last executing test programs: 2.521096737s ago: executing program 0 (id=2541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r3, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.121747829s ago: executing program 2 (id=2544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x2e09}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffc57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.109280959s ago: executing program 0 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000540)='GPL\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5c, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x80) 2.077123891s ago: executing program 3 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000200)) recvfrom(r1, 0x0, 0x0, 0x40013121, 0x0, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000040)={&(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000000c0)={0x0}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/177, &(0x7f00000001c0)=0xb1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x9, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) close(r2) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x334, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x1b0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x334}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008044) 1.981793727s ago: executing program 4 (id=2547): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000001180)=""/4089, 0x41, 0xff9, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128010000100767469000c0002800800020000000000"], 0x38}, 0x1, 0x7500}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) 1.979426655s ago: executing program 1 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{@none}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x90) 1.911523916s ago: executing program 2 (id=2549): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') read(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000040), 0x4000000000001f2, 0xfc) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r3, r1}) 1.842061077s ago: executing program 3 (id=2550): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0x5e}, 0xfffffffffffffffd, 0x0, 0x480000000, 0x41, 0x29, 0x100000001, 0x5, 0x9}}], 0x58}, 0x0) 1.769807056s ago: executing program 1 (id=2551): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x1}}, 0xffffffd9, 0x0}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.767441606s ago: executing program 4 (id=2552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x22, 0x6, "4cdb81081040f3dedf722e0e7fc25887b46de9983816acd22f873656bf87"}]}, @NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x59, 0xc, "7370c1892160aa6673b8c3e15292eab515d82101a5c775493e72914f512cb9d2dd817c468d92cd39309bca384488dfe59c33a58863b258301f5773becfa83967e55145cc1cba88d792e568d7286922b3d934249798"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x14c}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) 1.667308586s ago: executing program 1 (id=2553): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000001500)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000001540)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000001580)={0x0, 0x5}, &(0x7f00000015c0)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/4093, 0xffd}, {&(0x7f00000013c0)=""/152, 0x98}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5}, 0x1}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000001640)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000001680)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0xfffffdfe, 0xb, 0x428}, {0x6, 0x11, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x2048001) 1.631024053s ago: executing program 3 (id=2554): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20008810) (rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 1.60061092s ago: executing program 4 (id=2555): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x30, r2, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000100f5000000000000000000009112b9000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010000070900010073797a30000000002c000000030a01010000000000000000010000070900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340000657874686472000024000280080001400000000c08000340000000f608000440000000a20500020007000000300001800c000100626974776973650020000280080003400000000408000140000000140800024000000012040007800900012bfb797a3000000000140000001100010000ff0000000000000100000a"], 0x104}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r8, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c040) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x80, r6, 0x214, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.543812398s ago: executing program 1 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000380)=0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000a00)=""/4076, &(0x7f0000001a00)=0xfec) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580040001"], 0x44}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000003c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x50840}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x800, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x20040001) 1.457120289s ago: executing program 0 (id=2557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r1, 0x0, 0xc, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1.435060556s ago: executing program 2 (id=2558): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x198, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x0, 'NFQUEUE\x00', 0x1, {0x8, 0x6}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x901, 0xffffffff, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'veth1_macvtap\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000001200)={&(0x7f0000000100)=""/68, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000012c0)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000001300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000001340)={0x2c, 0x0, r4, 0xc}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000001000)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c5eaaf07391c763e1daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x2a355000) 1.393974006s ago: executing program 3 (id=2559): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x80, 0xcd06366968a6d56d, 0xffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'virt_wifi0\x00', 'veth0_to_bridge\x00', {}, {}, 0x3b, 0x1, 0x0, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3}, {0x2, 0x3}, {0x2, 0x0, 0x7}, 0x2, 0x19f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2b, 0x84, 0x1}}, @common=@mh={{0x28}, {"24e4"}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x0, 0x6}, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x202, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4400}, 0x44000) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socketpair(0x6, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000640)={0x1, @le_set_cig_params={{0x2062, 0x3c}, {0xb8, "3eb303", "0fbc52", 0x9, 0x65, 0x5, 0xe, 0xc, 0x5, [{0xa7, 0x800, 0x0, 0x5, 0x1, 0x6, 0x8}, {0x5, 0x4, 0x2, 0x9, 0x5, 0x0, 0x9}, {0xa, 0x67, 0x1, 0x8, 0x1, 0xc}, {0xfa, 0xb, 0x8, 0x6e, 0x3, 0x9, 0x10}, {0xd, 0x2, 0x3, 0x3, 0xb1, 0x3, 0x81}]}}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) socket$unix(0x1, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6e}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000800)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)="862bba228dd4c47bee666755b5a04ac036046c27e45705e9f27767006a95082b5705fcdd27531cf4ffff2832e6061e22a7f2d31ae592addf7a91008bb4a4f856dcaa1363c650e97806bdd9d0e1508766", 0x50}, {&(0x7f0000000900)="08a9cdd45a1dea10cf7b7a3702cd8c0577335e2bdb3ec9dd85cadc6dce0f4e5b3cbef9d888d5a1ecd1ca2b10faa386b2f91af8c33936fcabfba48e1bc9c5c847998c3d56e147609e6d80652bc6e6047b559e2006d9c725a0ccfa30b1f479bc8c859287e53d3e0c49b1cd345caef2cda7b8f5a470b1a0da23ecf4515d87", 0x7d}, {&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000a80)="0a2d8eed8e9978e02c3dc3c7c54424aed259f391f0f341e7d49aff95ffa2e69d34123c28c088f92762b6daa72bff5597c4f35a24400c65fb822d360cdf6df4dbf7b6f21409ba323fe40a6d5ed352ccf0", 0x50}, {&(0x7f0000000b00)="fb17482e3a7df194f1c9599593af370ee4ff8cea99faaab30b07dfd72a060d5e99fd0fbe0dbd9dd8f9454823d186a05877225c1df5990f0df5f18bfc673d20db0786ab3523df148c9dae5a2e9e16ef3e6e25e0b7dc646585ac3f2d3ba40431f33f92e9dfc168721ca204ee76af492adfaa3c1ff8a62f0a765523da940342646b85a85985e1295c60c81b0eb0c1a02de3e81c50e651ae5786d954adb5fcfba1c9a2f7834ec7eb1d400ba8c7e584a2de14e1b46000a9354b4e7c5a6f37cd02044886b1c8d0748c27e252e28f0aecf56ce631e7d13ba186421b65c0c689eb198ab05d2f9a4f1ec72eb00a591f7812244985e10a7e4b724433", 0xf7}, {&(0x7f0000000c00)="8d5fc182afab9784bb5a0d63d0febebc5bc212ec937709d37b2a7f67f4104c001d9a5927098ae6223d9481ae954c42de694d649895817ba78b219315432993d3b72301573052393fbcc6bd755197b9a63ad47512cfa35209d2650ccb5899b42a009e34cbe38defbb", 0x68}, {&(0x7f0000000c80)="86fe877466b606a6b1ef8010df8e113473774d82dbba94a9f919340fbbfcda9a139989b2cb605e925275269bcc66d144b726bffbc0b5b8781bb84edaad814d4c6bc48f88bdf3b609c8e717bf82b8c38efd87030cda653cf67eba6d545fc98f7f6be776d333b49e377236c32905d5185bf403bc8bd682b2302610b3dcfa4f6ec3ade55fc64d30bcb4815c56576c2da7e794f569a9e08f661a680b255e0c12c6c5f6957e6fffafde6aee109d3930fd9b864b2797c403e109956cdf2467fd1462ff1a668910efe7bace6c63324a6f1c64f738883d774134011157f2b9c2880d87a3c14b4f09", 0xe4}, {&(0x7f0000000d80)="1ab749455cf371fcabc8e2b06a0c732bb7e40acaba9b380de2fe6049620dbf944d6cdac88c7ca627eb8f3a0a8f543de10cb30f887d1f9e9ccfd24c7092cbfe8b1b4a5291566cd8f174aa208f7b3dc7c79cb32d7dad46028ab15844c46e56ef54ce67592674bb655db2b2f171ceb5f997ba3bbb26aaa962792b001a2a08fb501486205e64aa735870be89e23d9aaec8b8e09c", 0x92}], 0x8, &(0x7f0000000ec0)=[{0x40, 0x12a, 0x3ff, "b7564bff4ddabaf59305d4011170c61309f97deddabe0cbbfc104511d9de367de06e36974e01017127ae2d797a"}, {0xe8, 0xc, 0xdb2, "d4591cc161e4be3a2c25e8929697ba47265bddd4c341d37fcbd7bcb6b896608914ca63e0ca174d7f607cc7a16dc5ce85174a5c139d35c5b874d60fad4a80a719bc56f6c1ebca1028d581db7ce8f9a1a17aa2358b30094032b113fcdf4449ee00e34b9d8cd013329666c541da35b5123dda6b56808780ab0e5609f1f8ee6ef42420b2f449e101ad4ae4b03966d785bb9f49a9bbcb0638bb97eca24d9c05c28ffa0e9f556d20a64ef38358139408fa0c5a0a56c27988d254ce6e6777508c8e51ff600bace5a6517b2d0be1aabb7ba72a0cf59e"}, {0xa8, 0x88, 0x8, "c367d14ca34d8c26e38719458d7d6eef17315f9d23195c662b6bb84ffd063ef50fb52f0b5ba7fb63cea2fc187b932d5431af742d8f8ca6ce228f917325fed4af31803ce1d507987661552cb56874ca7725689d11c7b2d4ca87148ca44ece64f2f76fc410b198c5d2da5f1f9c323b76851f894130072e08605ebe53bd1dfab3f96d5bf8133d90e3f3fc6305df0cdc09b82c"}, {0xc0, 0x104, 0x0, "e6a9e1ca22e435111bbf8d8e0db6535406ad034190fa7b81c5882898d91ebac9ba1467c853593238eaa4d48a693813e067044daa446131acdaf998c39da3e78ed2d0c1a90d37d36fc08a5d0626b22be6a67ce22067b93220a00baf2ddffd527971753fe448b0c518b3e57fc9490c4411dc2c8c33ddf0281145a4140c15082021c70d455d0acdd29de227da5b15bbf74452d7425a9cff08855decfbc417978d56701ba84a839f30fd4fe884"}, {0xe0, 0x107, 0x3, "2d1f5afaee9004a9bc732e0bebe55538aebdb69f1238d983f8008ee0b21ccc6544087cfd4868810708a5aaf615040fcfa2e1eb26ee425b2d48f155ea7764210ed7421f39e6bd5bbbafb31b9c4096f1d41b0d5b10cdc2705a25eae370b52ff8157ef7d347e17701641c649ed5adc7bf9887bb664bd6b0fe19b59ba3c25cb6e16a88e462412bd6859e65185829550430f6e1ed02c00c8fff89de7e1c44e50e9c1464b75bef6b99b30f18ab1a549aa002d25c0313224d5694dd19632afe2d14888e037ccb516e7d6c6c96a94ad36c"}, {0xa8, 0x113, 0x9, "64299d291bd4684fb3cc465b7037f549c38c0b84d2a4d7a26549e4afd7d81907a6c15208fd9b289de9f2aab304ed31773ab584ff18aff5cbcb34ff6bfe487ab7e730d5b8bb885ad56c690d5adab96f9f04eeb0508ce6f011dc1b7413d7a544cb50a904be258a4359407f160f7ab395117ebdda647be84c14528f1323f4417f33bd10dc6884110a0d173cb81f22c3a28cf86eb28e323e19"}, {0xf0, 0x112, 0x1, "c43c00d010244cdf22c9eb6d7ade105cd80859c1bd10af4fc681f7a0d10eca82016bf865065fbd5d87db6d45d0eaee48ff8964c625af30804a75d31a7cfaa76a636cb1c858dc30fd4dddc89c4ae62fb397e21d3e65f568e1c13c677026f9e6a58076104e21176bfc04de38425057353b4bb76ffadd7e7687873b06e5ce3e1cfbee73b100b5c43e5c986985bb8705f804f93ac47e3c7f704eaf0a5d9883b77a837fc6612ba4e2d2bbf4464410125490bf08529dc601e664a23f07f082b514845afc320328ce418d11e5a1d1ffd3695b62ddff75d9cdd4c7f8717d66f7"}], 0x508}, 0x4000000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7c14, 0x49}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001540)={'bridge0\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xa8, 0x0, 0x320, 0x70bd29, 0xff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x880}, 0x40000) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xfffffff6, 0x4) pipe(&(0x7f0000001700)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0xa0200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x44, r10, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) sendto$packet(r5, &(0x7f0000001a40)="49537d29a46c0cf30b26c2829652a011f19e6b6d2133c4838017049762ffc8b4c7a1cf4c63227202d82cebcc4e621c9223482c906bf7fe9ee785e821cdd2f530b5265757671e5a246a54ed945f97a362d5596619d6df4df043cbac2ce329", 0x5e, 0x40000, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x60, r11, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x58, 0x61}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xf}, @device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x2}, @device_a, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0xf}, {0x9, 0x6}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x48805) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000001c80)=0x5, 0x4) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001d40), &(0x7f0000001d80)=0x4) 1.285118072s ago: executing program 1 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) recvfrom$inet(r2, &(0x7f0000000100)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x3083aa9426620cf0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x10000, 0x7f, 0x1, 0x7, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.284243297s ago: executing program 4 (id=2561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0xc8a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000700)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x9, 0x9}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x1}]}}, {{0x4e21, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}}}}, 0x36) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xfff3}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7034}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40080c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f00000005c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x0, 0xfffffffe}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "1a000b000000366a6a849a7390450024"}}]}, 0x148}}, 0x44050) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.229783468s ago: executing program 0 (id=2562): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000b40)=0x4, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) (async, rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b00)={r4, 0x0, 0x0}, 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x2c, 0x66, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0x10}, {0xffe0, 0xfff3}, {0x4, 0xe}}, [{0x8, 0xb, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) (async) sendmmsg(r0, &(0x7f0000000340), 0x4000000000001f2, 0x0) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000500)={0x1, 0xcb, "d87b6a5c6f1f0dca9c58b470a37f1a43b0e1d5c83c750497a81e590261c623c872dd39da3905bd68b0bb9b7f0b104db74fca39e46b08e95f189ecf61c65226e5d65cebff52c7e19f2693c27be090fcca8a0fba3c92f67ba22061b5d3398aea1a622621d7c18ca1b543a19ea6a5c56f0177622393c8689741ce778c36bedaa7bb74b393255c350452aa471d21def374723f289ed4d2287bbccc82cfa76f3b6257530d752f8f7498ea9a09e7e157ee5e7e927cab8355bf9fd831b41154a58bdd1321c41a0c995df5b6c49377"}, &(0x7f0000000600)=0xd3) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000640)={r8, 0x27}, &(0x7f0000000680)=0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000100)=0xff, 0x4) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000140)) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000084076089800b00010065727370616e00002000028005001600020000000500170000000000080018000000000004001200"], 0x50}}, 0x0) 1.194608667s ago: executing program 2 (id=2563): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b6bf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f00000009c0)=0x2, &(0x7f0000000a00)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000a40)={r4, &(0x7f0000000a80)}, 0x20) connect$pppl2tp(r0, &(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x3, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r6, 0x40047459, 0x0) pipe(&(0x7f0000000400)) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x29, 0x21, 0xb, 0x2, 0x13, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7, 0x800, 0xcc48}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x1}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=r10, 0x4) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=r10, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0x0, 0x1, 0x0, &(0x7f0000000e00)=[{0x0, 0x7, 0xd, 0x9}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r4, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1a, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000060000000000000000000000000080184b0000fcffffff00000000000000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x1fa000, 0x0, 0x0, 0x41100, 0x8, '\x00', r9, @fallback=0x2f, r7, 0x8, &(0x7f0000000bc0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x1, 0x3, 0x18}, 0x10, r10, r2, 0x0, &(0x7f0000000f00)=[r5, r5, r8, r12], 0x0, 0x10, 0x10001}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1a, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000060000000000000000000000000080184b0000fcffffff00000000000000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x1fa000, 0x0, 0x0, 0x41100, 0x8, '\x00', r9, @fallback=0x2f, r7, 0x8, &(0x7f0000000bc0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x1, 0x3, 0x18}, 0x10, r10, r2, 0x0, &(0x7f0000000f00)=[r5, r5, r8, r12], 0x0, 0x10, 0x10001}, 0x94) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f0000000480)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r8, &(0x7f0000000440)=[{&(0x7f0000000480)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3903b20b", @ANYRES16=0x0, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r7, 0x0, r13, 0x0, 0x10d00, 0xf) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x140, 0x1170, 0x1170, 0x140, 0x1170, 0x230, 0x1398, 0x1398, 0x230, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x2, 0x1}}, @common=@unspec=@helper={{0x48}, {0x1, 'sane-20000\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x140, 0x1170, 0x1170, 0x140, 0x1170, 0x230, 0x1398, 0x1398, 0x230, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x2, 0x1}}, @common=@unspec=@helper={{0x48}, {0x1, 'sane-20000\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 1.012959102s ago: executing program 1 (id=2564): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}}], 0x1, 0x2000c850) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet(0x2, 0x3, 0x2) r2 = socket(0x2a, 0x2, 0x3) accept$inet(r2, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000001c0), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000014c0)=0x0, &(0x7f0000001500)=0x4) unshare(0x8000400) write$nci(0xffffffffffffffff, 0x0, 0xc) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000000400)=[0xffffffffffffff39, 0x3ff]) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001540)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000015c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000001600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4f50}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x44}, @ldst={0x2, 0x0, 0x6, 0x7, 0xb, 0xffffffffffffffe0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x48, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001580)={0x1, 0xe, 0x12, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001640)=[r5], &(0x7f0000001680)=[{0x5, 0x4, 0xe, 0x8}, {0x2, 0x3, 0x8, 0x8}, {0x3, 0x1, 0xa, 0x9}, {0x1, 0x3, 0x0, 0x3}, {0x2, 0x1, 0xb, 0x9}, {0x2, 0x3, 0x2, 0x2}], 0x10, 0xd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) 979.677558ms ago: executing program 3 (id=2565): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x3, 0x34d, 0x9, 0x8}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) pread64(r1, &(0x7f00000000c0)=""/229, 0xe5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0xf, 0x40000, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r2, 0xfffffffffffffffe, 0x0, 0x7ff}) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, 0x464, 0x200, 0x70bd2c, 0x25dfdbfe, "34e4065f6deb07530318881e1f1811fe6ee2834f01d172b3e9f05d7a44ea189cacc34695d0a8e6b52f3744cdaf5af1bbd1cf76e430d691c87bd2c133fce772f680bb84748f04c681dc70b71c6266ab8bbc749f7bf7e13f8002cd3ae73e0d289ae1f83b6723c876a86c7ff2737f787838ea894964c56b01bd7bdad229db8bb5ad84b17e299520d432d021f8d09877a1b846d476d3ff", ["", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x800) getpeername$l2tp(r5, &(0x7f0000000540)={0x2, 0x0, @initdev}, &(0x7f0000000580)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000007c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000800)) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x9, &(0x7f0000000840)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000008c0)='GPL\x00', 0xa, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001900)={0x0, 0xc, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001940)=[r2, r0, r5, r5, r2], &(0x7f0000001980)=[{0x2, 0x4, 0xa, 0x9}], 0x10, 0xfffffffa}, 0x94) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000001a80)={r11, 0x0, 0x0, 0x4, 0x6, 0xf}) getpeername$packet(r5, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b40)=0x14) sendmsg$nl_xfrm(r5, &(0x7f0000001d80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b80)=@expire={0x1c0, 0x18, 0x200, 0x70bd27, 0x25dfdbfe, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback, 0x4e21, 0x1, 0x4e22, 0x8, 0xa, 0x20, 0x20, 0x33, 0x0, r10}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d3, 0x6c}, @in=@private=0xa010102, {0x47b, 0x6, 0xfd9, 0x8000000000000000, 0xed46, 0x5, 0x552, 0x3ff}, {0x2ff5, 0x6, 0x3ed, 0x3}, {0x648800, 0xcfb, 0x8}, 0x70bd26, 0x34ff, 0x2, 0x5, 0xc, 0xc4}, 0x7}, [@sa_dir={0x5, 0x21, 0x2}, @policy={0xac, 0x7, {{@in6=@empty, @in6=@private1, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x3f, r12, r10}, {0x9, 0x2, 0x1, 0x2, 0x9, 0x8000, 0x7, 0x3}, {0x7, 0x9, 0x70a7, 0x6}, 0x4, 0x6e6bbf, 0x1, 0x1, 0x1, 0x3}}, @policy_type={0xa}, @proto={0x5, 0x19, 0xff}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x404c440}, 0x14081) syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001e00), &(0x7f0000001e40)=r5}, 0x20) ioctl$XFS_IOC_GETBMAP(r13, 0xc0205826, &(0x7f0000001ec0)={0x1, 0x1, 0x9c1a, 0x4, 0x9}) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001f40), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001f80)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r14, 0x68c, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000061) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000002080)={0x774, 0x5, 0x3ff, 0x6}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004890}, 0x40000) setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f00000021c0)=0x2000000, 0x4) 629.738205ms ago: executing program 3 (id=2566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@remote}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x0, 0x1000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000300)={&(0x7f0000000340)={0xa, 0x2, 0x4, @empty}, 0x1c, 0x0}, 0x20008b98) (async) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x10) (async) write(r5, &(0x7f0000000040)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0) (async) socket(0x5, 0x80000, 0xffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x100, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x50}}, 0x0) 518.929107ms ago: executing program 0 (id=2567): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x80c00}, &(0x7f0000000080)=0xc) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r2, 0x9}, 0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000540)={r2, 0xb5, "9dadf45522367a7793b95592dacd86ef6fc80c19c7e0b4a228ec38f599577f8c6c6e926938eae8a1c37d24c4661df4220120109f2bbfcd781122a31ca3f4d07d37551e6fb3d83c6c521d26cd82ac4dbc64c4996f0ecdd23ceb79a46133678744b61963bd64da4a2c7633951275f17d4f2e26ddcf97686c96b5557dd493c0b39a39cae772349fb936c4c6a6066a10470927108c071162663741f0c6c43e5a533951e8af30d47661a9b75e72d2f78136c559e809cdaf"}, &(0x7f0000000600)=0xbd) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a0106000000007b000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000f90000000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002040000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000014000480100001800a0001007265646972"], 0xf8}}, 0x0) 464.632014ms ago: executing program 2 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x44, r7, 0xa2b, 0x70bd2f, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "00000000132600008a0600"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}}, 0x24000010) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20402001}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x51}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x4811) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x640040f0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) (rerun: 32) sendto$packet(r10, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 303.766642ms ago: executing program 4 (id=2569): r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000400)=0x10, 0x80000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000440)={0x4, 0x80000001}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) write$cgroup_devices(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0x4}], 0x1c) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0) r5 = socket$kcm(0x10, 0x8, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b409000000000000007a146efb4400", 0x2e}], 0x1}, 0x4000000) accept4$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000400)=0x10, 0x80000) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000440)={0x4, 0x80000001}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, 0x0, 0x8) (async) write$cgroup_devices(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) (async) write$cgroup_devices(r2, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x4, @loopback, 0x4}], 0x1c) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_USER(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) (async) sendmsg$AUDIT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0) (async) socket$kcm(0x10, 0x8, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b409000000000000007a146efb4400", 0x2e}], 0x1}, 0x4000000) (async) 95.640895ms ago: executing program 4 (id=2570): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071106a000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) 44.889549ms ago: executing program 2 (id=2571): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/4281], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x20, 0x3, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000002c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000002dc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0x8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e00)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002f00), 0x1, 0x0) writev(r5, &(0x7f0000002f40)=[{&(0x7f0000002f80)="22eb36", 0x3}], 0x1) socket$inet6(0xa, 0x80002, 0x0) pwritev(r5, 0x0, 0x0, 0x8, 0x10001) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x850) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000002fc0)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002c80)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x3, 0x8, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff82, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x38}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f0000002b00)={'pim6reg\x00', {0x2, 0x0, @remote}}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002840)={@cgroup=r1, r6, 0x2f, 0x28, 0x4}, 0x20) 0s ago: executing program 0 (id=2572): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xc, &(0x7f00000001c0)=0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000180)='GPL\x00', 0x4}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): e type 4 has an invalid length. [ 128.058569][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.059426][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.060228][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.061030][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.061801][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.062574][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.063340][ T7369] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 128.492958][ T7381] syzkaller1: entered promiscuous mode [ 128.492981][ T7381] syzkaller1: entered allmulticast mode [ 128.672321][ T7390] __nla_validate_parse: 5 callbacks suppressed [ 128.672343][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 128.904086][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 128.992613][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.415'. [ 129.018308][ T7408] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 129.732383][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.732578][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.732754][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.735787][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.736112][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.736280][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.736445][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 130.241515][ T7461] validate_nla: 25 callbacks suppressed [ 130.241534][ T7461] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 130.297606][ T5613] Bluetooth: hci0: connection err: -111 [ 130.353994][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.354977][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.453636][ T7435] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 130.456290][ T7473] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 130.481812][ T7477] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 130.484886][ T7470] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 130.502089][ T7475] ipt_rpfilter: unknown options [ 130.587231][ T7480] netlink: 'syz.1.430': attribute type 2 has an invalid length. [ 130.603404][ T7461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.679086][ T7464] bond2: (slave geneve2): making interface the new active one [ 130.682128][ T7464] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 130.840498][ T7484] bond1: option downdelay: invalid value (18446744073709551615) [ 130.840523][ T7484] bond1: option downdelay: allowed values 0 - 2147483647 [ 130.874011][ T7484] bond1 (unregistering): Released all slaves [ 131.713392][ T7528] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 132.805826][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806069][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028885][ T7571] netlink: Unknown conntrack attr (type=13061, max=9) [ 133.028934][ T7571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.034194][ T7568] ip6t_rpfilter: unknown options [ 134.578004][ T7621] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 134.784572][ T7621] __nla_validate_parse: 69 callbacks suppressed [ 134.784590][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 134.847547][ T7613] bridge_slave_0: left allmulticast mode [ 134.847576][ T7613] bridge_slave_0: left promiscuous mode [ 134.847866][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.891906][ T7613] bridge_slave_1: left allmulticast mode [ 134.891935][ T7613] bridge_slave_1: left promiscuous mode [ 134.892276][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.926224][ T7613] bond0: (slave bond_slave_0): Releasing backup interface [ 134.954601][ T7613] bond0: (slave bond_slave_1): Releasing backup interface [ 135.066340][ T7613] team0: Port device team_slave_0 removed [ 135.115661][ T7613] team0: Port device team_slave_1 removed [ 135.117406][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.117513][ T7613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.139342][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.139517][ T7613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.163846][ T7613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.227208][ T7621] bond1: (slave bridge1): making interface the new active one [ 135.227899][ T7621] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 135.250709][ T7632] vlan0: entered promiscuous mode [ 135.285805][ T7632] team0: Port device vlan0 added [ 135.380295][ T7649] netlink: 14 bytes leftover after parsing attributes in process `syz.3.474'. [ 135.589171][ T7649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.611001][ T7649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.629298][ T7649] bond0 (unregistering): Released all slaves [ 135.877906][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 136.055300][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 136.392942][ T7707] trusted_key: syz.1.488 sent an empty control message without MSG_MORE. [ 137.165338][ T7742] syzkaller1: entered promiscuous mode [ 137.165362][ T7742] syzkaller1: entered allmulticast mode [ 137.400845][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 137.552288][ T7761] netlink: 'syz.0.501': attribute type 7 has an invalid length. [ 137.654873][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 137.770485][ T5613] Bluetooth: hci4: link tx timeout [ 137.770505][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.912422][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 137.985515][ T7784] bridge0: entered promiscuous mode [ 137.987078][ T7784] bridge0: entered allmulticast mode [ 138.066586][ T190] IPVS: starting estimator thread 0... [ 138.160410][ T7787] IPVS: using max 29 ests per chain, 69600 per kthread [ 138.210464][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.210809][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.268219][ T5613] Bluetooth: hci4: link tx timeout [ 138.268242][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.318735][ T5613] Bluetooth: hci4: link tx timeout [ 138.318757][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.453760][ T7791] No such timeout policy "syz0" [ 138.709018][ T5613] Bluetooth: hci4: link tx timeout [ 138.709039][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.013489][ T5613] Bluetooth: hci4: link tx timeout [ 139.013513][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.073185][ T7814] bridge0: port 3(veth1_to_bridge) entered blocking state [ 139.074959][ T7814] bridge0: port 3(veth1_to_bridge) entered disabled state [ 139.075130][ T7814] veth1_to_bridge: entered allmulticast mode [ 139.077502][ T7814] veth1_to_bridge: entered promiscuous mode [ 139.704010][ T7824] bridge_slave_0: left allmulticast mode [ 139.704039][ T7824] bridge_slave_0: left promiscuous mode [ 139.704280][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.788428][ T5613] Bluetooth: hci4: link tx timeout [ 139.795608][ T5613] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.822147][ T7829] xt_socket: unknown flags 0x4 [ 139.843971][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 140.137863][ T7832] gtp0: entered promiscuous mode [ 140.138051][ T7832] gtp0: entered allmulticast mode [ 140.170248][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 140.171881][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 140.478002][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 178.667218][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.708335][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.841570][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 178.954414][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 179.213669][ T7949] netlink: 68 bytes leftover after parsing attributes in process `syz.4.539'. [ 179.778405][ T7974] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 179.861726][ T7974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.894071][ T7982] netlink: 80 bytes leftover after parsing attributes in process `syz.0.545'. [ 179.912391][ T7981] netlink: 80 bytes leftover after parsing attributes in process `syz.0.545'. [ 180.110152][ T7997] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 180.111188][ T7998] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 180.242594][ T7958] netlink: 68 bytes leftover after parsing attributes in process `syz.4.539'. [ 181.039145][ T7976] bond3: (slave veth7): Enslaving as an active interface with a down link [ 181.063207][ T8016] bridge0: port 3(syz_tun) entered blocking state [ 181.063319][ T8016] bridge0: port 3(syz_tun) entered disabled state [ 181.063460][ T8016] syz_tun: entered allmulticast mode [ 181.073841][ T8016] syz_tun: entered promiscuous mode [ 181.248876][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 181.314594][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 181.649146][ T90] IPVS: starting estimator thread 0... [ 181.658426][ T8049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.556'. [ 181.749599][ T8055] IPVS: using max 42 ests per chain, 100800 per kthread [ 181.751226][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 182.119402][ T8069] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 182.485582][ T8083] team0: Port device vlan0 removed [ 183.657704][ T8128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.875619][ T8143] __nla_validate_parse: 9 callbacks suppressed [ 183.875639][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 183.875654][ T8143] netlink: 120 bytes leftover after parsing attributes in process `syz.1.589'. [ 183.875698][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 183.915224][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 184.282660][ T8142] team0: Port device team_slave_0 removed [ 184.513319][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 184.542100][ T8169] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 184.542166][ T8166] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 184.591686][ T8166] netlink: 'syz.2.597': attribute type 21 has an invalid length. [ 184.591713][ T8166] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.591802][ T8166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.591810][ T8166] IPv6: NLM_F_CREATE should be set when creating new route [ 184.591877][ T8166] IPv6: NLM_F_CREATE should be set when creating new route [ 184.591899][ T8166] IPv6: NLM_F_CREATE should be set when creating new route [ 184.592481][ T8169] netlink: 'syz.2.597': attribute type 21 has an invalid length. [ 184.592547][ T8169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.891831][ T8174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 185.346541][ T8204] bond2: option fail_over_mac: invalid value (16) [ 185.367602][ T8204] bond2 (unregistering): Released all slaves [ 185.374037][ T8208] ipt_rpfilter: unknown options [ 185.778006][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 186.334814][ T8246] Bluetooth: MGMT ver 1.23 [ 186.823592][ T8261] ip_tables: iptables: counters copy to user failed while replacing table [ 187.094529][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.274988][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 187.547157][ T8292] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 187.582795][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 187.582816][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 187.582838][ T8296] netlink: 'syz.0.631': attribute type 14 has an invalid length. [ 187.582849][ T8296] netlink: 'syz.0.631': attribute type 13 has an invalid length. [ 187.662195][ T8292] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.867240][ T8296] netlink: 'syz.0.631': attribute type 14 has an invalid length. [ 187.867261][ T8296] netlink: 'syz.0.631': attribute type 13 has an invalid length. [ 187.884015][ T8302] bond2: (slave veth0_to_bond): Releasing active interface [ 187.895708][ T8293] netlink: 'syz.4.629': attribute type 3 has an invalid length. [ 187.923977][ T8302] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 187.967953][ T8292] bridge1: entered promiscuous mode [ 188.014796][ T8292] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 188.021894][ T8296] netlink: 'syz.0.631': attribute type 14 has an invalid length. [ 188.021913][ T8296] netlink: 'syz.0.631': attribute type 13 has an invalid length. [ 188.032512][ T8296] netlink: 'syz.0.631': attribute type 14 has an invalid length. [ 188.032531][ T8296] netlink: 'syz.0.631': attribute type 13 has an invalid length. [ 188.807625][ T8326] tipc: Started in network mode [ 188.807647][ T8326] tipc: Node identity , cluster identity 4711 [ 188.807661][ T8326] tipc: Failed to set node id, please configure manually [ 188.807700][ T8326] tipc: Enabling of bearer rejected, failed to enable media [ 188.846593][ T8334] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 188.934953][ T8335] __nla_validate_parse: 96 callbacks suppressed [ 188.934975][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 189.175384][ T8343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.642'. [ 189.204215][ T8347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.643'. [ 189.298294][ T8350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.309807][ T8352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.644'. [ 189.317913][ T8354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.643'. [ 189.642968][ T8361] team0: Port device macvlan0 removed [ 189.760945][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'. [ 189.788522][ T8371] netlink: 96 bytes leftover after parsing attributes in process `syz.2.648'. [ 190.088287][ T8386] nbd0: detected capacity change from 0 to 274877906944 [ 190.225039][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.651'. [ 190.282404][ T8385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.651'. [ 190.301924][ T4934] block nbd0: Receive control failed (result -104) [ 190.493820][ T8392] batadv_slave_0: entered promiscuous mode [ 190.631411][ T8396] netlink: 72 bytes leftover after parsing attributes in process `syz.1.652'. [ 190.632235][ T8391] batadv_slave_0: left promiscuous mode [ 191.441443][ T8431] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.441481][ T8431] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.608780][ T8446] xfrm1: entered promiscuous mode [ 191.994725][ T8452] syzkaller0: entered promiscuous mode [ 191.994902][ T8452] syzkaller0: entered allmulticast mode [ 192.860496][ T8487] validate_nla: 90 callbacks suppressed [ 192.860517][ T8487] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 193.430050][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.774292][ T8515] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.032801][ T8525] __nla_validate_parse: 6 callbacks suppressed [ 194.032822][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.683'. [ 194.244334][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244548][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.682114][ T8535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.687'. [ 194.740658][ T8539] syzkaller0: entered promiscuous mode [ 194.740682][ T8539] syzkaller0: entered allmulticast mode [ 194.747526][ T8537] netlink: 84 bytes leftover after parsing attributes in process `syz.2.686'. [ 194.786660][ T8542] netlink: 84 bytes leftover after parsing attributes in process `syz.2.686'. [ 195.017799][ T8530] tipc: Started in network mode [ 195.017832][ T8530] tipc: Node identity ac1414aa, cluster identity 4711 [ 195.043732][ T8530] tipc: New replicast peer: 172.20.20.187 [ 195.045744][ T8530] tipc: Enabled bearer , priority 10 [ 195.705604][ T4934] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 195.744610][ T8571] ip6t_srh: unknown srh invflags 4000 [ 195.810747][ T8572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.822800][ T8582] ip6t_srh: unknown srh invflags 4000 [ 195.874139][ T4934] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 195.982712][ T8573] netlink: 'syz.4.698': attribute type 83 has an invalid length. [ 196.169955][ T5723] tipc: Node number set to 2886997162 [ 196.336323][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 196.336344][ T8606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.703'. [ 196.487301][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 196.536347][ T8615] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 196.581465][ T8609] veth3: entered promiscuous mode [ 196.581489][ T8609] veth3: entered allmulticast mode [ 196.701588][ T8625] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 196.769304][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 197.176838][ T8642] netlink: 36 bytes leftover after parsing attributes in process `syz.1.714'. [ 197.426691][ T8654] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 197.544217][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.583299][ T8657] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.796135][ T8664] xt_NFQUEUE: number of total queues is 0 [ 197.840437][ T4934] Bluetooth: hci2: connection err: -111 [ 198.282592][ T8672] netlink: 'syz.0.726': attribute type 3 has an invalid length. [ 198.457456][ T8684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.731'. [ 199.622651][ T8748] __nla_validate_parse: 1 callbacks suppressed [ 199.622672][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.750'. [ 199.921904][ T8757] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 199.981411][ T5723] hid-generic 0005:0B57:4155.0001: unknown main item tag 0x0 [ 200.023861][ T5723] hid-generic 0005:0B57:4155.0001: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 200.358095][ T8762] bond3: (slave geneve3): making interface the new active one [ 200.397465][ T8762] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 200.409675][ T90] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.410093][ T90] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.504457][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.649366][ T8766] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 200.777972][ T8766] bond3: entered promiscuous mode [ 200.782142][ T8766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.806947][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 201.116193][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 201.223646][ T8803] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.231905][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 201.320228][ T8810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.321123][ T8803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.373111][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 201.451258][ T8736] Bluetooth: hci0: command 0x0406 tx timeout [ 201.451302][ T8736] Bluetooth: hci2: command 0x0406 tx timeout [ 201.451327][ T8736] Bluetooth: hci1: command 0x0406 tx timeout [ 201.451351][ T8736] Bluetooth: hci3: command 0x0406 tx timeout [ 201.580981][ T5613] Bluetooth: hci4: link tx timeout [ 201.581000][ T5613] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 201.645642][ T8803] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.646265][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 201.791392][ T8826] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 201.800302][ T8803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 201.803497][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 201.887169][ T8824] tipc: Started in network mode [ 201.887195][ T8824] tipc: Node identity 2000004, cluster identity 4711 [ 201.887207][ T8824] tipc: Node number set to 33554436 [ 202.048259][ T8803] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.303881][ T8845] netlink: 232 bytes leftover after parsing attributes in process `syz.1.771'. [ 202.739901][ T8860] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 202.827672][ T8860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.871727][ T8860] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 202.871751][ T8860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.775'. [ 202.871833][ T8860] dummy0: entered promiscuous mode [ 202.884331][ T8867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 203.003516][ T8872] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 203.347587][ T8871] veth3: entered promiscuous mode [ 203.427807][ T8871] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 203.515842][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.532082][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.532273][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.532452][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.532609][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.532769][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.532934][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.533094][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.533252][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.589895][ T8887] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 203.604644][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 204.990758][ T8943] tipc: Started in network mode [ 204.990780][ T8943] tipc: Node identity 2000004, cluster identity 4711 [ 204.990792][ T8943] tipc: Node number set to 33554436 [ 205.095193][ T8949] Cannot find del_set index 3 as target [ 205.647903][ T8963] syzkaller0: entered promiscuous mode [ 205.648086][ T8963] syzkaller0: entered allmulticast mode [ 206.362956][ T8992] __nla_validate_parse: 1 callbacks suppressed [ 206.362977][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 206.409609][ T8979] netlink: 64 bytes leftover after parsing attributes in process `syz.1.800'. [ 206.513982][ T8991] netlink: 64 bytes leftover after parsing attributes in process `syz.1.800'. [ 207.255735][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 207.290043][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 207.423160][ T9033] bond4: Unable to set up delay as MII monitoring is disabled [ 207.464434][ T9033] bond4 (unregistering): Released all slaves [ 208.063214][ T9076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.821'. [ 208.133315][ T9066] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 208.133342][ T9066] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 208.513014][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.824'. [ 208.633177][ T9105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.825'. [ 209.314860][ T9133] syzkaller0: entered promiscuous mode [ 209.315032][ T9133] syzkaller0: entered allmulticast mode [ 209.750095][ T9155] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 209.819994][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 210.386492][ T9162] erspan0: entered promiscuous mode [ 210.409671][ T9171] Bluetooth: hci0: unsupported parameter 5135 [ 210.409691][ T9171] Bluetooth: hci0: unsupported parameter 8192 [ 210.409702][ T9171] Bluetooth: hci0: unsupported parameter 5135 [ 210.409714][ T9171] Bluetooth: hci0: unsupported parameter 8192 [ 210.413435][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 210.985479][ T9196] validate_nla: 57 callbacks suppressed [ 210.985499][ T9196] netlink: 'syz.1.844': attribute type 2 has an invalid length. [ 211.017235][ T9186] tipc: Started in network mode [ 211.017257][ T9186] tipc: Node identity 2000004, cluster identity 4711 [ 211.017269][ T9186] tipc: Node number set to 33554436 [ 211.261612][ T9205] netlink: zone id is out of range [ 211.261629][ T9205] netlink: zone id is out of range [ 211.261637][ T9205] netlink: zone id is out of range [ 211.261644][ T9205] netlink: zone id is out of range [ 211.261651][ T9205] netlink: zone id is out of range [ 211.261658][ T9205] netlink: zone id is out of range [ 211.261665][ T9205] netlink: zone id is out of range [ 211.261672][ T9205] netlink: zone id is out of range [ 211.456742][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 211.456770][ T9217] block nbd2: Unsupported socket: should be TCP or UNIX. [ 211.507678][ T5613] block nbd1: Receive control failed (result -32) [ 211.508337][ T52] block nbd1: Receive control failed (result -32) [ 211.853956][ T9231] netlink: 'syz.3.856': attribute type 12 has an invalid length. [ 212.024340][ T9231] bond4: option primary_reselect: invalid value (255) [ 212.121101][ T9231] bond4 (unregistering): Released all slaves [ 212.745461][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 212.774558][ T9273] netlink: 348 bytes leftover after parsing attributes in process `syz.4.862'. [ 212.936148][ T9279] netlink: 348 bytes leftover after parsing attributes in process `syz.4.862'. [ 213.783413][ T9312] netlink: 80 bytes leftover after parsing attributes in process `syz.1.872'. [ 213.783443][ T9312] netlink: 80 bytes leftover after parsing attributes in process `syz.1.872'. [ 213.951918][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 213.955248][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888035571000: rx timeout, send abort [ 214.684414][ T9363] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 214.776219][ T9362] netlink: 'syz.3.878': attribute type 3 has an invalid length. [ 215.170163][ T9379] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 215.260503][ T9385] netlink: 9 bytes leftover after parsing attributes in process `syz.4.883'. [ 215.305722][ T9385] gretap0: entered promiscuous mode [ 215.321291][ T9374] netlink: 'syz.4.883': attribute type 2 has an invalid length. [ 215.321317][ T9374] netlink: 'syz.4.883': attribute type 2 has an invalid length. [ 215.339206][ T9374] netlink: 5 bytes leftover after parsing attributes in process `syz.4.883'. [ 215.339628][ T9374] 0ªî{X¹¦: renamed from gretap0 [ 215.379474][ T9374] 0ªî{X¹¦: left promiscuous mode [ 215.379760][ T9374] 0ªî{X¹¦: entered allmulticast mode [ 215.457800][ T9374] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 215.720285][ T9406] netlink: 'syz.0.888': attribute type 11 has an invalid length. [ 215.720307][ T9406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.888'. [ 216.039407][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 216.781333][ T9452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 216.786729][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.900'. [ 216.887710][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 217.027267][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 217.046528][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 217.702750][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 218.047767][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 218.061639][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 218.207773][ T9513] netlink: 56 bytes leftover after parsing attributes in process `syz.1.911'. [ 218.512332][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 219.616212][ T9582] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 219.647940][ T9584] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 220.016038][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.017150][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.174905][ T9606] sctp: [Deprecated]: syz.2.938 (pid 9606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.174905][ T9606] Use struct sctp_sack_info instead [ 220.231026][ T9611] netlink: 'syz.4.939': attribute type 3 has an invalid length. [ 220.235456][ T9614] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 220.472056][ T9626] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 220.490584][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 30 seconds [ 220.622145][ T9635] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 220.938357][ T9648] batadv_slave_0: entered promiscuous mode [ 221.104902][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.299369][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.318223][ T52] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 221.329502][ T9673] netlink: 'syz.3.954': attribute type 8 has an invalid length. [ 222.033719][ T9698] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 222.034992][ T9698] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 222.526203][ T9723] syzkaller0: entered promiscuous mode [ 222.526384][ T9723] syzkaller0: entered allmulticast mode [ 222.573816][ T9725] __nla_validate_parse: 14 callbacks suppressed [ 222.573836][ T9725] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.966'. [ 222.771076][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 222.771097][ T9734] netlink: 14 bytes leftover after parsing attributes in process `syz.3.969'. [ 222.812863][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 222.885809][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 222.946370][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 223.119356][ T9746] bond10: entered promiscuous mode [ 223.119525][ T9746] bond10: entered allmulticast mode [ 223.246503][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 223.528257][ T9772] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 223.825978][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 223.826002][ T9779] nbd: must specify at least one socket [ 223.964090][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.982'. [ 223.965436][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 223.967483][ T9785] x_tables: duplicate underflow at hook 1 [ 224.006623][ T9758] bridge4: entered promiscuous mode [ 224.006646][ T9758] bridge4: entered allmulticast mode [ 224.728704][ T9808] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 224.817575][ T9816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.105613][ T9829] bridge0: port 3(syz_tun) entered blocking state [ 225.105765][ T9829] bridge0: port 3(syz_tun) entered forwarding state [ 225.106098][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.106238][ T9829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.106465][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.106569][ T9829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.215376][ T9829] 8021q: adding VLAN 0 to HW filter on device eth0 [ 225.218366][ T9829] 8021q: adding VLAN 0 to HW filter on device eth1 [ 225.252245][ T9829] 8021q: adding VLAN 0 to HW filter on device eth2 [ 225.256489][ T9829] 8021q: adding VLAN 0 to HW filter on device eth3 [ 225.257194][ T9829] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 225.987786][ T9870] netlink: 'syz.3.1004': attribute type 4 has an invalid length. [ 227.704764][ T9901] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 228.372499][ T9953] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 228.372525][ T9953] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 228.537828][ T31] audit: type=1107 audit(1791730232.563:3): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.574513][ T31] audit: type=1107 audit(1791730232.603:4): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.574752][ T31] audit: type=1107 audit(1791730232.603:5): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.577656][ T31] audit: type=1107 audit(1791730232.603:6): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.577702][ T31] audit: type=1107 audit(1791730232.603:7): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.577740][ T31] audit: type=1107 audit(1791730232.603:8): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.577779][ T31] audit: type=1107 audit(1791730232.603:9): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.577817][ T31] audit: type=1107 audit(1791730232.603:10): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.577854][ T31] audit: type=1107 audit(1791730232.603:11): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.685144][ T31] audit: type=1107 audit(1791730232.693:12): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-+ÅØ*¬„1DÍco„º?ð¾ÚYU õõlÌÃàd©™ùã/ p1³SëNæ°ž*ÒdB ÎÌa•PPhÊe±y–ÉBmÌ2æµA`¿ÆÖW‘žÓËy"'r¦ßŠ­ûy(]QzÅ]¸¸ ¿›×RÚŠ˜COÏ"S?ñ³¸Ó HcZ‰¶/‚)NU« ú<Úôï×>ϨIkÞ!åæÏŒl§¥' [ 228.837128][ T9958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.307547][ T9963] syzkaller0: entered promiscuous mode [ 230.307572][ T9963] syzkaller0: entered allmulticast mode [ 230.826767][ T9991] __nla_validate_parse: 3 callbacks suppressed [ 230.826787][ T9991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 230.860179][ T9991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.919072][T10000] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 230.988205][T10002] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 231.450131][T10018] Cannot find add_set index 4 as target [ 232.873959][T10074] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1054'. [ 233.132247][T10080] netlink: 'syz.4.1057': attribute type 142 has an invalid length. [ 233.316762][T10039] infiniband syz0: set active [ 233.316784][T10039] infiniband syz0: added bond_slave_1 [ 233.464237][T10039] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 233.464275][T10039] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 233.464310][T10039] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 233.551001][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 233.747399][T10039] RDS/IB: syz0: added [ 233.747992][T10039] smc: adding ib device syz0 with port count 1 [ 233.753902][T10039] smc: ib device syz0 port 1 has no pnetid [ 233.936417][T10106] openvswitch: netlink: Message has 16 unknown bytes. [ 234.002326][ T52] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 234.032968][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 234.243857][T10112] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1067'. [ 234.299441][T10112] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1067'. [ 234.299466][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1067'. [ 235.366748][T10157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 235.753779][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 235.961753][T10173] x_tables: duplicate underflow at hook 1 [ 236.448198][T10195] sctp: [Deprecated]: syz.0.1090 (pid 10195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.448198][T10195] Use struct sctp_sack_info instead [ 236.460682][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1089'. [ 236.507980][T10191] bond0: (slave bond_slave_0): Releasing backup interface [ 236.515360][T10195] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 236.616587][T10191] bond_slave_0: entered promiscuous mode [ 236.616613][T10191] bond_slave_0: entered allmulticast mode [ 236.633466][T10200] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1090'. [ 236.847352][T10195] team0: Port device dummy0 added [ 236.965037][T10200] team0: Port device dummy0 removed [ 237.280055][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 237.400034][T10215] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.1097'. [ 237.477106][T10215] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.1097'. [ 237.843864][T10235] syzkaller0: left promiscuous mode [ 237.844048][T10235] syzkaller0: left allmulticast mode [ 239.015928][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1116'. [ 239.019052][T10280] sctp: [Deprecated]: syz.3.1116 (pid 10280) Use of int in max_burst socket option. [ 239.019052][T10280] Use struct sctp_assoc_value instead [ 241.254785][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 241.762829][T10389] netlink: 'syz.1.1162': attribute type 3 has an invalid length. [ 241.762855][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 242.916360][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 243.525208][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1193'. [ 245.105004][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 246.806157][T10584] sctp: [Deprecated]: syz.2.1254 (pid 10584) Use of int in max_burst socket option. [ 246.806157][T10584] Use struct sctp_assoc_value instead [ 248.201155][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1280'. [ 248.504031][T10651] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 248.504058][T10651] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 248.710587][T10657] tap0: tun_chr_ioctl cmd 2148553947 [ 248.711263][T10657] tap0: tun_chr_ioctl cmd 2147767506 [ 249.469379][T10677] tap0: tun_chr_ioctl cmd 1074812118 [ 250.534252][T10704] tap0: tun_chr_ioctl cmd 2148553947 [ 250.565157][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 60 seconds [ 252.076260][ T4983] udevd[4983]: worker [8284] /devices/virtual/block/nbd0 is taking a long time [ 254.636350][T10720] tap0: tun_chr_ioctl cmd 1074025677 [ 254.636450][T10720] tap0: linktype set to 1 [ 254.775613][T10721] tap0: tun_chr_ioctl cmd 1074025672 [ 254.775640][T10721] tap0: ignored: set checksum enabled [ 254.971779][T10743] tap0: tun_chr_ioctl cmd 1074025677 [ 254.971894][T10743] tap0: linktype set to 800 [ 255.124324][T10750] syz_tun: entered allmulticast mode [ 255.379904][T10759] macvlan1: entered promiscuous mode [ 255.380171][T10759] macvlan1: entered allmulticast mode [ 255.380186][T10759] veth1_vlan: entered allmulticast mode [ 255.682789][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.683001][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.842004][T10842] tap0: tun_chr_ioctl cmd 2148553947 [ 259.842291][T10843] tap0: tun_chr_ioctl cmd 2147767506 [ 260.108181][T10847] tap0: tun_chr_ioctl cmd 2147767511 [ 262.157036][T10937] ipip0: entered promiscuous mode [ 262.333763][T10950] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.1402'. [ 262.333936][T10950] 0ªX¹¦Dö»: renamed from gretap0 [ 262.358238][T10950] 0ªX¹¦Dö»: entered allmulticast mode [ 262.499128][T10961] Cannot find add_set index 2 as target [ 263.061308][T10979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1416'. [ 263.065269][T10981] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.096721][T11015] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 265.036556][T11048] ipvlan0: entered promiscuous mode [ 265.036628][T11048] ipvlan0: entered allmulticast mode [ 265.036641][T11048] ip6gretap0: entered allmulticast mode [ 265.566928][T11072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.633528][T11067] team0 (unregistering): Port device team_slave_0 removed [ 265.662404][T11067] team0 (unregistering): Port device team_slave_1 removed [ 266.042967][T11083] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 266.207123][T11088] team0: Port device veth3 added [ 266.990518][T11117] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 267.134999][T11117] 8021q: adding VLAN 0 to HW filter on device bond11 [ 267.135827][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 267.135884][T11123] bond11: entered promiscuous mode [ 267.135901][T11123] bond11: entered allmulticast mode [ 267.210461][T11122] bond11: (slave ip6gretap1): making interface the new active one [ 267.210486][T11122] ip6gretap1: entered promiscuous mode [ 267.210640][T11122] ip6gretap1: entered allmulticast mode [ 267.213200][T11122] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 267.792411][T11149] lo: entered promiscuous mode [ 267.933398][T11144] lo: left promiscuous mode [ 269.118016][T11195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.315278][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 269.548782][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 269.769077][T11231] pimreg: tun_chr_ioctl cmd 35108 [ 269.913510][T11240] sctp: [Deprecated]: syz.1.1533 (pid 11240) Use of int in maxseg socket option. [ 269.913510][T11240] Use struct sctp_assoc_value instead [ 270.366445][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 270.394940][T11260] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 270.480275][T11267] netlink: 'syz.4.1546': attribute type 32 has an invalid length. [ 270.480298][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 270.605041][T11267] bond3: Setting coupled_control to off (0) [ 271.067750][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 271.549269][T11316] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.556664][T11316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 271.778657][T11325] vlan0: entered promiscuous mode [ 271.778680][T11325] bridge0: entered promiscuous mode [ 271.778867][T11325] vlan0: entered allmulticast mode [ 271.778880][T11325] bridge0: entered allmulticast mode [ 271.783155][T11325] bridge0: port 1(vlan0) entered blocking state [ 271.783354][T11325] bridge0: port 1(vlan0) entered disabled state [ 272.059546][T11339] IPv6: Can't replace route, no match found [ 272.233238][T11348] sch_tbf: peakrate 3 is lower than or equals to rate 18297099463405846877 ! [ 272.709464][T11367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.568477][T11394] ip6erspan0: entered allmulticast mode [ 273.588760][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 273.671067][T11397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.784152][T11403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.785158][T11403] bond6: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 273.787582][T11403] bond6: (slave ip_vti0): Error -95 calling set_mac_address [ 273.895963][T11397] bond6: entered promiscuous mode [ 273.895990][T11397] bond6: entered allmulticast mode [ 273.966917][T11413] ip_tables: iptables: counters copy to user failed while replacing table [ 274.038735][T11413] raw_sendmsg: syz.3.1615 forgot to set AF_INET. Fix it! [ 275.394442][T11454] xt_NETMAP: bad MAP_IPS. [ 275.406813][T11454] netlink: 'syz.2.1633': attribute type 2 has an invalid length. [ 275.714067][T11478] netlink: 'syz.4.1640': attribute type 16 has an invalid length. [ 275.755460][T11474] ip_tables: iptables: counters copy to user failed while replacing table [ 275.805956][T11479] netlink: 'syz.4.1640': attribute type 16 has an invalid length. [ 275.883026][T11484] sctp: [Deprecated]: syz.4.1644 (pid 11484) Use of int in maxseg socket option. [ 275.883026][T11484] Use struct sctp_assoc_value instead [ 275.987451][T11488] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 276.052520][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 276.345001][T11493] xt_hashlimit: overflow, try lower: 3/0 [ 276.754388][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.877951][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.877974][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.997418][T11505] netlink: 'syz.1.1651': attribute type 10 has an invalid length. [ 277.019274][T11505] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 277.019468][T11505] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 277.065026][T11505] syzkaller0: entered promiscuous mode [ 277.065214][T11505] syzkaller0: entered allmulticast mode [ 277.084360][T11505] 0: reclassify loop, rule prio 0, protocol 700 [ 277.481479][T11518] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1655'. [ 277.621612][T11522] netlink: 'syz.0.1657': attribute type 3 has an invalid length. [ 277.627550][T11522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1657'. [ 277.822752][T11527] bond4: option fail_over_mac: invalid value (16) [ 277.837100][T11527] bond4 (unregistering): Released all slaves [ 278.085760][T11529] bond4: option fail_over_mac: invalid value (16) [ 278.107636][T11529] bond4 (unregistering): Released all slaves [ 278.147431][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 278.281726][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 278.521038][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 278.553354][T11547] Bluetooth: hci0: unsupported parameter 5135 [ 278.553380][T11547] Bluetooth: hci0: unsupported parameter 8192 [ 278.553393][T11547] Bluetooth: hci0: unsupported parameter 5135 [ 278.553404][T11547] Bluetooth: hci0: unsupported parameter 8192 [ 278.773432][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1666'. [ 279.062524][T11567] syz_tun: entered allmulticast mode [ 279.149236][T11573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1672'. [ 279.414655][T11582] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1674'. [ 279.414682][T11582] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1674'. [ 279.558267][T11595] nbd: must specify at least one socket [ 279.844458][T11605] ip_tables: iptables: counters copy to user failed while replacing table [ 279.902509][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.902791][T11609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.329135][T11619] xt_l2tp: unknown flags: 43 [ 280.365625][T11624] netlink: 'syz.0.1691': attribute type 16 has an invalid length. [ 280.365649][T11624] netlink: 'syz.0.1691': attribute type 17 has an invalid length. [ 280.501655][T11624] macvlan1: left promiscuous mode [ 280.501860][T11624] macvlan1: left allmulticast mode [ 280.501872][T11624] veth1_vlan: left allmulticast mode [ 280.503632][ T52] Bluetooth: hci0: Malformed HCI Event [ 280.557318][T11624] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 280.603620][T11632] nbd: socks must be embedded in a SOCK_ITEM attr [ 280.641314][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 90 seconds [ 280.760150][T11631] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 280.767092][T11636] netlink: 'syz.4.1698': attribute type 1 has an invalid length. [ 280.952285][T11645] netlink: 'syz.3.1697': attribute type 8 has an invalid length. [ 280.981191][T11638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.983054][T11638] bond5: (slave bond6): making interface the new active one [ 280.983493][T11638] bond5: (slave bond6): Enslaving as an active interface with an up link [ 281.039526][T11636] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 281.087531][T11640] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.527695][T11684] __nla_validate_parse: 4 callbacks suppressed [ 281.527715][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1703'. [ 281.527732][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1703'. [ 281.796761][T11689] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 283.964202][T11648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.241940][T11703] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 284.242300][T11705] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 284.408084][T11703] 8021q: adding VLAN 0 to HW filter on device bond12 [ 284.487845][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 284.517055][T11706] bridge_slave_0: left allmulticast mode [ 284.517396][T11706] bridge_slave_0: left promiscuous mode [ 284.536319][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.594332][T11706] bridge_slave_1: left allmulticast mode [ 284.595554][T11706] bridge_slave_1: left promiscuous mode [ 284.596513][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.682341][T11706] bond0: (slave bond_slave_0): Releasing backup interface [ 284.705774][T11706] bond0: (slave bond_slave_1): Releasing backup interface [ 284.733566][T11706] team0: Port device team_slave_0 removed [ 284.757049][T11706] team0: Port device team_slave_1 removed [ 284.772193][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.772220][T11706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.777452][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.777474][T11706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.817694][T11706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.003658][T11724] bond7: Invalid ad_actor_system MAC address. [ 285.003678][T11724] bond7: option ad_actor_system: invalid value (1) [ 285.080064][T11724] bond7 (unregistering): Released all slaves [ 285.131290][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1718'. [ 285.269633][T11748] netlink: 'syz.1.1720': attribute type 3 has an invalid length. [ 285.983258][T11785] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1727'. [ 285.983485][T11785] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1727'. [ 285.983499][T11785] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1727'. [ 286.024261][T11785] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1727'. [ 286.024462][T11785] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1727'. [ 286.024477][T11785] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1727'. [ 286.421967][T11788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.555961][T11773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.573317][T11798] __nla_validate_parse: 4 callbacks suppressed [ 286.573337][T11798] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1730'. [ 286.573505][T11803] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1730'. [ 286.955325][T11816] xt_TCPMSS: Only works on TCP SYN packets [ 287.251943][T11818] ip6erspan0: entered allmulticast mode [ 288.598258][T11873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1756'. [ 288.883083][T11880] xt_hashlimit: size too large, truncated to 1048576 [ 289.026117][T11889] netlink: 'syz.2.1762': attribute type 2 has an invalid length. [ 289.037327][T11889] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1762'. [ 289.428247][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 289.443918][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 289.892172][T11920] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1773'. [ 289.892195][T11920] tc_dump_action: action bad kind [ 290.135951][T11930] netlink: 'syz.3.1779': attribute type 2 has an invalid length. [ 290.152158][T11934] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1777'. [ 290.153134][T11932] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1777'. [ 290.153878][T11932] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1777'. [ 291.165234][T11969] netlink: 'syz.0.1789': attribute type 62 has an invalid length. [ 291.358545][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.359238][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.380822][T11981] ip_tables: iptables: counters copy to user failed while replacing table [ 291.554247][T11986] can: request_module (can-proto-0) failed. [ 292.091986][T12013] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 292.107806][T12015] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 292.190272][T12017] __nla_validate_parse: 34 callbacks suppressed [ 292.190291][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 292.247266][T12019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1801'. [ 292.264248][T12015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.271877][T12020] x_tables: unsorted underflow at hook 1 [ 292.301153][T12023] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 292.897490][T12050] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 293.580896][T12080] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 293.627579][T12081] netlink: 'syz.2.1818': attribute type 2 has an invalid length. [ 294.887363][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 294.897098][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1827'. [ 294.914697][T12120] netlink: 'syz.4.1826': attribute type 11 has an invalid length. [ 295.103520][T12128] geneve0: mtu less than device minimum [ 295.130309][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 295.247439][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'. [ 295.367963][T12148] netlink: 'syz.0.1835': attribute type 21 has an invalid length. [ 295.367984][T12148] netlink: 'syz.0.1835': attribute type 22 has an invalid length. [ 295.367995][T12148] netlink: 'syz.0.1835': attribute type 23 has an invalid length. [ 295.368005][T12148] netlink: 'syz.0.1835': attribute type 25 has an invalid length. [ 295.368015][T12148] netlink: 'syz.0.1835': attribute type 26 has an invalid length. [ 295.368025][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1835'. [ 295.444677][T12151] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1831'. [ 295.587765][T12160] netlink: 'syz.0.1836': attribute type 1 has an invalid length. [ 295.587787][T12160] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1836'. [ 295.587801][T12160] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 295.587812][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 295.841652][T12168] netlink: 'syz.4.1840': attribute type 3 has an invalid length. [ 295.969674][T12176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.944767][T12222] ip6erspan0: entered allmulticast mode [ 297.266176][T12234] netlink: 'syz.1.1863': attribute type 2 has an invalid length. [ 297.555777][T12208] syzkaller1: entered promiscuous mode [ 297.555803][T12208] syzkaller1: entered allmulticast mode [ 297.693648][T12244] __nla_validate_parse: 2 callbacks suppressed [ 297.693671][T12244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1864'. [ 297.794854][T12250] netlink: 'syz.2.1866': attribute type 12 has an invalid length. [ 297.808142][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 297.989026][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.989196][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.989351][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.989476][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.989618][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.989744][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.989868][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 297.996204][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1869'. [ 298.182573][T12266] TC_ACT_REPEAT abuse ? [ 298.670466][T12286] x_tables: duplicate underflow at hook 2 [ 298.954162][T12302] xt_HMARK: proto mask must be zero with L3 mode [ 299.096288][T12305] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.116799][T12305] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 299.141779][T12305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.272478][T12308] ip6gretap0: entered promiscuous mode [ 299.276619][T12308] syz_tun: entered promiscuous mode [ 299.292657][T12308] 0ªX¹¦Dö»: entered promiscuous mode [ 299.296626][T12308] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 299.296647][T12308] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 299.652732][T12327] smc: net device lo applied user defined pnetid SYZ0 [ 299.662995][T12327] smc: smcd device lo applied user defined pnetid SYZ0 [ 299.813542][T12335] ip_tables: iptables: counters copy to user failed while replacing table [ 302.554153][T12357] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 302.635250][T12330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.079295][T12386] __nla_validate_parse: 32 callbacks suppressed [ 303.079316][T12386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1897'. [ 303.148885][T12396] validate_nla: 4 callbacks suppressed [ 303.148906][T12396] netlink: 'syz.1.1899': attribute type 4 has an invalid length. [ 303.411704][T12401] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1901'. [ 303.759678][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.149170][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 304.231537][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 304.292266][T12436] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1908'. [ 304.295022][T12436] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 304.327821][T12432] C: renamed from lo [ 304.346178][T12432] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 304.717348][T12455] Bluetooth: hci0: unsupported parameter 5135 [ 304.717370][T12455] Bluetooth: hci0: unsupported parameter 8192 [ 304.717382][T12455] Bluetooth: hci0: unsupported parameter 5135 [ 304.717393][T12455] Bluetooth: hci0: unsupported parameter 8192 [ 304.754879][T12455] can: request_module (can-proto-0) failed. [ 305.131764][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 306.471454][T12503] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 306.820810][T12518] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1927'. [ 306.854153][T12513] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 306.854174][T12513] netlink: 'syz.1.1926': attribute type 268 has an invalid length. [ 306.854187][T12513] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1926'. [ 306.905614][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 306.905647][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 307.416496][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.142027][T12568] __nla_validate_parse: 4 callbacks suppressed [ 308.142047][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 308.849838][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 309.207839][T12600] syzkaller0: entered promiscuous mode [ 309.208028][T12600] syzkaller0: entered allmulticast mode [ 309.469634][T12597] syz.3.1945 (12597) used greatest stack depth: 18312 bytes left [ 309.475674][T12617] netlink: 'syz.2.1948': attribute type 3 has an invalid length. [ 309.561743][T12599] syz.3.1945 (12599) used greatest stack depth: 18088 bytes left [ 309.726000][T12626] ip6t_hbh: unknown flags 38 [ 309.772722][ T52] Bluetooth: hci0: unexpected event 0x13 length: 321 > 255 [ 309.795994][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 309.815010][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 309.864396][T12619] bond8: option downdelay: invalid value (18446744073709551615) [ 309.864420][T12619] bond8: option downdelay: allowed values 0 - 2147483647 [ 309.943885][T12619] bond8 (unregistering): Released all slaves [ 310.104024][T12625] bond8: option downdelay: invalid value (18446744073709551615) [ 310.104049][T12625] bond8: option downdelay: allowed values 0 - 2147483647 [ 310.110793][T12625] bond8 (unregistering): Released all slaves [ 310.371444][T12645] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1954'. [ 310.504471][T12648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1955'. [ 310.516576][T12652] netlink: 'syz.1.1956': attribute type 11 has an invalid length. [ 310.516598][T12652] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.1956'. [ 310.534762][T12652] syzkaller0: entered promiscuous mode [ 310.534784][T12652] syzkaller0: entered allmulticast mode [ 310.596741][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 310.596769][T12652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 310.596782][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 310.720926][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 120 seconds [ 310.832335][ T151] tipc: Subscription rejected, illegal request [ 311.000510][T12658] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 311.032986][T12658] bond5 (unregistering): Released all slaves [ 311.078196][T12669] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 311.623777][T12687] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 311.825445][T12687] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.087385][T12706] netlink: 'syz.1.1969': attribute type 11 has an invalid length. [ 312.175471][T12697] bond8: (slave geneve3): making interface the new active one [ 312.214745][T12697] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 313.402535][T12746] __nla_validate_parse: 9 callbacks suppressed [ 313.402555][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 313.822841][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1980'. [ 314.873672][T12776] syzkaller0: entered promiscuous mode [ 314.873696][T12776] syzkaller0: entered allmulticast mode [ 315.296756][T12788] erspan0: entered promiscuous mode [ 315.296780][T12788] erspan0: entered allmulticast mode [ 315.314395][T12790] syzkaller1: entered promiscuous mode [ 315.314417][T12790] syzkaller1: entered allmulticast mode [ 315.781260][T12806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1991'. [ 315.906538][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1992'. [ 316.815111][T12849] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 316.815692][T12849] team0: Device ipvlan2 is already an upper device of the team interface [ 317.123899][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.124150][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127412][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 317.458003][T12875] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 317.541203][T12875] bond4 (unregistering): Released all slaves [ 318.182179][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2020'. [ 318.231415][T12910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 318.586402][T12920] ip6gre1: entered allmulticast mode [ 318.612273][T12923] syzkaller1: entered promiscuous mode [ 318.612297][T12923] syzkaller1: entered allmulticast mode [ 319.034157][T12935] netlink: Conntrack attr has 8 unknown bytes [ 319.036166][T12935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.097355][T12937] xt_l2tp: missing protocol rule (udp|l2tpip) [ 319.427059][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 319.442157][T12955] netlink: 'syz.3.2035': attribute type 12 has an invalid length. [ 319.713178][T12960] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 319.713202][T12960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2035'. [ 319.856767][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 319.928252][T12966] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 319.964866][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 320.006097][T12981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.021876][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 320.173442][T12979] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 320.173468][T12979] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 320.340401][T12989] netlink: 'syz.1.2042': attribute type 2 has an invalid length. [ 320.340424][T12989] netlink: 'syz.1.2042': attribute type 8 has an invalid length. [ 320.340436][T12989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2042'. [ 320.497128][T13002] ip_tables: iptables: counters copy to user failed while replacing table [ 320.719276][T13004] sctp: [Deprecated]: syz.4.2051 (pid 13004) Use of int in max_burst socket option. [ 320.719276][T13004] Use struct sctp_assoc_value instead [ 320.747548][T13008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2050'. [ 320.747571][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'. [ 320.834290][T13018] macvlan0: entered promiscuous mode [ 321.179422][T13035] netlink: 'syz.2.2057': attribute type 5 has an invalid length. [ 321.324754][T13044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2059'. [ 321.724610][T13061] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.771431][T13061] bond4: (slave lo): Enslaving as an active interface with an up link [ 321.782994][T13061] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 321.823212][T13065] netlink: 'syz.4.2065': attribute type 33 has an invalid length. [ 321.857826][T13065] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 321.877580][T13065] bond7 (unregistering): Released all slaves [ 321.966832][T13067] netlink: 1400 bytes leftover after parsing attributes in process `syz.3.2066'. [ 322.660257][T13101] netlink: zone id is out of range [ 322.660272][T13101] netlink: zone id is out of range [ 322.660279][T13101] netlink: zone id is out of range [ 322.660286][T13101] netlink: zone id is out of range [ 322.660293][T13101] netlink: zone id is out of range [ 322.660300][T13101] netlink: zone id is out of range [ 322.660306][T13101] netlink: zone id is out of range [ 322.660313][T13101] netlink: zone id is out of range [ 322.660321][T13101] netlink: zone id is out of range [ 322.660327][T13101] netlink: zone id is out of range [ 323.091700][T13120] bond5: Removing last ns target with arp_interval on [ 325.163246][T13078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.597432][T13145] bond4: (slave lo): Releasing backup interface [ 325.609797][T13145] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 326.418226][T13171] ovs-s: entered promiscuous mode [ 326.458315][T13177] openvswitch: ovs-s: Dropping previously announced user features [ 326.606872][T13191] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 326.905121][T13210] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 326.905323][T13210] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 327.054252][T13209] syzkaller0: entered promiscuous mode [ 327.054279][T13209] syzkaller0: entered allmulticast mode [ 327.124562][T13215] __nla_validate_parse: 3 callbacks suppressed [ 327.124586][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 327.124614][T13215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 327.128321][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 327.128357][T13215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 327.673408][T13239] netlink: 'syz.4.2109': attribute type 10 has an invalid length. [ 327.864994][T13245] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2112'. [ 330.088408][T13215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.433668][T13271] syzkaller0: entered promiscuous mode [ 330.433718][T13271] syzkaller0: entered allmulticast mode [ 330.557794][T13271] tipc: Enabled bearer , priority 0 [ 330.646142][T13283] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2124'. [ 331.155100][T13304] net_ratelimit: 30 callbacks suppressed [ 331.155123][T13304] netlink: zone id is out of range [ 331.155131][T13304] netlink: zone id is out of range [ 331.155139][T13304] netlink: zone id is out of range [ 331.155147][T13304] netlink: zone id is out of range [ 331.155154][T13304] netlink: zone id is out of range [ 331.155162][T13304] netlink: zone id is out of range [ 331.155665][T13304] netlink: zone id is out of range [ 331.155677][T13304] netlink: zone id is out of range [ 331.155684][T13304] netlink: zone id is out of range [ 331.159307][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'. [ 331.159337][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'. [ 331.237059][T13264] tipc: Resetting bearer [ 331.383720][T13264] tipc: Disabling bearer [ 331.470120][T13311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2132'. [ 331.714794][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2135'. [ 331.933531][T13330] xt_bpf: check failed: parse error [ 331.953395][T13330] sctp: [Deprecated]: syz.2.2140 (pid 13330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.953395][T13330] Use struct sctp_sack_info instead [ 332.330482][T13354] netlink: 'syz.3.2145': attribute type 75 has an invalid length. [ 332.465546][T13357] __nla_validate_parse: 2 callbacks suppressed [ 332.465568][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 332.465634][T13357] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 332.591680][T13358] tipc: Resetting bearer [ 332.686951][T13361] ip6t_ah: unknown flags 5 [ 332.986946][T13370] FAULT_INJECTION: forcing a failure. [ 332.986946][T13370] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 332.986994][T13370] CPU: 0 UID: 0 PID: 13370 Comm: syz.1.2155 Not tainted syzkaller #0 PREEMPT(full) [ 332.987013][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.987028][T13370] Call Trace: [ 332.987036][T13370] [ 332.987044][T13370] dump_stack_lvl+0xe8/0x150 [ 332.987074][T13370] should_fail_ex+0x410/0x560 [ 332.987106][T13370] _copy_from_user+0x2d/0xb0 [ 332.987134][T13370] kstrtouint_from_user+0xd6/0x180 [ 332.987159][T13370] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 332.987193][T13370] ? lock_acquire+0x115/0x350 [ 332.987218][T13370] proc_fail_nth_write+0x8e/0x210 [ 332.987239][T13370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.987266][T13370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.987287][T13370] vfs_write+0x296/0xba0 [ 332.987315][T13370] ? __pfx_vfs_write+0x10/0x10 [ 332.987336][T13370] ? __fget_files+0x2a/0x420 [ 332.987358][T13370] ? __fget_files+0x3a2/0x420 [ 332.987374][T13370] ? __fget_files+0x2a/0x420 [ 332.987396][T13370] ksys_write+0x150/0x270 [ 332.987419][T13370] ? __pfx_ksys_write+0x10/0x10 [ 332.987449][T13370] do_syscall_64+0x166/0x520 [ 332.987468][T13370] ? trace_irq_disable+0x3b/0x140 [ 332.987489][T13370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.987507][T13370] ? clear_bhb_loop+0x70/0xc0 [ 332.987528][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.987547][T13370] RIP: 0033:0x7f20ef35ea0e [ 332.987570][T13370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.987585][T13370] RSP: 002b:00007f20f034efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.987615][T13370] RAX: ffffffffffffffda RBX: 00007f20f034f6c0 RCX: 00007f20ef35ea0e [ 332.987628][T13370] RDX: 0000000000000001 RSI: 00007f20f034f0a0 RDI: 0000000000000004 [ 332.987639][T13370] RBP: 00007f20f034f090 R08: 0000000000000000 R09: 0000000000000000 [ 332.987650][T13370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.987660][T13370] R13: 00007f20ef626038 R14: 00007f20ef625fa0 R15: 00007ffed761d298 [ 332.987691][T13370] [ 333.309813][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.310086][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.310297][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.310495][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.310685][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.310908][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.311153][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.311337][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.311533][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 333.462095][T13388] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 333.621491][T13388] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 333.672707][T13389] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 333.689058][T13389] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 334.424341][T13430] team0: Port device xfrm0 added [ 334.623322][T13433] bridge3: entered promiscuous mode [ 335.019696][T13469] xt_hashlimit: size too large, truncated to 1048576 [ 335.147338][T13474] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 335.155371][T13474] 0ªX¹¦Dö»: entered allmulticast mode [ 335.681239][T13496] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 335.684291][T13496] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 335.699602][T13496] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 335.701543][T13494] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 335.701567][T13494] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 335.733010][T13499] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 336.017576][T13518] x_tables: duplicate underflow at hook 1 [ 336.065703][T13523] syzkaller0: entered promiscuous mode [ 336.065728][T13523] syzkaller0: entered allmulticast mode [ 336.330484][T13538] netlink: 'syz.1.2190': attribute type 1 has an invalid length. [ 336.877710][T13557] syzkaller0: entered promiscuous mode [ 336.877733][T13557] syzkaller0: entered allmulticast mode [ 337.095622][T13570] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 337.095645][T13570] netlink: 'syz.2.2196': attribute type 2 has an invalid length. [ 337.132749][T13537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.194982][T13573] netlink: 'syz.0.2197': attribute type 2 has an invalid length. [ 337.342292][T13573] netlink: 'syz.0.2197': attribute type 2 has an invalid length. [ 337.408282][T13582] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 337.443888][T13582] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001 [ 337.573329][T13584] __nla_validate_parse: 74 callbacks suppressed [ 337.573353][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 337.734817][T13586] bond7: entered promiscuous mode [ 337.734842][T13586] bond7: entered allmulticast mode [ 337.756303][T13596] net_ratelimit: 4 callbacks suppressed [ 337.756325][T13596] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.398567][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 340.799894][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 150 seconds [ 370.882660][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 180 seconds [ 371.820401][ T4983] udevd[4983]: worker [8284] /devices/virtual/block/nbd0 timeout; kill it [ 371.821953][ T4983] udevd[4983]: seq 11986 '/devices/virtual/block/nbd0' killed [ 378.566983][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.567059][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.567596][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 378.837696][T13633] erspan0: entered promiscuous mode [ 378.846512][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 378.955598][T13641] openvswitch: netlink: Multiple metadata blocks provided [ 379.020116][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 379.283394][T13660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.586654][T13671] netlink: 'syz.4.2221': attribute type 4 has an invalid length. [ 379.608150][T13672] tipc: New replicast peer: 255.255.255.255 [ 379.630839][T13671] netlink: 'syz.4.2221': attribute type 4 has an invalid length. [ 379.651891][T13672] tipc: Enabled bearer , priority 10 [ 379.938553][T13679] netlink: 'syz.1.2223': attribute type 39 has an invalid length. [ 380.087720][T13683] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2224'. [ 380.123493][T13688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2225'. [ 380.477742][T13706] netlink: zone id is out of range [ 380.477760][T13706] netlink: zone id is out of range [ 380.477767][T13706] netlink: zone id is out of range [ 380.477774][T13706] netlink: zone id is out of range [ 380.477782][T13706] netlink: zone id is out of range [ 380.477789][T13706] netlink: zone id is out of range [ 380.477796][T13706] netlink: zone id is out of range [ 382.791249][T13678] ÿÿÿÿÿÿ: renamed from vlan1 [ 383.082184][T13726] xt_hl: Unknown Hop Limit match mode: 206 [ 383.147171][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 383.615720][T13738] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2239'. [ 384.053823][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2244'. [ 384.124265][T13764] pimreg: entered allmulticast mode [ 384.396021][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2248'. [ 384.703828][T13793] pimreg: left allmulticast mode [ 384.814996][T13797] net_ratelimit: 2 callbacks suppressed [ 384.815015][T13797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.816988][T13797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 384.818859][T13798] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 384.888521][T13796] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.959180][T13800] netlink: 'syz.2.2253': attribute type 1 has an invalid length. [ 385.212369][T13806] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 385.213599][T13807] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 385.252252][T13806] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 385.256868][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'. [ 385.257464][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2256'. [ 385.291886][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2256'. [ 385.673718][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 385.717003][T13818] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.918286][T13832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2262'. [ 386.117128][T13843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2264'. [ 386.165208][T13848] xt_nat: multiple ranges no longer supported [ 386.976943][T13867] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 386.977003][T13867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.043741][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2276'. [ 387.327528][T13895] sctp: [Deprecated]: syz.0.2280 (pid 13895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.327528][T13895] Use struct sctp_sack_info instead [ 387.457378][T13901] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 387.529383][T13901] bond14: entered promiscuous mode [ 387.529445][T13901] bond14: entered allmulticast mode [ 387.529954][T13901] 8021q: adding VLAN 0 to HW filter on device bond14 [ 387.531209][T13899] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 387.531295][T13899] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 387.570506][ T13] IPVS: starting estimator thread 0... [ 387.606189][T13901] erspan2: entered allmulticast mode [ 387.629980][T13904] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 387.632696][T13901] bond14: (slave erspan2): making interface the new active one [ 387.634514][T13901] erspan2: entered promiscuous mode [ 387.666024][T13901] bond14: (slave erspan2): Enslaving as an active interface with an up link [ 387.669837][T13908] IPVS: using max 33 ests per chain, 79200 per kthread [ 387.724780][T13914] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2285'. [ 387.728334][T13915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.737581][T13914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.811459][T13914] team0 (unregistering): Port device xfrm0 removed [ 389.285946][T13995] netlink: 'syz.1.2304': attribute type 11 has an invalid length. [ 389.478615][T14002] netlink: 'syz.4.2306': attribute type 21 has an invalid length. [ 389.478710][T14002] __nla_validate_parse: 2 callbacks suppressed [ 389.478723][T14002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2306'. [ 389.482501][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2306'. [ 390.113808][T14029] TCP: TCP_TX_DELAY enabled [ 390.182221][T14029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2315'. [ 390.228066][T14030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2315'. [ 390.386789][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 390.404219][T14039] netlink: 'syz.2.2316': attribute type 3 has an invalid length. [ 390.412234][T14039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2316'. [ 390.467157][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2318'. [ 390.752044][T14051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 390.752516][T14051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 390.752941][T14051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 390.799752][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.866931][T14059] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 391.152832][T14070] SET target dimension over the limit! [ 391.272242][T14081] tc_dump_action: action bad kind [ 391.396257][T14087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 391.936478][T14109] xt_hashlimit: overflow, try lower: 3/0 [ 392.384651][T14120] x_tables: duplicate underflow at hook 1 [ 392.392125][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'. [ 392.392521][T14124] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 393.136187][ T52] Bluetooth: hci4: ISO packet for unknown connection handle 2723 [ 394.020047][T14178] netlink: 'syz.2.2354': attribute type 4 has an invalid length. [ 394.023020][T14178] netlink: 'syz.2.2354': attribute type 7 has an invalid length. [ 394.124572][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2352'. [ 394.242362][T14191] ovs-dp0: entered promiscuous mode [ 394.334024][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'. [ 394.390155][T14199] netlink: 'syz.2.2357': attribute type 1 has an invalid length. [ 394.437025][T14199] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.460920][T14199] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 394.463928][T14199] bond5: entered promiscuous mode [ 394.463950][T14199] bond5: entered allmulticast mode [ 396.892959][T14210] net_ratelimit: 1 callbacks suppressed [ 396.892983][T14210] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 397.034341][T14185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.103926][T14199] netlink: 'syz.2.2357': attribute type 9 has an invalid length. [ 397.359216][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 397.386952][T14219] xfrm1: entered promiscuous mode [ 397.387003][T14219] xfrm1: entered allmulticast mode [ 397.390191][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 397.390320][T14224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.441367][T14224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.522453][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 397.544380][T14229] FAULT_INJECTION: forcing a failure. [ 397.544380][T14229] name failslab, interval 1, probability 0, space 0, times 1 [ 397.544435][T14229] CPU: 1 UID: 0 PID: 14229 Comm: syz.0.2365 Not tainted syzkaller #0 PREEMPT(full) [ 397.544455][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.544470][T14229] Call Trace: [ 397.544481][T14229] [ 397.544489][T14229] dump_stack_lvl+0xe8/0x150 [ 397.544522][T14229] should_fail_ex+0x410/0x560 [ 397.544551][T14229] should_failslab+0xa8/0x100 [ 397.544578][T14229] __kvmalloc_node_noprof+0x176/0x820 [ 397.544602][T14229] ? alloc_netdev_mqs+0xa9/0x12a0 [ 397.544625][T14229] ? alloc_netdev_mqs+0xa9/0x12a0 [ 397.544656][T14229] alloc_netdev_mqs+0xa9/0x12a0 [ 397.544675][T14229] ? __pfx_snprintf+0x10/0x10 [ 397.544699][T14229] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 397.544724][T14229] rtnl_create_link+0x321/0xd70 [ 397.544752][T14229] rtnl_newlink_create+0x258/0x7b0 [ 397.544780][T14229] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 397.544803][T14229] ? __pfx___mutex_lock+0x10/0x10 [ 397.544833][T14229] ? ns_capable+0x89/0xe0 [ 397.544871][T14229] rtnl_newlink+0x166d/0x1c30 [ 397.544914][T14229] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.544939][T14229] ? do_syscall_64+0x166/0x520 [ 397.544957][T14229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.545015][T14229] ? kasan_quarantine_put+0xbb/0x1f0 [ 397.545036][T14229] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.545060][T14229] ? nlmon_xmit+0xb0/0x100 [ 397.545082][T14229] ? kmem_cache_free+0x182/0x650 [ 397.545117][T14229] ? __lock_acquire+0x747/0x2de0 [ 397.545147][T14229] ? __local_bh_enable_ip+0xd6/0x140 [ 397.545171][T14229] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.545190][T14229] ? __dev_queue_xmit+0x29b/0x3920 [ 397.545210][T14229] ? __local_bh_enable_ip+0xd6/0x140 [ 397.545244][T14229] ? lock_acquire+0x115/0x350 [ 397.545280][T14229] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.545306][T14229] rtnetlink_rcv_msg+0x802/0xc00 [ 397.545339][T14229] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 397.545364][T14229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.545388][T14229] ? ref_tracker_free+0x689/0x830 [ 397.545419][T14229] ? __pfx_ref_tracker_free+0x10/0x10 [ 397.545456][T14229] netlink_rcv_skb+0x226/0x4a0 [ 397.545481][T14229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.545511][T14229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.545546][T14229] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.545569][T14229] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.545597][T14229] netlink_unicast+0x7bd/0x940 [ 397.545630][T14229] netlink_sendmsg+0x813/0xb40 [ 397.545662][T14229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.545693][T14229] ? apparmor_socket_sendmsg+0x18b/0x360 [ 397.545721][T14229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.545743][T14229] sock_sendmsg_nosec+0x13a/0x180 [ 397.545771][T14229] ____sys_sendmsg+0x54e/0x850 [ 397.545796][T14229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.545824][T14229] ? import_iovec+0x73/0xa0 [ 397.545854][T14229] ___sys_sendmsg+0x2a5/0x360 [ 397.545880][T14229] ? __lock_acquire+0x747/0x2de0 [ 397.545904][T14229] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.545963][T14229] ? __fget_files+0x2a/0x420 [ 397.545980][T14229] ? __fget_files+0x3a2/0x420 [ 397.546007][T14229] __x64_sys_sendmsg+0x1b1/0x290 [ 397.546030][T14229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.546070][T14229] do_syscall_64+0x166/0x520 [ 397.546090][T14229] ? trace_irq_disable+0x3b/0x140 [ 397.546109][T14229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.546127][T14229] ? clear_bhb_loop+0x70/0xc0 [ 397.546150][T14229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.546168][T14229] RIP: 0033:0x7f6dea59e1d9 [ 397.546186][T14229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.546202][T14229] RSP: 002b:00007f6deb45d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.546223][T14229] RAX: ffffffffffffffda RBX: 00007f6dea826180 RCX: 00007f6dea59e1d9 [ 397.546236][T14229] RDX: 000000002800804c RSI: 00002000000001c0 RDI: 0000000000000004 [ 397.546247][T14229] RBP: 00007f6deb45d090 R08: 0000000000000000 R09: 0000000000000000 [ 397.546258][T14229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.546269][T14229] R13: 00007f6dea826218 R14: 00007f6dea826180 R15: 00007fff48b7d908 [ 397.546321][T14229] [ 397.586917][T14222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2364'. [ 398.011398][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2369'. [ 398.231438][T14253] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 398.335823][T14258] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 398.342196][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2371'. [ 398.431621][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'. [ 398.431644][T14265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2376'. [ 398.450315][T14267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'. [ 398.450333][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2376'. [ 398.576300][T14271] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 398.667909][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.693210][T14271] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.693339][T14271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.736322][T14271] bridge0: entered allmulticast mode [ 398.757000][T14271] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.789667][T14274] bridge_slave_1: left allmulticast mode [ 398.789697][T14274] bridge_slave_1: left promiscuous mode [ 398.789913][T14274] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.963008][T14277] x_tables: duplicate underflow at hook 3 [ 399.204600][T14283] netlink: 'syz.3.2381': attribute type 2 has an invalid length. [ 399.204625][T14283] netlink: 'syz.3.2381': attribute type 2 has an invalid length. [ 399.248829][T14282] IPv6: sit1: Disabled Multicast RS [ 399.788485][T14322] netlink: 'syz.2.2387': attribute type 2 has an invalid length. [ 400.876170][T14373] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 400.884692][T14373] bond8 (unregistering): Released all slaves [ 400.977567][ T4930] block nbd0: Possible stuck request ffff888028825080: control (read@0,4096B). Runtime 210 seconds [ 401.411275][T14397] erspan0: entered promiscuous mode [ 401.411313][T14397] erspan0: entered allmulticast mode [ 401.782543][T14410] bond8 (unregistering): Released all slaves [ 402.327264][T14439] lo: entered promiscuous mode [ 402.327451][T14439] tunl0: entered promiscuous mode [ 402.327598][T14439] gre0: entered promiscuous mode [ 402.463315][T14439] erspan0: entered promiscuous mode [ 402.464252][T14439] ip_vti0: entered promiscuous mode [ 402.465165][T14439] ip6_vti0: entered promiscuous mode [ 402.466057][T14439] sit0: entered promiscuous mode [ 402.466873][T14439] ip6tnl0: entered promiscuous mode [ 402.467761][T14439] ip6gre0: entered promiscuous mode [ 402.470330][T14439] bond0: entered promiscuous mode [ 402.470348][T14439] bond_slave_0: entered promiscuous mode [ 402.477069][T14439] bond_slave_1: entered promiscuous mode [ 402.480373][T14439] nlmon0: entered promiscuous mode [ 402.481208][T14439] batadv0: entered promiscuous mode [ 402.482107][T14439] vxcan0: entered promiscuous mode [ 402.482992][T14439] vxcan1: entered promiscuous mode [ 402.484924][T14439] veth0: entered promiscuous mode [ 402.487739][T14439] veth1: entered promiscuous mode [ 402.490150][T14439] wg0: entered promiscuous mode [ 402.493181][T14439] wg2: entered promiscuous mode [ 402.493902][T14439] veth0_to_bridge: entered promiscuous mode [ 402.495178][T14439] bridge_slave_0: entered promiscuous mode [ 402.496863][T14439] veth1_to_bridge: entered promiscuous mode [ 402.593460][T14439] bridge_slave_1: entered promiscuous mode [ 402.667223][T14439] veth0_to_bond: entered promiscuous mode [ 402.824077][T14439] veth1_to_bond: entered promiscuous mode [ 402.835817][T14443] ip_tables: iptables: counters copy to user failed while replacing table [ 403.020191][T14439] veth0_to_team: entered promiscuous mode [ 403.057029][T14439] team_slave_0: entered promiscuous mode [ 403.096867][T14439] veth1_to_team: entered promiscuous mode [ 403.112099][T14439] team_slave_1: entered promiscuous mode [ 403.131622][T14439] xfrm0: entered promiscuous mode [ 403.146764][T14439] veth0_to_hsr: entered promiscuous mode [ 403.355024][T14439] veth1_to_hsr: entered promiscuous mode [ 403.482998][T14439] hsr0: entered promiscuous mode [ 403.550036][T14439] veth1_virt_wifi: entered promiscuous mode [ 403.604023][T14439] veth0_virt_wifi: entered promiscuous mode [ 403.633387][T14484] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 403.667133][T14439] ÿÿÿÿÿÿ: entered promiscuous mode [ 403.772477][T14497] x_tables: duplicate underflow at hook 4 [ 403.776323][T14497] __nla_validate_parse: 10 callbacks suppressed [ 403.776366][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2430'. [ 403.936575][T14439] vlan0: entered promiscuous mode [ 404.012153][T14439] vlan1: entered promiscuous mode [ 404.040606][T14439] macvlan0: entered promiscuous mode [ 404.078862][T14439] macvlan1: entered promiscuous mode [ 404.107574][T14439] ipvlan0: entered promiscuous mode [ 404.152902][T14439] ipvlan1: entered promiscuous mode [ 404.202581][T14439] macvtap0: entered promiscuous mode [ 404.207802][T14439] macsec0: entered promiscuous mode [ 404.228483][T14439] geneve0: entered promiscuous mode [ 404.231134][T14439] geneve1: entered promiscuous mode [ 404.264471][T14439] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 404.283354][T14439] netdevsim netdevsim1 eth0: entered promiscuous mode [ 404.310996][T14439] netdevsim netdevsim1 eth1: entered promiscuous mode [ 404.334937][T14439] netdevsim netdevsim1 eth2: entered promiscuous mode [ 404.351201][T14439] netdevsim netdevsim1 eth3: entered promiscuous mode [ 404.355898][T14439] batman_adv: batadv0: Interface deactivated: gretap1 [ 404.379381][T14439] gretap1: entered promiscuous mode [ 404.382312][T14439] bond2: entered promiscuous mode [ 404.382486][T14439] veth2: entered promiscuous mode [ 404.386292][T14439] veth3: entered promiscuous mode [ 404.413547][T14439] vlan2: entered promiscuous mode [ 404.415060][T14439] veth4: entered promiscuous mode [ 404.415719][T14439] veth5: entered promiscuous mode [ 404.418286][T14439] macvlan2: entered promiscuous mode [ 404.445270][T14439] bond3: entered promiscuous mode [ 404.446004][T14439] veth6: entered promiscuous mode [ 404.448040][T14439] veth7: entered promiscuous mode [ 404.471411][T14439] bond4: entered promiscuous mode [ 404.494103][T14439] bridge2: entered promiscuous mode [ 404.494327][T14439] gre1: entered promiscuous mode [ 404.522994][T14439] bond5: entered promiscuous mode [ 404.524791][T14439] bond6: entered promiscuous mode [ 404.525880][T14439] bond7: entered promiscuous mode [ 404.526931][T14439] bond8: entered promiscuous mode [ 404.527867][T14439] bond9: entered promiscuous mode [ 404.557530][T14439] erspan1: entered promiscuous mode [ 404.557687][T14439] ip6tnl1: entered promiscuous mode [ 404.574192][T14439] bridge3: entered promiscuous mode [ 404.575977][T14439] veth8: entered promiscuous mode [ 404.576131][T14439] veth9: entered promiscuous mode [ 404.576319][T14439] bridge5: entered promiscuous mode [ 404.576519][T14439] bridge6: entered promiscuous mode [ 404.672949][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 404.672971][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 404.677508][T14439] gtp0: entered promiscuous mode [ 404.717063][T14439] bond12: entered promiscuous mode [ 404.725823][T14439] ip6erspan0: entered promiscuous mode [ 404.726179][T14439] hsr1: entered promiscuous mode [ 404.727670][T14439] syztnl2: entered promiscuous mode [ 404.727791][T14439] bridge7: entered promiscuous mode [ 404.728129][T14439] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 404.761725][T14439] bond13: entered promiscuous mode [ 404.776268][T14439] syztnl1: entered promiscuous mode [ 404.778670][ T8008] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.789318][ T151] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.789362][ T151] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.789394][ T151] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.046066][T14522] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 405.046308][T14523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 405.198074][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2433'. [ 405.198352][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2433'. [ 405.300414][T14522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.407372][T14533] netlink: 872 bytes leftover after parsing attributes in process `syz.2.2436'. [ 406.132708][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2443'. [ 406.132768][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2443'. [ 406.244926][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2445'. [ 406.775784][T14590] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 406.882903][T14590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.888731][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 407.079960][T14610] openvswitch: netlink: IP tunnel dst address not specified [ 407.291026][T14616] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 407.986619][T14610] 0ªX¹¦Dö»: left allmulticast mode [ 408.095697][T14609] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 408.317662][T14633] xt_hashlimit: overflow, try lower: 3/0 [ 408.444210][T14634] team0 (unregistering): Port device team_slave_1 removed [ 408.504105][T14640] netlink: 'syz.0.2467': attribute type 1 has an invalid length. [ 408.615345][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615386][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615409][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615432][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615454][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.615469][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615662][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615688][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615710][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615732][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615829][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615855][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615879][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615904][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615953][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.615978][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616002][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616027][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616051][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616075][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616100][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616124][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616149][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616174][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616198][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616223][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616247][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616272][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616297][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616321][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616346][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616370][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616394][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.616419][T14652] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 408.617932][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.618178][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.618376][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.619064][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.619388][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.619715][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.620037][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.620364][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.620693][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.621021][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.621361][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.621688][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.622022][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.622360][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.622687][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.623017][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.623349][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.623596][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.623921][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.624258][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.624579][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.624898][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.625237][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.625566][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.625856][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.626128][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.626388][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.626648][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.626907][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.627186][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.627485][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.627804][T14651] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 408.637311][T14649] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 408.810404][T14654] __nla_validate_parse: 7 callbacks suppressed [ 408.810424][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2468'. [ 408.915482][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915529][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915552][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915574][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915596][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915617][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915639][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915661][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915682][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915703][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915725][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915747][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915768][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915789][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915811][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915832][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915854][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915875][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915897][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915918][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915939][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915961][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.915981][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916002][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916023][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916046][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916067][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916089][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916110][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916131][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916152][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916173][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916195][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916216][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916238][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916259][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916305][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916327][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916348][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916370][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916391][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916412][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916434][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916455][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916476][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.916497][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918247][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918299][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918321][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918344][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918365][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918787][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918810][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918832][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918853][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918875][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918897][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918918][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918939][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918961][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.918982][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.919003][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.919024][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.919045][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.919067][T14652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 408.925837][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925867][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925888][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925909][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925930][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925951][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925973][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.925994][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926015][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926036][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926057][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926078][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926098][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926119][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926139][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926160][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926181][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926202][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926222][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926243][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926265][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926309][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926331][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926351][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926372][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926393][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926414][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926434][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926455][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926476][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926496][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926526][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926548][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926569][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926590][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926610][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926631][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926652][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926672][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926693][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926714][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926735][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926755][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926776][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926796][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926816][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926837][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926857][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926878][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926900][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926920][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926940][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926961][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.926982][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927003][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927023][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927045][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927065][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927086][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927107][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927127][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927148][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927169][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927189][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 408.927210][T14650] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 409.254500][T14662] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2472'. [ 409.254551][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2472'. [ 409.254563][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2472'. [ 409.430414][T14667] ip_tables: iptables: counters copy to user failed while replacing table [ 409.519777][T14672] C: renamed from lo (while UP) [ 409.552765][T14672] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 409.904401][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'. [ 410.445845][T14699] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2480'. [ 410.454758][T14699] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 410.621526][T14703] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 410.646559][T14705] netlink: 'syz.0.2482': attribute type 2 has an invalid length. [ 410.790566][T14703] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.853275][T14707] bond8: (slave geneve3): making interface the new active one [ 410.858134][T14707] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 411.303023][T14725] netlink: zone id is out of range [ 411.303040][T14725] netlink: zone id is out of range [ 411.303048][T14725] netlink: zone id is out of range [ 411.303055][T14725] netlink: zone id is out of range [ 411.303061][T14725] netlink: zone id is out of range [ 411.303068][T14725] netlink: zone id is out of range [ 411.303079][T14725] netlink: zone id is out of range [ 411.303085][T14725] netlink: zone id is out of range [ 412.862085][T14797] bridge4: entered promiscuous mode [ 412.862678][T14797] bridge4: entered allmulticast mode [ 412.957396][T14794] bridge5: entered promiscuous mode [ 412.957579][T14794] bridge5: entered allmulticast mode [ 412.974535][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'. [ 412.975503][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 412.975520][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2505'. [ 413.026641][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 413.097718][T14809] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2504'. [ 413.351806][T14825] netlink: 'syz.3.2507': attribute type 3 has an invalid length. [ 413.351831][T14825] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 414.134604][T14858] __nla_validate_parse: 8 callbacks suppressed [ 414.134625][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 414.135242][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2517'. [ 414.135283][T14857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2517'. [ 414.903464][T14883] syzkaller0: entered promiscuous mode [ 414.903641][T14883] syzkaller0: entered allmulticast mode [ 415.152306][T14902] veth0_to_bridge: entered promiscuous mode [ 415.272712][T14907] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2529'. [ 415.530536][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2531'. [ 416.259274][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2531'. [ 416.378052][ T52] block nbd0: Receive control failed (result -107) [ 416.395072][T14899] veth0_to_bridge: left promiscuous mode [ 416.415416][T14936] block nbd0: reconnected socket [ 416.561505][T14939] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 416.561531][T14939] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2534'. [ 416.564287][T14939] netlink: 'syz.2.2534': attribute type 8 has an invalid length. [ 416.919298][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 416.927161][T14956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2539'. [ 416.927209][T14956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2539'. [ 417.241077][T14971] netlink: 'syz.4.2542': attribute type 2 has an invalid length. [ 417.325776][T14954] syzkaller0: entered promiscuous mode [ 417.325801][T14954] syzkaller0: entered allmulticast mode [ 418.327577][T15018] x_tables: duplicate underflow at hook 3 [ 419.587203][T15075] [ 419.589583][T15075] ====================================================== [ 419.596603][T15075] WARNING: possible circular locking dependency detected [ 419.603633][T15075] syzkaller #0 Not tainted [ 419.608133][T15075] ------------------------------------------------------ [ 419.615231][T15075] syz.4.2570/15075 is trying to acquire lock: [ 419.621385][T15075] ffffffff8fe90360 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 419.631491][T15075] [ 419.631491][T15075] but task is already holding lock: [ 419.639130][T15075] ffff88802c20f180 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 419.648724][T15075] [ 419.648724][T15075] which lock already depends on the new lock. [ 419.648724][T15075] [ 419.659318][T15075] [ 419.659318][T15075] the existing dependency chain (in reverse order) is: [ 419.668952][T15075] [ 419.668952][T15075] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 419.676541][T15075] __might_fault+0xcb/0x130 [ 419.681587][T15075] _copy_from_user+0x28/0xb0 [ 419.686711][T15075] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 419.693219][T15075] ip_generic_getfrag+0x149/0x2d0 [ 419.698776][T15075] __ip6_append_data+0x3b26/0x40c0 [ 419.704413][T15075] ip6_append_data+0x108/0x270 [ 419.709698][T15075] rawv6_sendmsg+0x1298/0x18c0 [ 419.715002][T15075] sock_sendmsg_nosec+0x10e/0x180 [ 419.720577][T15075] ____sys_sendmsg+0x54e/0x850 [ 419.725869][T15075] ___sys_sendmsg+0x2a5/0x360 [ 419.731112][T15075] __x64_sys_sendmsg+0x1b1/0x290 [ 419.736591][T15075] do_syscall_64+0x166/0x520 [ 419.741725][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.748181][T15075] [ 419.748181][T15075] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 419.755932][T15075] lock_sock_nested+0x41/0x100 [ 419.761413][T15075] inet_shutdown+0x6a/0x390 [ 419.766467][T15075] nbd_mark_nsock_dead+0x2cb/0x550 [ 419.772116][T15075] recv_work+0x1cee/0x1e10 [ 419.777074][T15075] process_scheduled_works+0xc3d/0x1630 [ 419.783151][T15075] worker_thread+0xa47/0xfb0 [ 419.788300][T15075] kthread+0x38b/0x480 [ 419.792919][T15075] ret_from_fork+0x514/0xb70 [ 419.798065][T15075] ret_from_fork_asm+0x1a/0x30 [ 419.803357][T15075] [ 419.803357][T15075] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 419.811009][T15075] __mutex_lock+0x19d/0x1550 [ 419.816125][T15075] nbd_queue_rq+0x373/0xff0 [ 419.821161][T15075] blk_mq_dispatch_rq_list+0x499/0x1990 [ 419.827233][T15075] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 419.834174][T15075] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 419.840680][T15075] blk_mq_run_work_fn+0x16c/0x300 [ 419.846228][T15075] process_scheduled_works+0xc3d/0x1630 [ 419.852312][T15075] worker_thread+0xa47/0xfb0 [ 419.857428][T15075] kthread+0x38b/0x480 [ 419.862024][T15075] ret_from_fork+0x514/0xb70 [ 419.867140][T15075] ret_from_fork_asm+0x1a/0x30 [ 419.872428][T15075] [ 419.872428][T15075] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 419.879634][T15075] __mutex_lock+0x19d/0x1550 [ 419.884747][T15075] nbd_queue_rq+0xc1/0xff0 [ 419.889690][T15075] blk_mq_dispatch_rq_list+0x499/0x1990 [ 419.895768][T15075] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 419.902630][T15075] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 419.909425][T15075] blk_mq_run_work_fn+0x16c/0x300 [ 419.914996][T15075] process_scheduled_works+0xc3d/0x1630 [ 419.921071][T15075] worker_thread+0xa47/0xfb0 [ 419.926200][T15075] kthread+0x38b/0x480 [ 419.930789][T15075] ret_from_fork+0x514/0xb70 [ 419.935919][T15075] ret_from_fork_asm+0x1a/0x30 [ 419.941213][T15075] [ 419.941213][T15075] -> #3 (set->srcu){.+.+}-{0:0}: [ 419.948352][T15075] __synchronize_srcu+0xc9/0x2f0 [ 419.953929][T15075] elevator_switch+0x1e8/0x7b0 [ 419.959234][T15075] elevator_change+0x2fa/0x480 [ 419.964524][T15075] elevator_set_default+0x375/0x440 [ 419.970247][T15075] blk_register_queue+0x3f3/0x4e0 [ 419.975898][T15075] __add_disk+0x6b8/0xdb0 [ 419.980747][T15075] add_disk_fwnode+0x100/0x3a0 [ 419.986038][T15075] nbd_dev_add+0x733/0xb60 [ 419.991240][T15075] nbd_init+0x168/0x1f0 [ 419.995923][T15075] do_one_initcall+0x250/0x870 [ 420.001215][T15075] do_initcall_level+0x10a/0x1a0 [ 420.006689][T15075] do_initcalls+0x59/0xa0 [ 420.011552][T15075] kernel_init_freeable+0x29d/0x3e0 [ 420.017286][T15075] kernel_init+0x22/0x1d0 [ 420.022174][T15075] ret_from_fork+0x514/0xb70 [ 420.027296][T15075] ret_from_fork_asm+0x1a/0x30 [ 420.032583][T15075] [ 420.032583][T15075] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 420.040407][T15075] __mutex_lock+0x19d/0x1550 [ 420.045544][T15075] elevator_change+0x1af/0x480 [ 420.050833][T15075] elevator_set_none+0xb5/0x140 [ 420.056302][T15075] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 420.062647][T15075] nbd_start_device+0x189/0xb30 [ 420.068203][T15075] nbd_genl_connect+0x167d/0x1cd0 [ 420.073770][T15075] genl_family_rcv_msg_doit+0x233/0x340 [ 420.080048][T15075] genl_rcv_msg+0x614/0x7a0 [ 420.085098][T15075] netlink_rcv_skb+0x226/0x4a0 [ 420.090388][T15075] genl_rcv+0x28/0x40 [ 420.094905][T15075] netlink_unicast+0x7bd/0x940 [ 420.100203][T15075] netlink_sendmsg+0x813/0xb40 [ 420.105508][T15075] sock_sendmsg_nosec+0x13a/0x180 [ 420.111090][T15075] ____sys_sendmsg+0x54e/0x850 [ 420.116467][T15075] ___sys_sendmsg+0x2a5/0x360 [ 420.122118][T15075] __x64_sys_sendmsg+0x1b1/0x290 [ 420.127592][T15075] do_syscall_64+0x166/0x520 [ 420.132914][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.139337][T15075] [ 420.139337][T15075] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 420.147940][T15075] blk_alloc_queue+0x544/0x690 [ 420.153326][T15075] __blk_mq_alloc_disk+0x194/0x390 [ 420.158982][T15075] nbd_dev_add+0x494/0xb60 [ 420.163941][T15075] nbd_init+0x168/0x1f0 [ 420.168671][T15075] do_one_initcall+0x250/0x870 [ 420.173965][T15075] do_initcall_level+0x10a/0x1a0 [ 420.179791][T15075] do_initcalls+0x59/0xa0 [ 420.184649][T15075] kernel_init_freeable+0x29d/0x3e0 [ 420.190400][T15075] kernel_init+0x22/0x1d0 [ 420.195254][T15075] ret_from_fork+0x514/0xb70 [ 420.200369][T15075] ret_from_fork_asm+0x1a/0x30 [ 420.205653][T15075] [ 420.205653][T15075] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 420.212970][T15075] __lock_acquire+0x164c/0x2de0 [ 420.218381][T15075] lock_acquire+0x115/0x350 [ 420.223404][T15075] fs_reclaim_acquire+0x71/0x100 [ 420.228871][T15075] prepare_alloc_pages+0x149/0x600 [ 420.234540][T15075] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 420.240880][T15075] alloc_pages_mpol+0x21e/0x390 [ 420.246276][T15075] alloc_pages_noprof+0xb1/0x2b0 [ 420.251753][T15075] __pmd_alloc+0x3a/0x5c0 [ 420.256639][T15075] handle_mm_fault+0xe9d/0x3750 [ 420.262041][T15075] do_user_addr_fault+0x746/0x1340 [ 420.267768][T15075] exc_page_fault+0x6a/0xc0 [ 420.272792][T15075] asm_exc_page_fault+0x26/0x30 [ 420.278159][T15075] rep_movs_alternative+0x33/0xa0 [ 420.283719][T15075] _copy_to_user+0x8a/0xb0 [ 420.288659][T15075] copy_everything_to_user+0x67a/0xcd0 [ 420.294648][T15075] do_ebt_get_ctl+0x541/0x1f30 [ 420.299939][T15075] nf_getsockopt+0x26e/0x290 [ 420.305059][T15075] ip_getsockopt+0x19e/0x230 [ 420.310179][T15075] do_sock_getsockopt+0x51d/0x7e0 [ 420.315728][T15075] __x64_sys_getsockopt+0x1a4/0x240 [ 420.321460][T15075] do_syscall_64+0x166/0x520 [ 420.326585][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.332997][T15075] [ 420.332997][T15075] other info that might help us debug this: [ 420.332997][T15075] [ 420.343220][T15075] Chain exists of: [ 420.343220][T15075] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 420.343220][T15075] [ 420.356027][T15075] Possible unsafe locking scenario: [ 420.356027][T15075] [ 420.363488][T15075] CPU0 CPU1 [ 420.368866][T15075] ---- ---- [ 420.374246][T15075] rlock(&mm->mmap_lock); [ 420.378673][T15075] lock(sk_lock-AF_INET6); [ 420.385820][T15075] lock(&mm->mmap_lock); [ 420.393037][T15075] lock(fs_reclaim); [ 420.397091][T15075] [ 420.397091][T15075] *** DEADLOCK *** [ 420.397091][T15075] [ 420.405341][T15075] locks held by syz.4.2570/15075: 2, last CPU#1: [ 420.411680][T15075] #0: ffffffff913ba7e0 (ebt_mutex){+.+.}-{4:4}, at: find_inlist_lock_noload+0x49/0x260 [ 420.421461][T15075] #1: ffff88802c20f180 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 420.431412][T15075] [ 420.431412][T15075] stack backtrace: [ 420.437428][T15075] CPU: 1 UID: 0 PID: 15075 Comm: syz.4.2570 Not tainted syzkaller #0 PREEMPT(full) [ 420.447259][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.458718][T15075] Call Trace: [ 420.462013][T15075] [ 420.464953][T15075] dump_stack_lvl+0xe8/0x150 [ 420.469579][T15075] print_circular_bug+0x2e2/0x300 [ 420.474630][T15075] check_noncircular+0x12f/0x150 [ 420.479624][T15075] __lock_acquire+0x164c/0x2de0 [ 420.484517][T15075] ? lock_acquire+0x115/0x350 [ 420.489202][T15075] lock_acquire+0x115/0x350 [ 420.493707][T15075] ? prepare_alloc_pages+0x149/0x600 [ 420.499010][T15075] fs_reclaim_acquire+0x71/0x100 [ 420.503955][T15075] ? prepare_alloc_pages+0x149/0x600 [ 420.509278][T15075] prepare_alloc_pages+0x149/0x600 [ 420.514404][T15075] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 420.520231][T15075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.526584][T15075] ? __pfx_policy_nodemask+0x10/0x10 [ 420.531892][T15075] ? mas_alloc_nodes+0x291/0x350 [ 420.536845][T15075] alloc_pages_mpol+0x21e/0x390 [ 420.541732][T15075] alloc_pages_noprof+0xb1/0x2b0 [ 420.546729][T15075] __pmd_alloc+0x3a/0x5c0 [ 420.551084][T15075] handle_mm_fault+0xe9d/0x3750 [ 420.555948][T15075] ? handle_mm_fault+0xf1/0x3750 [ 420.560914][T15075] ? __pfx_handle_mm_fault+0x10/0x10 [ 420.566227][T15075] ? lock_mm_and_find_vma+0xa7/0x340 [ 420.571535][T15075] do_user_addr_fault+0x746/0x1340 [ 420.576665][T15075] exc_page_fault+0x6a/0xc0 [ 420.581227][T15075] asm_exc_page_fault+0x26/0x30 [ 420.586114][T15075] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 420.591946][T15075] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 420.611564][T15075] RSP: 0018:ffffc9000fd8f568 EFLAGS: 00050216 [ 420.617636][T15075] RAX: 5245525000000000 RBX: 0000000000000030 RCX: 0000000000000030 [ 420.625618][T15075] RDX: 0000000000000000 RSI: ffffc90003453000 RDI: 0000000000000000 [ 420.633591][T15075] RBP: ffffc9000fd8f730 R08: ffffc9000345302f R09: 1ffff9200068a605 [ 420.641565][T15075] R10: dffffc0000000000 R11: fffff5200068a606 R12: 0000000000000030 [ 420.649982][T15075] R13: 00007ffffffff000 R14: ffffc90003453000 R15: 0000000000000000 [ 420.657968][T15075] _copy_to_user+0x8a/0xb0 [ 420.662404][T15075] copy_everything_to_user+0x67a/0xcd0 [ 420.667877][T15075] ? __pfx_copy_everything_to_user+0x10/0x10 [ 420.673863][T15075] ? find_inlist_lock_noload+0xc6/0x260 [ 420.679433][T15075] do_ebt_get_ctl+0x541/0x1f30 [ 420.684210][T15075] ? rcu_is_watching+0x16/0xb0 [ 420.689015][T15075] ? trace_sched_exit_tp+0x3a/0x130 [ 420.694225][T15075] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 420.699438][T15075] ? release_sock+0x2f/0x260 [ 420.704047][T15075] ? do_ip_getsockopt+0x12fb/0x1d00 [ 420.709243][T15075] ? do_ip_getsockopt+0x12fb/0x1d00 [ 420.714444][T15075] ? __local_bh_enable_ip+0xd6/0x140 [ 420.719740][T15075] ? __mutex_trylock_common+0x15f/0x270 [ 420.725298][T15075] ? __pfx___mutex_trylock_common+0x10/0x10 [ 420.731204][T15075] ? rcu_is_watching+0x16/0xb0 [ 420.735972][T15075] ? trace_contention_end+0x3d/0x140 [ 420.741275][T15075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.747271][T15075] nf_getsockopt+0x26e/0x290 [ 420.751870][T15075] ip_getsockopt+0x19e/0x230 [ 420.756467][T15075] ? __pfx_ip_getsockopt+0x10/0x10 [ 420.761669][T15075] ? sock_common_getsockopt+0x2d/0xb0 [ 420.767069][T15075] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 420.772983][T15075] do_sock_getsockopt+0x51d/0x7e0 [ 420.778011][T15075] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 420.783641][T15075] ? __fget_files+0x3a2/0x420 [ 420.788392][T15075] ? __fget_files+0x2a/0x420 [ 420.793016][T15075] __x64_sys_getsockopt+0x1a4/0x240 [ 420.798231][T15075] do_syscall_64+0x166/0x520 [ 420.802855][T15075] ? trace_irq_disable+0x3b/0x140 [ 420.807904][T15075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.813987][T15075] ? clear_bhb_loop+0x70/0xc0 [ 420.818675][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.824588][T15075] RIP: 0033:0x7f371d19e1d9 [ 420.829029][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.848639][T15075] RSP: 002b:00007f371df86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 420.857060][T15075] RAX: ffffffffffffffda RBX: 00007f371d425fa0 RCX: 00007f371d19e1d9 [ 420.865047][T15075] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 420.873027][T15075] RBP: 00007f371d235888 R08: 0000200000000080 R09: 0000000000000000 [ 420.881032][T15075] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.889363][T15075] R13: 00007f371d426038 R14: 00007f371d425fa0 R15: 00007ffd5dd018e8 [ 420.897439][T15075] [ 420.960377][T15075] __nla_validate_parse: 7 callbacks suppressed [ 420.960396][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'. [ 421.002814][T15078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2571'. [ 421.111995][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'.