd2c7234e6a0968fcfd883ef335e0c2c868993f7686716325cd630fbda38aa003036b4bdb886ee774897b2a800dc1fda46b0045ca3b39d32fa880ca6ce5f924b2df7bcb76217342633496328da8d720a6de510c798220b84654a06d7784e8749bfc5c8f8843835727f0c13674589689169b6307b1d78f6e73168c24ceac3600d4c3bc538d96a450f1fca799acdb2b1102c94df1dedf0848c68b644deab0624cee02ca6eb40db9734ef22fa4def1d62851e4bf14a882260e97e4179a9e9bdcb68e6bc72bfc00825f71054777944c1f2c998d5eb64afd384dd510516ed21d3fcd073d8ad534bcf65144d4e531dcde15448205cb71f5258eb9bdcb48fb6fcfa50af4e4bb21a77d5a89b6d0e10a291c4481bacfe31aa8ab27d0184a37a7fd1eadf0681a9760f04b9bce7c1102ed6e6dc7a220bb6ba3255ee0049109ede42c8a236d26efc7a769e0cdc3e31f1821645813fec47b41fb8b06d57e86c826c3f246b60d59a4a518e9b479c438c9dade49acd06270c526900cc15d5b4bea1e3ba97e52edb8add83ddf8e0c2822f313e085ce3a05e3335e1e9157d7ea452779a08d10a0ee67f108548aa2ff9dcbe9fe399de7f2f428acb0f25973b7a612296b78e1442aaa727f6beb4b27e6792b6a48e8ce610f18dcb60da0d2cbc7292c9f3040fbeb36643b3b96d98f11faf7bace2305e89b9482af070f4f81181ad4a80a493b00a28d0f67290cc3de988c2f54a4962e0bf0b516db250773d238bff6a1c8eb6a62c04344da44ce25da0a6c6cc4f3e6733e6ed0b98191d2b843e2037192d96fdbd40dd1bad2ac738775f5e9fe27b103ce496937882181313ba2fad02956ce133b5e44545fd19bae9055846fd27c0f0729f9e3198e75e2e42b9f6b17af81abc99881c44ce375dc1102186ba8c1d4c704ae397b7bf748c8f3927919512bd0b3cd80c67ee2ece55efed44004aa3b1edb69f759644147bcc90d81d6ab5b35f26c4765be865c9ef0752c3935dccaefa6e36fefc177dd4135e5771db2ca86598fb79f1794f471d3ec89198b37871cc91", 0xf50}], 0x2) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000020000000400000045000100", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000006e61dd8bfba35c4a0000000000000000", @ANYRES32=r7, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r10}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) listen(r2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r12 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d, r11}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.05436592s ago: executing program 3 (id=3273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00008000000000000000000000000002000000e57612e387000000000000000000000007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1044}, 0x2004000c) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x1}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000100)="b03ef9880b815221ff28eac1d4f49bcad59f71c0ef", 0x15}], 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 1.000332327s ago: executing program 2 (id=3274): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c190e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b20"], &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) 997.786852ms ago: executing program 1 (id=3275): r0 = socket(0x5, 0x2, 0xfffffff9) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x2200}, {r1, 0x22}, {r2, 0x10}, {r3, 0xc246}, {r4, 0x22}], 0x5, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x6]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000080)=""/11, &(0x7f0000000100)=0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001000000090001006f797a30000000003c000000090a010400000000000000000100000008000a40010000000900020073797a32000000000900010073797a3000000000080005402000001d540000000c0a0102000000000020000001000000090ec40073797a32000000002800038024000080030000000800034000000001140007800a000500696e6e65720000000400028009a1a9493300010073797a00"/216], 0xd8}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 874.389108ms ago: executing program 2 (id=3276): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 759.965245ms ago: executing program 2 (id=3277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x40004) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x9, 0xffff, 0x6, 0x8000000000000001, 0x8, 0xf, 0x9, 0x3}, &(0x7f0000000200)={0x7, 0x8000000000000000, 0x3ff, 0x9, 0x80000000, 0x940, 0x800, 0x5}, &(0x7f0000000240)={0x8, 0x5, 0x3, 0x9, 0x800, 0x57f0, 0xfffffffffffffffc, 0x4}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) clock_gettime(0x370e09439726230, &(0x7f0000000340)) r4 = openat$cgroup(r0, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='devices.list\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}}, 0xd12d8a20bd17d908) r7 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000580)={0x60000006}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000005c0)={r7, 0x100000001, 0x2, 0x3}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0x1000, "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"}, &(0x7f0000001640)=0x1008) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000001680)={r9, @in6={{0xa, 0x4e22, 0x80000000, @local, 0x8}}}, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000001740)={r9}, &(0x7f0000001780)=0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x110, r7, 0xdbfb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x10c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa, 0x1f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xcb, 0x5b, "54ed11e468e439e8e9555d0a0cbb82aa9c25da559f1ca89c691defcca156719acf49c7a6c6d1caafa917e7b4066a382c15b0b84a329af8cd02f0f479a588ec72d43afe8dd63e5ab20be441ac29ab5f7060fdee905f31f8f8caaef9394845410abcfd9f3fb28c525643cf4970595fb8b462739f9adfda7e5e95355e122cb8aab01d1df7ebd0d5991ac8cfab6361e75f1ff6c675b0a66ec6ee783df81d18ca23371da28cc64553a9f902605c781b88d92f357a6f4f88a378da400326426b89ce69510ab4b5f48454"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000019c0)={r9, 0x4, 0x6}, &(0x7f0000001a00)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001a40)={r11, 0x64fc9721}, &(0x7f0000001a80)=0x8) write$cgroup_subtree(r5, &(0x7f0000001ac0)={[{0x2b, 'memory'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'blkio'}, {0x2d, 'hugetlb'}]}, 0x27) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000001bc0)={&(0x7f0000001b00), 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7, '\x00', 0x0, r8, 0x1, 0x4, 0x1}, 0x50) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001cc0), r8) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x68, r13, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x801) 734.840811ms ago: executing program 0 (id=3173): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xfffffffd}, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x0, 0x30, 0x3, 0x4}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r3, 0x5}, &(0x7f0000000200)=0x8) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f0000000400), 0x4) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf060200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) write$nci(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601b2"], 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000003800), 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080), 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r11}, 0x94) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r12, 0x8b1a, &(0x7f0000000040)) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 660.287568ms ago: executing program 3 (id=3278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e7", 0xc5}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, 0x4) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x62, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 553.469775ms ago: executing program 3 (id=3279): syz_emit_ethernet(0x3a, &(0x7f0000000040)={@remote, @empty, @void, {@x25={0x805, {0x2, 0xb, 0xff, "fab32f6d47161e9c50996374326a749e33ba77abe31f6e1404b202894411a3a1c4964795430bc975ec"}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bind$netlink(r0, &(0x7f00000002c0), 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 519.291122ms ago: executing program 0 (id=3280): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x800, @loopback, 0x100}, 0x1c, 0x0}}], 0x1, 0x4000004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, &(0x7f0000000100)=0x84) 467.981281ms ago: executing program 2 (id=3281): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="fc24e5aef2d838214b18ed4d8a0d76403103000000000000200008000000"], 0x14}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/36, 0x24, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 242.961667ms ago: executing program 3 (id=3283): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7f00, 0x700, 0x34, 0x8000, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@rr={0x7, 0x17, 0x71, [@empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x33}]}, @lsrr={0x83, 0x17, 0xd7, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @broadcast]}]}}}}}) (async) r0 = socket$inet6(0xa, 0x3, 0x20) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000"], 0x28}}], 0x1, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async) syz_emit_ethernet(0xd76, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xd38, 0x3a, 0xff, @remote, @loopback, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [{0x1, 0x17, "122b472e41e24b11f34b608816e522a7f3032efcb5633a3983e172d7dbb1cedeea00156dbf01dbd8e49e39e8fd54a9300113f16b56fd3ece899e2dff0f1443afc40da882e5a3d76d593c09402a0de4f7b9fcbd9c0f4b968122455e34e1afa222c60b04a9f2bfd548605a711678755475861538b9de80bb31e39fd8d5ba7fc1988c850ba77307a7519940fc99f9a55be09c10cf4bce1ecfeb8a12772325a7c3d35e786a6518357d8754da82aac43dba342a23914b38c05e"}, {0x22, 0x18c, "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"}]}}}}}}, 0x0) 160.189242ms ago: executing program 2 (id=3284): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5, 0x40000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x4000) 0s ago: executing program 1 (id=3285): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="03a10691df6c68fe9e6c2bb219f9c301e7af3b3931e61cca3e2fc82a4b6eb0bdbca1535b5e5079c66f12187ab087687e12451eb5e491c4224faeae5a9f46999e325186c43bb59729a542e53051f89e1a0df2c926428c06bdf4481b421b2a5fe3b93dad4c6fc50205a26bb70f1fba630e7a8e5290fe70c1dcb206c345d5dd0c87f4a6cc50a8b250e3ff76538b9005760b71585ecd4f3a5c22ce2b6879fc81641092bdf23f51dec692b8", 0xa9}, {0x0}], 0x3}}], 0x2, 0x1405c891) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8949, &(0x7f0000000580)={'bond0\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r0, 0x0) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.0.1123'. [ 185.260112][ T9873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.359462][ T9892] netlink: 'syz.1.1128': attribute type 12 has an invalid length. [ 185.368679][ T9892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1128'. [ 185.474732][ T9901] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 186.221633][ T9914] netlink: 'syz.1.1133': attribute type 4 has an invalid length. [ 186.632225][ T9942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1145'. [ 186.702719][ T9942] openvswitch: netlink: Missing key (keys=40, expected=100) [ 186.972808][ T9955] tipc: Enabled bearer , priority 0 [ 187.009545][ T9955] syzkaller0: entered promiscuous mode [ 187.040867][ T9955] syzkaller0: entered allmulticast mode [ 187.049660][ T9964] tipc: Enabled bearer , priority 0 [ 187.057474][ T9964] syzkaller0: entered promiscuous mode [ 187.065860][ T9964] syzkaller0: entered allmulticast mode [ 187.089132][ T9955] tipc: Resetting bearer [ 187.147757][ T9952] tipc: Resetting bearer [ 187.203041][ T9952] tipc: Disabling bearer [ 187.241439][ T9973] tipc: Resetting bearer [ 187.637709][ T9988] __nla_validate_parse: 2 callbacks suppressed [ 187.637730][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 187.673431][ T9988] vlan2: entered allmulticast mode [ 187.678742][ T9988] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 187.687623][ T9981] syzkaller1: entered promiscuous mode [ 187.693373][ T9981] syzkaller1: entered allmulticast mode [ 187.786195][ T9962] tipc: Resetting bearer [ 187.814203][ T9962] tipc: Disabling bearer [ 188.011832][T10006] pim6reg1: entered promiscuous mode [ 188.017943][T10006] pim6reg1: entered allmulticast mode [ 188.558136][T10031] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 188.573909][T10031] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1178'. [ 188.604587][T10031] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1178'. [ 188.818540][T10044] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 188.938850][T10044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.018075][T10052] IPVS: length: 26 != 8 [ 189.035666][T10044] bond3: (slave ip6erspan0): making interface the new active one [ 189.071081][T10044] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 189.108871][T10053] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.119955][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 189.148388][T10058] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 189.168576][T10052] bridge0: entered allmulticast mode [ 189.379262][T10073] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 189.450736][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 189.516108][T10073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.598314][T10078] vlan3: entered allmulticast mode [ 189.603672][T10078] veth1: entered allmulticast mode [ 189.638786][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'. [ 190.650127][T10109] netlink: 'syz.0.1198': attribute type 21 has an invalid length. [ 191.080392][T10109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1198'. [ 191.121346][ T49] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.150164][ T49] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.202430][ T49] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.223700][ T49] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.285142][ T49] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.296085][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 191.325749][ T49] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.353102][ T49] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.371934][ T49] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.397698][T10125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1199'. [ 191.494620][T10124] tipc: Enabled bearer , priority 0 [ 191.526410][T10124] syzkaller0: entered promiscuous mode [ 191.554790][T10124] syzkaller0: entered allmulticast mode [ 191.646344][T10130] tipc: Resetting bearer [ 191.724561][T10130] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 191.766607][T10118] tipc: Resetting bearer [ 191.823074][T10118] tipc: Disabling bearer [ 192.403933][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 192.464887][T10176] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 192.793024][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 193.392930][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'. [ 193.408441][T10220] team0: Device ip6gre1 is of different type [ 193.488025][T10226] pim6reg1: entered promiscuous mode [ 193.494459][T10226] pim6reg1: entered allmulticast mode [ 194.069551][T10254] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1241'. [ 194.231687][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1245'. [ 194.394422][T10273] team_slave_0: entered allmulticast mode [ 194.511409][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518216][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.552921][T10276] tipc: Enabled bearer , priority 0 [ 194.570813][T10276] syzkaller0: entered promiscuous mode [ 194.576340][T10276] syzkaller0: entered allmulticast mode [ 194.635361][T10276] tipc: Resetting bearer [ 194.746384][T10275] tipc: Resetting bearer [ 195.070312][T10291] netlink: 'syz.3.1249': attribute type 11 has an invalid length. [ 195.091805][T10291] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1249'. [ 195.110308][T10275] tipc: Disabling bearer [ 195.367404][T10299] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1256'. [ 195.514544][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1259'. [ 195.797590][T10322] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1262'. [ 195.834262][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 195.855391][T10322] smc: net device erspan0 applied user defined pnetid SYZ0 [ 196.048527][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 196.074872][T10336] sctp: [Deprecated]: syz.3.1267 (pid 10336) Use of int in max_burst socket option. [ 196.074872][T10336] Use struct sctp_assoc_value instead [ 196.331082][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 196.512310][T10350] netlink: 'syz.4.1272': attribute type 3 has an invalid length. [ 196.696629][T10357] team0: Device gtp0 is of different type [ 197.146298][T10383] erspan0: entered promiscuous mode [ 197.156870][T10383] erspan0: entered allmulticast mode [ 197.388243][T10397] openvswitch: netlink: Duplicate or invalid key (type 0). [ 197.420962][T10397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.568651][T10402] netlink: 'syz.4.1289': attribute type 7 has an invalid length. [ 197.577062][T10402] netlink: 'syz.4.1289': attribute type 8 has an invalid length. [ 197.849917][T10420] netlink: 'syz.4.1294': attribute type 4 has an invalid length. [ 197.884124][T10417] IPv6: sit2: Disabled Multicast RS [ 197.912096][T10417] sit2: entered allmulticast mode [ 198.459435][T10450] netlink: 'syz.3.1305': attribute type 2 has an invalid length. [ 198.797698][T10474] __nla_validate_parse: 10 callbacks suppressed [ 198.797717][T10474] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1312'. [ 198.895120][T10482] netlink: 'syz.0.1313': attribute type 83 has an invalid length. [ 198.918361][T10482] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 198.948173][T10482] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1313'. [ 199.043069][T10485] vlan4: entered promiscuous mode [ 199.048302][T10485] bridge0: entered promiscuous mode [ 199.193156][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 199.242485][T10504] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1314'. [ 199.295810][T10504] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1314'. [ 199.438987][T10510] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1320'. [ 199.512498][T10510] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.773446][T10533] syzkaller0: entered promiscuous mode [ 199.779145][T10533] syzkaller0: entered allmulticast mode [ 200.342743][T10560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'. [ 200.506851][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1338'. [ 200.622300][T10574] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 200.630202][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 200.926289][T10592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1349'. [ 201.093289][T10606] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 201.299953][T10614] netlink: 'syz.0.1355': attribute type 5 has an invalid length. [ 201.317928][T10614] geneve2: entered promiscuous mode [ 201.324323][T10614] geneve2: entered allmulticast mode [ 201.385602][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 201.403723][T10611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.412194][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 201.431230][T10611] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 201.448156][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 201.459963][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 201.488892][T10611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.517889][T10611] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 201.561544][T10611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.574205][T10611] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 201.593230][T10611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.599694][T10611] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 202.303481][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.325019][T10655] netlink: 'syz.1.1369': attribute type 83 has an invalid length. [ 202.782039][T10679] lo speed is unknown, defaulting to 1000 [ 203.229692][T10698] netlink: 'syz.3.1379': attribute type 12 has an invalid length. [ 203.247036][T10698] netlink: 'syz.3.1379': attribute type 29 has an invalid length. [ 203.275821][T10700] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 203.933034][T10725] __nla_validate_parse: 11 callbacks suppressed [ 203.933053][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 204.294575][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 204.328019][T10743] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1394'. [ 204.338277][T10738] nbd: must specify a size in bytes for the device [ 204.391439][T10746] nbd: must specify an index to disconnect [ 204.555375][T10750] netlink: 'syz.0.1396': attribute type 2 has an invalid length. [ 204.555973][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'. [ 204.583726][T10750] netlink: 'syz.0.1396': attribute type 8 has an invalid length. [ 204.596194][T10752] netlink: 'syz.1.1397': attribute type 3 has an invalid length. [ 204.615417][T10755] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 204.620676][T10750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1396'. [ 204.624039][T10755] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1397'. [ 204.829962][T10758] netlink: 'syz.3.1399': attribute type 11 has an invalid length. [ 204.849802][T10758] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1399'. [ 204.890056][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 204.899105][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'. [ 204.912468][T10766] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1399'. [ 205.558335][T10795] netlink: 'syz.4.1410': attribute type 2 has an invalid length. [ 206.188197][T10830] tipc: Enabling of bearer rejected, failed to enable media [ 206.978324][T10853] net veth1_virt_wifi .: renamed from virt_wifi0 [ 207.421968][T10876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.923887][T10904] tipc: Enabled bearer , priority 0 [ 207.971564][T10904] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 208.009540][T10904] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 208.054893][T10912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.117986][T10904] tipc: Resetting bearer [ 208.251444][T10925] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 208.305607][T10925] validate_nla: 4 callbacks suppressed [ 208.305625][T10925] netlink: 'syz.1.1450': attribute type 10 has an invalid length. [ 208.321949][T10925] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 208.360411][T10923] lo speed is unknown, defaulting to 1000 [ 208.411123][T10925] bridge_slave_0: left allmulticast mode [ 208.417251][T10925] bridge_slave_0: left promiscuous mode [ 208.442045][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.474026][T10925] bridge_slave_1: left allmulticast mode [ 208.479741][T10925] bridge_slave_1: left promiscuous mode [ 208.495373][T10934] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 208.520344][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.546470][T10925] bond0: (slave bond_slave_0): Releasing backup interface [ 208.557748][T10925] bond_slave_0: left allmulticast mode [ 208.575588][T10925] bond0: (slave bond_slave_1): Releasing backup interface [ 208.584525][T10925] bond_slave_1: left allmulticast mode [ 208.598366][T10925] team0: Port device team_slave_0 removed [ 208.608410][T10925] team0: Port device team_slave_1 removed [ 208.615071][T10925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.636079][T10925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.657784][T10925] bond0: (slave netdevsim0): Releasing backup interface [ 208.681233][T10925] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 208.702044][T10934] team0: Port device geneve0 added [ 208.717531][ T3562] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.729791][ T3562] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.743281][ T3562] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.823606][ T3562] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.919643][T10951] netlink: 'syz.4.1461': attribute type 10 has an invalid length. [ 208.956361][T10951] bond0: (slave wlan1): Opening slave failed [ 208.970655][ T5932] tipc: Node number set to 3232646992 [ 209.004970][T10958] __nla_validate_parse: 13 callbacks suppressed [ 209.004991][T10958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1462'. [ 209.492713][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 209.743442][T10995] pimreg: entered allmulticast mode [ 209.807439][T10995] pimreg: left allmulticast mode [ 210.566564][T11032] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 210.651051][T11037] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 211.298806][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 211.327451][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 211.336758][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 212.049365][T11087] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1497'. [ 212.194398][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 212.306360][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 212.841001][ T30] audit: type=1804 audit(1755252541.191:4): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1507" name="/newroot/298/cgroup.controllers" dev="tmpfs" ino=1543 res=1 errno=0 [ 212.882270][T11129] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 212.890308][T11129] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1509'. [ 212.896833][ T30] audit: type=1800 audit(1755252541.221:5): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1507" name="cgroup.controllers" dev="tmpfs" ino=1543 res=0 errno=0 [ 212.927734][T11127] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1508'. [ 212.963888][T11130] pimreg: entered allmulticast mode [ 213.069771][T11137] netlink: 'syz.2.1511': attribute type 9 has an invalid length. [ 213.287789][T11145] pimreg3: entered allmulticast mode [ 213.369256][T11152] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 214.230238][T11197] __nla_validate_parse: 6 callbacks suppressed [ 214.230257][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 214.259489][T11197] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 214.310965][T11197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.436313][T11208] veth1_macvtap: left promiscuous mode [ 214.477895][T11208] macsec0: entered promiscuous mode [ 214.499592][T11208] macsec0: entered allmulticast mode [ 214.530104][T11210] veth1_macvtap: entered promiscuous mode [ 214.536249][T11210] veth1_macvtap: entered allmulticast mode [ 214.550465][T11210] macsec0: left promiscuous mode [ 214.556799][T11210] macsec0: left allmulticast mode [ 214.568457][T11210] veth1_macvtap: left allmulticast mode [ 214.730728][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 214.940337][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 215.412368][T11259] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1542'. [ 215.422488][T11259] xt_socket: unknown flags 0xd0 [ 215.479123][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 215.702200][T11276] netlink: 'syz.1.1547': attribute type 4 has an invalid length. [ 215.723020][T11276] netlink: 'syz.1.1547': attribute type 4 has an invalid length. [ 215.825212][T11283] veth0_to_batadv: entered promiscuous mode [ 216.263538][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 216.955328][ T49] tipc: Subscription rejected, illegal request [ 217.162612][T11344] netlink: 'syz.0.1570': attribute type 29 has an invalid length. [ 217.184965][T11344] netlink: 'syz.0.1570': attribute type 29 has an invalid length. [ 217.209920][T11345] bond0: option mode: unable to set because the bond device has slaves [ 217.252559][T11346] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1570'. [ 217.261005][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 217.290024][T11342] Unsupported xt match [ 217.290044][T11342] unable to load match [ 217.321758][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 217.359317][T11354] netlink: 'syz.4.1573': attribute type 2 has an invalid length. [ 217.372687][T11354] netlink: 'syz.4.1573': attribute type 8 has an invalid length. [ 217.390172][T11354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1573'. [ 217.497394][T11361] tipc: New replicast peer: 255.255.255.255 [ 217.512096][T11361] tipc: Enabled bearer , priority 10 [ 218.138671][T11394] sctp: [Deprecated]: syz.4.1585 (pid 11394) Use of int in maxseg socket option. [ 218.138671][T11394] Use struct sctp_assoc_value instead [ 218.630758][ T5932] tipc: Node number set to 1593607532 [ 218.730808][T11421] syz.1.1592 (11421) used obsolete PPPIOCDETACH ioctl [ 219.348787][T11449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.423742][T11460] tipc: New replicast peer: 0.0.0.0 [ 219.429499][T11460] tipc: Enabled bearer , priority 10 [ 219.459686][T11462] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 219.555086][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 219.608913][T11465] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1607'. [ 220.204033][ T135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 220.260776][ T135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 220.270234][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 220.317228][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 220.861624][T11518] sctp: [Deprecated]: syz.4.1621 (pid 11518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.861624][T11518] Use struct sctp_sack_info instead [ 221.063554][T11529] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.315215][T11540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1631'. [ 221.649882][T11559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.722804][T11564] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 222.155775][T11589] tipc: Enabled bearer , priority 0 [ 222.193758][T11589] syzkaller0: entered promiscuous mode [ 222.199297][T11589] syzkaller0: entered allmulticast mode [ 222.403193][T11607] tipc: Resetting bearer [ 222.412987][T11588] tipc: Resetting bearer [ 222.451617][T11588] tipc: Disabling bearer [ 222.584072][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 222.647554][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 222.930441][T11635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.953734][T11633] netlink: 'syz.2.1659': attribute type 3 has an invalid length. [ 222.975712][T11633] netlink: 'syz.2.1659': attribute type 3 has an invalid length. [ 223.092474][T11639] netlink: 'syz.0.1662': attribute type 11 has an invalid length. [ 223.120636][T11639] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1662'. [ 223.149149][T11644] netlink: 'syz.4.1664': attribute type 11 has an invalid length. [ 223.327296][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 223.426380][T11654] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 223.512033][T11654] TCP: TCP_TX_DELAY enabled [ 223.517601][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 223.558130][T11659] netlink: 'syz.0.1670': attribute type 5 has an invalid length. [ 223.588954][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 223.619099][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1672'. [ 223.760698][ T1160] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.790733][ T1160] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.799390][ T1160] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.825607][ T1160] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.974055][T11684] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.985018][T11684] tipc: Enabled bearer , priority 0 [ 224.037542][T11684] syzkaller0: entered promiscuous mode [ 224.046482][T11684] syzkaller0: entered allmulticast mode [ 224.053836][T11684] tipc: Resetting bearer [ 224.112152][T11682] tipc: Resetting bearer [ 224.624972][T11712] __nla_validate_parse: 4 callbacks suppressed [ 224.624993][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 224.991463][ T7970] tipc: Node number set to 1641628751 [ 225.873201][T11682] tipc: Disabling bearer [ 225.890745][T11717] bridge1: left promiscuous mode [ 225.900928][T11717] bridge3: left promiscuous mode [ 225.906096][T11717] bridge4: left promiscuous mode [ 225.931267][T11717] vlan2: left promiscuous mode [ 225.950914][T11717] bond2: left promiscuous mode [ 225.970380][T11718] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1687'. [ 226.172110][T11736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1692'. [ 226.195641][T11738] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20002 [ 226.409650][T11748] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1694'. [ 226.420398][T11748] netlink: 'syz.1.1694': attribute type 9 has an invalid length. [ 226.503419][T11751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1696'. [ 226.588949][T11753] tipc: Enabling of bearer rejected, failed to enable media [ 226.796464][T11762] netlink: 147332 bytes leftover after parsing attributes in process `syz.1.1701'. [ 226.812736][T11756] syz.2.1697 (11756) used greatest stack depth: 17864 bytes left [ 227.024744][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 227.075578][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 227.082104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.205711][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 227.408221][T11799] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1710'. [ 227.577198][T11810] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 227.956495][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 227.971111][T11825] netlink: 'syz.2.1718': attribute type 3 has an invalid length. [ 228.538460][T11856] netlink: 'syz.0.1726': attribute type 11 has an invalid length. [ 228.826953][T11865] can: request_module (can-proto-3) failed. [ 228.963800][T11871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.027501][T11871] vlan2: entered allmulticast mode [ 229.034413][T11871] bond4: entered allmulticast mode [ 229.320189][T11892] openvswitch: netlink: Flow key attr not present in new flow. [ 229.482322][T11900] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 229.495923][T11901] tipc: Enabled bearer , priority 0 [ 229.578847][T11908] gretap1: entered promiscuous mode [ 229.625638][T11908] bond4: (slave gretap1): making interface the new active one [ 229.640438][T11908] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 229.652529][T11903] tipc: Disabling bearer [ 229.684703][T11900] macvlan3: entered promiscuous mode [ 229.695954][T11900] macvlan3: entered allmulticast mode [ 229.725483][T11900] bond4: entered promiscuous mode [ 229.769668][T11900] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.818342][T11900] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 229.910111][T11900] bond4: left promiscuous mode [ 230.004952][T11934] __nla_validate_parse: 5 callbacks suppressed [ 230.005069][T11934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1746'. [ 230.024446][T11934] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1746'. [ 230.079066][T11934] netlink: 'syz.3.1746': attribute type 6 has an invalid length. [ 230.087313][T11934] netlink: 'syz.3.1746': attribute type 5 has an invalid length. [ 230.102910][T11934] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1746'. [ 230.345680][T11951] blkio.reset_stats is deprecated [ 230.366071][T11951] tipc: Enabling of bearer rejected, already enabled [ 230.487314][T11947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1749'. [ 230.513743][T11961] netlink: 'syz.2.1754': attribute type 10 has an invalid length. [ 230.521885][T11961] veth0_vlan: entered allmulticast mode [ 230.527978][T11961] veth0_vlan: left promiscuous mode [ 230.535112][T11961] veth0_vlan: entered promiscuous mode [ 230.548579][T11961] team0: Device veth0_vlan failed to register rx_handler [ 230.600144][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 230.640379][T11964] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1755'. [ 230.681539][T11966] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1756'. [ 230.854385][T11970] syz_tun: entered allmulticast mode [ 231.095517][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 231.311234][T11995] tipc: Enabled bearer , priority 0 [ 231.348377][T11995] syzkaller0: entered promiscuous mode [ 231.356014][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 231.372975][T11995] syzkaller0: entered allmulticast mode [ 231.398972][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 231.604489][T12014] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.645157][T11995] tipc: Resetting bearer [ 231.733593][T11995] tipc: Disabling bearer [ 231.812997][T12022] netlink: 'syz.1.1771': attribute type 21 has an invalid length. [ 231.836364][T12022] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 231.877204][T12028] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 232.006375][T12025] bond5: (slave gretap2): making interface the new active one [ 232.042281][T12025] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 232.379844][T12056] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 232.545319][T12072] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 233.398815][T12114] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 233.412570][T12114] netlink: 'syz.3.1795': attribute type 7 has an invalid length. [ 233.565565][T12121] lo speed is unknown, defaulting to 1000 [ 233.581934][T12128] bridge0: port 1(syz_tun) entered blocking state [ 233.596347][T12128] bridge0: port 1(syz_tun) entered disabled state [ 233.604075][T12128] syz_tun: entered allmulticast mode [ 233.612215][T12128] syz_tun: entered promiscuous mode [ 233.881284][T12139] netlink: 'syz.4.1800': attribute type 25 has an invalid length. [ 233.923590][T12140] syzkaller1: entered promiscuous mode [ 233.929584][T12140] syzkaller1: entered allmulticast mode [ 234.017684][T12145] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 234.028117][T12142] syzkaller1: entered promiscuous mode [ 234.028140][T12142] syzkaller1: entered allmulticast mode [ 235.119188][T12196] __nla_validate_parse: 13 callbacks suppressed [ 235.119207][T12196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1820'. [ 235.471510][T12205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.578754][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 235.606528][T12209] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 235.650965][T12209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.844671][T12221] netlink: 'syz.0.1830': attribute type 7 has an invalid length. [ 235.867442][T12219] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 235.902597][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 236.021187][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 236.048882][T12221] : entered promiscuous mode [ 236.066312][T12228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1832'. [ 236.194790][T12233] bond0: Error: Cannot enslave bond to itself. [ 236.214788][T12237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1832'. [ 236.572430][T12251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 236.738625][T12256] veth0_to_bond: mtu less than device minimum [ 236.865629][T12262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1843'. [ 236.925571][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 236.993656][T12262] nbd: device at index 2 is going down [ 237.029754][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 237.086089][T12271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.089472][T12274] netlink: 'syz.4.1847': attribute type 39 has an invalid length. [ 237.329602][T12285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.376964][T10636] udevd[10636]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 237.423480][T12284] netlink: 'syz.2.1850': attribute type 16 has an invalid length. [ 237.441198][T12284] netlink: 'syz.2.1850': attribute type 17 has an invalid length. [ 237.502497][T12291] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 237.624395][T12284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.646416][T12284] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.796565][T12284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.836794][T12292] vlan4: entered promiscuous mode [ 238.272178][T12318] pim6reg527: entered allmulticast mode [ 238.296722][T12314] nft_compat: unsupported protocol 0 [ 238.438082][T12325] openvswitch: netlink: Flow key attr not present in new flow. [ 239.005787][T12355] bridge2: entered promiscuous mode [ 239.027930][T12355] bridge2: entered allmulticast mode [ 239.070985][T12360] lo: entered promiscuous mode [ 239.075819][T12360] lo: entered allmulticast mode [ 239.116245][T12349] lo speed is unknown, defaulting to 1000 [ 239.383157][T12372] netlink: 'syz.3.1874': attribute type 8 has an invalid length. [ 239.524281][T12371] geneve2: entered promiscuous mode [ 239.540044][T12371] geneve2: entered allmulticast mode [ 239.561455][ T3562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.590428][ T3562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.624191][ T3562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.645944][ T3562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.656049][T12375] sctp: [Deprecated]: syz.1.1878 (pid 12375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.656049][T12375] Use struct sctp_sack_info instead [ 240.362730][T12412] bond3: entered promiscuous mode [ 240.368873][T12412] bond3: entered allmulticast mode [ 240.381884][T12412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.496843][T12412] bond3 (unregistering): Released all slaves [ 240.670197][T12421] tipc: Enabling of bearer rejected, failed to enable media [ 240.819393][T12427] __nla_validate_parse: 13 callbacks suppressed [ 240.819415][T12427] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1893'. [ 241.174450][T12434] tipc: Enabling of bearer rejected, already enabled [ 241.698648][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 241.858447][T12464] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 241.936855][T12464] vlan3: entered allmulticast mode [ 242.206904][T12478] netlink: 'syz.2.1911': attribute type 32 has an invalid length. [ 242.484426][T12491] netlink: 'syz.3.1916': attribute type 2 has an invalid length. [ 242.502867][T12491] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1916'. [ 242.642850][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 242.976178][T12510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.079041][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 243.469890][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 243.530355][T12533] lo speed is unknown, defaulting to 1000 [ 244.016808][T12550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.593094][T12573] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 244.610799][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 244.761918][T12582] macvlan0: entered promiscuous mode [ 244.767373][T12582] macvlan0: entered allmulticast mode [ 245.385951][T12606] vxcan1: entered promiscuous mode [ 245.439353][T12609] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1954'. [ 245.476563][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 245.500672][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 245.557139][T12609] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 246.285224][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.330010][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.366605][T12641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.462900][ T7372] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 246.480271][ T7372] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 246.521473][ T7372] bond0: now running without any active interface! [ 246.599975][T12659] __nla_validate_parse: 3 callbacks suppressed [ 246.599995][T12659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1971'. [ 246.770710][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'. [ 246.785286][T12670] netlink: 'syz.2.1974': attribute type 21 has an invalid length. [ 246.823934][T12664] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 246.836932][T12664] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 247.078152][T12676] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 247.251858][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1978'. [ 247.417228][T12682] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.429441][T12682] bond6: (slave bond7): making interface the new active one [ 247.439268][T12682] bond6: (slave bond7): Enslaving as an active interface with an up link [ 247.493214][T12686] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 247.520481][T12689] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.529959][T12695] syz_tun: entered allmulticast mode [ 247.535209][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 247.574650][T12687] syz_tun: left allmulticast mode [ 247.672601][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 247.759677][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 247.795716][T12715] netlink: 'syz.4.1987': attribute type 12 has an invalid length. [ 247.816265][T12715] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 247.826097][T12715] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1987'. [ 247.841870][T12715] netlink: 'syz.4.1987': attribute type 2 has an invalid length. [ 247.855149][T12715] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 247.866955][T12719] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.877601][T12715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1987'. [ 248.073145][T12726] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 248.124197][T12728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1993'. [ 248.738756][T12759] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2002'. [ 249.493656][T12798] delete_channel: no stack [ 249.642047][T12806] bridge_slave_0: default FDB implementation only supports local addresses [ 249.658884][T12806] openvswitch: netlink: Flow key attr not present in new flow. [ 249.830353][T12813] IPv6: sit2: Disabled Multicast RS [ 249.834386][T12816] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.857659][T12813] sit2: entered allmulticast mode [ 250.055078][T12821] sit0: left promiscuous mode [ 250.089122][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.096976][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.305752][T12821] vlan2: left allmulticast mode [ 250.314515][T12821] veth1_to_bond: left allmulticast mode [ 250.320458][T12821] macvlan5: left promiscuous mode [ 250.325856][T12821] macvlan5: left allmulticast mode [ 250.388157][T12821] geneve2: left promiscuous mode [ 250.393244][T12821] geneve2: left allmulticast mode [ 250.428919][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.462048][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.484956][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.602921][T12839] netlink: 'syz.0.2030': attribute type 12 has an invalid length. [ 250.631391][T12837] netlink: 'syz.1.2029': attribute type 7 has an invalid length. [ 250.639261][T12837] netlink: 'syz.1.2029': attribute type 8 has an invalid length. [ 250.773004][T12846] netlink: 'syz.0.2033': attribute type 58 has an invalid length. [ 251.094955][T12869] netlink: 'syz.2.2038': attribute type 21 has an invalid length. [ 251.125288][T12872] netlink: 'syz.0.2039': attribute type 2 has an invalid length. [ 251.167716][T12872] netlink: 'syz.0.2039': attribute type 3 has an invalid length. [ 251.740120][T12904] __nla_validate_parse: 17 callbacks suppressed [ 251.740141][T12904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2048'. [ 251.857155][T12919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2051'. [ 252.680160][T12967] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 252.736831][T12968] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 253.289617][T13002] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 253.304863][T13002] bridge0: port 3(team0) entered blocking state [ 253.315589][T13002] bridge0: port 3(team0) entered disabled state [ 253.324848][T13002] team0: entered allmulticast mode [ 253.330102][T13002] team_slave_0: entered allmulticast mode [ 253.338793][T13002] team_slave_1: entered allmulticast mode [ 253.348099][T13002] macvlan5: entered allmulticast mode [ 253.371895][T13002] team0: entered promiscuous mode [ 253.377115][T13002] team_slave_0: entered promiscuous mode [ 253.386713][T13002] team_slave_1: entered promiscuous mode [ 253.393130][T13002] macvlan5: entered promiscuous mode [ 254.135536][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.200652][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.243286][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.266638][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.333385][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.348435][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.391565][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.417055][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'. [ 254.585670][T13058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.222207][ T5932] IPVS: starting estimator thread 0... [ 255.310622][T13099] IPVS: using max 27 ests per chain, 64800 per kthread [ 255.499545][T13108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.618796][T13114] vlan3: entered allmulticast mode [ 255.625145][T13114] veth1: entered allmulticast mode [ 255.633789][T13114] bond3: (slave vlan3): Opening slave failed [ 255.699954][T13121] lo speed is unknown, defaulting to 1000 [ 255.960447][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.966879][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003928][T13139] openvswitch: netlink: EtherType 257 is less than min 600 [ 256.328985][T13153] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 256.358573][T13147] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.631255][T13171] validate_nla: 5 callbacks suppressed [ 256.631275][T13171] netlink: 'syz.2.2123': attribute type 12 has an invalid length. [ 256.659524][T13171] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 256.793533][T13178] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 256.810846][T13179] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 256.969902][T13179] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 257.958853][T13238] netlink: 'syz.0.2143': attribute type 11 has an invalid length. [ 258.277679][T13256] netlink: 'syz.3.2149': attribute type 3 has an invalid length. [ 258.300378][T13253] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 258.444491][T13263] __nla_validate_parse: 259 callbacks suppressed [ 258.444525][T13263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2152'. [ 258.511751][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2152'. [ 258.579670][T13264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 258.660140][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2155'. [ 258.744063][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2155'. [ 258.889281][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 258.978936][T13295] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 258.994366][T13291] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 259.114231][T13301] tap0: tun_chr_ioctl cmd 1074025672 [ 259.119592][T13301] tap0: ignored: set checksum disabled [ 259.348973][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 259.376422][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 259.523748][T13322] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 259.653525][T13334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.955726][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 260.012599][T13343] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2178'. [ 260.881695][T13379] raw_sendmsg: syz.4.2192 forgot to set AF_INET. Fix it! [ 261.069183][T13387] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 261.294596][T13398] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 261.406531][T13398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.059231][T13440] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 263.207752][T13490] delete_channel: no stack [ 263.369998][T13499] netlink: 'syz.4.2223': attribute type 8 has an invalid length. [ 263.860298][T13521] __nla_validate_parse: 12 callbacks suppressed [ 263.860320][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 263.877039][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'. [ 264.025819][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 264.035069][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 264.186463][T13545] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2238'. [ 264.213503][T13545] vlan1: entered allmulticast mode [ 264.218792][T13545] veth0_vlan: entered allmulticast mode [ 264.239260][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2238'. [ 264.528550][T13563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2245'. [ 264.557949][T13563] unsupported nlmsg_type 40 [ 264.585884][T13570] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 264.727753][T13573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.747327][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2248'. [ 264.755279][T13573] bond3: (slave bond4): making interface the new active one [ 264.764489][T13573] bond3: (slave bond4): Enslaving as an active interface with an up link [ 264.774929][T13563] netlink: 'syz.2.2245': attribute type 4 has an invalid length. [ 264.784573][T13581] bond3: entered promiscuous mode [ 264.789658][T13581] bond4: entered promiscuous mode [ 264.803022][T13581] bond3: entered allmulticast mode [ 264.808196][T13581] bond4: entered allmulticast mode [ 264.814655][T13581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.066440][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2255'. [ 265.212379][T13603] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2257'. [ 265.264070][T13603] hsr_slave_0: left promiscuous mode [ 265.298821][T13603] hsr_slave_1: left promiscuous mode [ 265.403845][T13609] netlink: 'syz.1.2260': attribute type 1 has an invalid length. [ 265.511059][T13618] netlink: 'syz.0.2263': attribute type 10 has an invalid length. [ 265.737232][ T30] audit: type=1107 audit(1755252594.081:6): pid=13627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='`{D;)pa+501WPKNcGųk14= ]%~UJ4Dc]Ch3[]XUd@oLVts){j\Y)LJI"Μ$)C:kَNJSi' [ 265.790253][T13630] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 266.558537][T13665] netlink: 'syz.4.2277': attribute type 33 has an invalid length. [ 266.587309][T13665] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 266.794489][T13674] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 267.262825][T13693] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 267.524764][T13702] netlink: 'syz.1.2290': attribute type 15 has an invalid length. [ 267.925260][T13721] netlink: 'syz.1.2294': attribute type 8 has an invalid length. [ 267.952884][T13725] netlink: 'syz.1.2294': attribute type 8 has an invalid length. [ 268.979749][T13788] __nla_validate_parse: 15 callbacks suppressed [ 268.979774][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 269.031701][T13788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.075443][T13788] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2318'. [ 269.498436][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2325'. [ 269.672984][T13831] netlink: 'syz.1.2328': attribute type 11 has an invalid length. [ 269.738980][T13837] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2330'. [ 269.739550][T13831] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2328'. [ 269.951480][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 270.167751][T13865] netlink: 'syz.2.2337': attribute type 10 has an invalid length. [ 270.189476][T13864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.219153][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 270.812787][T13894] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 270.832207][T13892] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2344'. [ 270.888562][T13894] netlink: 'syz.4.2345': attribute type 10 has an invalid length. [ 270.903249][T13894] bond0: (slave wlan1): Opening slave failed [ 271.199062][T13919] ieee802154 phy0 wpan0: encryption failed: -90 [ 271.269624][T13925] IPVS: length: 255 != 8 [ 271.379370][T13928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.425497][T13928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2355'. [ 271.626137][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2357'. [ 271.806994][T13942] netlink: 'syz.2.2359': attribute type 6 has an invalid length. [ 271.866527][T13945] tipc: New replicast peer: 0.0.0.0 [ 271.886234][T13945] tipc: Enabled bearer , priority 10 [ 271.900796][T13946] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 271.918076][T13946] netlink: 'syz.4.2361': attribute type 1 has an invalid length. [ 271.940941][T13946] netlink: 'syz.4.2361': attribute type 2 has an invalid length. [ 271.976954][T13945] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 272.217501][T13959] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 272.400167][T13975] netlink: 'syz.1.2371': attribute type 39 has an invalid length. [ 272.721314][T13989] syzkaller1: entered promiscuous mode [ 272.726870][T13989] syzkaller1: entered allmulticast mode [ 273.259278][T14029] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 273.268037][T14029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.492595][T14039] netlink: 'syz.0.2391': attribute type 2 has an invalid length. [ 273.711158][T14052] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 273.880193][T14052] bond4: entered promiscuous mode [ 273.918011][T14052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.992055][T14058] lo speed is unknown, defaulting to 1000 [ 273.998139][T14071] __nla_validate_parse: 10 callbacks suppressed [ 273.998159][T14071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2397'. [ 274.058760][T14075] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2397'. [ 274.074259][T14076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2398'. [ 274.092964][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2397'. [ 274.306007][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'. [ 274.495391][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 274.591143][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2402'. [ 274.600166][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2402'. [ 274.712771][T14096] openvswitch: netlink: Key type 85 is out of range max 32 [ 274.791973][T14094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2403'. [ 274.982993][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2404'. [ 275.572097][T14134] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 275.991768][T14149] validate_nla: 4 callbacks suppressed [ 275.991786][T14149] netlink: 'syz.3.2416': attribute type 11 has an invalid length. [ 276.069185][T14145] syzkaller0: entered promiscuous mode [ 276.075403][T14145] syzkaller0: entered allmulticast mode [ 277.912650][T14185] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 277.935658][T14185] nbd: error processing sock list [ 277.959540][T14185] block nbd1: shutting down sockets [ 278.021109][T14197] openvswitch: netlink: IPv4 tun info is not correct [ 278.299241][T14211] bond0: entered promiscuous mode [ 278.314267][T14211] bond0: left promiscuous mode [ 278.385816][T14214] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 278.624116][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.749787][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.816866][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.828392][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.842935][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.902174][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.927809][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.972418][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.986298][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 278.999829][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.011678][T14227] __nla_validate_parse: 24 callbacks suppressed [ 279.011694][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.064810][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.085307][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'. [ 279.091739][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.116611][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.148216][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.179015][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.210396][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.265374][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 279.292467][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.304608][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.323226][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.334300][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.345599][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.357274][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.374498][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.394794][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 279.412428][T14269] lo speed is unknown, defaulting to 1000 [ 279.435691][T14227] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.517182][T14274] netlink: 'syz.1.2451': attribute type 1 has an invalid length. [ 279.525858][T14274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.617178][T14276] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 280.010021][T14294] tipc: Can't bind to reserved service type 2 [ 280.099059][T14299] netlink: 'syz.3.2460': attribute type 11 has an invalid length. [ 280.128325][T14299] netlink: 'syz.3.2460': attribute type 4 has an invalid length. [ 280.366645][T14309] netlink: 'syz.2.2463': attribute type 10 has an invalid length. [ 280.394974][T14309] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 280.433968][T14310] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 280.774680][T14331] IPVS: Scheduler module ip_vs_sip not found [ 280.989932][T14352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.166043][T14367] netlink: 'syz.4.2478': attribute type 13 has an invalid length. [ 281.308246][T14367] macvtap0: entered allmulticast mode [ 281.317763][T14367] macvtap0: refused to change device tx_queue_len [ 281.569217][T14390] netlink: 'syz.4.2486': attribute type 28 has an invalid length. [ 281.582572][T14390] netlink: 'syz.4.2486': attribute type 3 has an invalid length. [ 282.307367][T14421] sctp: [Deprecated]: syz.1.2496 (pid 14421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.307367][T14421] Use struct sctp_sack_info instead [ 282.508468][T14425] veth0_virt_wifi: renamed from vlan0 [ 283.196210][T14462] gretap0: entered promiscuous mode [ 283.237085][T14462] 0{X: renamed from gretap0 [ 283.251313][T14462] 0{X: left promiscuous mode [ 283.263912][T14462] 0{X: entered allmulticast mode [ 283.280218][T14462] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 283.315832][T14466] vlan0: entered allmulticast mode [ 283.322894][T14466] bridge5: port 1(vlan0) entered blocking state [ 283.329406][T14466] bridge5: port 1(vlan0) entered disabled state [ 283.338560][T14466] vlan0: entered promiscuous mode [ 283.370614][T14477] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6erspan0, syncid = 2, id = 0 [ 283.970629][T14504] bridge_slave_0: entered promiscuous mode [ 283.984429][T14504] sctp: [Deprecated]: syz.2.2522 (pid 14504) Use of int in max_burst socket option deprecated. [ 283.984429][T14504] Use struct sctp_assoc_value instead [ 284.077537][T14509] syzkaller1: entered promiscuous mode [ 284.083379][T14509] syzkaller1: entered allmulticast mode [ 284.809133][T14543] syzkaller1: entered promiscuous mode [ 284.816147][T14543] syzkaller1: entered allmulticast mode [ 285.138315][T14555] __nla_validate_parse: 21 callbacks suppressed [ 285.138337][T14555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2538'. [ 285.219443][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 285.536356][T14578] sctp: [Deprecated]: syz.0.2547 (pid 14578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.536356][T14578] Use struct sctp_sack_info instead [ 285.596003][T14578] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2547'. [ 285.661658][T14592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2547'. [ 285.681377][T14588] netlink: 'syz.4.2549': attribute type 2 has an invalid length. [ 285.690415][T14591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 285.719529][T14587] netlink: 'syz.4.2549': attribute type 2 has an invalid length. [ 285.745616][T14591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 286.092081][T14610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.106538][T14616] netlink: 'syz.0.2560': attribute type 1 has an invalid length. [ 286.109639][T14610] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.117040][T14616] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2560'. [ 286.139661][T14610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.190132][T14618] netlink: 'syz.0.2560': attribute type 1 has an invalid length. [ 286.203230][T14618] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2560'. [ 286.366140][T14631] netlink: 'syz.0.2564': attribute type 18 has an invalid length. [ 286.686953][T14653] openvswitch: netlink: Tunnel attr 16369 out of range max 16 [ 286.761611][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 286.781614][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'. [ 286.829883][T14661] netlink: 'syz.3.2572': attribute type 1 has an invalid length. [ 286.838605][T14661] netlink: 'syz.3.2572': attribute type 4 has an invalid length. [ 286.916324][T14668] netlink: 'syz.2.2576': attribute type 11 has an invalid length. [ 287.071230][T14674] netlink: 'syz.0.2577': attribute type 4 has an invalid length. [ 287.377845][T14688] netlink: 'syz.2.2583': attribute type 12 has an invalid length. [ 287.449569][T14694] lo speed is unknown, defaulting to 1000 [ 287.647073][T14706] lo: left allmulticast mode [ 287.674308][T14706] tunl0: entered promiscuous mode [ 287.693894][T14706] gre0: entered promiscuous mode [ 287.719597][T14706] gretap0: entered promiscuous mode [ 287.735487][T14706] erspan0: entered promiscuous mode [ 287.752342][T14706] ip_vti0: entered promiscuous mode [ 287.771815][T14706] ip6_vti0: entered promiscuous mode [ 287.802013][T14706] sit0: entered promiscuous mode [ 287.825858][T14706] ip6tnl0: entered promiscuous mode [ 287.840367][T14706] ip6gre0: entered promiscuous mode [ 287.870865][T14706] ip6gretap0: entered promiscuous mode [ 287.899546][T14706] bridge5: port 1(vlan0) entered disabled state [ 287.925266][T14706] bond0: entered promiscuous mode [ 287.934970][T14706] team0: entered promiscuous mode [ 287.947352][T14706] v: entered promiscuous mode [ 287.965673][T14706] nlmon0: entered promiscuous mode [ 287.985868][T14706] caif0: entered promiscuous mode [ 287.999981][T14706] batadv0: entered promiscuous mode [ 288.006290][T14706] veth0: entered promiscuous mode [ 288.012518][T14706] veth1: entered promiscuous mode [ 288.017863][T14706] wg0: entered promiscuous mode [ 288.023430][T14706] wg1: entered promiscuous mode [ 288.028633][T14706] wg2: entered promiscuous mode [ 288.034120][T14706] veth0_to_bridge: entered promiscuous mode [ 288.040343][T14706] bridge_slave_0: entered promiscuous mode [ 288.047483][T14706] veth1_to_bridge: entered promiscuous mode [ 288.054000][T14706] bridge_slave_1: entered promiscuous mode [ 288.060041][T14706] veth0_to_bond: entered promiscuous mode [ 288.066258][T14706] bond_slave_0: entered promiscuous mode [ 288.073560][T14706] veth1_to_bond: entered promiscuous mode [ 288.079585][T14706] bond_slave_1: entered promiscuous mode [ 288.086384][T14706] veth0_to_team: entered promiscuous mode [ 288.092811][T14706] team_slave_0: entered promiscuous mode [ 288.098683][T14706] veth1_to_team: entered promiscuous mode [ 288.105038][T14706] team_slave_1: entered promiscuous mode [ 288.111083][T14706] veth0_to_batadv: entered promiscuous mode [ 288.117259][T14706] batadv_slave_0: entered promiscuous mode [ 288.123424][T14706] : entered promiscuous mode [ 288.128355][T14706] batadv_slave_1: entered promiscuous mode [ 288.135119][T14706] xfrm0: entered promiscuous mode [ 288.140320][T14706] veth0_to_hsr: entered promiscuous mode [ 288.146393][T14706] veth1_to_hsr: entered promiscuous mode [ 288.152414][T14706] hsr0: entered promiscuous mode [ 288.157546][T14706] veth1_virt_wifi: entered promiscuous mode [ 288.164255][T14706] veth0_virt_wifi: entered promiscuous mode [ 288.170299][T14706] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 288.178247][T14706] vlan1: entered promiscuous mode [ 288.184222][T14706] macvlan0: left allmulticast mode [ 288.189501][T14706] macvlan1: entered promiscuous mode [ 288.195745][T14706] ipvlan0: entered promiscuous mode [ 288.202852][T14706] ipvlan1: entered promiscuous mode [ 288.218139][T14706] macvtap0: entered promiscuous mode [ 288.228772][T14706] macsec0: entered promiscuous mode [ 288.234582][T14706] geneve0: entered promiscuous mode [ 288.240055][T14706] geneve1: entered promiscuous mode [ 288.246111][T14706] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 288.255095][T14706] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 288.263130][T14706] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 288.271242][T14706] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 288.278893][T14706] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 288.286693][T14706] syztnl2: entered promiscuous mode [ 288.292316][T14706] syztnl0: entered promiscuous mode [ 288.297684][T14706] bond1: entered promiscuous mode [ 288.302962][T14706] gretap1: entered promiscuous mode [ 288.308285][T14706] vti0: entered promiscuous mode [ 288.314177][T14706] ip6tnl1: entered promiscuous mode [ 288.319535][T14706] sit1: entered promiscuous mode [ 288.324735][T14706] batadv1: entered promiscuous mode [ 288.330126][T14706] batadv2: entered promiscuous mode [ 288.335569][T14706] veth2: entered promiscuous mode [ 288.341506][T14706] veth3: entered promiscuous mode [ 288.346714][T14706] bridge1: entered promiscuous mode [ 288.352198][T14706] ip6erspan0: entered promiscuous mode [ 288.357792][T14706] mac80211_hwsim hwsim16 wlan2: entered promiscuous mode [ 288.365248][T14706] ip6gretap1: entered promiscuous mode [ 288.371596][T14706] geneve2: entered promiscuous mode [ 288.377468][T14706] ipip0: entered promiscuous mode [ 288.384802][T14706] veth4: entered promiscuous mode [ 288.390422][T14706] veth5: entered promiscuous mode [ 288.396627][T14706] ip6tnl2: entered promiscuous mode [ 288.409506][T14706] veth6: entered promiscuous mode [ 288.418832][T14706] veth7: entered promiscuous mode [ 288.426380][T14706] geneve3: entered promiscuous mode [ 288.440381][T14706] bond2: entered promiscuous mode [ 288.445838][T14706] bridge2: entered promiscuous mode [ 288.451283][T14706] vlan2: entered promiscuous mode [ 288.457259][T14706] bond3: entered promiscuous mode [ 288.464606][T14706] geneve4: entered promiscuous mode [ 288.474254][T14706] bridge3: entered promiscuous mode [ 288.487053][T14706] vxlan0: entered promiscuous mode [ 288.494265][T14706] bridge4: entered promiscuous mode [ 288.503721][T14706] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 288.511572][T14706] mac80211_hwsim hwsim22 wlan3: entered promiscuous mode [ 288.527172][T14706] bridge5: entered promiscuous mode [ 288.578727][T14717] pimreg: left allmulticast mode [ 288.597402][T14717] vlan1: left allmulticast mode [ 288.611436][T14717] veth0_vlan: left allmulticast mode [ 288.694487][T12865] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.710252][T12865] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.750969][T12865] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.787081][T12865] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 288.954155][T14736] openvswitch: netlink: Key type 79 is out of range max 32 [ 289.275105][T14752] syz_tun: left allmulticast mode [ 289.325833][T14752] syzkaller1: entered promiscuous mode [ 289.350930][T14752] syzkaller1: entered allmulticast mode [ 289.406560][T14756] netlink: 'syz.4.2603': attribute type 13 has an invalid length. [ 289.632533][T14771] netlink: 'syz.2.2608': attribute type 11 has an invalid length. [ 289.977287][T14780] tipc: Enabled bearer , priority 0 [ 289.987552][T14780] syzkaller0: entered promiscuous mode [ 289.994089][T14780] syzkaller0: entered allmulticast mode [ 290.005830][T14780] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 290.056764][T14780] tipc: Resetting bearer [ 290.111298][T14778] tipc: Resetting bearer [ 290.190064][T14778] tipc: Disabling bearer [ 290.270263][T14792] netlink: 'syz.2.2616': attribute type 3 has an invalid length. [ 290.472051][T14796] __nla_validate_parse: 13 callbacks suppressed [ 290.472072][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 290.504331][T14801] syzkaller0: entered allmulticast mode [ 290.546633][T14803] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2618'. [ 290.583546][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'. [ 290.629750][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'. [ 290.744641][T14805] bond0: (slave rose0): Error: Device can not be enslaved while up [ 290.762025][T14811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2624'. [ 290.776010][T14811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2624'. [ 290.999246][T14816] geneve0: entered promiscuous mode [ 291.043553][T14816] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.064918][T14816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.122708][ T7978] lo speed is unknown, defaulting to 1000 [ 291.128509][ T7978] syz0: Port: 1 Link ACTIVE [ 291.211829][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2630'. [ 291.247065][ T7970] lo speed is unknown, defaulting to 1000 [ 292.274450][T14898] syzkaller1: entered promiscuous mode [ 292.300591][T14898] syzkaller1: entered allmulticast mode [ 292.799222][T14932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.973600][T14940] netlink: 'syz.1.2666': attribute type 1 has an invalid length. [ 293.061695][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2668'. [ 293.736617][T14981] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2680'. [ 293.751262][T14982] netlink: 'syz.2.2681': attribute type 33 has an invalid length. [ 293.772516][T14982] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 293.790925][T14980] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2680'. [ 294.089784][T14999] tipc: Enabled bearer , priority 0 [ 294.126252][T14999] syzkaller0: entered promiscuous mode [ 294.150634][T14999] syzkaller0: entered allmulticast mode [ 294.223110][T14999] tipc: Resetting bearer [ 294.246446][T14997] tipc: Resetting bearer [ 294.307072][T14997] tipc: Disabling bearer [ 294.513006][T15020] netlink: 'syz.3.2693': attribute type 8 has an invalid length. [ 295.248160][T15074] netlink: 'syz.1.2710': attribute type 7 has an invalid length. [ 295.266326][T15074] netlink: 'syz.1.2710': attribute type 8 has an invalid length. [ 295.519761][T15082] __nla_validate_parse: 6 callbacks suppressed [ 295.519782][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 295.733756][T15092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.767303][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 295.795164][T15092] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 295.833782][T15092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.889941][T15098] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2722'. [ 296.028902][T15105] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 296.054407][T15105] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 296.553738][T15133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2735'. [ 296.597105][T15140] tipc: Enabled bearer , priority 0 [ 296.688598][T15140] tipc: Disabling bearer [ 296.842629][T15151] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 297.212843][T15178] netlink: 'syz.0.2746': attribute type 49 has an invalid length. [ 297.438491][T15190] syzkaller1: entered promiscuous mode [ 297.444270][T15190] syzkaller1: entered allmulticast mode [ 297.526082][T15196] netlink: 'syz.1.2752': attribute type 12 has an invalid length. [ 297.529784][T15197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2752'. [ 297.569763][T15196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2752'. [ 297.948700][T15224] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 298.102855][T15224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.138111][T15224] vlan4: entered allmulticast mode [ 298.149136][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.168741][T15224] bond5: (slave vlan4): Opening slave failed [ 298.194164][T15225] vlan4: entered allmulticast mode [ 298.201053][T15225] bond5: (slave vlan4): Opening slave failed [ 298.281523][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'. [ 298.310251][T15245] netlink: 'syz.0.2767': attribute type 11 has an invalid length. [ 298.938649][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 299.022588][T15280] netlink: 'syz.3.2779': attribute type 11 has an invalid length. [ 299.466832][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.474548][T15299] netlink: 'syz.4.2786': attribute type 1 has an invalid length. [ 299.485138][ T5877] syz_tun (unregistering): left allmulticast mode [ 299.491924][ T5877] syz_tun (unregistering): left promiscuous mode [ 299.492056][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.498554][T15299] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2786'. [ 299.515010][ T5877] bridge0: port 1(syz_tun) entered disabled state [ 299.522783][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.535420][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.544574][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.578209][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.586901][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.594646][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.605485][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.614117][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.713735][T15295] lo speed is unknown, defaulting to 1000 [ 300.100074][T12865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.135790][T12865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.832788][T15358] netlink: set zone limit has 8 unknown bytes [ 300.867317][T15359] rdma_rxe: rxe_newlink: failed to add lo [ 300.965433][T15360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.975465][T15360] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.990003][T15360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.131480][T15373] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 301.201931][T15373] bond5: entered promiscuous mode [ 301.207916][T15373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.282925][T15378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.293871][T15378] bond5: (slave bond6): making interface the new active one [ 301.301819][T15378] bond6: entered promiscuous mode [ 301.321045][T15378] bond5: (slave bond6): Enslaving as an active interface with an up link [ 301.359957][T15382] !: renamed from bond_slave_0 [ 301.701423][ T5874] Bluetooth: hci4: command tx timeout [ 301.730894][T15295] chnl_net:caif_netlink_parms(): no params data found [ 302.014210][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.029670][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.038000][T15295] bridge_slave_0: entered allmulticast mode [ 302.052414][T15295] bridge_slave_0: entered promiscuous mode [ 302.070034][T15411] ipvlan3: entered promiscuous mode [ 302.083201][T15411] bridge0: port 4(ipvlan3) entered blocking state [ 302.094108][T15411] bridge0: port 4(ipvlan3) entered disabled state [ 302.109265][T15411] ipvlan3: entered allmulticast mode [ 302.115848][T15411] bridge0: entered allmulticast mode [ 302.126493][T15411] ipvlan3: left allmulticast mode [ 302.133058][T15422] __nla_validate_parse: 3 callbacks suppressed [ 302.133076][T15422] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2818'. [ 302.150914][T15411] bridge0: left allmulticast mode [ 302.174033][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.181891][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.189440][T15295] bridge_slave_1: entered allmulticast mode [ 302.205095][T15295] bridge_slave_1: entered promiscuous mode [ 302.342177][T15295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.368751][T15295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.526919][T15449] netlink: 'syz.1.2826': attribute type 1 has an invalid length. [ 302.535399][T15449] netlink: 'syz.1.2826': attribute type 3 has an invalid length. [ 302.560401][T15295] team0: Port device team_slave_0 added [ 302.576128][T15295] team0: Port device team_slave_1 added [ 302.581421][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2820'. [ 302.584098][T15449] netlink: 'syz.1.2826': attribute type 235 has an invalid length. [ 302.696138][T15295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.712534][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.760885][T15295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.793847][T15295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.850130][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.921460][T15295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.004892][ T3025] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 303.029493][T15474] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 303.047090][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 303.098677][T15480] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2830'. [ 303.138406][T15295] hsr_slave_0: entered promiscuous mode [ 303.154553][T15295] hsr_slave_1: entered promiscuous mode [ 303.176005][T15295] debugfs: 'hsr0' already exists in 'hsr' [ 303.188736][T15295] Cannot create hsr debugfs directory [ 303.408927][T15485] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 303.419377][T15485] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 303.510080][T15508] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.2838'. [ 303.520219][T15514] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 303.528997][T15508] openvswitch: netlink: Message has 5 unknown bytes. [ 303.541342][T15521] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2839'. [ 303.583430][T15521] openvswitch: netlink: Duplicate or invalid key (type 0). [ 303.609240][T15521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.625941][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2840'. [ 303.781638][ T5874] Bluetooth: hci4: command tx timeout [ 303.963179][T15295] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.976699][ T5874] block nbd1: Receive control failed (result -32) [ 304.062869][T15544] tipc: Enabled bearer , priority 0 [ 304.071107][T15544] syzkaller0: entered promiscuous mode [ 304.076624][T15544] syzkaller0: entered allmulticast mode [ 304.132707][T15295] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.188700][T15544] tipc: Resetting bearer [ 304.236354][T15295] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.278328][T15548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2848'. [ 304.309265][T15543] tipc: Resetting bearer [ 304.360335][T15543] tipc: Disabling bearer [ 304.384394][T15295] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.448869][T15560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2852'. [ 304.505181][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2852'. [ 304.793076][T15295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.848701][T15295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.869522][T15295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 304.898772][T15295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.579337][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.618534][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.772959][T15520] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.780195][T15520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.839394][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.846651][ T7372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.869553][ T5874] Bluetooth: hci4: command tx timeout [ 306.386602][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.446802][T15295] veth0_vlan: entered promiscuous mode [ 306.478576][T15295] veth1_vlan: entered promiscuous mode [ 306.575332][T15295] veth0_macvtap: entered promiscuous mode [ 306.615892][T15295] veth1_macvtap: entered promiscuous mode [ 306.687616][T15671] IPv6: sit2: Disabled Multicast RS [ 306.710901][T15295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.775887][T15295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.868235][ T3562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.893769][ T3562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.924978][ T3562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.946098][ T3562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.977240][T15683] netlink: 'syz.1.2887': attribute type 8 has an invalid length. [ 307.037394][T15683] netlink: 'syz.1.2887': attribute type 8 has an invalid length. [ 307.141250][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 307.153391][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.178258][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.211187][T15695] __nla_validate_parse: 67 callbacks suppressed [ 307.211206][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2889'. [ 307.329165][T15700] netlink: 'syz.3.2892': attribute type 15 has an invalid length. [ 307.349963][T15520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.367046][T15520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.679315][T15707] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 307.710399][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2895'. [ 307.847155][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 307.944604][ T5874] Bluetooth: hci4: command tx timeout [ 308.076806][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 308.093837][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 308.281286][T15746] tipc: Enabled bearer , priority 0 [ 308.349345][T15738] tipc: Resetting bearer [ 308.465647][T15751] syzkaller0: entered promiscuous mode [ 308.471713][T15751] syzkaller0: entered allmulticast mode [ 308.493571][T15737] tipc: Resetting bearer [ 308.609345][T15737] tipc: Disabling bearer [ 308.679737][T15772] openvswitch: netlink: Message has 4 unknown bytes. [ 308.687443][T15772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.735300][T15765] pim6reg1: entered promiscuous mode [ 308.750723][T15765] pim6reg1: entered allmulticast mode [ 308.821934][T15778] netlink: 'syz.3.2908': attribute type 19 has an invalid length. [ 308.833464][T15776] netlink: 'syz.3.2908': attribute type 19 has an invalid length. [ 308.904952][T15783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2909'. [ 309.159493][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 309.240430][T15789] syzkaller0: entered promiscuous mode [ 309.270264][T15789] syzkaller0: entered allmulticast mode [ 309.278413][T15801] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2916'. [ 309.292996][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2916'. [ 309.344779][T15804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2917'. [ 311.140861][T15830] sctp: [Deprecated]: syz.4.2924 (pid 15830) Use of int in max_burst socket option. [ 311.140861][T15830] Use struct sctp_assoc_value instead [ 311.221673][T15837] sctp: [Deprecated]: syz.4.2924 (pid 15837) Use of int in max_burst socket option. [ 311.221673][T15837] Use struct sctp_assoc_value instead [ 311.450908][T15851] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.808544][T15883] tipc: Enabled bearer , priority 0 [ 311.816618][T15880] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 311.842115][T15886] tipc: Cannot configure node identity twice [ 311.931757][T15883] tipc: Disabling bearer [ 312.413121][T15908] __nla_validate_parse: 11 callbacks suppressed [ 312.413143][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 312.624052][T15908] bond1: (slave veth1): Releasing active interface [ 312.835485][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.848985][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.857635][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.866069][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.877038][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.929580][T15924] FAULT_INJECTION: forcing a failure. [ 312.929580][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 312.943950][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz.4.2949 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 312.943980][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.943997][T15924] Call Trace: [ 312.944006][T15924] [ 312.944015][T15924] dump_stack_lvl+0x189/0x250 [ 312.944054][T15924] ? __pfx____ratelimit+0x10/0x10 [ 312.944082][T15924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.944102][T15924] ? __pfx__printk+0x10/0x10 [ 312.944126][T15924] ? __might_fault+0xb0/0x130 [ 312.944159][T15924] should_fail_ex+0x414/0x560 [ 312.944186][T15924] _copy_from_iter+0x1db/0x16f0 [ 312.944207][T15924] ? rcu_is_watching+0x15/0xb0 [ 312.944225][T15924] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 312.944252][T15924] ? __pfx__copy_from_iter+0x10/0x10 [ 312.944273][T15924] ? __build_skb_around+0x257/0x3e0 [ 312.944307][T15924] ? netlink_sendmsg+0x642/0xb30 [ 312.944334][T15924] ? skb_put+0x11b/0x210 [ 312.944356][T15924] netlink_sendmsg+0x6b2/0xb30 [ 312.944395][T15924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.944429][T15924] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.944461][T15924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.944483][T15924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.944512][T15924] __sock_sendmsg+0x21c/0x270 [ 312.944542][T15924] ____sys_sendmsg+0x505/0x830 [ 312.944569][T15924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.944599][T15924] ? import_iovec+0x74/0xa0 [ 312.944626][T15924] ___sys_sendmsg+0x21f/0x2a0 [ 312.944648][T15924] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.944708][T15924] ? __fget_files+0x2a/0x420 [ 312.944724][T15924] ? __fget_files+0x3a0/0x420 [ 312.944753][T15924] __x64_sys_sendmsg+0x19b/0x260 [ 312.944777][T15924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.944803][T15924] ? __pfx_ksys_write+0x10/0x10 [ 312.944824][T15924] ? rcu_is_watching+0x15/0xb0 [ 312.944846][T15924] ? do_syscall_64+0xbe/0x3b0 [ 312.944875][T15924] do_syscall_64+0xfa/0x3b0 [ 312.944897][T15924] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.944929][T15924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.944946][T15924] ? clear_bhb_loop+0x60/0xb0 [ 312.944966][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.944982][T15924] RIP: 0033:0x7f0d3198ebe9 [ 312.945005][T15924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.945020][T15924] RSP: 002b:00007f0d327be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.945043][T15924] RAX: ffffffffffffffda RBX: 00007f0d31bb5fa0 RCX: 00007f0d3198ebe9 [ 312.945055][T15924] RDX: 0000000020005000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 312.945066][T15924] RBP: 00007f0d327be090 R08: 0000000000000000 R09: 0000000000000000 [ 312.945076][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.945085][T15924] R13: 00007f0d31bb6038 R14: 00007f0d31bb5fa0 R15: 00007ffce3f12268 [ 312.945113][T15924] [ 314.902343][ T5874] Bluetooth: hci3: command tx timeout [ 315.108787][T15944] netlink: 'syz.2.2953': attribute type 5 has an invalid length. [ 315.210261][T15950] syz.4.2955 uses old SIOCAX25GETINFO [ 315.245379][T15921] lo speed is unknown, defaulting to 1000 [ 315.397762][T15955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.460652][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 315.661057][T15969] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2961'. [ 315.687005][T15970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2961'. [ 315.872560][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 315.939365][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 316.119730][T15517] vlan0: left allmulticast mode [ 316.139388][T15517] bridge0: left allmulticast mode [ 316.173015][T15517] bridge5: port 1(vlan0) entered disabled state [ 316.981271][ T5874] Bluetooth: hci3: command tx timeout [ 317.126240][T15517] bond0 (unregistering): Released all slaves [ 317.231826][T15517] bond1 (unregistering): Released all slaves [ 317.248104][T15517] bond2 (unregistering): Released all slaves [ 317.355497][T15517] bond3 (unregistering): Released all slaves [ 317.385393][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.393575][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.474446][T15517] bond4 (unregistering): Released all slaves [ 317.488284][T15517] bond5 (unregistering): Released all slaves [ 317.527852][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 317.699197][T15517] tipc: Disabling bearer [ 317.704237][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2970'. [ 317.713544][T15517] tipc: Left network mode [ 318.068243][T15921] chnl_net:caif_netlink_parms(): no params data found [ 318.093576][T16027] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2975'. [ 318.134066][T16008] netlink: 'syz.0.2972': attribute type 10 has an invalid length. [ 318.186400][T16012] syzkaller1: entered promiscuous mode [ 318.200291][T16012] syzkaller1: entered allmulticast mode [ 318.231820][T16023] syz_tun: entered allmulticast mode [ 318.283597][T16008] veth1_macvtap: left promiscuous mode [ 318.298192][T16008] team0: Device veth1_macvtap failed to register rx_handler [ 318.356227][T16023] syz_tun: left allmulticast mode [ 318.361852][T16035] netlink: 'syz.4.2976': attribute type 22 has an invalid length. [ 318.386167][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 318.504579][T16044] netlink: 'syz.3.2980': attribute type 1 has an invalid length. [ 318.802740][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.823520][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.831880][T15921] bridge_slave_0: entered allmulticast mode [ 318.848139][T15921] bridge_slave_0: entered promiscuous mode [ 318.907421][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.941317][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.951411][T15921] bridge_slave_1: entered allmulticast mode [ 318.981724][T16073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2985'. [ 318.990680][T15921] bridge_slave_1: entered promiscuous mode [ 319.061445][ T5874] Bluetooth: hci3: command tx timeout [ 319.258341][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2988'. [ 319.408940][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.432906][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.466947][T16098] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.474845][T16098] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.606412][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 319.659464][T15921] team0: Port device team_slave_0 added [ 319.705874][T16110] vlan3: entered allmulticast mode [ 319.711695][T16110] bond0: entered allmulticast mode [ 319.716916][T16110] bond_slave_0: entered allmulticast mode [ 319.730089][T16110] bond_slave_1: entered allmulticast mode [ 319.736780][T16110] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 319.805429][T15921] team0: Port device team_slave_1 added [ 319.852260][T16107] lo speed is unknown, defaulting to 1000 [ 319.997075][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.028093][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.118000][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.157064][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.190541][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.298528][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.393268][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3002'. [ 320.445357][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3003'. [ 321.008361][T16156] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3010'. [ 321.144172][ T5874] Bluetooth: hci3: command tx timeout [ 321.710181][T15921] hsr_slave_0: entered promiscuous mode [ 321.759481][T15921] hsr_slave_1: entered promiscuous mode [ 321.782637][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 321.803365][T15921] Cannot create hsr debugfs directory [ 322.086530][T16170] erspan0: entered promiscuous mode [ 322.094159][T16170] erspan0: entered allmulticast mode [ 322.485467][ T3562] smc: removing ib device syz! [ 323.539029][T16213] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 323.773546][T16222] netlink: 'syz.0.3026': attribute type 1 has an invalid length. [ 323.790310][T15921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.862789][T15921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.915947][T15921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.956357][T15921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.260221][T16242] netlink: 'syz.0.3031': attribute type 10 has an invalid length. [ 324.386538][T15921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.425866][T16246] pim6reg1: entered promiscuous mode [ 324.462353][T16246] pim6reg1: entered allmulticast mode [ 324.506183][T16249] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 324.530289][T15921] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.566856][T15520] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.574101][T15520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.621746][T15501] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.628988][T15501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.715909][T16253] team0: Device vti0 is of different type [ 324.967681][T16259] __nla_validate_parse: 1 callbacks suppressed [ 324.967702][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 325.120127][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3035'. [ 325.573644][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 325.640811][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 325.718801][T15921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.792463][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3043'. [ 325.815030][T15921] veth0_vlan: entered promiscuous mode [ 325.883062][T16292] netlink: 'syz.0.3044': attribute type 32 has an invalid length. [ 325.931507][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 325.935871][T15921] veth1_vlan: entered promiscuous mode [ 326.009821][T16292] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 326.152990][T16297] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3045'. [ 326.194439][T15921] veth0_macvtap: entered promiscuous mode [ 326.206151][T15921] veth1_macvtap: entered promiscuous mode [ 326.275845][T15921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.311165][T15921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.422890][ T3562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.438654][T16301] netlink: 'syz.0.3047': attribute type 1 has an invalid length. [ 326.447641][ T3562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.497619][ T3562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.517278][ T3562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.541826][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 326.575958][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 326.604053][T16305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3049'. [ 326.702581][T16308] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 326.732486][T16317] lo speed is unknown, defaulting to 1000 [ 326.768084][T16308] ifb0: entered promiscuous mode [ 326.776661][T16308] ifb0: entered allmulticast mode [ 326.843811][T15524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.872884][T15524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.969249][T16335] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 326.985989][T15524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.990991][T16335] netlink: 'syz.2.3056': attribute type 4 has an invalid length. [ 327.007883][T15524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.258364][T16345] netlink: 'syz.1.2942': attribute type 2 has an invalid length. [ 327.489758][T16352] macsec0: entered promiscuous mode [ 327.530641][T16352] macsec0: entered allmulticast mode [ 327.561404][T16355] sit0: entered promiscuous mode [ 327.856445][T16360] netlink: 'syz.1.3064': attribute type 8 has an invalid length. [ 327.907632][T16360] netlink: 'syz.1.3064': attribute type 8 has an invalid length. [ 328.089628][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.110007][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.123556][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.137414][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.146969][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.418500][T16371] lo speed is unknown, defaulting to 1000 [ 328.703989][T16391] vlan0: entered promiscuous mode [ 328.906200][T16394] netlink: 'syz.1.3075': attribute type 7 has an invalid length. [ 328.929584][T16394] netlink: 'syz.1.3075': attribute type 8 has an invalid length. [ 329.025491][ T7970] IPVS: starting estimator thread 0... [ 329.030245][T16394] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 329.070397][T16402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.130617][T16400] IPVS: using max 27 ests per chain, 64800 per kthread [ 329.766661][T16371] chnl_net:caif_netlink_parms(): no params data found [ 329.798508][T16435] bridge0: port 3(syz_tun) entered blocking state [ 329.824899][T16435] bridge0: port 3(syz_tun) entered disabled state [ 329.837561][T16435] syz_tun: entered allmulticast mode [ 329.853934][T16435] syz_tun: entered promiscuous mode [ 329.859636][T16435] bridge0: port 3(syz_tun) entered blocking state [ 329.866756][T16435] bridge0: port 3(syz_tun) entered listening state [ 330.119940][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.139178][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.148615][T16371] bridge_slave_0: entered allmulticast mode [ 330.161989][T16371] bridge_slave_0: entered promiscuous mode [ 330.175471][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.183649][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.191690][T16371] bridge_slave_1: entered allmulticast mode [ 330.199677][T16371] bridge_slave_1: entered promiscuous mode [ 330.228432][T16452] batman_adv: batadv0: Adding interface: wlan1 [ 330.235650][T16452] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.238250][T16454] __nla_validate_parse: 12 callbacks suppressed [ 330.238271][T16454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3093'. [ 330.262021][ T5874] Bluetooth: hci5: command tx timeout [ 330.269418][T16454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3093'. [ 330.284747][T16452] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 330.344362][T16371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.365753][T16371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.454198][T16371] team0: Port device team_slave_0 added [ 330.488529][T16371] team0: Port device team_slave_1 added [ 330.664878][T16371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.691321][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.756259][T16371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.831349][T16371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.839647][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.868115][T16371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.891771][T16473] netlink: 'syz.0.3098': attribute type 10 has an invalid length. [ 331.072830][T16487] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 331.174846][T16371] hsr_slave_0: entered promiscuous mode [ 331.232422][T16371] hsr_slave_1: entered promiscuous mode [ 331.251672][T16371] debugfs: 'hsr0' already exists in 'hsr' [ 331.264300][T16371] Cannot create hsr debugfs directory [ 331.466592][T16509] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3112'. [ 331.626754][T16515] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3115'. [ 331.944813][ C0] bridge0: port 3(syz_tun) entered learning state [ 332.342898][ T5874] Bluetooth: hci5: command tx timeout [ 333.295975][T16523] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 333.433059][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'. [ 333.469318][T16523] bond6: entered promiscuous mode [ 333.477979][T16523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 333.601527][T16524] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 334.020998][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 334.027659][ C0] bridge0: topology change detected, propagating [ 334.289196][T16558] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3129'. [ 334.315403][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3129'. [ 334.327167][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3129'. [ 334.420658][ T5865] Bluetooth: hci5: command tx timeout [ 334.526452][T16371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.553236][T16371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.577471][T16371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.605307][T16371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.828347][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.889508][T16371] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.919195][T15516] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.926440][T15516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.946181][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.953428][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.990377][T16603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.155077][T16599] bond0: (slave bond_slave_1): Releasing backup interface [ 335.998864][T16371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.019114][T16656] netlink: 'syz.2.3155': attribute type 1 has an invalid length. [ 336.047432][T16656] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3155'. [ 336.075213][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 336.186158][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3159'. [ 336.205261][T16371] veth0_vlan: entered promiscuous mode [ 336.233565][T16668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.313226][T16371] veth1_vlan: entered promiscuous mode [ 336.407963][T16371] veth0_macvtap: entered promiscuous mode [ 336.474199][T16371] veth1_macvtap: entered promiscuous mode [ 336.502491][ T5865] Bluetooth: hci5: command 0x0419 tx timeout [ 336.516280][T16676] netlink: 'syz.2.3161': attribute type 26 has an invalid length. [ 336.538936][T16371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.585335][T16680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3163'. [ 336.612688][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 336.625480][T16371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.660334][T15516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.683641][T15516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.699091][T16683] netlink: 'syz.4.3164': attribute type 10 has an invalid length. [ 336.704812][T15516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.743109][T16683] bridge0: port 3(syz_tun) entered disabled state [ 336.759813][T16683] syz_tun: left allmulticast mode [ 336.765391][T16683] bridge0: port 3(syz_tun) entered disabled state [ 336.778322][T16683] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 336.791904][T15520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.801436][T16682] netlink: 'syz.1.3165': attribute type 2 has an invalid length. [ 337.176524][T15520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.206643][T15520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.296027][T15516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.309803][T15516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.356106][T16702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3171'. [ 337.585742][T16706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3171'. [ 337.661458][T16706] tipc: Invalid UDP bearer configuration [ 337.661519][T16706] tipc: Enabling of bearer rejected, failed to enable media [ 338.307605][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.323583][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.335846][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.361320][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.371392][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.448309][T16735] lo speed is unknown, defaulting to 1000 [ 338.581011][ T5865] Bluetooth: hci5: command 0x0419 tx timeout [ 339.527499][T16786] tipc: New replicast peer: 255.255.255.255 [ 339.536229][T16786] tipc: Enabled bearer , priority 10 [ 339.545798][T16789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.707387][T16788] lo speed is unknown, defaulting to 1000 [ 339.921761][T16804] netlink: 'syz.4.3201': attribute type 6 has an invalid length. [ 339.929574][T16804] netlink: 'syz.4.3201': attribute type 1 has an invalid length. [ 339.951151][T16804] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3201'. [ 339.960149][T16735] chnl_net:caif_netlink_parms(): no params data found [ 340.011097][T16806] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3202'. [ 340.154404][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 340.423304][ T5865] Bluetooth: hci0: command tx timeout [ 340.502339][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.511402][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.528940][T16735] bridge_slave_0: entered allmulticast mode [ 340.535078][ T5855] tipc: Node number set to 1 [ 340.542164][T16735] bridge_slave_0: entered promiscuous mode [ 340.559804][T16735] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.568612][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.576806][T16735] bridge_slave_1: entered allmulticast mode [ 340.586065][T16735] bridge_slave_1: entered promiscuous mode [ 340.703278][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.729310][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.796944][T16735] team0: Port device team_slave_0 added [ 340.807029][T16735] team0: Port device team_slave_1 added [ 340.841199][T16840] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 340.863835][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.891023][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.919341][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.952768][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.961210][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.989357][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.181637][T16735] hsr_slave_0: entered promiscuous mode [ 341.188441][T16735] hsr_slave_1: entered promiscuous mode [ 341.211681][T16735] debugfs: 'hsr0' already exists in 'hsr' [ 341.226202][T16735] Cannot create hsr debugfs directory [ 341.353835][T16855] netlink: 'syz.4.3218': attribute type 3 has an invalid length. [ 341.372285][T16855] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.3218'. [ 341.525266][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 341.698918][T16881] netlink: 'syz.3.3226': attribute type 1 has an invalid length. [ 342.455711][T16735] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.476255][T16735] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 342.517649][ T5865] Bluetooth: hci0: command tx timeout [ 342.802243][T16735] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.839906][T16735] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 342.984923][T16735] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.000270][T16735] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 343.078975][T16735] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.126715][T16735] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 343.387048][T16929] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3240'. [ 343.455436][T16735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.510696][T16735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.547346][T16735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.576143][T16735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.742184][T16951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3245'. [ 343.763743][T16952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.886739][T16735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.943233][T16735] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.967441][T15524] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.974703][T15524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.030208][T15524] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.037443][T15524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.185859][T16968] netlink: 'syz.2.3251': attribute type 2 has an invalid length. [ 344.214333][T16968] netlink: 143976 bytes leftover after parsing attributes in process `syz.2.3251'. [ 344.281514][T16968] nbd: must specify a device to reconfigure [ 344.317968][T16973] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 344.555878][T16981] tap0: tun_chr_ioctl cmd 1074025677 [ 344.565299][T16981] tap0: linktype set to 65535 [ 344.581527][ T5865] Bluetooth: hci0: command tx timeout [ 344.652118][T16989] GUP no longer grows the stack in syz.4.3259 (16989): 200000003000-20000000a000 (200000001000) [ 344.681590][T16735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.695153][T16989] CPU: 1 UID: 0 PID: 16989 Comm: syz.4.3259 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 344.695187][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.695200][T16989] Call Trace: [ 344.695208][T16989] [ 344.695219][T16989] dump_stack_lvl+0x189/0x250 [ 344.695255][T16989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.695281][T16989] ? __pfx__printk+0x10/0x10 [ 344.695308][T16989] ? find_vma+0xe7/0x160 [ 344.695335][T16989] ? __lock_acquire+0xab9/0xd20 [ 344.695381][T16989] __get_user_pages+0x24d0/0x2ce0 [ 344.695408][T16989] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 344.695469][T16989] ? rcu_is_watching+0x15/0xb0 [ 344.695498][T16989] __gup_longterm_locked+0xde9/0x1660 [ 344.695540][T16989] ? sanity_check_pinned_pages+0x123a/0x1300 [ 344.695577][T16989] gup_fast_fallback+0x1e6a/0x2010 [ 344.695642][T16989] ? __pfx_gup_fast_fallback+0x10/0x10 [ 344.695667][T16989] ? stack_trace_save+0x9c/0xe0 [ 344.695691][T16989] ? __pfx_stack_trace_save+0x10/0x10 [ 344.695729][T16989] ? pin_user_pages_fast+0x4d/0xb0 [ 344.695758][T16989] iov_iter_extract_pages+0x35a/0x5e0 [ 344.695793][T16989] extract_iter_to_sg+0xe46/0x24e0 [ 344.695846][T16989] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 344.695899][T16989] ? __asan_memset+0x22/0x50 [ 344.695927][T16989] af_alg_get_rsgl+0x436/0x810 [ 344.695974][T16989] aead_recvmsg+0x4cc/0x13f0 [ 344.696036][T16989] ? __pfx_aead_recvmsg+0x10/0x10 [ 344.696094][T16989] ? __sanitizer_cov_trace_pc+0x3c/0x70 [ 344.696124][T16989] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 344.696150][T16989] ? __pfx_aead_recvmsg+0x10/0x10 [ 344.696181][T16989] sock_recvmsg_nosec+0x183/0x1c0 [ 344.696215][T16989] ____sys_recvmsg+0x3aa/0x460 [ 344.696250][T16989] ? __pfx_____sys_recvmsg+0x10/0x10 [ 344.696293][T16989] ? import_iovec+0x74/0xa0 [ 344.696321][T16989] ___sys_recvmsg+0x1b5/0x510 [ 344.696352][T16989] ? __pfx____sys_recvmsg+0x10/0x10 [ 344.696415][T16989] ? __might_fault+0xb0/0x130 [ 344.696450][T16989] do_recvmmsg+0x307/0x770 [ 344.696484][T16989] ? __pfx_do_recvmmsg+0x10/0x10 [ 344.696505][T16989] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 344.696555][T16989] ? __pfx_do_futex+0x10/0x10 [ 344.696604][T16989] __x64_sys_recvmmsg+0x190/0x240 [ 344.696632][T16989] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 344.696653][T16989] ? rcu_is_watching+0x15/0xb0 [ 344.696681][T16989] ? do_syscall_64+0xbe/0x3b0 [ 344.696717][T16989] do_syscall_64+0xfa/0x3b0 [ 344.696746][T16989] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.696774][T16989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.696797][T16989] ? clear_bhb_loop+0x60/0xb0 [ 344.696823][T16989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.696844][T16989] RIP: 0033:0x7f0d3198ebe9 [ 344.696865][T16989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.696884][T16989] RSP: 002b:00007f0d327be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 344.696908][T16989] RAX: ffffffffffffffda RBX: 00007f0d31bb5fa0 RCX: 00007f0d3198ebe9 [ 344.696924][T16989] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a [ 344.696937][T16989] RBP: 00007f0d31a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 344.696950][T16989] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 344.696963][T16989] R13: 00007f0d31bb6038 R14: 00007f0d31bb5fa0 R15: 00007ffce3f12268 [ 344.697000][T16989] [ 344.778252][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028ac7c00: rx timeout, send abort [ 345.114025][T16735] veth0_vlan: entered promiscuous mode [ 345.170394][T16735] veth1_vlan: entered promiscuous mode [ 345.261025][T16735] veth0_macvtap: entered promiscuous mode [ 345.278399][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055ce2400: rx timeout, send abort [ 345.302884][T16735] veth1_macvtap: entered promiscuous mode [ 345.539234][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028ac7c00: abort rx timeout. Force session deactivation [ 345.786818][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055ce2400: abort rx timeout. Force session deactivation [ 345.830225][T16735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.877482][T16735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.951357][T15524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.961616][ T3562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.972863][T15501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.014096][T15501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.230505][T15501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.259952][T15501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.328482][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.348084][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.455427][T17045] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3275'. [ 346.541442][T17050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.661309][ T5865] Bluetooth: hci0: command tx timeout [ 346.719491][T17062] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 346.739397][T17062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3281'. [ 347.128128][T15516] ------------[ cut here ]------------ [ 347.134052][T15516] wlan0: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:01 on 5 GHz band [ 347.148860][T15516] WARNING: CPU: 0 PID: 15516 at net/mac80211/tx.c:752 ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.159039][T15516] Modules linked in: [ 347.163350][T15516] CPU: 0 UID: 0 PID: 15516 Comm: kworker/u8:24 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 347.175753][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.185894][T15516] Workqueue: events_unbound cfg80211_wiphy_work [ 347.192220][T15516] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.198697][T15516] Code: 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 13 ee c7 f6 43 8d 0c 76 83 c1 02 48 c7 c7 20 a3 b0 8c 48 89 de 4c 89 fa e8 5a 88 8b f6 90 <0f> 0b 90 90 41 bf 01 00 00 00 e9 eb 02 00 00 e8 a5 e9 c7 f6 e9 6a [ 347.218401][T15516] RSP: 0018:ffffc9001b99f3c0 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.224554][T15516] RAX: 61123fed9b05fb00 RBX: ffff88807c1b1738 RCX: ffff888051e13c00 [ 347.232625][T15516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 347.240674][T15516] RBP: ffffc9001b99f530 R08: 0000000000000003 R09: 0000000000000004 [ 347.248695][T15516] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 347.256744][T15516] R13: ffffc9001b99f6e8 R14: 0000000000000001 R15: ffff88805617b784 [ 347.264788][T15516] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 347.273795][T15516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.280416][T15516] CR2: 00007fb529d185b0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 347.288502][T15516] Call Trace: [ 347.291867][T15516] [ 347.294849][T15516] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 347.301027][T15516] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 347.307239][T15516] invoke_tx_handlers_late+0xb6/0x1820 [ 347.313683][T15516] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 347.319561][T15516] ieee80211_tx+0x2ac/0x420 [ 347.324161][T15516] ? __pfx_ieee80211_tx+0x10/0x10 [ 347.329267][T15516] ? ieee80211_xmit+0x315/0x400 [ 347.334238][T15516] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 347.340273][T15516] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 347.346199][T15516] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 347.352715][T15516] ieee80211_scan_state_send_probe+0x594/0xa00 [ 347.359046][T15516] ieee80211_scan_work+0x5a3/0x1c00 [ 347.364529][T15516] ? queue_work_on+0x1d7/0x270 [ 347.369414][T15516] cfg80211_wiphy_work+0x2bb/0x470 [ 347.374642][T15516] ? process_scheduled_works+0x9ef/0x17b0 [ 347.380415][T15516] process_scheduled_works+0xade/0x17b0 [ 347.386115][T15516] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.392207][T15516] worker_thread+0x8a0/0xda0 [ 347.396883][T15516] kthread+0x70e/0x8a0 [ 347.401037][T15516] ? __pfx_worker_thread+0x10/0x10 [ 347.406197][T15516] ? __pfx_kthread+0x10/0x10 [ 347.410891][T15516] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.416138][T15516] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.421472][T15516] ? __pfx_kthread+0x10/0x10 [ 347.426161][T15516] ret_from_fork+0x3f9/0x770 [ 347.430843][T15516] ? __pfx_ret_from_fork+0x10/0x10 [ 347.436034][T15516] ? __switch_to_asm+0x39/0x70 [ 347.440890][T15516] ? __switch_to_asm+0x33/0x70 [ 347.445697][T15516] ? __pfx_kthread+0x10/0x10 [ 347.450335][T15516] ret_from_fork_asm+0x1a/0x30 [ 347.455222][T15516] [ 347.458372][T15516] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.465726][T15516] CPU: 0 UID: 0 PID: 15516 Comm: kworker/u8:24 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 347.478079][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.488174][T15516] Workqueue: events_unbound cfg80211_wiphy_work [ 347.494490][T15516] Call Trace: [ 347.497818][T15516] [ 347.500780][T15516] dump_stack_lvl+0x99/0x250 [ 347.505410][T15516] ? __asan_memcpy+0x40/0x70 [ 347.510023][T15516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.515239][T15516] ? __pfx__printk+0x10/0x10 [ 347.519870][T15516] vpanic+0x281/0x750 [ 347.523885][T15516] ? __pfx__printk+0x10/0x10 [ 347.528513][T15516] ? __pfx_vpanic+0x10/0x10 [ 347.533056][T15516] ? is_bpf_text_address+0x26/0x2b0 [ 347.538291][T15516] panic+0xb9/0xc0 [ 347.542039][T15516] ? __pfx_panic+0x10/0x10 [ 347.546532][T15516] __warn+0x31b/0x4b0 [ 347.550535][T15516] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.556375][T15516] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.562206][T15516] report_bug+0x2be/0x4f0 [ 347.566558][T15516] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.572384][T15516] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.578221][T15516] ? ieee80211_tx_h_rate_ctrl+0xc89/0x1780 [ 347.584059][T15516] handle_bug+0x84/0x160 [ 347.588313][T15516] exc_invalid_op+0x1a/0x50 [ 347.592833][T15516] asm_exc_invalid_op+0x1a/0x20 [ 347.597699][T15516] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 347.604135][T15516] Code: 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 13 ee c7 f6 43 8d 0c 76 83 c1 02 48 c7 c7 20 a3 b0 8c 48 89 de 4c 89 fa e8 5a 88 8b f6 90 <0f> 0b 90 90 41 bf 01 00 00 00 e9 eb 02 00 00 e8 a5 e9 c7 f6 e9 6a [ 347.623754][T15516] RSP: 0018:ffffc9001b99f3c0 EFLAGS: 00010246 [ 347.629839][T15516] RAX: 61123fed9b05fb00 RBX: ffff88807c1b1738 RCX: ffff888051e13c00 [ 347.637823][T15516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 347.645816][T15516] RBP: ffffc9001b99f530 R08: 0000000000000003 R09: 0000000000000004 [ 347.653815][T15516] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 347.661806][T15516] R13: ffffc9001b99f6e8 R14: 0000000000000001 R15: ffff88805617b784 [ 347.669826][T15516] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 347.675926][T15516] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 347.682289][T15516] invoke_tx_handlers_late+0xb6/0x1820 [ 347.687916][T15516] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 347.693771][T15516] ieee80211_tx+0x2ac/0x420 [ 347.698308][T15516] ? __pfx_ieee80211_tx+0x10/0x10 [ 347.703367][T15516] ? ieee80211_xmit+0x315/0x400 [ 347.708239][T15516] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 347.714235][T15516] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 347.720076][T15516] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 347.726428][T15516] ieee80211_scan_state_send_probe+0x594/0xa00 [ 347.732627][T15516] ieee80211_scan_work+0x5a3/0x1c00 [ 347.737841][T15516] ? queue_work_on+0x1d7/0x270 [ 347.742642][T15516] cfg80211_wiphy_work+0x2bb/0x470 [ 347.747771][T15516] ? process_scheduled_works+0x9ef/0x17b0 [ 347.753529][T15516] process_scheduled_works+0xade/0x17b0 [ 347.759126][T15516] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.765145][T15516] worker_thread+0x8a0/0xda0 [ 347.769772][T15516] kthread+0x70e/0x8a0 [ 347.773860][T15516] ? __pfx_worker_thread+0x10/0x10 [ 347.778998][T15516] ? __pfx_kthread+0x10/0x10 [ 347.783705][T15516] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.788939][T15516] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.794159][T15516] ? __pfx_kthread+0x10/0x10 [ 347.798797][T15516] ret_from_fork+0x3f9/0x770 [ 347.803428][T15516] ? __pfx_ret_from_fork+0x10/0x10 [ 347.808588][T15516] ? __switch_to_asm+0x39/0x70 [ 347.813372][T15516] ? __switch_to_asm+0x33/0x70 [ 347.818268][T15516] ? __pfx_kthread+0x10/0x10 [ 347.822886][T15516] ret_from_fork_asm+0x1a/0x30 [ 347.827680][T15516] [ 347.831047][T15516] Kernel Offset: disabled [ 347.835380][T15516] Rebooting in 86400 seconds..