last executing test programs: 5.403590242s ago: executing program 1 (id=9812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005", 0x2b}], 0x1}, 0x48000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/115, 0x73}], 0x2, &(0x7f0000000540)=""/1, 0x1}, 0x20000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000480)="c8858b0407fc12a9be2eddb2", 0xc}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x1, 0x40) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0xba1235f172b778a4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$inet6_udp_int(r6, 0x11, 0x69, &(0x7f00000005c0), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xd, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r8, 0x0, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x810) 5.178579294s ago: executing program 1 (id=9816): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) 5.016009394s ago: executing program 1 (id=9818): syz_emit_ethernet(0x96, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x60, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x7, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'vlan0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7fe70b975e53be4d1721efcaf680db241356dd060ecea4dd34db078646011c5b234abf4de0ded7221efdb50d7b1bc08e824e2567b886bcbfa4b1d980af47cb2d7dbdcf42046f7ad24c9600df30bcc2404558e595b8d91648eb0e0b384c96f1764e319d22d1e018b9e961f30251fad647256c04ad2360128e659d51947d6c596733", @ANYRES16=r3, @ANYBLOB="5d4524bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005004601000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) syz_emit_ethernet(0x96, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x60, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x7, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"}]}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) (async) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'vlan0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7fe70b975e53be4d1721efcaf680db241356dd060ecea4dd34db078646011c5b234abf4de0ded7221efdb50d7b1bc08e824e2567b886bcbfa4b1d980af47cb2d7dbdcf42046f7ad24c9600df30bcc2404558e595b8d91648eb0e0b384c96f1764e319d22d1e018b9e961f30251fad647256c04ad2360128e659d51947d6c596733", @ANYRES16=r3, @ANYBLOB="5d4524bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005004601000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) 4.845124807s ago: executing program 1 (id=9821): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000140)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000180), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x3, 0xff, 0x106, 0x81, r3, 0xfffffffc, '\x00', r4, r1, 0x1, 0x0, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000340)={0x0, 'dummy0\x00', {0x4}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x891c, &(0x7f00000003c0)={'veth1_to_batadv\x00', @ifru_addrs=@can={0x1d, r6}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001580)={&(0x7f0000000400)="95b9b7da8a7ac9de4b80bc227ab81b1bd761576434cca615f0c47a74d8a9043b00be9665f3d71cc5b89bcbbc069c23fbda5563814d2bc0c9473b12b44b8a052c5b0ac50de35d009062c2102abf337f1ebe4c7d1f44d82ab89c0838101afaf21b88d08126045600f2216978e8a516fd2e59921bec7ac26b58b7cf3b26dc24ab5fd911ac282edaa72c47a30dc312bfc51a1fcdf1cf6628d3dfa6e04684efe4e454f58793355610ea1f4eae660b5c979c3fd12d6dc688075676cfea17ad8edf76ae103fd673116c9a57e8f174244b2b82657df75dbccc1ea3d11e2dc1d1d9a125e09dcb6f3c1dfc1b45e2c569fed8b380f486a4d90b48fda3", &(0x7f0000000500)=""/47, &(0x7f0000000540)="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", &(0x7f0000001540)="a748a23a0ef22faab85ca1a41f5943da4235f17111f31f29ee8a69", 0xfffffe00}, 0x38) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f00000015c0)={0x9, 0xa7}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r7, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x2ab943186246481d) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000001700)={0x18, 0x0, {0x0, @multicast, 'gre0\x00'}}, 0x1e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x18, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4004850) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @broadcast}, 0x0, 0x2, 0x3, 0x3}}, 0x26) r12 = gettid() ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000018c0)=r12) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000001900)) r13 = accept4$x25(r0, &(0x7f0000001940), &(0x7f0000001980)=0x12, 0x80800) recvfrom$x25(r13, &(0x7f00000019c0)=""/46, 0x2e, 0x40002160, &(0x7f0000001a00), 0x12) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.708263516s ago: executing program 3 (id=9822): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x78}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000140)=0x8001) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) (async) listen(r3, 0x21) r5 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0xbef}}}, &(0x7f00000000c0)=0x84) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="e3a222d9ea29a90a8e09584a2e9d5ccc71", 0x11}], 0x1}}], 0x1, 0x800) read$alg(r7, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r7, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9, 0x9}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 2.925206763s ago: executing program 1 (id=9824): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000840)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0x6, {{0x0, 0x7ff}, {0x40, 0x7ff, 0x3, 0x4, 0x2, 0x69}}}, 0x14) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) close(0x4) 2.876229747s ago: executing program 3 (id=9827): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x188, 0x30, 0xb, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x6a00}, [{0x174, 0x1, [@m_mirred={0x170, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x4}, 0x1, r2}}]}, {0x123, 0xa, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x188}}, 0x81) 2.728638035s ago: executing program 1 (id=9829): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.725519425s ago: executing program 3 (id=9830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r1, 0xe44a0000) close(r1) write$cgroup_freezer_state(r1, &(0x7f0000000000)='FREEZING\x00', 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) 1.827132121s ago: executing program 3 (id=9844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001200210211c619cb815da8937c884fbfb599705d8bea8b467071abe19eb5d2ec"], 0x38}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000100100010080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002000e7ffffffffffffff000000efff0092cf00262de9"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="1791613d45501cb6a8d8ad34b8c528b9b2209f051e427e309b714d3d12d8d401ee42a6819690e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db134dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b1160000000046d54c19d053605f35", 0xffffffffffffffcd}], 0x1}}], 0x2, 0xc015) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0x11, &(0x7f0000002400)=ANY=[@ANYBLOB="1800000047bb0000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x6, 0xf4, &(0x7f0000002200)=""/244, 0x41100, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001c00)=[r2], &(0x7f0000002300)=[{0x0, 0x4, 0xd, 0x4}, {0x4, 0x2, 0x1, 0x6}, {0x5, 0x4, 0x5, 0x6}, {0x4, 0x1, 0xa, 0xc}], 0x10, 0x8}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@empty, @multicast1, 0x0, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x6}, 0x3c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000001cc0)={'gretap0\x00', 0x0, 0xa17f6bdb1a263826, 0x40, 0x1, 0x5, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x43, 0x1, [{0x2, 0x11, "69729470c1e62b664203ac48abde69"}, {0x2, 0xa, "bdf34918cc70063a"}, {0x5, 0xe, "71a7d76a1e77f408ef4645c0"}, {0x6, 0xf, "497b0490a46f7ae72fc86fa40f"}, {0x7, 0x5, "0ad96a"}]}, @ssrr={0x89, 0x7, 0xf0, [@remote]}, @timestamp_prespec={0x44, 0x1c, 0xa0, 0x3, 0x7, [{@remote, 0x8b}, {@local, 0x8}, {@multicast2, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x33}}]}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0xd, [{@private=0xa010102}, {@rand_addr=0x64010102, 0x2}]}, @generic={0x83, 0xd, "03488a21daa6e861a93821"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0xb, 0x4, 0xffffffff, 0x60, @empty, @empty, 0x8, 0x10, 0x1ff, 0x3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0), 0x0, 0xa9, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000a80), 0x8, 0x163, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001c40)={0x0, @broadcast, @initdev}, &(0x7f0000001c80)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000002040)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r10, @ANYBLOB="00012dbd7000fddbdf250200000008000400010000004800018008000700", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="1f69c39e", @ANYRES32=r9, @ANYBLOB="c6face9e3df9daef9c8972e4b3fe72132b8dfbb2f84d0441b27da1c1fe4b330f2d149712b52ba984ec2782d5398f966d8580eb09e7e823b5303ce6ab7f82433790fdd9715b8d838e224014a118d2f5218615f9ea10c97f3b16a941970a301a7862a0c8c77882577b2a8c8ccd6701e2826cf13c7bcd77e941f6b74eebcc2e60cb2224c42b3a2b28d1fe4110abed152b2fe86c0948cdbed73b8862cfcf28c3fbcbc943a98003dc32540e22cae9f406f14b9f437dfccfb20d9c6aa7402a8ec1aab70bb15cc3e6dc3f26c3e8ecd82e52cfdd3dfcccf75238f140026f31bff77de649c385b68f42b705370fc5eeaf4fa12bba1bfe42ed0f", @ANYRES32, @ANYBLOB="060001000a00000008000300070000002c000180020000000000000008000700", @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0c000180080006000200000024000680060001000a000000080003006401010208000700", @ANYRES32=r10, @ANYBLOB="0800b8f0", @ANYRES32=r11, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.737164455s ago: executing program 2 (id=9845): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) socketpair(0x1, 0x3, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8"], 0x2a8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.610233186s ago: executing program 2 (id=9848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020afcff0000000000000000020000000900010073797a3000000000140000001900010000000000000000000000000a"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.516870182s ago: executing program 2 (id=9851): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140d, 0x8, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x810) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x9f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28004ecad05e010025bd7000f9dbdf81acea54f3", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) readv(r7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x332, 0x0, 0x2, 0x9a, 0x6, 0x101, 0x834e, 0x6, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf25180000000500050001000000600001801400020076657468305f6d616376746170000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000200726f73653000000000000000000000001400020076657468315f746f5f62726964676500050005ba00000000a800028008000200040000009200050047a2ef1f4664bec7a109c64c74997e8612d92c2900a7a431454f23c295738929d4cf1f62b5629e403ac7f96c93f3b5a09be4401430f34487c2e5dd2a702ca77e8c8691e178570a05a45e3c2f32cb61f2291b3d54dec0ac9eb84d4b4f0741d2f683cb0cb51fdc1e2bd8c11717cc74ab39de79decb8a27c4957ee441219f0b58f935695be70ceb03692db4195ca7f0000008000200ff000000050006000000000008000700080000000800070002000000050006000000000005000600000000000800070000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8}, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e25, 0xc3, @local, 0x1}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, &(0x7f0000000200)) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.448666976s ago: executing program 0 (id=9853): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775a16916a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.431725721s ago: executing program 2 (id=9854): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x1, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x3dc2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e23, 0x9, @mcast2}}, 0x5, 0x4}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES8=r0], 0x84}, 0x1, 0x0, 0x0, 0x4008851}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x20}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000018014000200776c616e30000000000000000000000008000a001f000000000000000000ca3341c1e5721369201caa260c05c5c6710000ce36647549cc2e3f24a3288bb566a3e5ad154d904f5c0a117fec48d22f8e563d908abfb2346fa69cf247862ad95a9a4fffeb846ca5a376c74f568cc6b2df4c181ed648f1e3ddde69c59b0a9315f7bb081b7741bb89aa70fa500a505fd25110f4afe21c13f490ee89ba062da75d2f4acd15a2ac7f8ef1f53843454201a76dc2e5ca3542f48bf0cae57bf9bfdb2fd8"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)={r4, 0x15, 0x2, [0x74f0, 0x9]}, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x18, 0x1412, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 1.39627355s ago: executing program 0 (id=9855): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) getsockname$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800010000000000f30000000a0000000400000008000500", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, &(0x7f00000001c0)=0x61) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6}, 0x18) r8 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="75543a82030801027a0000000000000040000000040004390500030006000000"], 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x2}, 0x8) socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000000c0)={0x8001, 0x7, 0x206, 0x9, 0x2, 0xd10, 0x6, 0xd9, r5}, 0x20) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r12 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r12, 0x29, 0x17, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 1.117101413s ago: executing program 4 (id=9859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x24}}, 0x0) (async) 1.11613745s ago: executing program 4 (id=9860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4044) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) sendmmsg(r0, &(0x7f0000003ac0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x45, "c092006a7f05e34c27936460df220dc182058ea3f4959a9bbef3a660a56259eb47279e4a0aa5f68dc077f37f4197fa2368954e687d945e47cf851b4985a505167775ec3f9c"}, &(0x7f00000001c0)=0x4d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e24, @loopback}}, 0x7ff, 0xfeff}, 0x90) 1.003605442s ago: executing program 4 (id=9861): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYBLOB="19cdb2c455b2564a7d43de579128e072f4f0b7008b1e9cfaee1bf6a6c9a2d91dd69085dd8dc355bea60ece52fbc03ef29a24e69d9584516f3a94d0d75ecbab4432bd5ae06f0383084f72b52c8c74bc8428bae5a00d548289dc539aadd32242b849ab416a37942445284aac728e1d450e8d6974ba86d370da8d8c4169a244829101af7e01cb2f38c22779358037e17ab3", @ANYBLOB="7a6bdb9b066b3bc5fe2988204d9a3c5060e9d82379cdd67f9ec272255a8cadc329aa8194a39c260d772b9d3466d009dcedf4a65d7cde257f8e54080733e8dd17e471637aca48c753cb22acf5bea20637105135e7dda5075a0b18b049ba64fb6db06e138fde1e6a97bd0d7bae88aff65aa17207fd8859dad21a3cbed4203ca5ca18b5d3c1d0edb9e95bcaf02e113bced032505d01437da5d59b66d7c4705dcb753abbf5ce3cfca599e5c09626388588403d4c3502a6be17220038027209bb208c07599c4496710cde673a9f692c76cc5042d814a284c8c1db7b5ecfc136ba5e15f12f63e8115235d3aed95049c8de161e", @ANYRES8=r0, @ANYRESOCT, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc081) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 969.713944ms ago: executing program 4 (id=9862): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x7c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x80c0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r2, &(0x7f0000000000)=""/123, 0x7b, 0x101, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 937.134518ms ago: executing program 3 (id=9863): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0020000000000000000000ffe600000000000000000000be2a3b6500"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="984bb480", 0x4, 0x4004000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) 885.172419ms ago: executing program 4 (id=9864): r0 = socket$kcm(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) 873.637806ms ago: executing program 3 (id=9865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x10003, @loopback, 0x9}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x618e, 0x0) shutdown(r0, 0x1) listen(r0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r2, 0x3, 0x0, 0x5}, 0x50) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x3, 0x0, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 845.055024ms ago: executing program 4 (id=9866): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b00000006000000000000080000000e060000000000000c03000000000000000400000d0002000000000000000040000efaffffff00008f0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001800", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 729.086022ms ago: executing program 0 (id=9868): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x3, 0x8}) 539.110746ms ago: executing program 0 (id=9869): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$netlink(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x10c0}, {&(0x7f0000001440)={0x200, 0x34, 0x10, 0x70bd2a, 0x25dfdbff, "", [@nested={0x1ef, 0x12a, 0x0, 0x1, [@generic="729bb436c121d9471c72b49d9318b9e9ed65a45f8794f7a32cbd359f3e16edd1fede94ebd010c172644985bf89d47410af9384061d05e3fa49c6c5ccf19ec0dac401f43a5b5c8f1d5ef63e4cd1475a22c6932c55bad2ca6a76b88cf5d326db8bc78fa30e77aa954eeb39d55e24835daa3e479c78d559459310a583448c24d353cd", @generic="e91b3ae52995d03732620db519ae5949169328a744ffb3152b363f1234ec2c543e75948def8ee40b03918163a2e262eb095585a60ae99288fe337689fdea125547dffb14d32e3fef992c314c1133e56edda074d89317c92a8d8643d94d550c7abdc97c704ada09c92b225aff92f5ca47064e4046a28fad6b973d41883351e8292828440d355db85267d4d78a98d13a8af441abd894a07806563b3a94b8ed11a888a81a67bf7437f567177b10124025f8916c343e251d2e66ad544ac22ebbbf027f29dfaacbb1dfbfaf5a3edbabb5a7efa43559261dfd09846be17f4710416b72f284c45d7f0f78c3", @nested={0x4, 0x72}, @generic="82d3c0ed70ec634315c2ba2961a62c6be5332844b550eac0c6e8faabbe9ae34117d48162", @generic="555da4449d70b04e1a7dba7c4675524899bfb4c67edf9045a8c97f189e64a461112e97bcdf106117236193c01aefc91ab23c0306ec3822a94f608b38ace06800d2a7da3ba7c1544b7e4db89a99f08b2352406fcacf8ddfad358d"]}]}, 0x200}], 0x2, 0x0, 0x0, 0x4008841}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendto$isdn(r1, &(0x7f0000000000)={0xffffffff, 0x9a, "e11377caf5d3cc08ca1192354a0199cbcc45a8d6c9d99e1e0d91d99fce695d05ecf167415c734a0ed3b8"}, 0x32, 0x4001, &(0x7f0000000040)={0x22, 0xf, 0x0, 0x1, 0x1}, 0x6) 345.384873ms ago: executing program 2 (id=9870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100009fe400d00000003a0000000800030080459fd46759df434d967187aa0fe28e6d7008612de4a0750a538c3ae247b39bc1cb35cb2d761b59da0c507c741693335bd0992c9a6da44dbfeb123e015343eb75d410dfde1bcc2b3b842e4e0244d560ed577928ef7cfb129512d52fccbff9f0d4c7bb7de0c7edb23924f64827b73ab740a5b8f03161a6dea2173cbb92731a61e1efd45c21260b6a710dd87cfa7ddf3ae32226f2413769c2d8eac24973e41cbcc25801d3ac0851593ee03a7b02a997", @ANYRES32=r2, @ANYBLOB="05005b0016000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'k'}]}, 0x24}}, 0x0) 160.265726ms ago: executing program 0 (id=9871): r0 = socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x4a4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x474, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0xfffffffe, 0x15, 0xd, 0x8, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x11, 0xfc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x4a4}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) (async) listen(r1, 0x4) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(r1) (async) r9 = socket(0x8000000010, 0x2, 0x0) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r10, 0x6, 0x5, &(0x7f0000000000), 0x4) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r11) (async) socket(0x10, 0x803, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) (async) write(r9, &(0x7f00000002c0)="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", 0xfc) 64.42574ms ago: executing program 2 (id=9872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="1922000004090204000000000000000062726964676500000c0002800500240001000000"], 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf7a, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r7, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r6, @ANYRESHEX=r2, @ANYRES8=r2], 0x48) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2060, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f00000004c0)='macvlan0\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="020028bd0c00fbdbdf2503ffffffff000000000000008fe2fd80614d2629d8653312b4681c38efc4fee6c662f823a43a95a840f9041ae78b46b74dc7d96098de0dee3e1e91baf64929ca"], 0x1c}, 0x1, 0x0, 0x0, 0x40410}, 0x20000800) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) 0s ago: executing program 0 (id=9873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001200210211c619cb815da8937c884fbfb599705d8bea8b467071abe19eb5d2ec"], 0x38}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000100100010080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002000e7ffffffffffffff000000efff0092cf00262de9"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="1791613d45501cb6a8d8ad34b8c528b9b2209f051e427e309b714d3d12d8d401ee42a6819690e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db134dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b1160000000046d54c19d053605f35", 0xffffffffffffffcd}], 0x1}}], 0x2, 0xc015) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x18, 0x11, &(0x7f0000002400)=ANY=[@ANYBLOB="1800000047bb0000000000000100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x6, 0xf4, &(0x7f0000002200)=""/244, 0x41100, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001c00)=[r2], &(0x7f0000002300)=[{0x0, 0x4, 0xd, 0x4}, {0x4, 0x2, 0x1, 0x6}, {0x5, 0x4, 0x5, 0x6}, {0x4, 0x1, 0xa, 0xc}], 0x10, 0x8}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@empty, @multicast1, 0x0, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x6}, 0x3c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000001cc0)={'gretap0\x00', 0x0, 0xa17f6bdb1a263826, 0x40, 0x1, 0x5, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x43, 0x1, [{0x2, 0x11, "69729470c1e62b664203ac48abde69"}, {0x2, 0xa, "bdf34918cc70063a"}, {0x5, 0xe, "71a7d76a1e77f408ef4645c0"}, {0x6, 0xf, "497b0490a46f7ae72fc86fa40f"}, {0x7, 0x5, "0ad96a"}]}, @ssrr={0x89, 0x7, 0xf0, [@remote]}, @timestamp_prespec={0x44, 0x1c, 0xa0, 0x3, 0x7, [{@remote, 0x8b}, {@local, 0x8}, {@multicast2, 0x4}]}, @timestamp_addr={0x44, 0xc, 0x38, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x33}}]}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0xd, [{@private=0xa010102}, {@rand_addr=0x64010102, 0x2}]}, @generic={0x83, 0xd, "03488a21daa6e861a93821"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0xb, 0x4, 0xffffffff, 0x60, @empty, @empty, 0x8, 0x10, 0x1ff, 0x3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0), 0x0, 0xa9, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000a80), 0x8, 0x163, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001c40)={0x0, @broadcast, @initdev}, &(0x7f0000001c80)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000002040)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r10, @ANYBLOB="00012dbd7000fddbdf250200000008000400010000004800018008000700", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="1f69c39e", @ANYRES32=r9, @ANYBLOB="c6face9e3df9daef9c8972e4b3fe72132b8dfbb2f84d0441b27da1c1fe4b330f2d149712b52ba984ec2782d5398f966d8580eb09e7e823b5303ce6ab7f82433790fdd9715b8d838e224014a118d2f5218615f9ea10c97f3b16a941970a301a7862a0c8c77882577b2a8c8ccd6701e2826cf13c7bcd77e941f6b74eebcc2e60cb2224c42b3a2b28d1fe4110abed152b2fe86c0948cdbed73b8862cfcf28c3fbcbc943a98003dc32540e22cae9f406f14b9f437dfccfb20d9c6aa7402a8ec1aab70bb15cc3e6dc3f26c3e8ecd82e52cfdd3dfcccf75238f140026f31bff77de649c385b68f42b705370fc5eeaf4fa12bba1bfe42ed0f", @ANYRES32, @ANYBLOB="060001000a00000008000300070000002c000180020000000000000008000700", @ANYRESDEC, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0c000180080006000200000024000680060001000a000000080003006401010208000700", @ANYRES32=r10, @ANYBLOB="0800b8f0", @ANYRES32=r11, @ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) kernel console output (not intermixed with test programs): uld be TCP or UNIX. [ 753.942960][ T2890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8459'. [ 754.503820][ T2919] bond6: entered promiscuous mode [ 754.513668][ T2919] bond6: entered allmulticast mode [ 754.520030][ T2919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 754.620823][ T2933] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8474'. [ 754.800875][ T2950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8477'. [ 754.928349][ T2956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8481'. [ 754.943734][ T2959] IPv6: NLM_F_REPLACE set, but no existing node found! [ 755.179087][ T2974] tipc: Enabling of bearer rejected, failed to enable media [ 755.275963][ T2984] netlink: 4112 bytes leftover after parsing attributes in process `syz.2.8489'. [ 755.324572][ T2986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8490'. [ 755.345405][ T2988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8491'. [ 755.386606][ T2988] syzkaller1: entered promiscuous mode [ 755.393345][ T2988] syzkaller1: entered allmulticast mode [ 755.544091][ T2994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8495'. [ 755.691387][ T2999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8496'. [ 755.708258][ T3003] syzkaller0: entered promiscuous mode [ 755.714333][ T3003] syzkaller0: entered allmulticast mode [ 755.733306][ T3001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.020596][ T3025] netlink: 'syz.1.8504': attribute type 3 has an invalid length. [ 756.216229][ T3031] bond6: option miimon: invalid value (18446744073709551585) [ 756.224236][ T3031] bond6: option miimon: allowed values 0 - 2147483647 [ 756.235853][ T3031] bond6 (unregistering): Released all slaves [ 756.371891][ T3048] netlink: 'syz.4.8513': attribute type 1 has an invalid length. [ 756.383708][ T3051] net_ratelimit: 21 callbacks suppressed [ 756.383726][ T3051] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 756.451455][ T3057] netlink: 'syz.0.8516': attribute type 1 has an invalid length. [ 756.469084][ T3048] bond2: entered promiscuous mode [ 756.475453][ T3048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.510972][ T3058] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 756.528809][ T3058] bond6 (unregistering): Released all slaves [ 756.564722][ T3048] bond2: (slave bridge3): making interface the new active one [ 756.582949][ T3048] bridge3: entered promiscuous mode [ 756.610771][ T3048] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 756.645316][ T3066] vlan1: entered promiscuous mode [ 756.669864][ T3066] vlan1: entered allmulticast mode [ 756.675033][ T3066] hsr_slave_1: entered allmulticast mode [ 756.691183][ T3066] netlink: 'syz.0.8518': attribute type 3 has an invalid length. [ 756.716612][ T3070] tipc: Enabled bearer , priority 10 [ 757.825850][ T3128] netlink: 'syz.3.8541': attribute type 9 has an invalid length. [ 757.966134][ T3149] netlink: 'syz.0.8545': attribute type 10 has an invalid length. [ 758.548882][ T3196] veth0: entered promiscuous mode [ 758.821859][ T3223] __nla_validate_parse: 21 callbacks suppressed [ 758.821877][ T3223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8568'. [ 758.852279][ T3220] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8566'. [ 758.878409][ T3220] syzkaller0: entered promiscuous mode [ 758.884335][ T3223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8568'. [ 758.894583][ T3220] syzkaller0: entered allmulticast mode [ 758.952941][ T3226] bond0: entered promiscuous mode [ 758.958147][ T3226] bond0: entered allmulticast mode [ 758.972531][ T3226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.070456][ T3236] bond6: option lp_interval: invalid value (0) [ 759.076693][ T3236] bond6: option lp_interval: allowed values 1 - 2147483647 [ 759.087250][ T3236] bond6 (unregistering): Released all slaves [ 759.258507][ T3245] ip6gre1: entered promiscuous mode [ 759.436146][ T3262] netlink: 'syz.1.8579': attribute type 1 has an invalid length. [ 759.580999][ T3276] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8581'. [ 759.622055][ T3276] syzkaller0: entered promiscuous mode [ 759.627985][ T3276] syzkaller0: entered allmulticast mode [ 759.935596][ T3295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8588'. [ 760.053100][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.084830][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.103838][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.120555][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.150937][ T3307] netlink: 'syz.3.8594': attribute type 4 has an invalid length. [ 760.163361][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.194252][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.221292][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.236230][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.242809][ T3304] delete_channel: no stack [ 760.248170][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.265451][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.278329][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.291522][ T3314] netlink: 'syz.3.8595': attribute type 30 has an invalid length. [ 760.320756][ T3314] bond6: option arp_missed_max: invalid value (0) [ 760.327315][ T3314] bond6: option arp_missed_max: allowed values 1 - 255 [ 760.333704][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.346435][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.346565][ T3314] bond6 (unregistering): Released all slaves [ 760.358872][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.376783][ T3318] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 760.378260][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.392760][ T3318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8596'. [ 760.404976][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.423997][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.435877][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.482483][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.501029][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.529625][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.533404][ T3321] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8597'. [ 760.551351][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.580473][ T3302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.592031][ T3321] syzkaller0: entered promiscuous mode [ 760.597677][ T3321] syzkaller0: entered allmulticast mode [ 760.772877][ T3329] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 760.782507][ T3333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.795606][ T3337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.930308][ T3344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8605'. [ 760.973830][ T3344] bond6: Invalid ad_actor_system MAC address. [ 760.982048][ T3344] bond6: option ad_actor_system: invalid value (1) [ 760.992736][ T3344] bond6 (unregistering): Released all slaves [ 761.018053][ T3347] bond0: (slave gre0): Error: Device type is different from other slaves [ 761.032296][ T3347] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 761.128282][ T3358] netlink: 'syz.3.8609': attribute type 21 has an invalid length. [ 761.144025][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8610'. [ 761.155061][ T3361] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 761.256114][ T3367] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8612'. [ 761.272397][ T3367] syzkaller0: entered promiscuous mode [ 761.277906][ T3367] syzkaller0: entered allmulticast mode [ 761.504618][ T3384] netlink: 'syz.0.8618': attribute type 17 has an invalid length. [ 761.547806][ T3384] gretap0: entered promiscuous mode [ 761.567330][ T3384] gretap0: left promiscuous mode [ 761.603041][ T3400] netlink: 'syz.2.8620': attribute type 1 has an invalid length. [ 761.730847][ T3404] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 761.808782][ T3409] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 761.820986][ T3409] bond6 (unregistering): Released all slaves [ 761.875520][ T3417] openvswitch: netlink: Missing key (keys=40, expected=100) [ 761.918832][ T3417] netlink: 'syz.0.8626': attribute type 3 has an invalid length. [ 761.927519][ T3417] netlink: 'syz.0.8626': attribute type 6 has an invalid length. [ 762.102903][ T3434] netlink: 'syz.0.8630': attribute type 10 has an invalid length. [ 762.158353][ T3434] team0: Port device dummy0 added [ 762.426628][ T3450] syzkaller0: entered promiscuous mode [ 762.433218][ T3450] syzkaller0: entered allmulticast mode [ 762.465139][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.487055][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.498577][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.512358][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.520961][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.625471][ T3451] lo speed is unknown, defaulting to 1000 [ 762.634528][ T3451] wlan0 speed is unknown, defaulting to 1000 [ 762.982036][ T1004] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.022063][ T3469] xt_limit: Overflow, try lower: 604147548/4200216962 [ 763.029280][ T1004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.159206][ T1004] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.183784][ T1004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.273423][ T1004] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.287859][ T1004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.387666][ T1004] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.407513][ T1004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.564367][ T3496] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 763.628329][T28783] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 763.704038][ T3642] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 763.764147][ T3451] chnl_net:caif_netlink_parms(): no params data found [ 763.793590][ T6080] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 763.898430][ T6024] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 763.934418][ T1004] batman_adv: batadv0: Interface deactivated: geneve2 [ 764.077665][ T3532] __nla_validate_parse: 18 callbacks suppressed [ 764.077686][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8661'. [ 764.266966][ T1004] bond2 (unregistering): (slave gretap1): Releasing active interface [ 764.287742][ T1004] bond5 (unregistering): (slave gretap2): Releasing active interface [ 764.407429][ T1004] batman_adv: batadv0: Removing interface: geneve2 [ 764.579674][T26572] Bluetooth: hci4: command tx timeout [ 764.722560][ T1004] bond0 (unregistering): Released all slaves [ 764.857136][ T1004] bond1 (unregistering): Released all slaves [ 764.907529][ T3535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8662'. [ 765.037392][ T1004] bond2 (unregistering): Released all slaves [ 765.052256][ T1004] bond3 (unregistering): (slave veth5): Releasing backup interface [ 765.062589][ T1004] bond3 (unregistering): Released all slaves [ 765.077026][ T1004] bond4 (unregistering): Released all slaves [ 765.089216][ T1004] bond5 (unregistering): Released all slaves [ 765.244826][ T1004] bond6 (unregistering): Released all slaves [ 765.266013][ T3523] IPv6: sit4: Disabled Multicast RS [ 765.413358][ T1004] 9: left promiscuous mode [ 765.442131][ T3544] netlink: 'syz.0.8665': attribute type 3 has an invalid length. [ 765.450765][ T3544] netlink: 'syz.0.8665': attribute type 1 has an invalid length. [ 765.458591][ T3544] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8665'. [ 765.468795][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.491025][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.498313][ T3451] bridge_slave_0: entered allmulticast mode [ 765.527124][ T3451] bridge_slave_0: entered promiscuous mode [ 765.539210][ T3548] ip6gre1: entered promiscuous mode [ 765.564968][ T3548] ip6gre1: entered allmulticast mode [ 765.586712][ T1004] tipc: Disabling bearer [ 765.600068][ T1004] tipc: Disabling bearer [ 765.612175][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8665'. [ 765.621877][ T1004] tipc: Left network mode [ 765.640414][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8665'. [ 765.666028][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.675013][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.684304][ T3451] bridge_slave_1: entered allmulticast mode [ 765.691474][ T3451] bridge_slave_1: entered promiscuous mode [ 765.698292][ T3550] tipc: Enabling of bearer rejected, failed to enable media [ 765.713388][ T3557] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 765.853519][ T3451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.875690][ T3568] lo: left promiscuous mode [ 765.880725][ T3568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.941765][ T3572] netlink: 'syz.4.8672': attribute type 30 has an invalid length. [ 765.945190][ T3451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.986521][ T3580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8673'. [ 766.005033][ T3572] bond3: option arp_missed_max: invalid value (0) [ 766.016905][ T3572] bond3: option arp_missed_max: allowed values 1 - 255 [ 766.026463][ T3572] bond3 (unregistering): Released all slaves [ 766.053586][ T3577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8671'. [ 766.075230][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8671'. [ 766.129579][ T3570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.207579][ T3587] netlink: 'syz.0.8675': attribute type 1 has an invalid length. [ 766.237706][ T3451] team0: Port device team_slave_0 added [ 766.275881][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8675'. [ 766.319895][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8675'. [ 766.332182][ T3587] bond6: entered promiscuous mode [ 766.337808][ T3587] 8021q: adding VLAN 0 to HW filter on device bond6 [ 766.352044][ T3451] team0: Port device team_slave_1 added [ 766.368735][ T3594] netlink: 'syz.3.8676': attribute type 1 has an invalid length. [ 766.428472][ T1004] hsr_slave_0: left promiscuous mode [ 766.435947][ T1004] hsr_slave_1: left promiscuous mode [ 766.476576][ T1004] veth1_vlan: left allmulticast mode [ 766.482414][ T1004] veth0_macvtap: left promiscuous mode [ 766.488168][ T1004] veth1_vlan: left promiscuous mode [ 766.498285][ T1004] veth0_vlan: left promiscuous mode [ 766.669514][T26572] Bluetooth: hci4: command tx timeout [ 766.702368][ T3610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.626821][ T1004] smc: removing net device team0 with user defined pnetid SYZ2 [ 767.659832][ T3594] tipc: Enabling of bearer rejected, failed to enable media [ 767.777322][ T3451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.795272][ T3451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.861344][ T3451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.888885][ T3451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.903417][ T3451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.979581][ T3451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.134844][ T3622] syzkaller0: entered promiscuous mode [ 768.141554][ T3622] syzkaller0: entered allmulticast mode [ 768.215004][ T3451] hsr_slave_0: entered promiscuous mode [ 768.223056][ T3451] hsr_slave_1: entered promiscuous mode [ 768.229726][ T3451] debugfs: 'hsr0' already exists in 'hsr' [ 768.235682][ T3451] Cannot create hsr debugfs directory [ 768.750174][T26572] Bluetooth: hci4: command tx timeout [ 770.468274][ T3665] __nla_validate_parse: 8 callbacks suppressed [ 770.468292][ T3665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8692'. [ 770.653143][ T3451] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.664652][ T3674] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8697'. [ 770.684815][ T3677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.746455][ T3451] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.799326][ T3686] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8701'. [ 770.813038][ T3686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8701'. [ 770.823347][T26572] Bluetooth: hci4: command tx timeout [ 770.834474][ T3686] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8701'. [ 770.843530][ T3686] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8701'. [ 770.856057][ T3451] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.948106][ T3451] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 772.026386][ T3712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8711'. [ 773.523021][ T3712] vxcan4: entered allmulticast mode [ 773.611453][ T3451] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 773.630379][ T3714] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8712'. [ 773.642518][ T3451] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 773.669103][ T3714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8712'. [ 773.692334][ T3714] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8712'. [ 773.702631][ T3451] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 773.724474][ T3451] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 773.913748][ T3744] batadv_slave_1: entered promiscuous mode [ 773.941497][ T3748] dvmrp6: entered allmulticast mode [ 774.003157][ T3743] batadv_slave_1: left promiscuous mode [ 774.129318][ T3451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.178019][ T3451] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.198809][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.206019][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.276768][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.283998][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.546804][ T3790] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 774.732149][ T3806] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 774.763130][ T3451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.858631][ T3451] veth0_vlan: entered promiscuous mode [ 774.876003][ T3451] veth1_vlan: entered promiscuous mode [ 774.928119][ T3451] veth0_macvtap: entered promiscuous mode [ 774.945845][ T3451] veth1_macvtap: entered promiscuous mode [ 774.976803][ T3451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.001929][ T3451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.018904][ T3497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.032100][ T3497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.050521][ T3497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.067148][ T3497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.211563][T13676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.227462][T13676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.264253][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.278098][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.513767][ T3824] __nla_validate_parse: 12 callbacks suppressed [ 775.513787][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8636'. [ 775.513786][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8636'. [ 775.515971][ T3826] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8743'. [ 775.556826][ T3826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8743'. [ 775.629652][ T3826] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8743'. [ 775.660275][ T3826] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8743'. [ 775.711272][ T3837] syzkaller0: entered promiscuous mode [ 775.718420][ T3837] syzkaller0: entered allmulticast mode [ 776.188861][ T3863] netlink: 'syz.4.8752': attribute type 3 has an invalid length. [ 776.214156][ T3863] netlink: 'syz.4.8752': attribute type 3 has an invalid length. [ 776.267677][ T3867] netlink: 'syz.3.8754': attribute type 2 has an invalid length. [ 776.332045][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8755'. [ 776.347326][ T3871] netlink: 'syz.1.8756': attribute type 1 has an invalid length. [ 776.401671][ T3872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8755'. [ 776.487801][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8757'. [ 776.628776][ T3884] netlink: 788 bytes leftover after parsing attributes in process `syz.1.8759'. [ 777.132886][ T3873] bridge7: entered promiscuous mode [ 777.138414][ T3873] bridge7: entered allmulticast mode [ 777.368750][ T3889] netlink: 'syz.1.8760': attribute type 4 has an invalid length. [ 778.005277][ T3918] netlink: 'syz.0.8765': attribute type 83 has an invalid length. [ 778.028158][ T3912] syzkaller0: entered promiscuous mode [ 778.033980][ T3912] syzkaller0: entered allmulticast mode [ 778.158387][ T3927] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 778.634597][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf82400: rx timeout, send abort [ 778.642926][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059e5f400: rx timeout, send abort [ 778.651452][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bf82400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 778.665940][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059e5f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 780.595083][ T3946] macsec1: entered promiscuous mode [ 780.736996][ T3948] __nla_validate_parse: 8 callbacks suppressed [ 780.737017][ T3948] netlink: 436 bytes leftover after parsing attributes in process `syz.4.8773'. [ 780.943303][ T3965] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8780'. [ 780.963847][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8778'. [ 783.374928][ T3987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8783'. [ 783.654462][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.665534][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.692133][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8789'. [ 783.710625][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.722888][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.732690][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 783.821772][ T4021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8790'. [ 783.866166][ T4017] lo speed is unknown, defaulting to 1000 [ 783.885380][ T4017] wlan0 speed is unknown, defaulting to 1000 [ 784.098831][ T4037] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8794'. [ 784.238666][ T4050] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8794'. [ 784.266896][ T4053] syz.4.8797: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 784.285819][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.4.8797 Not tainted syzkaller #0 PREEMPT(full) [ 784.285846][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.285858][ T4053] Call Trace: [ 784.285866][ T4053] [ 784.285874][ T4053] dump_stack_lvl+0xe8/0x150 [ 784.285903][ T4053] warn_alloc+0x214/0x310 [ 784.285922][ T4053] ? stack_trace_save+0x9c/0xe0 [ 784.285950][ T4053] ? __pfx_warn_alloc+0x10/0x10 [ 784.285975][ T4053] ? kasan_save_track+0x4f/0x80 [ 784.285991][ T4053] ? kasan_save_track+0x3e/0x80 [ 784.286007][ T4053] ? __kasan_kmalloc+0x93/0xb0 [ 784.286023][ T4053] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 784.286039][ T4053] ? xskq_create+0x56/0x170 [ 784.286066][ T4053] ? xsk_setsockopt+0x4dc/0x8d0 [ 784.286088][ T4053] ? do_sock_setsockopt+0x17c/0x1b0 [ 784.286109][ T4053] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 784.286128][ T4053] ? do_syscall_64+0xec/0xf80 [ 784.286150][ T4053] __vmalloc_node_range_noprof+0x134/0x16a0 [ 784.286196][ T4053] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 784.286221][ T4053] ? __kasan_kmalloc+0x93/0xb0 [ 784.286243][ T4053] vmalloc_user_noprof+0xad/0xf0 [ 784.286261][ T4053] ? xskq_create+0xbf/0x170 [ 784.286278][ T4053] xskq_create+0xbf/0x170 [ 784.286295][ T4053] xsk_init_queue+0xb0/0x110 [ 784.286322][ T4053] xsk_setsockopt+0x4dc/0x8d0 [ 784.286348][ T4053] ? __pfx_xsk_setsockopt+0x10/0x10 [ 784.286372][ T4053] ? __pfx_aa_sk_perm+0x10/0x10 [ 784.286397][ T4053] ? aa_sock_opt_perm+0xff/0x1a0 [ 784.286422][ T4053] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 784.286438][ T4053] ? __pfx_xsk_setsockopt+0x10/0x10 [ 784.286462][ T4053] do_sock_setsockopt+0x17c/0x1b0 [ 784.286486][ T4053] __x64_sys_setsockopt+0x13f/0x1b0 [ 784.286509][ T4053] do_syscall_64+0xec/0xf80 [ 784.286525][ T4053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.286541][ T4053] ? trace_irq_disable+0x37/0x100 [ 784.286561][ T4053] ? clear_bhb_loop+0x60/0xb0 [ 784.286582][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.286597][ T4053] RIP: 0033:0x7ff52179acb9 [ 784.286614][ T4053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.286628][ T4053] RSP: 002b:00007ff522679028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 784.286647][ T4053] RAX: ffffffffffffffda RBX: 00007ff521a15fa0 RCX: 00007ff52179acb9 [ 784.286661][ T4053] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 784.286672][ T4053] RBP: 00007ff521808bf7 R08: 0000000000000004 R09: 0000000000000000 [ 784.286684][ T4053] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.286697][ T4053] R13: 00007ff521a16038 R14: 00007ff521a15fa0 R15: 00007ffdbac06108 [ 784.286728][ T4053] [ 784.352652][ T4053] Mem-Info: [ 784.575773][ T4053] active_anon:4029 inactive_anon:0 isolated_anon:0 [ 784.575773][ T4053] active_file:3478 inactive_file:40213 isolated_file:0 [ 784.575773][ T4053] unevictable:768 dirty:81 writeback:0 [ 784.575773][ T4053] slab_reclaimable:12870 slab_unreclaimable:128280 [ 784.575773][ T4053] mapped:29291 shmem:1356 pagetables:1303 [ 784.575773][ T4053] sec_pagetables:0 bounce:0 [ 784.575773][ T4053] kernel_misc_reclaimable:0 [ 784.575773][ T4053] free:1275034 free_pcp:24703 free_cma:0 [ 784.636644][ T4053] Node 0 active_anon:16116kB inactive_anon:0kB active_file:13912kB inactive_file:160648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92588kB dirty:324kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14948kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 784.674374][ T4053] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24576kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 784.709644][ T4053] Node 0 DMA free:11168kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:32kB free_cma:0kB [ 784.716743][ T4017] chnl_net:caif_netlink_parms(): no params data found [ 784.740325][ T4053] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 784.740377][ T4053] Node 0 DMA32 free:1307604kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16116kB inactive_anon:0kB active_file:13912kB inactive_file:160648kB unevictable:1536kB writepending:324kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:39428kB local_pcp:21016kB free_cma:0kB [ 784.740432][ T4053] lowmem_reserve[]: 0 0 1 1 1 [ 784.798521][ T4053] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.830286][ T4053] lowmem_reserve[]: 0 0 0 0 0 [ 784.835303][ T4053] Node 1 Normal free:3780852kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59204kB local_pcp:29840kB free_cma:0kB [ 784.880424][ T4053] lowmem_reserve[]: 0 0 0 0 0 [ 784.917274][ T4017] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.935787][ T4053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11168kB [ 784.952700][ T4017] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.992451][ T4017] bridge_slave_0: entered allmulticast mode [ 785.000866][ T4017] bridge_slave_0: entered promiscuous mode [ 785.012104][ T4053] Node 0 DMA32: 10068*4kB (UME) 7542*8kB (UME) 3790*16kB (UME) 610*32kB (UME) 783*64kB (UME) 672*128kB (UME) 657*256kB (UME) 481*512kB (UM) 352*1024kB (UME) 99*2048kB (UM) 3*4096kB (U) = 1306848kB [ 785.042063][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.054599][ T4017] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.062937][ T4017] bridge_slave_1: entered allmulticast mode [ 785.074335][ T4053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 785.101486][ T4017] bridge_slave_1: entered promiscuous mode [ 785.112770][ T4053] Node 1 Normal: 177*4kB (UE) 72*8kB (UME) 45*16kB (UME) 117*32kB (UME) 40*64kB (UME) 7*128kB (UM) 5*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 918*4096kB (UM) = 3780852kB [ 785.132578][ T4053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.144832][ T4053] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.155932][ T4053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.166379][ T4053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.176679][ T4053] 45046 total pagecache pages [ 785.182208][ T4053] 0 pages in swap cache [ 785.186577][ T4053] Free swap = 124996kB [ 785.195764][ T4017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.198356][ T4053] Total swap = 124996kB [ 785.216241][ T4075] netlink: 'syz.0.8803': attribute type 83 has an invalid length. [ 785.226981][ T4017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.242424][ T4075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8803'. [ 785.252903][ T4053] 2097051 pages RAM [ 785.257269][ T4053] 0 pages HighMem/MovableOnly [ 785.266895][ T4053] 425090 pages reserved [ 785.273939][ T4053] 0 pages cma reserved [ 785.318600][ T4017] team0: Port device team_slave_0 added [ 785.413719][ T4017] team0: Port device team_slave_1 added [ 785.424203][ T4078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8803'. [ 785.466079][ T4017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.475302][ T4017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.506569][ T4017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.686467][ T4087] sctp: [Deprecated]: syz.3.8808 (pid 4087) Use of int in maxseg socket option. [ 785.686467][ T4087] Use struct sctp_assoc_value instead [ 785.732015][ T4017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.750305][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8808'. [ 785.759578][ T4017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.789805][ T5840] Bluetooth: hci3: command tx timeout [ 785.800866][ T4017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.877820][ T4017] hsr_slave_0: entered promiscuous mode [ 785.885120][ T4017] hsr_slave_1: entered promiscuous mode [ 785.892234][ T4017] debugfs: 'hsr0' already exists in 'hsr' [ 785.898423][ T4017] Cannot create hsr debugfs directory [ 786.539160][ T4110] FAULT_INJECTION: forcing a failure. [ 786.539160][ T4110] name failslab, interval 1, probability 0, space 0, times 0 [ 786.622608][ T4110] CPU: 1 UID: 0 PID: 4110 Comm: syz.4.8815 Not tainted syzkaller #0 PREEMPT(full) [ 786.622635][ T4110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.622646][ T4110] Call Trace: [ 786.622653][ T4110] [ 786.622662][ T4110] dump_stack_lvl+0xe8/0x150 [ 786.622688][ T4110] should_fail_ex+0x414/0x560 [ 786.622717][ T4110] should_failslab+0xa8/0x100 [ 786.622740][ T4110] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 786.622766][ T4110] ? __d_alloc+0x37/0x6f0 [ 786.622792][ T4110] __d_alloc+0x37/0x6f0 [ 786.622861][ T4110] d_alloc_pseudo+0x21/0xc0 [ 786.622884][ T4110] alloc_file_pseudo+0xcc/0x210 [ 786.622909][ T4110] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 786.622928][ T4110] ? evm_inode_alloc_security+0x40/0xb0 [ 786.622944][ T4110] ? security_inode_alloc+0xd5/0x330 [ 786.622976][ T4110] sock_alloc_file+0xb8/0x2e0 [ 786.623003][ T4110] do_accept+0x34b/0x680 [ 786.623025][ T4110] ? __pfx_do_accept+0x10/0x10 [ 786.623063][ T4110] __sys_accept4+0x127/0x210 [ 786.623080][ T4110] ? __pfx___sys_accept4+0x10/0x10 [ 786.623098][ T4110] ? __pfx_ksys_write+0x10/0x10 [ 786.623121][ T4110] __x64_sys_accept4+0x9a/0xb0 [ 786.623141][ T4110] do_syscall_64+0xec/0xf80 [ 786.623159][ T4110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.623176][ T4110] ? trace_irq_disable+0x37/0x100 [ 786.623196][ T4110] ? clear_bhb_loop+0x60/0xb0 [ 786.623217][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.623234][ T4110] RIP: 0033:0x7ff52179acb9 [ 786.623249][ T4110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.623263][ T4110] RSP: 002b:00007ff522679028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 786.623283][ T4110] RAX: ffffffffffffffda RBX: 00007ff521a15fa0 RCX: 00007ff52179acb9 [ 786.623296][ T4110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 786.623306][ T4110] RBP: 00007ff522679090 R08: 0000000000000000 R09: 0000000000000000 [ 786.623318][ T4110] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 786.623329][ T4110] R13: 00007ff521a16038 R14: 00007ff521a15fa0 R15: 00007ffdbac06108 [ 786.623358][ T4110] [ 786.908972][ T4017] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.921898][ T4017] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 786.932615][ T4017] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 787.237183][ T4121] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8817'. [ 787.250135][ T4017] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.261288][ T4017] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 787.274122][ T4017] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 787.381411][ T4017] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.401144][ T4017] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 787.412218][ T4017] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 787.469289][ T4136] syzkaller0: entered promiscuous mode [ 787.477492][ T4136] syzkaller0: entered allmulticast mode [ 787.516973][ T4017] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.534312][ T4134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8820'. [ 787.561988][ T4017] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 787.573147][ T4017] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 787.683082][ T4146] netlink: 'syz.3.8823': attribute type 23 has an invalid length. [ 787.704648][ T4146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8823'. [ 787.806268][ T4155] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 787.880739][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8824'. [ 787.897303][ T4153] syzkaller0: create flow: hash 2444929727 index 1 [ 787.918266][ T5840] Bluetooth: hci3: command tx timeout [ 788.005989][ T4017] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.022705][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880823b0800: rx timeout, send abort [ 788.031073][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880823b2c00: rx timeout, send abort [ 788.041065][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880823b0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.055609][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880823b2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.081647][ T4152] syzkaller0: delete flow: hash 2444929727 index 1 [ 788.334152][ T4174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8829'. [ 789.941838][ T5840] Bluetooth: hci3: command tx timeout [ 790.082604][ T4017] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 790.094262][ T4017] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 790.135172][ T4017] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 790.275609][ T4192] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8834'. [ 790.399971][ T4017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.459323][ T4017] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.522521][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.529753][T17391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.568732][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.575930][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.671583][ T4223] netlink: 'syz.0.8843': attribute type 10 has an invalid length. [ 790.680843][ T4223] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8843'. [ 790.712578][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8844'. [ 790.747254][ T4225] netlink: 'syz.3.8844': attribute type 3 has an invalid length. [ 790.807190][ T4228] netlink: 'syz.0.8845': attribute type 4 has an invalid length. [ 790.858667][ T4229] netlink: 'syz.0.8845': attribute type 4 has an invalid length. [ 790.869886][ T4228] netlink: 'syz.0.8845': attribute type 4 has an invalid length. [ 790.904796][ T4017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.977539][ T4017] veth0_vlan: entered promiscuous mode [ 790.995464][ T4017] veth1_vlan: entered promiscuous mode [ 791.048722][ T4017] veth0_macvtap: entered promiscuous mode [ 791.074759][ T4017] veth1_macvtap: entered promiscuous mode [ 791.096812][ T4017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.125677][ T4017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.154629][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.176007][T14830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.198091][T14830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.208530][T14830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.342032][ T1536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.363732][ T1536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.421385][T14830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.440660][T14830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.647476][ T4265] sctp: [Deprecated]: syz.0.8854 (pid 4265) Use of int in maxseg socket option. [ 791.647476][ T4265] Use struct sctp_assoc_value instead [ 791.695905][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8855'. [ 791.773811][ T4273] x_tables: duplicate underflow at hook 3 [ 791.888910][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8859'. [ 791.930430][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 791.943826][ T4277] team0: Port device batadv1 added [ 791.949787][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8861'. [ 791.979960][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8861'. [ 791.991498][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8860'. [ 792.015779][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8861'. [ 792.029263][T26572] Bluetooth: hci3: command tx timeout [ 792.039772][ T4283] netlink: 'syz.1.8861': attribute type 7 has an invalid length. [ 792.075692][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 792.086645][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 792.095547][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 792.152868][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 792.175364][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.267601][ T4284] lo speed is unknown, defaulting to 1000 [ 792.300571][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.310830][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.313393][ T4284] wlan0 speed is unknown, defaulting to 1000 [ 792.320557][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.320582][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.320601][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.320618][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.320635][ T4292] sock: sock_set_timeout: `syz.4.8865' (pid 4292) tries to set negative timeout [ 792.399194][ T4300] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 792.534199][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8868'. [ 792.631366][T26570] bridge0: port 2(syz_tun) entered disabled state [ 792.745697][ T4313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.758955][T26570] syz_tun (unregistering): left allmulticast mode [ 792.770020][T26570] syz_tun (unregistering): left promiscuous mode [ 792.789439][T26570] bridge0: port 2(syz_tun) entered disabled state [ 793.064821][ T1536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.090395][ T1536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.120483][ T1536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 793.352819][ T1536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.400483][ T1536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.439451][ T1536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 793.592293][ T1536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.602807][ T1536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.614686][ T1536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 793.763499][ T1536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.792009][ T1536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.806389][ T1536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 793.846116][ T4346] delete_channel: no stack [ 793.858002][ T4345] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8878'. [ 793.939548][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 793.951073][ T4345] syzkaller0: entered promiscuous mode [ 793.956863][ T4345] syzkaller0: entered allmulticast mode [ 793.964116][ T4350] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8880'. [ 794.014253][T16436] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 794.141608][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 794.209230][ T1538] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 794.263781][T26572] Bluetooth: hci2: command tx timeout [ 794.277091][ T1536] bridge_slave_0: left allmulticast mode [ 794.313974][ T1536] bridge_slave_0: left promiscuous mode [ 794.314058][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8885'. [ 794.347088][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.516803][ T4379] netlink: 'syz.4.8889': attribute type 1 has an invalid length. [ 794.853305][ T1536] bond4 (unregistering): (slave bridge2): Releasing active interface [ 795.006142][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.017842][ T1536] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 795.033341][ T1536] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 795.044345][ T1536] bond0 (unregistering): Released all slaves [ 795.054527][ T1536] bond1 (unregistering): Released all slaves [ 795.198563][ T1536] bond2 (unregistering): Released all slaves [ 795.355201][ T1536] bond3 (unregistering): Released all slaves [ 795.367010][ T1536] bond4 (unregistering): Released all slaves [ 795.378845][ T1536] bond5 (unregistering): Released all slaves [ 795.392666][ T1536] bond6 (unregistering): Released all slaves [ 795.406788][ T1536] bond7 (unregistering): Released all slaves [ 795.423993][T16436] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 795.487968][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 795.528245][ T4368] lo speed is unknown, defaulting to 1000 [ 795.547061][ T4368] wlan0 speed is unknown, defaulting to 1000 [ 795.584112][ T1536] tipc: Disabling bearer [ 795.602215][ T1536] tipc: Left network mode [ 795.682842][ T4388] syzkaller0: entered promiscuous mode [ 795.688428][ T4388] syzkaller0: entered allmulticast mode [ 795.988468][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.006466][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.020166][ T4284] bridge_slave_0: entered allmulticast mode [ 796.035620][ T4284] bridge_slave_0: entered promiscuous mode [ 796.123359][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.139639][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.172529][ T4284] bridge_slave_1: entered allmulticast mode [ 796.195670][ T4284] bridge_slave_1: entered promiscuous mode [ 796.307124][ T4408] bond1: option mode: invalid value (133) [ 796.320070][ T4424] FAULT_INJECTION: forcing a failure. [ 796.320070][ T4424] name failslab, interval 1, probability 0, space 0, times 0 [ 796.347147][T26572] Bluetooth: hci2: command tx timeout [ 796.373607][ T4424] CPU: 0 UID: 0 PID: 4424 Comm: syz.2.8899 Not tainted syzkaller #0 PREEMPT(full) [ 796.373634][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.373645][ T4424] Call Trace: [ 796.373653][ T4424] [ 796.373661][ T4424] dump_stack_lvl+0xe8/0x150 [ 796.373688][ T4424] should_fail_ex+0x414/0x560 [ 796.373718][ T4424] should_failslab+0xa8/0x100 [ 796.373740][ T4424] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 796.373765][ T4424] ? __alloc_skb+0x198/0x3a0 [ 796.373783][ T4424] ? __alloc_skb+0x1dc/0x3a0 [ 796.373799][ T4424] ? __local_bh_enable_ip+0xd0/0x130 [ 796.373818][ T4424] ? __alloc_skb+0x198/0x3a0 [ 796.373836][ T4424] __alloc_skb+0x1dc/0x3a0 [ 796.373858][ T4424] netlink_sendmsg+0x5c6/0xb30 [ 796.373888][ T4424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.373913][ T4424] ? aa_sock_msg_perm+0xf1/0x1b0 [ 796.373936][ T4424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.373952][ T4424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.373975][ T4424] __sock_sendmsg+0x21c/0x270 [ 796.374001][ T4424] ____sys_sendmsg+0x505/0x820 [ 796.374027][ T4424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.374056][ T4424] ? import_iovec+0x74/0xa0 [ 796.374079][ T4424] ___sys_sendmsg+0x21f/0x2a0 [ 796.374102][ T4424] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.374163][ T4424] ? __fget_files+0x2a/0x420 [ 796.374182][ T4424] ? __fget_files+0x3a0/0x420 [ 796.374212][ T4424] __x64_sys_sendmsg+0x19b/0x260 [ 796.374234][ T4424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.374264][ T4424] ? __pfx_ksys_write+0x10/0x10 [ 796.374292][ T4424] do_syscall_64+0xec/0xf80 [ 796.374311][ T4424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.374327][ T4424] ? trace_irq_disable+0x37/0x100 [ 796.374347][ T4424] ? clear_bhb_loop+0x60/0xb0 [ 796.374368][ T4424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.374384][ T4424] RIP: 0033:0x7feb74b9acb9 [ 796.374401][ T4424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.374416][ T4424] RSP: 002b:00007feb72df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.374435][ T4424] RAX: ffffffffffffffda RBX: 00007feb74e16090 RCX: 00007feb74b9acb9 [ 796.374448][ T4424] RDX: 00000000240000c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 796.374460][ T4424] RBP: 00007feb72df6090 R08: 0000000000000000 R09: 0000000000000000 [ 796.374470][ T4424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.374481][ T4424] R13: 00007feb74e16128 R14: 00007feb74e16090 R15: 00007ffef379e278 [ 796.374514][ T4424] [ 796.686822][ T4408] bond1 (unregistering): Released all slaves [ 796.853817][ T4426] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 796.903235][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.007254][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.334160][ T4284] team0: Port device team_slave_0 added [ 797.474426][ T4284] team0: Port device team_slave_1 added [ 797.752965][ T4440] veth0: mtu less than device minimum [ 797.785207][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.810303][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.931122][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.042841][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.060412][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.131252][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.149338][ T4445] __nla_validate_parse: 3 callbacks suppressed [ 798.157579][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8904'. [ 798.178600][ T1536] hsr_slave_0: left promiscuous mode [ 798.185532][ T1536] hsr_slave_1: left promiscuous mode [ 798.191815][ T1536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.199221][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.218551][ T1536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.227282][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.239127][ T1536] veth1_macvtap: left promiscuous mode [ 798.245288][ T1536] veth0_macvtap: left promiscuous mode [ 798.252014][ T1536] º: left promiscuous mode [ 798.256590][ T1536] veth0_vlan: left promiscuous mode [ 798.437480][T26572] Bluetooth: hci2: command tx timeout [ 798.889676][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cbc1c00: rx timeout, send abort [ 798.897965][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cbc2c00: rx timeout, send abort [ 798.906883][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cbc1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 798.921343][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cbc2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 799.359995][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8904'. [ 799.433141][ T4450] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 799.454993][ T4450] bond1 (unregistering): Released all slaves [ 799.535775][ T4284] hsr_slave_0: entered promiscuous mode [ 799.542872][ T4284] hsr_slave_1: entered promiscuous mode [ 799.549261][ T4284] debugfs: 'hsr0' already exists in 'hsr' [ 799.556333][ T4284] Cannot create hsr debugfs directory [ 799.636850][ T4474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8911'. [ 799.984210][ T4493] netlink: 'syz.2.8917': attribute type 1 has an invalid length. [ 800.079207][ T4284] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 800.208004][ T4284] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 800.332057][ T4491] block nbd5: Unsupported socket: should be TCP or UNIX. [ 800.341351][ T4491] block nbd5: shutting down sockets [ 800.357623][ T4284] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 800.505193][T26572] Bluetooth: hci2: command tx timeout [ 800.534475][ T4284] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 800.601091][ T4526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8924'. [ 800.753960][ T4530] C: renamed from team_slave_0 (while UP) [ 800.762629][ T4530] netlink: 'syz.2.8926': attribute type 1 has an invalid length. [ 800.771393][ T4530] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 800.801574][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8928'. [ 800.850843][ T4534] chnl_net:caif_netlink_parms(): no params data found [ 800.974745][ T4284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 801.022719][ T4284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 801.069664][ T4284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 801.105740][ T4284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 801.216937][ T4564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8936'. [ 801.289664][ T4571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.406530][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.446431][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.477323][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.484546][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.514650][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.521876][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.766852][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8946'. [ 801.936548][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.068610][ T4284] veth0_vlan: entered promiscuous mode [ 802.120510][ T4284] veth1_vlan: entered promiscuous mode [ 802.210387][ T4284] veth0_macvtap: entered promiscuous mode [ 802.231873][ T4284] veth1_macvtap: entered promiscuous mode [ 802.297752][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.330534][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.402462][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8957'. [ 802.419084][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8958'. [ 802.419084][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8958'. [ 802.450034][ T4637] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 802.461631][ T1079] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 802.478377][ T1079] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 802.536529][ T4633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.555691][ T4645] netlink: 'syz.4.8958': attribute type 1 has an invalid length. [ 802.556312][ T1079] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 802.575407][ T4641] bridge_slave_0: invalid flags given to default FDB implementation [ 802.584833][ T4640] bridge_slave_0: invalid flags given to default FDB implementation [ 802.594656][ T1079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.606849][ T1079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.626203][ T1079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.643721][ T1079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.864396][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.886819][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.995925][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.026995][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.275888][ T4675] __nla_validate_parse: 4 callbacks suppressed [ 803.275908][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8858'. [ 803.429572][ T4685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8966'. [ 803.742164][ T4682] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8966'. [ 803.768405][ C0] vcan0: j1939_session_tx_dat: 0xffff888057c7b000: queue data error: -100 [ 803.777767][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 803.785375][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 803.793070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.800915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.808825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.816771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.824790][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.832616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.840485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.848283][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.856161][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.864000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.871904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.879752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.887664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.895501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.903388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.911245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.919199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.927107][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.934989][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.942804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.950687][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.958507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.966469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.974286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.982169][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 803.989985][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 803.998040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.005938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.013815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.021628][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.029524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.037513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.045393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.053204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.061098][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.068901][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.076774][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.084590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.092544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.100466][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.108372][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.116185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.124054][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.131864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.139861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.147669][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.155567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.163388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.171311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.179117][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.187001][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.196650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.204629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.212545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.220445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.228365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.236257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.244070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.252126][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.260035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.267904][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.275724][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.283602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.291415][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.299262][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.307076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.314983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.322827][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.330699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.338580][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.346473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.354318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.362323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.370240][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.378096][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.385983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.394023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.401847][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.409852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.417667][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.425560][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.433372][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.441260][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.449059][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.456931][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.464747][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.472713][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.480534][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.488388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.496206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.504104][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.511920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.519828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.527637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.535550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.543905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.551818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.559647][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.567525][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.575373][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.583250][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.591070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.598921][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.606734][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.614607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.622445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.630360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.638182][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.646071][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.653888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.661792][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.669602][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.677481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.685326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.693282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.701105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.708954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.716920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.724863][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.732769][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.740666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.748513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.756385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.764194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.772070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 804.779881][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 804.852497][ T4686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8969'. [ 805.187463][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8979'. [ 805.204651][ T4725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8979'. [ 805.237573][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8979'. [ 805.345885][ T4633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.361007][ T4633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 805.390501][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8982'. [ 805.408801][ T4739] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 805.450616][ T4743] sctp: [Deprecated]: syz.2.8981 (pid 4743) Use of int in max_burst socket option. [ 805.450616][ T4743] Use struct sctp_assoc_value instead [ 805.555303][ T4633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.581273][ T4633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 805.612759][ T4754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8985'. [ 805.622680][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8984'. [ 805.698924][ T4633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.717540][ T4633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 805.817144][ T3497] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 805.831984][ T3497] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 805.868111][T17391] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 805.888976][T17391] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 805.930948][T17391] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 805.954117][T17391] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 805.984857][ T3642] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 805.994681][ T3642] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.303504][ T4789] sctp: [Deprecated]: syz.4.8995 (pid 4789) Use of int in max_burst socket option. [ 806.303504][ T4789] Use struct sctp_assoc_value instead [ 806.423784][ T4796] xt_hashlimit: size too large, truncated to 1048576 [ 806.627666][ T4795] hsr_slave_0 (unregistering): left promiscuous mode [ 806.730907][ T4815] sctp: [Deprecated]: syz.3.9004 (pid 4815) Use of int in max_burst socket option. [ 806.730907][ T4815] Use struct sctp_assoc_value instead [ 806.748452][ T4816] sctp: [Deprecated]: syz.3.9004 (pid 4816) Use of int in max_burst socket option. [ 806.748452][ T4816] Use struct sctp_assoc_value instead [ 806.894554][ T4826] netlink: 'syz.2.9009': attribute type 29 has an invalid length. [ 807.020227][ T4836] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.052754][ T4836] bridge0: entered allmulticast mode [ 807.080498][ T4841] syzkaller0: entered promiscuous mode [ 807.086685][ T4841] syzkaller0: entered allmulticast mode [ 807.193576][ T4853] Cannot find add_set index 65532 as target [ 807.214801][ T4856] netlink: 'syz.2.9016': attribute type 1 has an invalid length. [ 807.223732][ T4848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.225929][ T4855] netlink: 'syz.2.9016': attribute type 1 has an invalid length. [ 807.234469][ T4857] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 807.261463][ T4853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.489047][ T4880] openvswitch: netlink: IP tunnel dst address not specified [ 807.521163][ T4882] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 807.746951][ T4891] netlink: 'syz.4.9025': attribute type 1 has an invalid length. [ 807.772177][ T4891] netlink: 'syz.4.9025': attribute type 1 has an invalid length. [ 807.784910][ T4891] netlink: 'syz.4.9025': attribute type 1 has an invalid length. [ 807.792887][ T4891] netlink: 'syz.4.9025': attribute type 2 has an invalid length. [ 808.026339][ T4916] delete_channel: no stack [ 808.690977][ T4968] netlink: 'syz.1.9048': attribute type 1 has an invalid length. [ 808.893948][ T4984] __nla_validate_parse: 14 callbacks suppressed [ 808.893965][ T4984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9054'. [ 809.011569][ T4992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9055'. [ 809.287946][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9062'. [ 809.339543][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9062'. [ 809.376631][ T5018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9064'. [ 809.538210][ T5028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9070'. [ 809.989898][ T5047] netlink: 'syz.0.9075': attribute type 1 has an invalid length. [ 809.997922][ T5047] netlink: 'syz.0.9075': attribute type 4 has an invalid length. [ 810.006977][ T5047] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9075'. [ 811.727165][ T5058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9078'. [ 811.791466][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9079'. [ 812.010430][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9086'. [ 812.044763][ T5084] validate_nla: 1 callbacks suppressed [ 812.044781][ T5084] netlink: 'syz.4.9087': attribute type 1 has an invalid length. [ 812.135004][ T5084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 812.204322][ T5093] bond3: (slave geneve2): making interface the new active one [ 812.214896][ T5093] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 812.227560][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.247612][ T5084] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 812.266580][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.317919][ T5093] veth5: entered promiscuous mode [ 812.343090][ T5093] bond3: (slave veth5): Enslaving as an active interface with a down link [ 812.415305][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.435108][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.761245][ T7000] IPVS: starting estimator thread 0... [ 812.902636][ T5134] IPVS: using max 38 ests per chain, 91200 per kthread [ 813.015238][ T5156] netlink: 'syz.2.9107': attribute type 1 has an invalid length. [ 814.040964][ T5177] __nla_validate_parse: 7 callbacks suppressed [ 814.040981][ T5177] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9114'. [ 814.059511][ T5177] netlink: 'syz.1.9114': attribute type 1 has an invalid length. [ 814.186554][ T5186] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 814.244329][ T5186] bond4 (unregistering): Released all slaves [ 814.255282][ T5195] openvswitch: netlink: Flow actions attr not present in new flow. [ 814.297830][ T5190] gretap1: entered promiscuous mode [ 814.514791][ T5208] netlink: 'syz.1.9122': attribute type 10 has an invalid length. [ 814.634662][ T5214] vlan2: entered allmulticast mode [ 814.639973][ T5214] hsr0: entered allmulticast mode [ 814.645047][ T5214] hsr_slave_0: entered allmulticast mode [ 814.651463][ T5214] hsr_slave_1: entered allmulticast mode [ 814.778538][ T5224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9129'. [ 815.105707][ T5243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.270546][ T5252] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 815.358652][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9138'. [ 815.546787][ T5268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9145'. [ 815.628255][ T5279] netlink: 'syz.2.9145': attribute type 1 has an invalid length. [ 815.766898][ T5279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 815.801270][ T5288] netlink: 'syz.1.9149': attribute type 1 has an invalid length. [ 815.822619][ T5284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 815.830728][ T5284] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 815.842603][ T5284] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 815.857943][ T5279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9145'. [ 815.859619][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9151'. [ 815.895886][ T5268] veth3: entered promiscuous mode [ 815.906045][ T5268] bond2: (slave veth3): Enslaving as an active interface with a down link [ 815.980492][ T5288] bond2: entered promiscuous mode [ 815.985941][ T5288] bond2: entered allmulticast mode [ 815.994048][ T5288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.008487][ T5279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.356622][ T5325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9159'. [ 816.377813][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9159'. [ 816.397560][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9160'. [ 816.408150][ T5325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9159'. [ 816.517125][ T5341] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 816.621757][ T5349] ip6t_REJECT: ECHOREPLY is not supported [ 816.858334][ T5365] netlink: 'syz.4.9171': attribute type 1 has an invalid length. [ 816.891358][ T5372] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 816.906728][ T5372] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 816.906832][ T5365] netlink: 'syz.4.9171': attribute type 1 has an invalid length. [ 816.917187][ T5372] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 817.543395][ T5431] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 817.580910][ T5429] xt_l2tp: unknown flags: 10 [ 817.606370][ T5433] xt_l2tp: unknown flags: 10 [ 817.776036][ T5449] netlink: 'syz.0.9194': attribute type 1 has an invalid length. [ 817.816878][ T5455] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 818.406679][ T5475] netlink: 'syz.3.9201': attribute type 4 has an invalid length. [ 818.459341][ T5479] netlink: 'syz.3.9201': attribute type 4 has an invalid length. [ 818.541588][ T5481] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 818.873847][ T5494] openvswitch: netlink: Flow key attr not present in new flow. [ 819.673911][ T5515] __nla_validate_parse: 14 callbacks suppressed [ 819.673928][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9212'. [ 819.739319][ T5518] netlink: 'syz.3.9213': attribute type 10 has an invalid length. [ 819.793985][ T5515] hsr_slave_1 (unregistering): left promiscuous mode [ 819.807808][ T5518] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 819.819200][ T5518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.098741][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 820.108190][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 820.117999][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 820.127209][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 820.137509][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 820.195133][ T5540] lo speed is unknown, defaulting to 1000 [ 820.408237][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030412400: rx timeout, send abort [ 820.416663][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030413800: rx timeout, send abort [ 820.425759][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030412400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 820.440158][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030413800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 820.490882][ T5550] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 820.536359][ T5550] bond3 (unregistering): Released all slaves [ 820.592866][ T5557] netlink: 'syz.1.9222': attribute type 15 has an invalid length. [ 820.595008][ T5558] netlink: 'syz.3.9223': attribute type 83 has an invalid length. [ 820.601430][ T5557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9222'. [ 820.768220][ T5562] netlink: 'syz.1.9224': attribute type 1 has an invalid length. [ 820.821732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.837344][ T5562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 820.859130][ T5570] .: renamed from bridge_slave_1 (while UP) [ 820.878308][ T5563] macvlan2: entered promiscuous mode [ 820.906778][ T5563] macvlan2: entered allmulticast mode [ 820.914432][ T5563] bond3: entered allmulticast mode [ 820.919859][ T5563] bond3: entered promiscuous mode [ 820.925581][ T5563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 820.934684][ T5563] team0: Port device macvlan2 added [ 820.947086][ T5580] ip6gre2: entered allmulticast mode [ 820.958375][ T5581] netlink: 'syz.3.9229': attribute type 1 has an invalid length. [ 820.966410][ T5562] macvlan3: entered promiscuous mode [ 820.966430][ T5562] macvlan3: entered allmulticast mode [ 820.967773][ T5562] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 820.987633][ T5562] team0: Port device macvlan3 added [ 821.006498][ T5540] chnl_net:caif_netlink_parms(): no params data found [ 821.068506][ T5582] bond1: (slave geneve2): making interface the new active one [ 821.078660][ T5582] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 821.097477][T15082] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 821.099223][ T5579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9228'. [ 821.120483][T15082] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 821.129845][T15082] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 821.138648][T15082] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 821.284808][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.292838][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.300933][ T5540] bridge_slave_0: entered allmulticast mode [ 821.308857][ T5540] bridge_slave_0: entered promiscuous mode [ 821.319690][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.327010][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.335017][ T5540] bridge_slave_1: entered allmulticast mode [ 821.343365][ T5540] bridge_slave_1: entered promiscuous mode [ 821.393144][ T5603] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9233'. [ 821.422402][ T5540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.439744][ T5540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.473889][ T5603] syzkaller0: entered promiscuous mode [ 821.479804][ T5603] syzkaller0: entered allmulticast mode [ 822.180056][ T5840] Bluetooth: hci5: command tx timeout [ 823.419267][ T5540] team0: Port device team_slave_0 added [ 823.440420][ T5633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9237'. [ 823.481162][ T5540] team0: Port device team_slave_1 added [ 823.545800][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.555241][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.583133][ T5540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.606086][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.650853][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.657827][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.692950][ T5540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.706854][ T5649] netlink: 'syz.2.9242': attribute type 2 has an invalid length. [ 823.715376][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9242'. [ 823.724707][ T5649] netlink: 'syz.2.9242': attribute type 2 has an invalid length. [ 823.848272][ T5640] lo speed is unknown, defaulting to 1000 [ 823.864396][ T5540] hsr_slave_0: entered promiscuous mode [ 823.874472][ T5540] hsr_slave_1: entered promiscuous mode [ 823.885309][ T5654] netlink: 'syz.1.9245': attribute type 2 has an invalid length. [ 823.894337][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9245'. [ 823.904384][ T5540] debugfs: 'hsr0' already exists in 'hsr' [ 823.911336][ T5540] Cannot create hsr debugfs directory [ 823.916809][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9245'. [ 823.981854][ T5659] netlink: 'syz.1.9245': attribute type 2 has an invalid length. [ 823.998730][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9245'. [ 824.024968][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9245'. [ 824.195201][ T5662] ip6gretap1: entered promiscuous mode [ 824.207514][ T5662] ip6gretap1: entered allmulticast mode [ 824.260142][ T5840] Bluetooth: hci5: command tx timeout [ 824.314504][ T5664] lo speed is unknown, defaulting to 1000 [ 824.443863][ T5674] syzkaller0: entered promiscuous mode [ 824.451580][ T5674] syzkaller0: entered allmulticast mode [ 826.330471][ T5683] netlink: 'syz.1.9253': attribute type 1 has an invalid length. [ 826.340223][ T5840] Bluetooth: hci5: command tx timeout [ 826.458023][ T5540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.473322][ T5540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 826.490792][ T5540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 826.522591][ T5683] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 826.726924][ T5540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.788896][ T5540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 826.816738][ T5540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 827.030364][ T5540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.058401][ T5540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 827.087200][ T5540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 827.432088][ T5540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.443055][ T5540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 827.468686][ T5540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 827.565527][ T5709] __nla_validate_parse: 1 callbacks suppressed [ 827.565544][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9261'. [ 827.625066][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9261'. [ 827.984672][ T5712] tipc: Resetting bearer [ 828.048339][ T5712] tipc: Resetting bearer [ 828.176477][ T5718] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9263'. [ 828.249245][ T5718] syzkaller0: entered promiscuous mode [ 828.255294][ T5718] syzkaller0: entered allmulticast mode [ 828.345418][ T5720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9264'. [ 828.423925][ T5840] Bluetooth: hci5: command tx timeout [ 828.991710][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880764cdc00: rx timeout, send abort [ 829.000001][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802968d000: rx timeout, send abort [ 829.008354][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880764cdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 829.022814][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802968d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 829.312442][ T5728] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 830.007189][ T5740] atomic_op ffff888042da2198 conn xmit_atomic 0000000000000000 [ 830.204508][ T5540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 830.215052][ T5540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 830.244544][ T5540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 830.280947][ T5540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 830.397227][ T5751] IPVS: ip_vs_edit_dest(): server weight less than zero [ 830.447364][ T5751] tun0: tun_chr_ioctl cmd 1074025675 [ 830.470030][ T5751] tun0: persist disabled [ 830.472412][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9275'. [ 830.485055][ T5760] .: left allmulticast mode [ 830.491830][ T5760] .: left promiscuous mode [ 830.496863][ T5760] bridge0: port 2(.) entered disabled state [ 830.568674][ T5760] bridge_slave_0: left allmulticast mode [ 830.574724][ T5760] bridge_slave_0: left promiscuous mode [ 830.581870][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.816568][ T5766] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9277'. [ 831.374560][ T5540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.423067][ T5769] nft_compat: unsupported protocol 0 [ 831.544151][ T5540] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.570345][ T5774] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 831.582158][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9279'. [ 831.766426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.773672][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.846067][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.853374][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.991050][ T5788] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9283'. [ 832.186825][ T5788] syzkaller0: entered promiscuous mode [ 832.206456][ T5788] syzkaller0: entered allmulticast mode [ 834.317230][ T5816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9290'. [ 834.336578][ T5823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9289'. [ 834.382790][ T5821] netlink: 'syz.3.9291': attribute type 21 has an invalid length. [ 834.993308][ T1536] bond5 (unregistering): (slave bridge5): Releasing active interface [ 835.093037][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.103713][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.115727][ T1536] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 835.125730][ T1536] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 835.135365][ T1536] bond0 (unregistering): Released all slaves [ 835.147000][ T1536] bond1 (unregistering): Released all slaves [ 835.282801][ T1536] bond2 (unregistering): (slave veth3): Releasing active interface [ 835.292301][ T1536] bond2 (unregistering): Released all slaves [ 835.304982][ T1536] bond3 (unregistering): Released all slaves [ 835.433027][ T1536] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 835.442970][ T1536] bond4 (unregistering): (slave veth5): Releasing active interface [ 835.452880][ T1536] bond4 (unregistering): Released all slaves [ 835.466744][ T1536] bond5 (unregistering): Released all slaves [ 835.601881][ T1536] bond6 (unregistering): (slave veth7): Releasing active interface [ 835.611463][ T1536] bond6 (unregistering): Released all slaves [ 835.627216][ T1536] bond7 (unregistering): Released all slaves [ 835.641346][ T1536] bond8 (unregistering): (slave bond9): Releasing backup interface [ 835.651305][ T1536] bond8 (unregistering): (slave bond10): Releasing backup interface [ 835.664738][ T1536] bond8 (unregistering): Released all slaves [ 835.784036][ T1536] bond9 (unregistering): Released all slaves [ 835.908603][ T1536] bond10 (unregistering): Released all slaves [ 835.936148][ T5826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9292'. [ 836.028495][ T5540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.072240][ T1536] : left promiscuous mode [ 836.121399][ T5836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9293'. [ 836.186693][ T1536] tipc: Left network mode [ 836.330515][ T5846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9295'. [ 836.344714][ T5846] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9295'. [ 836.362097][ T5846] netlink: 'syz.1.9295': attribute type 5 has an invalid length. [ 836.375066][ T5846] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9295'. [ 836.401351][ T5540] veth0_vlan: entered promiscuous mode [ 836.496560][ T5540] veth1_vlan: entered promiscuous mode [ 836.555753][ T5540] veth0_macvtap: entered promiscuous mode [ 836.566808][ T5540] veth1_macvtap: entered promiscuous mode [ 836.603187][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.698330][ T5866] netlink: 'syz.1.9300': attribute type 2 has an invalid length. [ 836.710251][ T5866] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9300'. [ 836.726957][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.768965][ T6080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.803439][ T6080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.947618][ T5895] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9307'. [ 836.973817][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9307'. [ 837.000527][ T5882] team0 (unregistering): Port device C removed [ 837.012259][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 837.025784][ T6080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.043731][ T5892] erspan0: entered promiscuous mode [ 837.058837][ T5875] infiniband : set down [ 837.075324][ T5892] vlan2: entered promiscuous mode [ 837.124251][ T5875] infiniband : added ipvlan0 [ 837.170125][ T6080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.205018][ T5904] Cannot find add_set index 2 as target [ 837.227360][ T5875] RDS/IB: : added [ 837.231504][ T5875] smc: adding ib device  with port count 1 [ 837.237871][ T5875] smc: ib device  port 1 has no pnetid [ 837.408369][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.499439][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.572962][ T5913] netlink: 'syz.2.9311': attribute type 2 has an invalid length. [ 837.670619][ T6191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.690948][ T6191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.933596][ T5940] sctp: [Deprecated]: syz.0.9320 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 837.933596][ T5940] Use struct sctp_sack_info instead [ 838.014252][ T5949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.024351][ T5940] sctp: [Deprecated]: syz.0.9320 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 838.024351][ T5940] Use struct sctp_sack_info instead [ 838.250575][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.257956][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.480783][ T5971] nbd: device at index 64 is going down [ 839.115285][ T5992] gtp1: entered promiscuous mode [ 839.120593][ T5992] gtp1: entered allmulticast mode [ 839.323682][ T6008] __nla_validate_parse: 11 callbacks suppressed [ 839.323702][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9338'. [ 839.413193][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9338'. [ 840.086734][ T6040] syzkaller1: entered promiscuous mode [ 840.098318][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9349'. [ 840.108342][ T6040] syzkaller1: entered allmulticast mode [ 840.108362][ T6041] netlink: 'syz.4.9348': attribute type 21 has an invalid length. [ 840.117977][ T6042] netlink: 'syz.2.9349': attribute type 7 has an invalid length. [ 840.131223][ T6042] netlink: 'syz.2.9349': attribute type 8 has an invalid length. [ 840.139015][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9349'. [ 840.155909][ T6042] erspan0: entered promiscuous mode [ 840.159016][ T6041] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9348'. [ 840.173280][ T6042] batadv_slave_1: entered promiscuous mode [ 840.189823][ T6042] batadv_slave_1: left promiscuous mode [ 840.204446][ T6042] erspan0: left promiscuous mode [ 840.233211][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9347'. [ 840.242422][ T6044] xt_CT: No such helper "snmp_trap" [ 840.255291][ T6041] netlink: 'syz.4.9348': attribute type 5 has an invalid length. [ 840.273520][ T6041] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9348'. [ 840.376505][ T9] IPVS: starting estimator thread 0... [ 840.470685][ T6049] IPVS: using max 30 ests per chain, 72000 per kthread [ 840.618993][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9357'. [ 840.656607][ T6066] syzkaller0: entered promiscuous mode [ 840.670880][ T6066] syzkaller0: entered allmulticast mode [ 840.854909][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9355'. [ 840.955598][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9355'. [ 841.055716][ T6086] batadv0: entered promiscuous mode [ 841.063387][ T6086] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 841.079443][ T6086] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 841.105080][ T6086] hsr1: entered allmulticast mode [ 841.117153][ T6086] batadv0: entered allmulticast mode [ 841.147402][ T6086] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 841.180010][ T6086] batadv0: left promiscuous mode [ 841.404171][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.420841][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.533706][ T6107] netlink: 'syz.3.9364': attribute type 1 has an invalid length. [ 841.641924][ T6112] netlink: 'syz.3.9364': attribute type 1 has an invalid length. [ 842.157687][ T6090] syzkaller0: entered promiscuous mode [ 842.164529][ T6090] syzkaller0: entered allmulticast mode [ 842.286482][ T6111] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 842.322604][ T6111] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 842.408743][ T6113] gretap1: entered promiscuous mode [ 842.422922][ T6113] bond2: (slave gretap1): making interface the new active one [ 842.431978][ T6113] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 842.444366][ T6114] macvlan2: entered promiscuous mode [ 842.451682][ T6114] macvlan2: entered allmulticast mode [ 842.457998][ T6114] bond2: entered promiscuous mode [ 842.467480][ T6114] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 842.480157][ T6114] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 842.493482][ T6114] bond2: left promiscuous mode [ 842.687988][ T6137] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 844.271077][ T6123] netlink: 'syz.4.9370': attribute type 29 has an invalid length. [ 844.417409][ T6152] __nla_validate_parse: 2 callbacks suppressed [ 844.417442][ T6152] netlink: 288 bytes leftover after parsing attributes in process `syz.1.9375'. [ 844.603990][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9377'. [ 844.634521][ T6165] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9377'. [ 844.657755][ T1536] IPVS: stop unused estimator thread 0... [ 844.734519][ T6176] netlink: 'syz.0.9384': attribute type 29 has an invalid length. [ 844.915763][ T6187] ip6t_srh: unknown srh match flags 5F28 [ 845.083357][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9389'. [ 845.117516][ T6193] netlink: 'syz.3.9389': attribute type 1 has an invalid length. [ 845.122403][ T6200] xt_socket: unknown flags 0x50 [ 845.175658][ T6200] bond4: entered allmulticast mode [ 845.182656][ T6200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 845.322969][ T6207] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 845.460893][ T6207] bond3 (unregistering): Released all slaves [ 845.533557][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9397'. [ 845.548169][ T6212] pimreg: entered allmulticast mode [ 845.586073][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9397'. [ 845.639904][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9405'. [ 845.762626][ T6243] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 845.775291][ T6242] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 845.830593][ T6256] syzkaller0: entered promiscuous mode [ 845.838247][ T6256] syzkaller0: entered allmulticast mode [ 846.716155][ T6295] netlink: 'syz.2.9420': attribute type 29 has an invalid length. [ 846.757722][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9420'. [ 847.165271][ T6325] pim6reg1: entered promiscuous mode [ 847.190059][ T6325] pim6reg1: entered allmulticast mode [ 847.209122][ T6329] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9432'. [ 847.230517][ T6330] netlink: 'syz.1.9433': attribute type 33 has an invalid length. [ 847.253079][ T6330] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9433'. [ 847.308162][ T6329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.475835][ T6329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.599239][ T6329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.794242][ T6329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.096599][ T5404] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.145124][ T5406] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.166395][ T5404] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.213199][ T5404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.277447][ T6414] netlink: 'syz.3.9453': attribute type 63 has an invalid length. [ 848.311718][ T6414] netlink: 'syz.3.9453': attribute type 63 has an invalid length. [ 848.483287][ T6424] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 848.529654][ T6424] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 848.745385][ T6435] IPv4: Oversized IP packet from 127.202.26.0 [ 848.763817][ T6437] syzkaller0: entered promiscuous mode [ 848.769324][ T6437] syzkaller0: entered allmulticast mode [ 849.196213][ T6466] syzkaller0: entered promiscuous mode [ 849.204396][ T6466] syzkaller0: entered allmulticast mode [ 849.531937][ T6489] __nla_validate_parse: 18 callbacks suppressed [ 849.531955][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9480'. [ 849.635044][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9480'. [ 850.110305][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9491'. [ 850.553005][ T6581] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9504'. [ 850.563073][ T6581] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9504'. [ 850.605802][ T6583] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9504'. [ 850.632679][ T6583] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9504'. [ 850.686865][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9506'. [ 850.696940][ T6586] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9506'. [ 850.802097][ T6583] netlink: 'syz.3.9504': attribute type 2 has an invalid length. [ 850.845172][ T6598] netlink: 'syz.0.9510': attribute type 1 has an invalid length. [ 850.845172][ T6600] netlink: 'syz.0.9510': attribute type 1 has an invalid length. [ 850.882035][ T6601] ipt_REJECT: TCP_RESET invalid for non-tcp [ 850.949077][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.075505][ T6615] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9515'. [ 851.107438][ T6619] syzkaller0: entered promiscuous mode [ 851.114156][ T6619] syzkaller0: entered allmulticast mode [ 851.186364][ T6619] tipc: Started in network mode [ 851.193638][ T6619] tipc: Node identity e2220219e373, cluster identity 4711 [ 851.220427][ T6619] tipc: Enabled bearer , priority 0 [ 851.228654][ T6617] netlink: 'syz.1.9516': attribute type 142 has an invalid length. [ 851.245344][ T6618] tipc: Resetting bearer [ 851.273124][ T6618] tipc: Disabling bearer [ 851.302502][ T6637] netlink: 'syz.2.9520': attribute type 29 has an invalid length. [ 852.082421][ T6700] netlink: 'syz.2.9538': attribute type 26 has an invalid length. [ 852.113105][ T6700] netlink: 'syz.2.9538': attribute type 26 has an invalid length. [ 852.341875][ T6721] netlink: 'syz.1.9545': attribute type 9 has an invalid length. [ 852.521515][ T6733] netlink: 'syz.0.9548': attribute type 10 has an invalid length. [ 852.532294][ T6733] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 852.543860][ T6733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.942869][ T6760] netlink: 'syz.0.9558': attribute type 1 has an invalid length. [ 853.278721][ T6777] bond5: entered promiscuous mode [ 853.284788][ T6777] 8021q: adding VLAN 0 to HW filter on device bond5 [ 853.321971][ T6777] bond5: (slave xfrm1): refused to change device type [ 853.461968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 853.742568][ T6808] openvswitch: netlink: IPv4 tunnel dst address is zero [ 853.973341][ T6827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.197994][ T6840] dvmrp0: entered allmulticast mode [ 854.283425][ T6845] tipc: Started in network mode [ 854.288440][ T6845] tipc: Node identity f6da14dd7fbc, cluster identity 4711 [ 854.305568][ T6845] tipc: Enabled bearer , priority 0 [ 854.322781][ T6845] syzkaller0: entered promiscuous mode [ 854.340618][ T6845] syzkaller0: entered allmulticast mode [ 854.414636][ T6845] tipc: Resetting bearer [ 854.445781][ T6844] tipc: Resetting bearer [ 854.478507][ T6844] tipc: Disabling bearer [ 854.716743][ T6870] dvmrp0: left allmulticast mode [ 854.726685][ T6870] pimreg: left allmulticast mode [ 854.857060][ T6870] __nla_validate_parse: 21 callbacks suppressed [ 854.857078][ T6870] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9588'. [ 855.029115][ T6887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9592'. [ 855.228407][ T6896] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.9596'. [ 855.342688][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9594'. [ 855.359507][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9594'. [ 855.416801][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9594'. [ 855.421848][ T6363] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.460220][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9594'. [ 855.478757][ T6893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9594'. [ 855.499021][ T5403] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.522787][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9594'. [ 855.528475][ T5403] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.545899][ T5403] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.812362][ T6929] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9603'. [ 856.215505][ T6942] team0 (unregistering): Port device team_slave_0 removed [ 856.229322][ T6954] netlink: 'syz.1.9610': attribute type 1 has an invalid length. [ 856.270803][ T6942] team0 (unregistering): Port device team_slave_1 removed [ 856.362129][ T6951] veth5: entered allmulticast mode [ 856.550849][ T6976] batadv1: entered allmulticast mode [ 856.876642][ T6998] syz_tun: left allmulticast mode [ 856.888903][ T6998] syz_tun: left promiscuous mode [ 856.896540][ T6998] bridge0: port 3(syz_tun) entered disabled state [ 856.918189][ T6998] bridge_slave_1: left allmulticast mode [ 856.924753][ T6998] bridge_slave_1: left promiscuous mode [ 856.930653][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.973716][ T6998] bridge_slave_0: left allmulticast mode [ 856.981916][ T6998] bridge_slave_0: left promiscuous mode [ 856.987782][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.274478][ T7033] syzkaller0: entered promiscuous mode [ 857.283063][ T7033] syzkaller0: entered allmulticast mode [ 857.309278][ T7034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 857.328910][ T7035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.382701][ T7034] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 857.622552][ T7041] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 857.638081][ T7041] bond3 (unregistering): Released all slaves [ 857.728866][ T7056] netlink: 'syz.0.9638': attribute type 12 has an invalid length. [ 857.758317][ T7056] netlink: 'syz.0.9638': attribute type 11 has an invalid length. [ 857.968339][ T7080] netlink: 'syz.4.9641': attribute type 12 has an invalid length. [ 858.027895][ T7080] bond0: (slave ip6gretap1): making interface the new active one [ 858.061666][ T7080] ip6gretap1: entered promiscuous mode [ 858.077586][ T7080] ip6gretap1: entered allmulticast mode [ 858.086058][ T7080] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 858.708463][ T7131] netlink: 'syz.0.9658': attribute type 3 has an invalid length. [ 858.877547][ T7145] xt_hashlimit: size too large, truncated to 1048576 [ 859.221190][T26572] Bluetooth: hci5: command 0x0405 tx timeout [ 859.513704][ T7186] ipt_rpfilter: unknown options [ 859.520808][ T7186] netlink: 'syz.0.9674': attribute type 4 has an invalid length. [ 859.778122][ T7206] syzkaller0: entered promiscuous mode [ 859.786032][ T7206] syzkaller0: entered allmulticast mode [ 859.921889][ T7211] __nla_validate_parse: 25 callbacks suppressed [ 859.921906][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9683'. [ 859.962685][ T7213] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 859.974801][ T7213] bond3 (unregistering): Released all slaves [ 859.983289][ T7219] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9682'. [ 860.064942][ T7228] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 860.079971][ T7228] bridge0: entered allmulticast mode [ 860.187459][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9690'. [ 860.200600][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9690'. [ 860.398936][ T7251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9695'. [ 860.410285][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9695'. [ 860.423653][ T7251] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9695'. [ 860.436292][ T7251] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9695'. [ 860.488680][ T7251] syzkaller0: entered promiscuous mode [ 860.494822][ T7251] syzkaller0: entered allmulticast mode [ 860.563044][ T7264] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 860.581963][ T7264] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 860.685113][ T7272] netlink: 'syz.3.9699': attribute type 10 has an invalid length. [ 860.699441][ T7272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9699'. [ 860.710204][ T7274] netlink: 'syz.2.9702': attribute type 1 has an invalid length. [ 860.756087][ T7272] dummy0: entered promiscuous mode [ 860.767651][ T7272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 860.815072][ T7279] bond3: (slave geneve2): making interface the new active one [ 860.832576][ T7279] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 860.844391][ T5408] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 860.856668][ T5408] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 860.866385][ T5408] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 860.896700][ T5408] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 861.006309][ T7290] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9708'. [ 861.038962][ T7290] vlan2: entered allmulticast mode [ 861.045680][ T7290] erspan0: entered allmulticast mode [ 861.218839][ T7306] netlink: 'syz.0.9712': attribute type 1 has an invalid length. [ 861.682545][ T5406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.709534][ T5406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.726159][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.769054][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.837063][ T7330] can: request_module (can-proto-3) failed. [ 861.931106][ T7358] netlink: 'syz.3.9724': attribute type 12 has an invalid length. [ 861.955535][ T7360] : entered promiscuous mode [ 862.392194][ T7401] Cannot find set identified by id 1 to match [ 862.547248][ T7408] netlink: 'syz.4.9739': attribute type 1 has an invalid length. [ 862.657378][ T7415] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 863.001306][ T7432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.323382][ T7453] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 863.361194][ T7453] bond4 (unregistering): Released all slaves [ 863.880832][ T7502] netlink: 'syz.2.9766': attribute type 83 has an invalid length. [ 864.281814][ T7542] vxlan0: entered promiscuous mode [ 864.288555][ T7542] vxlan0: entered allmulticast mode [ 864.309016][ T5397] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.325975][ T5397] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.340976][ T5397] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.353351][ T5397] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.012838][ T7602] __nla_validate_parse: 18 callbacks suppressed [ 865.012857][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9795'. [ 865.065574][ T7606] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9795'. [ 865.077959][ T7605] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 865.177159][ T7610] xt_bpf: check failed: parse error [ 865.248997][ T7623] netlink: 'syz.2.9801': attribute type 9 has an invalid length. [ 865.279439][ T7623] netlink: 'syz.2.9801': attribute type 11 has an invalid length. [ 865.287455][ T7623] netlink: 'syz.2.9801': attribute type 12 has an invalid length. [ 865.307233][ T7623] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.9801'. [ 865.325109][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9804'. [ 865.337021][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9801'. [ 865.358423][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9803'. [ 865.515883][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9806'. [ 865.565504][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9806'. [ 865.741997][ T7668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.832504][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9813'. [ 865.843631][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9814'. [ 865.868014][ T7672] hsr_slave_0: left promiscuous mode [ 865.880602][ T7672] hsr_slave_1: left promiscuous mode [ 865.933353][ T7674] gretap0: entered promiscuous mode [ 865.956272][ T7674] gretap0: left promiscuous mode [ 866.069223][ T7682] syzkaller0: entered promiscuous mode [ 866.075415][ T7682] syzkaller0: entered allmulticast mode [ 866.300174][ T7707] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 868.610403][ T7768] syzkaller0: entered promiscuous mode [ 868.616120][ T7768] syzkaller0: entered allmulticast mode [ 868.859932][ T7770] nbd7: detected capacity change from 0 to 127 [ 868.873896][ T5840] block nbd7: Receive control failed (result -32) [ 868.943295][ T7777] tun0: tun_chr_ioctl cmd 1074025675 [ 868.948689][ T7777] tun0: persist disabled [ 869.035649][ T7781] netlink: 'syz.4.9839': attribute type 32 has an invalid length. [ 869.517748][ T7811] netlink: 'syz.2.9848': attribute type 1 has an invalid length. [ 869.640054][ T7821] netlink: 'syz.0.9853': attribute type 33 has an invalid length. [ 869.739865][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.887622][ T7835] xt_hashlimit: size too large, truncated to 1048576 [ 870.247985][ T7858] __nla_validate_parse: 12 callbacks suppressed [ 870.248002][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9866'. [ 870.264944][ T7858] openvswitch: netlink: Flow actions attr not present in new flow. [ 870.307074][ T7855] lo speed is unknown, defaulting to 1000 [ 870.389034][ T7862] netlink: 'syz.0.9868': attribute type 21 has an invalid length. [ 870.410356][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9868'. [ 870.627453][ T7865] netlink: 'syz.0.9869': attribute type 12 has an invalid length. [ 870.640719][T26572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 870.646944][ T7865] netlink: 'syz.0.9869': attribute type 29 has an invalid length. [ 870.660028][T26572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 870.682880][T26572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 870.692031][T26572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 870.693927][ T7865] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9869'. [ 870.711517][T26572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 870.742587][ T7865] netlink: 59 bytes leftover after parsing attributes in process `syz.0.9869'. [ 870.771639][ T7866] lo speed is unknown, defaulting to 1000 [ 870.818580][ T7869] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9870'. [ 870.850443][ T7869] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9870'. [ 870.860073][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9870'. [ 870.892602][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9870'. [ 871.053436][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9872'. [ 871.067224][T30385] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 871.079138][T30385] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 871.087550][T30385] CPU: 0 UID: 0 PID: 30385 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 871.097177][T30385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.107212][T30385] RIP: 0010:klist_del+0x49/0x110 [ 871.112141][T30385] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 a7 d6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b a7 d6 f6 4d 8b 7e 58 4c 89 f7 e8 5f 11 [ 871.131731][T30385] RSP: 0018:ffffc900034b77a8 EFLAGS: 00010202 [ 871.137785][T30385] RAX: 000000000000000b RBX: ffff88801b7dd460 RCX: ffff88808fb80000 [ 871.145735][T30385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 871.153686][T30385] RBP: ffffc900034b78d0 R08: ffff88805a740e13 R09: 1ffff1100b4e81c2 [ 871.161641][T30385] R10: dffffc0000000000 R11: ffffed100b4e81c3 R12: dffffc0000000000 [ 871.169604][T30385] R13: 1ffff110036fba8c R14: 0000000000000000 R15: ffff888068388758 [ 871.177573][T30385] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 871.186493][T30385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 871.193065][T30385] CR2: 0000200000000200 CR3: 000000004c738000 CR4: 00000000003526f0 [ 871.201023][T30385] Call Trace: [ 871.204294][T30385] [ 871.207230][T30385] device_del+0x280/0x8e0 [ 871.211551][T30385] ? _raw_spin_unlock_irq+0x2e/0x50 [ 871.216733][T30385] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 871.222872][T30385] ? __pfx_device_del+0x10/0x10 [ 871.227719][T30385] ? netdev_unregister_kobject+0x344/0x450 [ 871.233518][T30385] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 871.240014][T30385] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 871.246762][T30385] ? rtnl_net_dev_lock+0x36/0x2f0 [ 871.251856][T30385] ? rtnl_net_dev_lock+0x36/0x2f0 [ 871.256862][T30385] unregister_netdev+0x157/0x1f0 [ 871.261793][T30385] ? __pfx_unregister_netdev+0x10/0x10 [ 871.267242][T30385] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 871.273206][T30385] bnep_session+0x29a5/0x2bd0 [ 871.277881][T30385] ? __lock_acquire+0x6b6/0x2cf0 [ 871.282809][T30385] ? __pfx_bnep_session+0x10/0x10 [ 871.287820][T30385] ? __pfx_woken_wake_function+0x10/0x10 [ 871.293447][T30385] ? __kthread_parkme+0x7b/0x200 [ 871.298415][T30385] ? __kthread_parkme+0x1a1/0x200 [ 871.303449][T30385] kthread+0x711/0x8a0 [ 871.307540][T30385] ? __pfx_bnep_session+0x10/0x10 [ 871.312557][T30385] ? __pfx_kthread+0x10/0x10 [ 871.317130][T30385] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.322400][T30385] ? __pfx_kthread+0x10/0x10 [ 871.326981][T30385] ret_from_fork+0x510/0xa50 [ 871.331649][T30385] ? __pfx_ret_from_fork+0x10/0x10 [ 871.336754][T30385] ? __switch_to+0xc9e/0x1480 [ 871.341425][T30385] ? __pfx_kthread+0x10/0x10 [ 871.346017][T30385] ret_from_fork_asm+0x1a/0x30 [ 871.350796][T30385] [ 871.353811][T30385] Modules linked in: [ 871.358543][T30385] ---[ end trace 0000000000000000 ]--- [ 871.364875][T30385] RIP: 0010:klist_del+0x49/0x110 [ 871.369916][T30385] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 a7 d6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b a7 d6 f6 4d 8b 7e 58 4c 89 f7 e8 5f 11 [ 871.392318][T30385] RSP: 0018:ffffc900034b77a8 EFLAGS: 00010202 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 871.398466][T30385] RAX: 000000000000000b RBX: ffff88801b7dd460 RCX: ffff88808fb80000 [ 871.406506][T30385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 871.415338][T30385] RBP: ffffc900034b78d0 R08: ffff88805a740e13 R09: 1ffff1100b4e81c2 [ 871.423633][T30385] R10: dffffc0000000000 R11: ffffed100b4e81c3 R12: dffffc0000000000 [ 871.458537][T30385] R13: 1ffff110036fba8c R14: 0000000000000000 R15: ffff888068388758 [ 871.466823][T30385] FS: 0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 871.476043][T30385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 871.483756][T30385] CR2: 0000555f600f9f40 CR3: 0000000029554000 CR4: 00000000003526f0 [ 871.491856][T30385] Kernel panic - not syncing: Fatal exception [ 871.500915][T30385] Kernel Offset: disabled [ 871.505258][T30385] Rebooting in 86400 seconds..