last executing test programs: 4.104507723s ago: executing program 3 (id=3821): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.032846527s ago: executing program 2 (id=3827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x40040) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x24, r2, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x20000810) socket(0x10, 0x1, 0x9) 1.916867238s ago: executing program 3 (id=3828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003340), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f00000033c0)={0x68, r2, 0x52b9ada956aca011, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "00bbfb8608180ce4d3c9a4d3f77c6a6b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)={0x5c, r4, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "be361da7567e07a9265699d5d9414c6e8937dbc1815f"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004}, 0x824) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000008000300020000000e0001006e657464657673696d0000000f0002006e657464c75e24e5657673696d3000000800580000000000"], 0x44}}, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000002d"], 0x44}}, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)=0x8000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100010800c00008008001e80040001800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.834676751s ago: executing program 2 (id=3832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, r1}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x6, 0x100}, @window={0x3, 0x4, 0x200}, @mss={0x2, 0x2}, @window={0x3, 0x5, 0x2}], 0x4) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000100)={0xeb, 0x7fffffff}) 1.63351267s ago: executing program 2 (id=3836): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xce}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010004}, 0x44000) 1.632888357s ago: executing program 1 (id=3837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.439136146s ago: executing program 4 (id=3839): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x60) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', r0, 0x40, 0x80, 0x5, 0x5, {{0x1e, 0x4, 0x0, 0x6, 0x78, 0x64, 0x0, 0x48, 0x2f, 0x0, @local, @broadcast, {[@cipso={0x86, 0x56, 0x3, [{0x7, 0xf, "190bcf7aa17765662cfca62982"}, {0x7, 0x9, "959d8d35e9cb00"}, {0x0, 0x10, "3c0f451c86e65e5bd33e97ce5e85"}, {0x7, 0x4, "ace8"}, {0x7, 0x11, "6144e0ed3ba7dd15542a31423b78d6"}, {0x0, 0x6, "7a50bc49"}, {0x7, 0x4, "c87d"}, {0x5, 0x9, "d20e6f2a62df48"}]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "b7591475"}]}]}}}}}) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000240)=@can={0x1d, r2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6a32e95a4daa6250fb2953f870860ba31b4c3f773e99a6f52137144abcaa465d587eb240d66436e34a4e1f6dc07e34b5639ae1ab0d11b9863f6de9cb30aee6a7d316623148fe927ffbb3e4132e1aea7f7fbf57fe0e2839ebe484afa7e4060e5a4e93a4d6cbe9321449ca8208127086a92de841d2cf0c0470139b5296e5e04278e3e09bcde973e2d9e675d61e764724919705212f3f0db58313c5cf33ea717900", 0xa0}, {&(0x7f0000000380)="06566768f5f39e9df7d88368ac83670de5bd7f4b8c48487cdbcaa37c5e48d39e3118a66a7cfab5c79279512d0952d3ff", 0x30}], 0x2, &(0x7f0000000580)=[{0x50, 0x6, 0x4, "bb2d277d16dcb594614ec5e62031206d4ac3728bc11523599738f110ff0bf3853f804be8b454e367dc3495ccb84cfa158bd53d4b0777be2d1a26"}, {0xa0, 0x1a, 0x2516, "722acf284bff0db181921677648bac4bb04d6cc798eb75935cd02b2d3642e9fe2057ea9211dc0adc8c50cd691e5e51411f1bb7fbe879cb2c6aaf7ca3957630d4a15c710ac32466e28c0e5a2b375b9f743f8a423fba6c1719891afe9753e31de2834d26a06c330e5310708af96efcd879473d029e0ce64c0bb75696d266475a5a4dede0873ee00776efce1d426d"}, {0xc0, 0x3a, 0x80000001, "4444f3c3ae009bd74128d61781c7f82aece7cb9788bcca1c79f63866ff6ade67b3620a436edb958f6bbf4b7462e02c5f4f7030cade0868bc32af6ae9f2849e78262cb7dc2147b071c386608ab7d5b9e71b101c7596de7dec9935f477403bf4ccd4895d979aece262f604dd6314c295cfd1ffb9932a84f195fce2283dc03c7102ad8ff551ca2b167e99a8b972fb3b71bdb0c99cb341e5044a60ce292cb8d22b13a09a891364bca9c0d15b"}, {0x40, 0x102, 0xe, "936f82087e1c7daaa54f76da8bd9b942474755ed7387b9fe96153cff11c56dcd9d6242a425af956cf93895"}, {0x80, 0x88, 0x800, "9f12b682d99ee5d7cd0487352eb3564ae478898b20b3274e73585e095287547a0949871f1a63690ad29132dd63581624374b0befbb1bb60801d0cb59804d9fcef55e7c04aa3a8eac1a4292acd0e85864322975dbde4aeb1e0019d8027be2c07fcd4f41f484748b7b526056db3f8116"}, {0xc8, 0x29, 0x6, "331bdc45bfbdb36cdf11ba9211dad1561a09df0de193f876115ab5f230d90174486321bef74c9758756212ad9ae8d60aac62664dfc9dd9d76f068a681596c9cdba42966746e759d2f9bb743961a3e758884bbeedbf769b59877089019034a1579ebe3faa537d2a2e2c3766ed3e168604f294b41c865efc4c5a6740693653ae6beef44cd4b602b971f84a05fe3e902fb6294e7f3b5028d09b09c132266e1515ac6e61f840f2d7bc2c7187e4b6570fc7c3b2e3"}], 0x338}}], 0x1, 0x4000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x200, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x100}, [@RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x60, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}}}}}]}, 0x44}}, 0x4000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r6, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3e2, 0x4, {0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x80) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={r9, 0xff, 0x5, 0x483d}, 0x10) 1.385340322s ago: executing program 2 (id=3840): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x48, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x38, 0xf2, 0x0, 0x1, [@nested={0x34, 0x66, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@loopback}, @nested={0x25, 0x24, 0x0, 0x1, [@generic="e660fc12a811408336accc7f8b4b1ebab7450b12dd1c2503f1a7679e9b396f411b"]}]}]}]}, 0x48}, {&(0x7f0000001500)={0x10, 0x26, 0x212, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 1.324668403s ago: executing program 1 (id=3842): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'vlan1\x00', 0x800}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'vlan1\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088c212aaaaaaaa29bbbbbbbbbbbb08004519fe6d0065000001069078ac14142100000000"], 0x26) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x6, 0x0, 0x0, {0xfff, 0xe, 0x1}}, {0x7e, 0x2, 0x0, {0x8, 0x10000, 0x1}}, {0x80000000, 0x2, 0x0, {0x8, 0x9}}], 0x3, 0x20, 0x9, 0x94}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) (async) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendto$inet6(r3, &(0x7f0000000600)="b5", 0x1, 0x20000004, &(0x7f0000000700)={0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) listen(r3, 0x3) accept$inet6(r3, 0x0, 0x0) (async) accept$inet6(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r7, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x45, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x85) (async) sendmsg$inet6(r7, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x45, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x85) socket$vsock_stream(0x28, 0x1, 0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, 0x0, 0x0) 1.228704528s ago: executing program 4 (id=3844): r0 = socket$inet6(0xa, 0x1, 0xfffffff1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000610066ac22bc216482e0561040000000000095000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0xfffffff1) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000610066ac22bc216482e0561040000000000095000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.107034158s ago: executing program 0 (id=3845): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000003040)=[{}], 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 1.061264191s ago: executing program 4 (id=3846): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200006000001177fbe000030ae000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff67, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x7}, 0x26) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000002c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080)="a3", &(0x7f0000000180)=@tcp6, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00'}) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) 964.950596ms ago: executing program 1 (id=3847): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'veth0_to_bridge\x00', @multicast}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x34, 0x0, 0x5f46, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}, 0x40) 959.736127ms ago: executing program 3 (id=3848): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) (async) r1 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0xf}, 0x1c) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802890007000000000000000080000085000000750000000000000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000010000006d05000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r10, 0x0, 0x11000000}, 0x38) r11 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000001b80)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f0000001b40)=""/45, 0x2d}, &(0x7f0000001bc0)=0x40) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xc800) splice(r8, 0x0, r11, 0x0, 0x10d00, 0xf) (async) sendmsg$sock(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}], 0x1}, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) (async) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) 924.723105ms ago: executing program 0 (id=3849): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x581, 0x0, 0x25dfdbdc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gre={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x81}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 821.135489ms ago: executing program 1 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x4, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x4, r1}, 0x10) (async) 820.674843ms ago: executing program 4 (id=3851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@iter={&(0x7f0000000000)=@cgroup={0x4, 0xffffffffffffffff, 0xb9}, 0x10}}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4002, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="d9ea693249ca", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) recvmsg(r2, &(0x7f0000001940)={&(0x7f0000001540)=@pppoe, 0x80, &(0x7f00000018c0)=[{&(0x7f00000015c0)=""/69, 0x45}, {&(0x7f0000001640)=""/1, 0x1}, {&(0x7f0000001680)=""/37, 0x25}, {&(0x7f00000016c0)=""/249, 0xf9}, {&(0x7f00000017c0)=""/255, 0xff}], 0x5}, 0x40) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000000280)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/133, 0x85}, {&(0x7f0000000440)=""/121, 0x79}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 776.881489ms ago: executing program 3 (id=3852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 605.935884ms ago: executing program 0 (id=3853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000047b80889d7000000400000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{r1, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_ext={0x1c, 0x4, &(0x7f00000015c0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb7e9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000001600)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41000, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1e851, r0, 0x8, &(0x7f00000017c0)=[r1, r1, r1, r1, r3, r1, r1, r1, r4, r1], &(0x7f0000001800)=[{0x2, 0x4, 0xf, 0x6}, {0x0, 0x2, 0x7, 0x3}, {0x2, 0x1, 0x8, 0x7}, {0x3, 0x5}, {0x3, 0x1, 0xe, 0x3}, {0x2, 0x2, 0x5, 0x9}, {0x0, 0x2, 0xc, 0xb}, {0x5, 0x4, 0x2, 0x8}], 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x80010, r6, 0xd94fa000) close(r6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) recvmmsg(r7, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000002bc0)}, 0x40}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1}, 0x2}], 0x4, 0x162, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x2, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003c700b17b1b209009d1508ea08000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018480000fdffffff0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000380)=""/4096, 0x0, 0x10, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000001380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0xf, 0xa2, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001480)=[r8], &(0x7f00000014c0)=[{0x0, 0x4, 0xe, 0x9}, {0x3, 0x3, 0xb, 0x5}], 0x10, 0x3}, 0x94) 520.68836ms ago: executing program 3 (id=3854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030027bd0900fddbdf251100b48b8aeaae380000c7967fa72b9249d179517265b209f02fba884796a7073d00c15cafa6d09504217a0ea5f069f176ebac7bd4601e379befadbdfc6e0651aa707b137735879b2f75b6f8db91ef902f90cdebb2f77fc5a4902305a51fa37c3d4fc71368d2958e215084fc5831b4266e7ad0e119cfe12da34803bc88745e9c2c92a88ad594b1109d2960980de37ddf38d132e76ee83479d9d250fa1f45bceb29296ad56d1234e60467ef9097a50f9756bbc5694dcfd12289fc62a9e2e674248a93b42159677ac3ac8fcd5debc06352d673c124932400783aeecebba378bbb7cda42942c4f756ce0e3ae3c4a663b7"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030027bd0900fddbdf251100b48b8aeaae380000c7967fa72b9249d179517265b209f02fba884796a7073d00c15cafa6d09504217a0ea5f069f176ebac7bd4601e379befadbdfc6e0651aa707b137735879b2f75b6f8db91ef902f90cdebb2f77fc5a4902305a51fa37c3d4fc71368d2958e215084fc5831b4266e7ad0e119cfe12da34803bc88745e9c2c92a88ad594b1109d2960980de37ddf38d132e76ee83479d9d250fa1f45bceb29296ad56d1234e60467ef9097a50f9756bbc5694dcfd12289fc62a9e2e674248a93b42159677ac3ac8fcd5debc06352d673c124932400783aeecebba378bbb7cda42942c4f756ce0e3ae3c4a663b7"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) (async) 441.696743ms ago: executing program 1 (id=3855): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x541600, &(0x7f00000000c0)={@align=0x8, {0x407, 0xfff7, 0x2, 0xb627}}, 0xfffffff8, &(0x7f0000000100), &(0x7f0000000140)=0xfff}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000001340)=[{&(0x7f0000000340)="a272252e0538609eebff320965e838f376fc08388818567eb6182f65e9b636e9f581d8bdb5014619cc5a6aeb3e671cf9cf5f03910d05a1ca48d707d4ca41b9b249e11391ab2cf3098ea7144b2b2e0e08b6e12d2531da42957bb8a50460b2770cb6ca186bf53d95452c541bbed7117f4f9ada020f6d7eb66444395fc7edb7ef711425507165065194b2df06156f9b737b75020d4770db7786609d4ee22e9aff1ea6de97524de147d9e11bf0c367a52ea0bd8f61ad02e83eed760a86735e19dcbe4eb5117220836ab3461a337630df15f5f4746d7acdb69db27bed0d31a0d9920a06e487cd0fbab852", 0xe8}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001440)={0xffffffffffffffff, 0x7fffffffffffffff, 0xfff, 0x72}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, 0xfffffffffffffffe, 0x78) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @broadcast}, 0x10) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e000776218"], 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001580)={0xffffffffffffffff, &(0x7f0000001480)='*%\\$\'])[\x00', 0x0, &(0x7f00000014c0)={@_ha_fsid={[0x1]}, {0x4, 0x17a0, 0x4, 0x5}}, 0x0, &(0x7f0000001500), &(0x7f0000001540)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3b5b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x50, '\x00', r4, 0x1c, r5, 0x8, &(0x7f00000013c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0x10, 0x0, 0x3}, 0x10, 0x2fddc, r6, 0x0, &(0x7f00000015c0)=[r10], 0x0, 0x10, 0x4}, 0x94) 393.361749ms ago: executing program 0 (id=3856): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = epoll_create1(0x0) sendfile(r3, r1, &(0x7f0000000140)=0x6, 0x276f) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r2, &(0x7f0000000000)=',\\@-\x00', 0x82002, &(0x7f0000000040)={@align=0x2, {0xbe9a, 0xbf, 0x4, 0x6}}, 0x5f39feac, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)={0x40000000}) 312.837215ms ago: executing program 4 (id=3857): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x38, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, {0xa, 0x4, @random="d58bcfbb17d1"}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x68}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x8044) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) 297.473528ms ago: executing program 3 (id=3858): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706105006f6164001400028008000340000000e108000240000000050900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x4, 0x6}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x1}], 0x1}, 0x20008110) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000) shutdown(r7, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14004d00", @ANYRES16=r9, @ANYBLOB="030027bd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r7, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x2, 0x0, {0xa, 0x6e24, 0x2, @mcast2, 0x1}}}, 0x80) 255.680181ms ago: executing program 2 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 157.468515ms ago: executing program 1 (id=3860): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000040)='-\xa5--\x00', 0x0, &(0x7f0000000080)={@align=0xfffffffffffffff5, {0x100, 0x4, 0x6, 0x9}}, 0x400, &(0x7f00000000c0), &(0x7f0000000100)=0x3}, 0x4, &(0x7f0000000580)=[{0x2, 0x77, &(0x7f0000000140)='\\:$)[\x00', &(0x7f0000000180)="c0ef2253e19a279ed552151fe7f9980bcea96170628956cf6f1f53666c0d45b5da8f70e51270669c5f6c7793d06da547ce184091e0e7df991892cf9c439fecc7ef50d4cdcb50878e92793a1501183212c0c4fbe1089338b8399c58e217e9e58753d8a54fbf3783c5243445df40468d45b3dfb6500c4158deed1a33cbf5ef20b225f5db538ed84c9e0af7b5aad0fa504aee55274fbbcd96d20d9f545350729e1e9d30cbcc0a2adf9d90553b355bd9c7d8cfbaed325dbd45fc53f8c81f5c1aa6fc5cb65662e300b21b71272ad8ba4b2640", 0xd0, 0x28}, {0x3, 0x3, &(0x7f00000002c0)='#,\x00', &(0x7f0000000300)="6157e94ab00153bc9c2ed20331ba0e36c463a70b7a75b7f8690d3446c86f8a1d130a6fa836cc0865c49f02d72bcd5be607257eb4f483ef458f5fb412f547439e484dd57ae870706206565838f022e7dbdcfd03a3a031b70863f39d61ccf19dc84fd249f2af56ef891db4f9524e72c8e8791487ef53d14d6dfae898ae25184f76dfd4a36dbce5dab32b2cb9e5e32f32efc5178485406747cb03c84e2fc1f07fca", 0xa0, 0x2}, {0x1, 0x9, &(0x7f00000003c0)='[.{\x00', &(0x7f0000000400)="02bdb17c1c1feeab7ec87bd0ae0434fdc421601aab7be70848b3b5cfa186a10798d5e67d098c8669c225c7505352445058195c70f97f2aeabeae24a5e70f4bbbf7d6a5977c14454fc2c570a96baf79197c672c77e80be697cd42d54e5cd7052e6169c5509616dbe380549de857fc52a8947b93f1b7d53d27", 0x78, 0x20}, {0x3, 0x10001, &(0x7f0000000480)='\x00', &(0x7f0000000540)="10474786b8fcf2fcbcef60", 0xb, 0x22}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100a463ede3"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) 156.275747ms ago: executing program 4 (id=3861): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = accept4$bt_l2cap(r3, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000240)=0x8, &(0x7f0000000280)=0x2) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000100)={0x14, 0x0, 0xc9c5, 0x69, 0x80}) 155.995052ms ago: executing program 0 (id=3862): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x5, [0xa, 0x10, 0x1000, 0x7, 0xa000]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x2}, &(0x7f0000000100)=0x8) ioctl$FIOCLEX(r4, 0x5451) 30.701909ms ago: executing program 2 (id=3863): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 0s ago: executing program 0 (id=3864): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close(r1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9001e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea318800"}, 0xd8) (async) listen(r4, 0x7c2) (async) r5 = socket(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r10, 0x0) (async, rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040f00560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000000000ebca433c2e", 0x58}], 0x100000000000013c) (async) r12 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) (async) recvfrom(r12, &(0x7f00000000c0)=""/133, 0x85, 0x20, &(0x7f0000000200)=@generic={0x6, "dba71935234f1360c48d764022cc5e01a76fc2be97f1e215c301fb743582e282520d4c1a11e5c412bc7e5b561f1f3452603472eefd5cc9df6e721782a24eeb8709cf60b6d26afd0e5e3171696e95ccd581e0245005534f378064d4d51d33aeba9c432d61652bc7d826be0f84ef059d3ae7cdd474aa297f01b778281c0928"}, 0x80) kernel console output (not intermixed with test programs): [ 314.696609][T13629] bond8: entered allmulticast mode [ 314.792965][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.802136][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.879861][T13648] veth0_vlan: mtu less than device minimum [ 314.938207][T13656] macsec0: entered promiscuous mode [ 314.955607][T13656] macsec0: entered allmulticast mode [ 314.976803][T13656] veth1_macvtap: entered allmulticast mode [ 315.003038][T13656] macsec0: left promiscuous mode [ 315.028519][T13656] macsec0: left allmulticast mode [ 315.051575][T13656] veth1_macvtap: left allmulticast mode [ 315.597530][ T999] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 316.548631][T13713] bond7: entered promiscuous mode [ 316.553948][T13713] bond7: entered allmulticast mode [ 316.559548][T13713] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.485153][T13723] bond9: (slave gre0): Device is not bonding slave [ 317.492466][T13723] bond9: option active_slave: invalid value (gre0) [ 317.500270][T13723] bond9 (unregistering): Released all slaves [ 318.286716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.348533][T13675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.613136][T13740] __nla_validate_parse: 1 callbacks suppressed [ 318.613162][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 318.686017][T13731] bridge_slave_1: entered allmulticast mode [ 318.718543][ T8841] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 318.963633][T13760] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 319.163232][T13770] syzkaller0: entered promiscuous mode [ 319.168902][T13770] syzkaller0: entered allmulticast mode [ 319.196331][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 319.217757][T13770] hsr_slave_0: left promiscuous mode [ 319.229072][T13770] hsr_slave_1: left promiscuous mode [ 319.634949][T13794] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 319.934562][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 319.952371][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 320.417458][T13841] bond1: option mode: unable to set because the bond device has slaves [ 320.514670][T13846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2161'. [ 320.539143][T13846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2161'. [ 320.780611][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'. [ 320.820094][T13858] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2164'. [ 321.047260][T13873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2169'. [ 321.140221][T13877] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2171'. [ 321.239258][T13888] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 321.479090][T13905] 8021q: VLANs not supported on lo [ 321.648926][T13916] netlink: zone id is out of range [ 321.659205][T13917] tipc: Enabling of bearer rejected, failed to enable media [ 321.676455][T13916] netlink: zone id is out of range [ 321.687156][T13916] netlink: zone id is out of range [ 321.705853][T13916] netlink: zone id is out of range [ 321.724040][T13916] netlink: zone id is out of range [ 321.742999][T13916] netlink: zone id is out of range [ 321.769794][T13916] netlink: zone id is out of range [ 321.799120][T13916] netlink: zone id is out of range [ 321.808513][T13920] bond0: entered promiscuous mode [ 321.816440][T13916] netlink: zone id is out of range [ 321.835927][T13916] netlink: zone id is out of range [ 321.841628][T13920] batadv0: entered promiscuous mode [ 321.858044][T13920] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 321.858835][T13928] xt_connbytes: Forcing CT accounting to be enabled [ 321.905310][T13920] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 321.964300][T13920] bond0: left promiscuous mode [ 321.970777][T13920] batadv0: left promiscuous mode [ 322.010335][T13930] syzkaller1: entered promiscuous mode [ 322.017009][T13930] syzkaller1: entered allmulticast mode [ 322.126647][T13935] netlink: 'syz.3.2187': attribute type 5 has an invalid length. [ 322.155461][T13935] geneve3: entered promiscuous mode [ 322.167079][T13935] geneve3: entered allmulticast mode [ 322.180836][ T8841] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 322.195912][ T8841] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 322.216973][ T8841] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 322.289294][T13941] netlink: 'syz.4.2189': attribute type 5 has an invalid length. [ 322.396366][T13946] netlink: 'syz.0.2191': attribute type 4 has an invalid length. [ 322.434509][T13946] sit2: entered promiscuous mode [ 322.439653][T13946] sit2: entered allmulticast mode [ 322.583833][T13955] No such timeout policy "syz1" [ 322.756894][T13966] tc_dump_action: action bad kind [ 322.822833][T13966] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 322.855640][T13966] bond7 (unregistering): Released all slaves [ 322.906404][T13976] netlink: 'syz.3.2200': attribute type 9 has an invalid length. [ 324.483644][T14039] veth0_to_bond: entered allmulticast mode [ 324.510214][ T59] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 325.808986][T13974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.988034][T14052] __nla_validate_parse: 13 callbacks suppressed [ 325.988057][T14052] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2216'. [ 326.045997][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'. [ 326.063330][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2216'. [ 326.215344][T14069] xt_l2tp: missing protocol rule (udp|l2tpip) [ 326.377089][T14081] tipc: Enabling of bearer rejected, failed to enable media [ 326.407590][T14081] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2225'. [ 326.425593][T14087] netlink: 'syz.4.2228': attribute type 10 has an invalid length. [ 326.445565][T14087] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 326.473556][T14087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.490377][T14087] .`: (slave netdevsim0): Enslaving as an active interface with a down link [ 326.994585][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'. [ 327.246056][ T8841] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfb [ 327.437167][T14130] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2239'. [ 327.688201][T14139] netlink: 'syz.2.2243': attribute type 21 has an invalid length. [ 327.719114][T14139] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.755743][T14146] xt_TCPMSS: Only works on TCP SYN packets [ 327.794131][T14138] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 327.850753][T14138] 8021q: adding VLAN 0 to HW filter on device bond8 [ 327.969516][T14159] netlink: 'syz.4.2247': attribute type 9 has an invalid length. [ 328.128713][T14170] sctp: [Deprecated]: syz.1.2250 (pid 14170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.128713][T14170] Use struct sctp_sack_info instead [ 328.147257][T14170] sctp: [Deprecated]: syz.1.2250 (pid 14170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.147257][T14170] Use struct sctp_sack_info instead [ 328.167136][T14170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2250'. [ 328.271878][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 328.283423][T14174] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 328.295554][T14174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2251'. [ 328.475356][T14186] netlink: 212108 bytes leftover after parsing attributes in process `syz.1.2256'. [ 328.728731][T14189] syzkaller0: entered promiscuous mode [ 328.734775][T14189] syzkaller0: entered allmulticast mode [ 328.745983][T14193] 8021q: VLANs not supported on ipvlan1 [ 328.754821][T14200] tipc: New replicast peer: 172.20.20.187 [ 328.761049][T14200] tipc: Enabled bearer , priority 10 [ 328.926910][T14209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.934270][T14209] IPv6: NLM_F_CREATE should be set when creating new route [ 328.941704][T14209] IPv6: NLM_F_CREATE should be set when creating new route [ 328.948984][T14209] IPv6: NLM_F_CREATE should be set when creating new route [ 330.420044][T14198] tipc: Enabling of bearer rejected, already enabled [ 330.430973][ T9563] tipc: Node number set to 3650198857 [ 357.492184][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 357.517974][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 357.786063][T14244] netlink: 'syz.2.2270': attribute type 32 has an invalid length. [ 357.864723][T14253] xt_socket: unknown flags 0x8 [ 357.864896][T14250] syzkaller1: entered promiscuous mode [ 357.928390][T14250] syzkaller1: entered allmulticast mode [ 358.484103][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'. [ 360.918055][T14262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.089210][T14338] net_ratelimit: 54 callbacks suppressed [ 361.089231][T14338] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 361.133757][T14338] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.177846][T14343] netlink: 'syz.3.2295': attribute type 9 has an invalid length. [ 361.313539][T14344] macvlan0: entered promiscuous mode [ 361.482506][T14354] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.512348][T14354] bridge0: port 4(bond10) entered blocking state [ 361.533764][T14354] bridge0: port 4(bond10) entered disabled state [ 361.552715][T14354] bond10: entered allmulticast mode [ 361.565303][T14354] bond10: entered promiscuous mode [ 362.061152][T14398] Cannot find add_set index 46338 as target [ 362.074022][T14397] Cannot find add_set index 46338 as target [ 362.129947][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 362.145504][T14405] netem: change failed [ 362.254196][T14415] netlink: 'syz.4.2315': attribute type 39 has an invalid length. [ 362.257952][T14416] netlink: 'syz.4.2315': attribute type 39 has an invalid length. [ 362.273355][T14416] hsr_slave_1 (unregistering): left promiscuous mode [ 365.029779][T14395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.260020][T14441] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 365.647318][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 365.994958][T14500] xt_hashlimit: size too large, truncated to 1048576 [ 366.097640][T14504] veth0_to_bridge (unregistering): left allmulticast mode [ 366.119569][T14507] netlink: 'syz.3.2341': attribute type 13 has an invalid length. [ 366.134439][T14504] veth0_to_bridge (unregistering): left promiscuous mode [ 366.167176][T14504] bridge0: port 2(veth0_to_bridge) entered disabled state [ 366.198889][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 366.251270][T14504] bridge_slave_0 (unregistering): left allmulticast mode [ 366.278925][T14504] bridge_slave_0 (unregistering): left promiscuous mode [ 366.299120][T14504] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.352199][T14507] gretap0: refused to change device tx_queue_len [ 366.364815][T14507] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 366.870191][T14539] syz.1.2352 (14539) used obsolete PPPIOCDETACH ioctl [ 367.039601][T14554] syzkaller1: entered promiscuous mode [ 367.070479][T14554] syzkaller1: entered allmulticast mode [ 367.397273][T14577] veth0: entered promiscuous mode [ 367.598241][T14586] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.622090][T14573] veth0: left promiscuous mode [ 367.637181][T14586] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.693620][T14586] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.730830][T14586] netlink: 'syz.4.2365': attribute type 6 has an invalid length. [ 367.762239][T14586] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.781295][T14588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.798032][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 367.813693][T14588] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.832346][T14588] netlink: 'syz.4.2365': attribute type 6 has an invalid length. [ 367.843112][T14588] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2365'. [ 367.877612][T14598] bond6: entered promiscuous mode [ 367.883705][T14598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.925735][T14598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.967433][T14598] bond6: (slave sit3): The slave device specified does not support setting the MAC address [ 367.980809][T14598] bond6: (slave sit3): Error -95 calling set_mac_address [ 368.100759][T14606] syzkaller1: entered promiscuous mode [ 368.119797][T14606] syzkaller1: entered allmulticast mode [ 368.167083][T14615] xt_TCPMSS: Only works on TCP SYN packets [ 368.368776][T14627] syzkaller0: entered promiscuous mode [ 368.374561][T14627] syzkaller0: entered allmulticast mode [ 368.718004][T14637] Cannot find add_set index 2 as target [ 368.886004][T14644] openvswitch: netlink: Flow actions attr not present in new flow. [ 369.503057][T14678] bond10: invalid ARP target 0.0.0.0 specified for addition [ 369.524734][T14678] bond10: option arp_ip_target: invalid value (0) [ 369.537033][T14678] bond10 (unregistering): Released all slaves [ 370.476247][T14724] xt_hashlimit: size too large, truncated to 1048576 [ 370.531151][T14729] netlink: 'syz.3.2406': attribute type 28 has an invalid length. [ 370.589262][T14729] netlink: 'syz.3.2406': attribute type 3 has an invalid length. [ 370.897499][T14746] __nla_validate_parse: 10 callbacks suppressed [ 370.897520][T14746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2412'. [ 371.084051][T14754] netlink: 640 bytes leftover after parsing attributes in process `syz.4.2415'. [ 371.130026][T14754] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 371.205735][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 371.433903][T14764] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 371.494819][T14764] bond10 (unregistering): Released all slaves [ 371.640026][T14777] veth1_to_bond: entered allmulticast mode [ 371.685145][T14773] syzkaller1: entered promiscuous mode [ 371.708628][T14773] syzkaller1: entered allmulticast mode [ 371.748181][T14768] veth1_to_bond: left allmulticast mode [ 371.916146][T14800] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2425'. [ 371.933278][T14802] sctp: [Deprecated]: syz.1.2423 (pid 14802) Use of int in max_burst socket option deprecated. [ 371.933278][T14802] Use struct sctp_assoc_value instead [ 372.339901][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 372.368623][T14823] netlink: 'syz.3.2432': attribute type 5 has an invalid length. [ 372.385962][T14823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2432'. [ 372.402362][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'. [ 372.423211][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'. [ 372.873891][T14859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2442'. [ 372.897883][T14868] netlink: 'syz.3.2444': attribute type 21 has an invalid length. [ 372.922588][T14868] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2444'. [ 372.949492][T14868] netlink: 'syz.3.2444': attribute type 5 has an invalid length. [ 373.021099][T14863] can: request_module (can-proto-0) failed. [ 373.395638][T14880] bond11: Unable to set down delay as MII monitoring is disabled [ 373.410309][T14880] bond11 (unregistering): Released all slaves [ 373.454224][T14879] netlink: 'syz.4.2446': attribute type 1 has an invalid length. [ 373.678619][T14905] syzkaller0: entered promiscuous mode [ 373.694713][T14905] syzkaller0: entered allmulticast mode [ 373.853482][T14912] tipc: Enabled bearer , priority 10 [ 374.298672][T14932] block nbd3: server does not support multiple connections per device. [ 374.324078][T14932] block nbd3: shutting down sockets [ 374.600385][T14959] : entered promiscuous mode [ 375.043251][T14973] IPv6: Can't replace route, no match found [ 375.063960][T14973] IPv6: Can't replace route, no match found [ 375.293042][T15000] netlink: 'syz.3.2479': attribute type 25 has an invalid length. [ 375.304105][T14998] bond7: entered promiscuous mode [ 375.309563][T14998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.416519][T14996] kthread_run failed with err -4 [ 375.483212][T15003] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.523659][T15003] bond7: (slave sit3): The slave device specified does not support setting the MAC address [ 375.546441][T15003] bond7: (slave sit3): Error -95 calling set_mac_address [ 375.607846][T14998] bond7: (slave sit3): The slave device specified does not support setting the MAC address [ 375.619423][T14998] bond7: (slave sit3): Error -95 calling set_mac_address [ 375.706213][T15026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.782613][ T59] bond0: (slave ): link status definitely down, disabling slave [ 375.797568][ T59] bond0: now running without any active interface! [ 376.067279][T15047] __nla_validate_parse: 20 callbacks suppressed [ 376.067294][T15047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2496'. [ 376.358633][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 376.383229][T15065] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2503'. [ 376.560953][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2505'. [ 376.574421][T15074] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2506'. [ 376.583716][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2505'. [ 376.899329][T15093] syzkaller0: entered promiscuous mode [ 376.913096][T15093] syzkaller0: entered allmulticast mode [ 376.944743][T15106] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2512'. [ 376.970040][T15106] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.058873][T15110] xt_nat: multiple ranges no longer supported [ 378.666478][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 378.969830][T15132] syzkaller1: entered promiscuous mode [ 378.975976][T15132] syzkaller1: entered allmulticast mode [ 379.472144][T15074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.725934][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.154657][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2530'. [ 380.197573][T15178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'. [ 380.228486][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 380.257149][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 380.285322][T15186] netlink: 'syz.4.2534': attribute type 1 has an invalid length. [ 380.294618][T15186] netlink: 'syz.4.2534': attribute type 2 has an invalid length. [ 380.303507][T15183] netlink: 'syz.0.2532': attribute type 64 has an invalid length. [ 380.311753][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 380.330364][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 380.369290][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 380.400721][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 380.439096][T15183] syzkaller0: entered promiscuous mode [ 380.466142][T15183] syzkaller0: entered allmulticast mode [ 380.484069][T15178] netlink: 'syz.1.2531': attribute type 29 has an invalid length. [ 381.787827][T15265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.048739][T15283] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 382.256011][T15291] xt_hashlimit: size too large, truncated to 1048576 [ 382.296729][T15295] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 382.320031][T15296] __nla_validate_parse: 5 callbacks suppressed [ 382.320050][T15296] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2557'. [ 382.375052][T15296] nbd: must specify a size in bytes for the device [ 382.466164][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2561'. [ 382.496664][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2561'. [ 382.573351][T15303] macvtap1: entered promiscuous mode [ 382.578953][T15303] vlan0: entered promiscuous mode [ 382.585261][T15303] macvtap1: entered allmulticast mode [ 382.590927][T15303] vlan0: entered allmulticast mode [ 382.596707][T15303] veth0_vlan: entered allmulticast mode [ 382.673834][T15309] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 383.176909][T15344] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 383.225959][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 383.325394][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'. [ 383.462994][T15359] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2573'. [ 383.590759][T15344] 8021q: adding VLAN 0 to HW filter on device bond9 [ 383.628561][T15344] bond8: (slave bond9): Enslaving as an active interface with an up link [ 383.864496][T15385] netlink: 2096 bytes leftover after parsing attributes in process `syz.4.2576'. [ 383.937204][T15391] 8021q: adding VLAN 0 to HW filter on device bond9 [ 383.945419][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 384.065972][T15396] bridge0: port 1(bridge_slave_0) entered learning state [ 384.769033][T15452] syzkaller0: entered promiscuous mode [ 384.787510][T15452] syzkaller0: entered allmulticast mode [ 384.898201][T15459] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2598'. [ 384.945670][T15459] syzkaller1: entered promiscuous mode [ 384.963159][T15459] syzkaller1: entered allmulticast mode [ 385.417369][T15484] IPVS: Scheduler module ip_vs_sip not found [ 385.495547][T15500] validate_nla: 4 callbacks suppressed [ 385.495567][T15500] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 385.518667][T15500] netlink: 'syz.1.2610': attribute type 3 has an invalid length. [ 385.544850][T15500] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 385.553620][T15500] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2610'. [ 385.824497][T15525] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 386.108073][T15551] netlink: 'syz.3.2624': attribute type 29 has an invalid length. [ 386.161192][T15553] syzkaller0: entered promiscuous mode [ 386.168254][T15553] syzkaller0: entered allmulticast mode [ 387.900559][T15565] __nla_validate_parse: 1 callbacks suppressed [ 387.900581][T15565] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2628'. [ 388.088327][T15576] veth0_to_bond: entered allmulticast mode [ 388.415862][T15597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2636'. [ 388.678208][T15506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.692431][T15607] netlink: 'syz.3.2638': attribute type 23 has an invalid length. [ 389.011191][T15618] syzkaller0: entered promiscuous mode [ 389.041636][T15618] syzkaller0: entered allmulticast mode [ 389.385443][T15642] nbd: must specify an index to disconnect [ 389.617703][T15652] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2652'. [ 389.639328][T15648] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2650'. [ 389.656258][T15655] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2653'. [ 389.779435][ T48] tipc: Subscription rejected, illegal request [ 389.979622][T15665] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 389.995223][T15665] bond10 (unregistering): Released all slaves [ 390.015899][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2656'. [ 390.120005][T15673] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 390.147097][T15676] netlink: 'syz.4.2659': attribute type 6 has an invalid length. [ 390.400867][T15692] netlink: 182812 bytes leftover after parsing attributes in process `syz.4.2665'. [ 390.411009][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2665'. [ 390.521127][T15690] syzkaller0: entered promiscuous mode [ 390.733665][T15709] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 390.793075][T15717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.818112][T15720] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2669'. [ 391.027557][T15728] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 391.091575][T15728] bond10: (slave bridge5): Enslaving as a backup interface with an up link [ 391.114093][T15728] macvlan3: entered promiscuous mode [ 391.119884][T15728] macvlan3: entered allmulticast mode [ 391.126588][T15728] bond10: entered promiscuous mode [ 391.132752][T15728] bridge5: entered promiscuous mode [ 391.139360][T15728] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 391.154869][T15728] bond10: left promiscuous mode [ 391.168370][T15728] bridge5: left promiscuous mode [ 391.226137][T15739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.542516][T15750] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 391.562224][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 391.565713][T15750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.600411][T15751] vlan2: entered allmulticast mode [ 391.621005][T15751] bond0: entered allmulticast mode [ 391.698031][T15752]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.717485][T15752]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.739845][T15752]  (unregistering): Released all slaves [ 391.987668][T15770] netlink: 'syz.4.2686': attribute type 3 has an invalid length. [ 392.105591][T15780] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 392.184289][T15780] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 392.868081][T15808] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 393.365563][T15838] __nla_validate_parse: 3 callbacks suppressed [ 393.365582][T15838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2702'. [ 393.432306][T15839] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2704'. [ 393.492364][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2704'. [ 393.517105][T15839] openvswitch: netlink: Missing key (keys=40, expected=80) [ 393.642586][T15845] netlink: 'syz.4.2705': attribute type 10 has an invalid length. [ 393.653225][T15851] netlink: 'syz.0.2706': attribute type 1 has an invalid length. [ 393.681561][T15845] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.701924][T15845] bridge_slave_1: left allmulticast mode [ 393.729479][T15845] bridge_slave_1: left promiscuous mode [ 393.772123][T15845] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.841345][T15845] .`: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 394.339341][T15887] netlink: 'syz.4.2717': attribute type 9 has an invalid length. [ 394.576724][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2719'. [ 394.659048][T15906] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 394.681662][ T12] .`: (slave bridge_slave_1): link status definitely up [ 395.100256][T15941] netlink: 'syz.2.2721': attribute type 29 has an invalid length. [ 395.102401][T15922] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2722'. [ 395.178635][T15948] netlink: 'syz.2.2721': attribute type 29 has an invalid length. [ 395.285369][T15941] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2721'. [ 395.517454][ T5491] veth0_vlan: left promiscuous mode [ 395.659551][ T5491] veth0_vlan: entered promiscuous mode [ 395.988265][T15963] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 396.044129][T15963] bond12 (unregistering): Released all slaves [ 396.084993][T15970] erspan0: refused to change device tx_queue_len [ 396.095957][T15970] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 396.235656][T15984] syzkaller0: entered promiscuous mode [ 396.256076][T15984] syzkaller0: entered allmulticast mode [ 396.413305][T16003] openvswitch: netlink: IP tunnel dst address not specified [ 396.496279][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 396.662490][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 396.729982][T16011] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2734'. [ 396.768610][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 397.257577][T16031] lo speed is unknown, defaulting to 1000 [ 397.547003][T16062] validate_nla: 1 callbacks suppressed [ 397.547020][T16062] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 397.761006][T16062] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.836173][T16065] vlan0: entered promiscuous mode [ 397.854910][T16065] bond11: entered promiscuous mode [ 397.876316][T16065] vlan0: entered allmulticast mode [ 397.892689][T16065] bond11: entered allmulticast mode [ 397.939590][T16069] bond11: (slave gretap2): making interface the new active one [ 397.958840][T16069] gretap2: entered promiscuous mode [ 397.979758][T16069] gretap2: entered allmulticast mode [ 398.002800][T16069] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 398.228971][T16084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.662255][T16106] netlink: 'syz.1.2756': attribute type 1 has an invalid length. [ 398.678902][T16110] __nla_validate_parse: 2 callbacks suppressed [ 398.678921][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 398.703870][T16106] netlink: 'syz.1.2756': attribute type 11 has an invalid length. [ 398.718076][T16106] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2756'. [ 398.740996][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2758'. [ 398.996874][T16109] syzkaller1: entered promiscuous mode [ 399.005636][T16109] syzkaller1: entered allmulticast mode [ 399.277786][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 399.297458][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 399.559273][T16143] netlink: 'syz.4.2765': attribute type 1 has an invalid length. [ 399.820349][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 399.880669][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.985070][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.080539][T16160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.268899][T16174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2773'. [ 400.270674][T16171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2773'. [ 400.295349][T16175] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2774'. [ 400.551860][T16185] sctp: [Deprecated]: syz.2.2777 (pid 16185) Use of int in max_burst socket option. [ 400.551860][T16185] Use struct sctp_assoc_value instead [ 400.601336][T16185] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 400.626746][T16185] netlink: 'syz.2.2777': attribute type 2 has an invalid length. [ 400.898728][T16198] rdma_op ffff888054b931f0 conn xmit_rdma 0000000000000000 [ 401.282030][T16209] team0: Device gtp1 is up. Set it down before adding it as a team port [ 401.324538][T16215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2787'. [ 402.272729][T16252] netlink: 'syz.4.2798': attribute type 1 has an invalid length. [ 402.994998][T16275] netlink: 'syz.4.2805': attribute type 11 has an invalid length. [ 403.779873][T16306] __nla_validate_parse: 6 callbacks suppressed [ 403.779890][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 403.823546][T16306] veth0_macvtap: left promiscuous mode [ 404.239649][T16320] netlink: 'syz.2.2817': attribute type 21 has an invalid length. [ 404.254050][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 404.427269][T16332] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2821'. [ 404.938560][T16373] netlink: 'syz.0.2832': attribute type 16 has an invalid length. [ 404.997689][T16373] netlink: 'syz.0.2832': attribute type 17 has an invalid length. [ 405.086732][T16381] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2833'. [ 405.091898][T16373] tunl0: left promiscuous mode [ 405.177188][T16373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.253473][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 405.330474][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 405.671146][T16414] IPv6: sit3: Disabled Multicast RS [ 405.846384][T16425] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2846'. [ 405.859834][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 405.919830][T16425] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 405.948452][T16425] team0 (unregistering): Port device team_slave_0 removed [ 405.979007][T16425] team0 (unregistering): Failed to send options change via netlink (err -105) [ 406.004419][T16425] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 406.029207][T16425] team0 (unregistering): Port device team_slave_1 removed [ 406.049063][T16427] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2846'. [ 406.061269][T16431] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 406.069922][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2842'. [ 406.082580][T16431] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2847'. [ 406.094224][T16431] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 406.103490][T16431] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 406.124345][T16431] netlink: 'syz.0.2847': attribute type 2 has an invalid length. [ 406.150271][T16431] nbd: must specify at least one socket [ 406.246362][T16437] netlink: 'syz.1.2848': attribute type 3 has an invalid length. [ 406.573057][T16446] netlink: 'syz.0.2851': attribute type 1 has an invalid length. [ 406.823993][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.836623][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.849760][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.859599][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.868046][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.896781][T16456] netlink: 'syz.2.2855': attribute type 62 has an invalid length. [ 406.929921][T16457] lo speed is unknown, defaulting to 1000 [ 406.978963][T16463] openvswitch: netlink: Multiple metadata blocks provided [ 407.026549][T16456] syzkaller1: entered promiscuous mode [ 407.058389][T16456] syzkaller1: entered allmulticast mode [ 407.609718][T16482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.664042][T16482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.886041][T16457] chnl_net:caif_netlink_parms(): no params data found [ 408.041176][T16457] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.052255][T16457] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.059928][T16457] bridge_slave_0: entered allmulticast mode [ 408.072576][T16457] bridge_slave_0: entered promiscuous mode [ 408.081362][T16457] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.089104][T16457] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.096721][T16457] bridge_slave_1: entered allmulticast mode [ 408.105310][T16457] bridge_slave_1: entered promiscuous mode [ 408.152458][T16457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.167215][T16457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.252888][T16457] team0: Port device team_slave_0 added [ 408.264508][T16457] team0: Port device team_slave_1 added [ 408.408706][T16457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.425986][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.460876][T16525] xt_hashlimit: size too large, truncated to 1048576 [ 408.499777][T16457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.536764][T16457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.556777][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.629331][T16457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.705855][T16541] bond10: entered promiscuous mode [ 408.723931][T16541] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.803030][T16546] wireguard0: entered promiscuous mode [ 408.808883][T16546] wireguard0: entered allmulticast mode [ 408.814932][T16543] __nla_validate_parse: 5 callbacks suppressed [ 408.814948][T16543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2878'. [ 408.875120][T16550] veth1_macvtap: left promiscuous mode [ 408.881209][T16550] macsec0: entered promiscuous mode [ 408.888969][T16550] macsec0: entered allmulticast mode [ 408.903998][T16457] hsr_slave_0: entered promiscuous mode [ 408.910534][T16457] hsr_slave_1: entered promiscuous mode [ 408.917286][T16457] debugfs: 'hsr0' already exists in 'hsr' [ 408.923386][T16457] Cannot create hsr debugfs directory [ 408.923399][ T5835] Bluetooth: hci5: command tx timeout [ 408.948043][T16551] veth1_macvtap: entered promiscuous mode [ 408.957099][T16551] veth1_macvtap: entered allmulticast mode [ 408.963757][T16551] macsec0: left promiscuous mode [ 408.968902][T16551] macsec0: left allmulticast mode [ 408.974817][T16551] veth1_macvtap: left allmulticast mode [ 409.232493][T16560] IPv6: sit1: Disabled Multicast RS [ 409.254830][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'. [ 409.556438][T16457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 409.574226][T16457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 409.708284][T16457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 409.733897][T16457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 409.875412][T16594] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 409.967250][T16457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 410.006523][T16457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 410.069209][T16601] validate_nla: 5 callbacks suppressed [ 410.069229][T16601] netlink: 'syz.0.2892': attribute type 4 has an invalid length. [ 410.111168][T16603] tipc: Started in network mode [ 410.127297][T16603] tipc: Node identity ac14140f, cluster identity 4711 [ 410.154833][T16603] tipc: Enabled bearer , priority 10 [ 410.179839][T16591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.225109][T16602] tipc: Enabling of bearer rejected, already enabled [ 410.554011][T16457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.694336][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.718171][T16457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.778740][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.806550][T16457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.826329][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.845313][T16457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.873122][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.994762][T16651] bond11: entered allmulticast mode [ 411.002347][ T5835] Bluetooth: hci5: command tx timeout [ 411.019752][T16651] bridge8: entered promiscuous mode [ 411.025725][T16651] bridge8: entered allmulticast mode [ 411.047293][T16651] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 411.119548][T16457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.159224][T16457] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.192513][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.199760][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.240526][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.247759][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.270161][ T9549] tipc: Node number set to 2886997007 [ 411.649945][T16683] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 411.795199][T16693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2908'. [ 411.891799][T16696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2910'. [ 412.085601][T16683] 8021q: adding VLAN 0 to HW filter on device bond12 [ 412.147882][T16685] bond12: (slave veth13): Enslaving as an active interface with a down link [ 412.184876][T16691] bond12: (slave dummy0): making interface the new active one [ 412.198534][T16691] dummy0: entered promiscuous mode [ 412.208790][T16691] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 412.236206][T16696] bond12: (slave dummy0): Releasing active interface [ 412.246565][T16706] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2914'. [ 412.247188][T16696] dummy0 (unregistering): left promiscuous mode [ 412.258877][T16706] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 412.273745][T16706] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2914'. [ 412.285313][T16706] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 412.421374][T16457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.587013][T16457] veth0_vlan: entered promiscuous mode [ 412.617178][T16457] veth1_vlan: entered promiscuous mode [ 412.769057][T16457] veth0_macvtap: entered promiscuous mode [ 412.832649][T16457] veth1_macvtap: entered promiscuous mode [ 412.931163][T16457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.997226][T16457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.082312][ T5835] Bluetooth: hci5: command tx timeout [ 413.136532][ T8843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.162817][ T8843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.186972][T16729] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 413.214216][ T8843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.274825][T11351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.478180][ T8843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.521371][ T8843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.617085][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.651752][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.683382][T16736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'. [ 413.773888][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 413.786065][T16736] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2921'. [ 413.802663][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 413.898396][T16751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.006149][T16737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.025264][T16737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.217929][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2923'. [ 414.707542][T16774] vlan1: entered allmulticast mode [ 414.714695][T16774] bond0: entered allmulticast mode [ 414.719967][T16774] bond_slave_0: entered allmulticast mode [ 414.727001][T16774] : entered allmulticast mode [ 414.734140][T16774] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2929'. [ 414.842941][T16774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.868935][T16774] bond_slave_0: left allmulticast mode [ 414.888872][T16774] bond0 (unregistering): (slave ): Releasing backup interface [ 414.913899][T16774] : left allmulticast mode [ 414.934858][T16774] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 414.963192][T16774] bond0 (unregistering): Released all slaves [ 415.090013][T16788] xt_hashlimit: size too large, truncated to 1048576 [ 415.164596][ T5835] Bluetooth: hci5: command tx timeout [ 415.715017][T16811] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2936'. [ 415.772051][T16811] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2936'. [ 415.811184][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.829272][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.838336][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.853680][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.868243][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.089880][T16816] lo speed is unknown, defaulting to 1000 [ 416.244718][T16831] nbd3: detected capacity change from 0 to 127 [ 416.265452][ T5846] block nbd3: Receive control failed (result -32) [ 416.279748][T14737] block nbd3: Dead connection, failed to find a fallback [ 416.319216][T16842] openvswitch: netlink: IP tunnel dst address not specified [ 416.341166][T14737] block nbd3: shutting down sockets [ 416.377724][T14737] blk_print_req_error: 138 callbacks suppressed [ 416.377746][T14737] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.380036][T16843] openvswitch: netlink: IP tunnel dst address not specified [ 416.413516][T14737] buffer_io_error: 138 callbacks suppressed [ 416.413536][T14737] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.467195][T14737] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.509521][T14737] Buffer I/O error on dev nbd3, logical block 1, async page read [ 416.538165][T14737] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.552801][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 416.564094][T14737] Buffer I/O error on dev nbd3, logical block 2, async page read [ 416.572250][T16848] block nbd4: Unsupported socket: should be TCP or UNIX. [ 416.579929][T14737] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.599015][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 416.615918][T14737] Buffer I/O error on dev nbd3, logical block 3, async page read [ 416.626927][T14737] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.645127][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 416.655057][T14737] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.664987][T16848] block nbd4: Unsupported socket: should be TCP or UNIX. [ 416.674184][T14737] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.688389][T14737] Buffer I/O error on dev nbd3, logical block 1, async page read [ 416.718614][T14737] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.754164][T14737] Buffer I/O error on dev nbd3, logical block 2, async page read [ 416.796118][T14737] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.832337][T14737] Buffer I/O error on dev nbd3, logical block 3, async page read [ 416.840421][T14737] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.852713][T14737] Buffer I/O error on dev nbd3, logical block 0, async page read [ 416.860683][T14737] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.871193][T14737] Buffer I/O error on dev nbd3, logical block 1, async page read [ 416.885572][T14737] ldm_validate_partition_table(): Disk read failed. [ 416.895287][T14737] Dev nbd3: unable to read RDB block 0 [ 416.925292][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2949'. [ 416.942947][T14737] nbd3: unable to read partition table [ 417.010113][T14737] ldm_validate_partition_table(): Disk read failed. [ 417.046348][T16860] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 417.059161][T14737] Dev nbd3: unable to read RDB block 0 [ 417.076523][T14737] nbd3: unable to read partition table [ 417.081387][T16860] bond1 (unregistering): Released all slaves [ 417.306405][T16876] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 417.318217][T16876] netlink: 'syz.1.2953': attribute type 4 has an invalid length. [ 417.328280][T16876] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2953'. [ 417.395559][T16879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2955'. [ 417.603454][T16816] chnl_net:caif_netlink_parms(): no params data found [ 417.709720][T16891] syzkaller1: entered promiscuous mode [ 417.717794][T16891] syzkaller1: entered allmulticast mode [ 417.966096][ T5846] Bluetooth: hci3: command tx timeout [ 418.029597][T16816] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.037580][T16816] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.046645][T16816] bridge_slave_0: entered allmulticast mode [ 418.056029][T16816] bridge_slave_0: entered promiscuous mode [ 418.065710][T16816] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.073686][T16816] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.080972][T16816] bridge_slave_1: entered allmulticast mode [ 418.094945][T16816] bridge_slave_1: entered promiscuous mode [ 418.140828][T16816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.158526][T16816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.253823][T16816] team0: Port device team_slave_0 added [ 418.277265][T16816] team0: Port device team_slave_1 added [ 418.365453][T16816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.383358][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.428481][T16816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.449090][T16816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.465964][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.528070][T16816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.673397][T16925] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 418.694813][T16925] bond9 (unregistering): Released all slaves [ 418.933876][T16941] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 418.966195][T16816] hsr_slave_0: entered promiscuous mode [ 418.983764][T16816] hsr_slave_1: entered promiscuous mode [ 418.999270][T16816] debugfs: 'hsr0' already exists in 'hsr' [ 419.013604][T16816] Cannot create hsr debugfs directory [ 419.097218][T16947] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 419.108704][T16947] bond9 (unregistering): Released all slaves [ 419.150123][T16941] veth15: entered promiscuous mode [ 419.156108][T16941] veth15: entered allmulticast mode [ 419.217970][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.236778][T16957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.246018][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.254574][T16957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.325570][T16961] __nla_validate_parse: 5 callbacks suppressed [ 419.325590][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2973'. [ 419.396843][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'. [ 419.467812][T16964] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 419.496861][T16816] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.577723][T16816] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.638408][T16816] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.706583][T16816] .`: (slave netdevsim0): Releasing backup interface [ 419.718136][T16816] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.042430][ T5846] Bluetooth: hci3: command tx timeout [ 420.679300][T16979] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.689705][T16979] netlink: 'syz.2.2979': attribute type 1 has an invalid length. [ 422.016641][T16949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.030365][T16979] netlink: 'syz.2.2979': attribute type 11 has an invalid length. [ 422.042500][T16816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.063966][T16979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2979'. [ 422.079242][T16816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.107326][T16816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.125136][ T5846] Bluetooth: hci3: command tx timeout [ 422.159179][T16816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.183546][T16816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.215812][T16816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.227442][T16816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.249766][T16816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.317206][T16994] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2983'. [ 422.365976][T16994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'. [ 422.487926][T17008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2982'. [ 422.597168][T16816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.664647][T16816] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.709974][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.717224][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.761291][T17013] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 422.786058][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.793424][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.144623][T17039] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.2993'. [ 423.473343][T16816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.495967][ T177] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 423.587886][T17066] netlink: 'syz.0.3001': attribute type 64 has an invalid length. [ 423.623957][T17066] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3001'. [ 423.726025][T17070] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3002'. [ 423.909412][T17083] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 424.049093][T17083] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 424.199312][T17092] netlink: 'syz.2.3009': attribute type 3 has an invalid length. [ 424.209550][ T5846] Bluetooth: hci3: command tx timeout [ 424.231310][T17092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3009'. [ 424.271294][T16816] veth0_vlan: entered promiscuous mode [ 424.294905][T17096] netlink: 'syz.3.3010': attribute type 5 has an invalid length. [ 424.304008][T16816] veth1_vlan: entered promiscuous mode [ 424.476758][T17104] netlink: 'syz.0.3013': attribute type 11 has an invalid length. [ 424.493045][T16816] veth0_macvtap: entered promiscuous mode [ 424.497825][T17104] netlink: 'syz.0.3013': attribute type 4 has an invalid length. [ 424.521121][T17104] __nla_validate_parse: 2 callbacks suppressed [ 424.521139][T17104] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.3013'. [ 424.542881][T16816] veth1_macvtap: entered promiscuous mode [ 424.642810][T16816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.700127][T16816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.748322][ T8843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.775215][ T8843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.805808][ T8843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.837010][ T8843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.068225][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.099439][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.146031][T11349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.191982][T11349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.285564][T17135] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 425.468043][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2935'. [ 425.491337][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2935'. [ 425.857640][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 425.917768][T17159] erspan0: entered promiscuous mode [ 425.949413][T17159] macvtap0: entered promiscuous mode [ 425.979197][T17159] macvtap0: entered allmulticast mode [ 425.997457][T17159] erspan0: entered allmulticast mode [ 426.058670][T17167] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3028'. [ 426.268010][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 426.268931][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 426.318912][T17177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3030'. [ 426.383159][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.395956][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.410305][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.423816][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.437093][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.460330][T17177] nbd0: detected capacity change from 127 to 0 [ 426.700721][T17181] syzkaller0: entered promiscuous mode [ 426.718678][T17181] syzkaller0: entered allmulticast mode [ 426.847632][T17201] xt_ecn: cannot match TCP bits for non-tcp packets [ 426.900616][T17206] ieee802154 phy1 wpan1: encryption failed: -22 [ 426.917124][T17206] netlink: 'syz.0.3037': attribute type 1 has an invalid length. [ 428.525250][ T5835] Bluetooth: hci0: command tx timeout [ 428.877419][T17206] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 429.008554][T17223] syzkaller0: entered promiscuous mode [ 429.025665][T17223] syzkaller0: entered allmulticast mode [ 429.059545][T17182] lo speed is unknown, defaulting to 1000 [ 430.080829][T17266] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 430.616060][ T5835] Bluetooth: hci0: command tx timeout [ 431.580508][T17265] team0 (unregistering): Port device team_slave_0 removed [ 431.599265][T17265] team0 (unregistering): Port device team_slave_1 removed [ 431.627433][T17260] vlan4: entered promiscuous mode [ 431.632751][T17260] bridge0: entered promiscuous mode [ 431.676136][T17273] netem: unknown loss type 0 [ 431.815728][T17280] openvswitch: netlink: Key type 343 is out of range max 32 [ 431.826255][T17282] openvswitch: netlink: Key type 343 is out of range max 32 [ 431.963654][T17182] chnl_net:caif_netlink_parms(): no params data found [ 432.206332][T17298] pim6reg: entered allmulticast mode [ 432.214002][T17298] pim6reg: left allmulticast mode [ 432.373038][T17306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3061'. [ 432.375185][T17182] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.390282][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.398540][T17182] bridge_slave_0: entered allmulticast mode [ 432.408993][T17182] bridge_slave_0: entered promiscuous mode [ 432.418247][T17182] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.425977][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.434075][T17182] bridge_slave_1: entered allmulticast mode [ 432.443076][T17182] bridge_slave_1: entered promiscuous mode [ 432.484502][T17182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.499279][T17182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.596620][T17314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 432.604510][T17182] team0: Port device team_slave_0 added [ 432.621957][T17313] tipc: Enabling of bearer rejected, failed to enable media [ 432.637445][T17182] team0: Port device team_slave_1 added [ 432.683751][ T5835] Bluetooth: hci0: command tx timeout [ 432.691521][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.700691][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.737724][T17318] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 432.746521][T17315] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 432.818458][T17321] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001 [ 432.839612][ T1018] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.839660][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.859273][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.869728][T17182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.877841][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.907412][T17182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.923255][T17182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.930358][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.959702][T17182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.997244][ T1018] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.009194][ T1018] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.046399][T11351] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.143869][T17182] hsr_slave_0: entered promiscuous mode [ 433.155826][T17182] hsr_slave_1: entered promiscuous mode [ 433.173039][T17182] debugfs: 'hsr0' already exists in 'hsr' [ 433.179011][T17182] Cannot create hsr debugfs directory [ 433.383387][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.420417][T17344] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 433.556806][T17349] netlink: 'syz.3.3074': attribute type 29 has an invalid length. [ 433.603449][T17350] netlink: 'syz.3.3074': attribute type 29 has an invalid length. [ 433.843781][T17182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.885539][T17182] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 433.909737][T17369] sctp: [Deprecated]: syz.2.3078 (pid 17369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.909737][T17369] Use struct sctp_sack_info instead [ 434.074954][T17182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.087409][T17182] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 434.159477][T17381] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 434.226320][T17381] bond13: (slave lo): Enslaving as an active interface with an up link [ 434.254549][T17381] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 434.426534][T17182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.439643][T17182] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 434.503946][T17397] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 434.523508][T17397] netlink: 'syz.4.3087': attribute type 2 has an invalid length. [ 434.532522][T17397] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 434.540580][T17397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3087'. [ 434.573881][T17182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.593394][T17182] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 434.639749][T17402] netlink: 'syz.2.3089': attribute type 1 has an invalid length. [ 434.648522][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3088'. [ 434.660002][T17402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.669624][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 434.680155][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 434.717155][T17401] bond14: option xmit_hash_policy: invalid value (64) [ 434.736184][T17401] bond14 (unregistering): Released all slaves [ 434.761934][ T5835] Bluetooth: hci0: command tx timeout [ 434.784856][T17402] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 434.968661][T17417] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 435.115864][T17420] veth0: entered promiscuous mode [ 435.161855][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 435.175644][T17420] syzkaller0: entered promiscuous mode [ 435.181336][T17420] syzkaller0: entered allmulticast mode [ 435.204914][T17420] netlink: 'syz.2.3094': attribute type 21 has an invalid length. [ 435.239428][T17420] IPv6: NLM_F_CREATE should be specified when creating new route [ 435.255410][T17182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.263556][T17420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.270840][T17420] IPv6: NLM_F_CREATE should be set when creating new route [ 435.278174][T17420] IPv6: NLM_F_CREATE should be set when creating new route [ 435.285465][T17420] IPv6: NLM_F_CREATE should be set when creating new route [ 435.297618][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.309312][T17182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.349591][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.373092][T17182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.398715][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.412149][T17419] veth0: left promiscuous mode [ 435.419002][T17182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.437363][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.586050][T17446] netlink: 'syz.3.3102': attribute type 12 has an invalid length. [ 435.826676][T17182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.855092][T17182] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.868806][T17463] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 435.889022][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.896369][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.908491][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.915756][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.164113][T17478] sctp: [Deprecated]: syz.2.3110 (pid 17478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.164113][T17478] Use struct sctp_sack_info instead [ 436.218154][T17478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.440308][T17182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.496266][T17491] netlink: 'syz.0.3113': attribute type 25 has an invalid length. [ 436.510165][T17495] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 436.624094][T17182] veth0_vlan: entered promiscuous mode [ 436.677442][T17182] veth1_vlan: entered promiscuous mode [ 436.798771][T17182] veth0_macvtap: entered promiscuous mode [ 436.874131][T17182] veth1_macvtap: entered promiscuous mode [ 436.919959][T17182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.969918][T17182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.036127][ T1018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.119301][ T1018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.134348][ T1018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.151680][ T1018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.168558][T17525] SET target dimension over the limit! [ 437.479202][T17533] __nla_validate_parse: 4 callbacks suppressed [ 437.479226][T17533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3124'. [ 437.507891][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.542515][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.641084][T17546] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3127'. [ 437.689107][T11351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.717416][T11351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.769521][T17553] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 437.794272][T17553] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3129'. [ 437.824375][T17553] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3129'. [ 437.837715][T17556] veth0: entered promiscuous mode [ 437.852410][T17553] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3129'. [ 437.873763][T17556] veth0: left promiscuous mode [ 437.960670][T17553] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 437.992789][T17553] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3129'. [ 438.046028][T17553] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3129'. [ 438.085206][T17553] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3129'. [ 438.464017][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.483604][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.496249][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.512293][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.528692][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.663301][T17580] lo speed is unknown, defaulting to 1000 [ 438.857978][T17596] netlink: 'syz.1.3140': attribute type 2 has an invalid length. [ 439.003507][T17596] 9: entered promiscuous mode [ 439.018312][T17601] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 439.457981][T17614] netlink: 'syz.2.3146': attribute type 2 has an invalid length. [ 439.487807][T17614] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3146'. [ 439.508065][T17608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 439.898183][T17638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.905981][T17638] batadv_slave_0: entered promiscuous mode [ 440.060009][T17580] chnl_net:caif_netlink_parms(): no params data found [ 440.188283][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.196170][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.203685][T17580] bridge_slave_0: entered allmulticast mode [ 440.211910][T17580] bridge_slave_0: entered promiscuous mode [ 440.220356][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.228722][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.236248][T17580] bridge_slave_1: entered allmulticast mode [ 440.244493][T17580] bridge_slave_1: entered promiscuous mode [ 440.287357][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.300894][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.335487][T17580] team0: Port device team_slave_0 added [ 440.343681][T17580] team0: Port device team_slave_1 added [ 440.375488][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.382749][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.409097][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.421525][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.428504][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.455626][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.505513][T17580] hsr_slave_0: entered promiscuous mode [ 440.512470][T17580] hsr_slave_1: entered promiscuous mode [ 440.518832][T17580] debugfs: 'hsr0' already exists in 'hsr' [ 440.528763][T17580] Cannot create hsr debugfs directory [ 440.602350][ T5846] Bluetooth: hci2: command tx timeout [ 440.665599][T17580] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.676432][T17580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 440.688729][T17580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.750507][T17580] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.760713][T17580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 440.770857][T17580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.830752][T17580] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.840900][T17580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 440.850845][T17580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 440.908463][T17580] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.918486][T17580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 440.929871][T17580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 441.167757][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.775726][T17591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.824544][T17580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.877918][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.908066][T17580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.930481][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.961163][T17580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.988041][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.020226][T17580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.135180][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.395829][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.440614][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.485514][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.492822][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.522129][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.529325][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.620377][T17686] Bluetooth: MGMT ver 1.23 [ 442.682159][ T5846] Bluetooth: hci2: command tx timeout [ 442.691207][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3160'. [ 442.964950][T17706] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 4, id = 0 [ 443.080937][T17709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.088293][T17709] IPv6: NLM_F_CREATE should be set when creating new route [ 443.095621][T17709] IPv6: NLM_F_CREATE should be set when creating new route [ 443.102905][T17709] IPv6: NLM_F_CREATE should be set when creating new route [ 443.136962][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3166'. [ 443.149211][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.166326][T17709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.280350][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 443.320803][T17580] veth0_vlan: entered promiscuous mode [ 443.332223][T17722] netlink: 'syz.1.3169': attribute type 29 has an invalid length. [ 443.373933][T17722] netlink: 'syz.1.3169': attribute type 29 has an invalid length. [ 443.392583][T17727] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 443.408468][T17580] veth1_vlan: entered promiscuous mode [ 443.487176][T17580] veth0_macvtap: entered promiscuous mode [ 443.519444][T17580] veth1_macvtap: entered promiscuous mode [ 443.570258][T17735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3173'. [ 443.595353][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.612554][T17735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3173'. [ 443.626659][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.654580][ T1018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.687890][ T1018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.727539][ T1018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.743796][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 443.759772][ T1018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.822588][T17745] tipc: Failed to remove unknown binding: 66,0,0/0:1853217883/1853217884 [ 443.865650][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3177'. [ 443.874794][T17747] tipc: Failed to remove unknown binding: 66,0,0/0:1853217883/1853217884 [ 444.008979][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.036407][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.188416][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.220262][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.350095][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3179'. [ 444.406939][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 444.512655][ T9549] IPVS: starting estimator thread 0... [ 444.623749][T17788] IPVS: using max 30 ests per chain, 72000 per kthread [ 444.763946][ T5846] Bluetooth: hci2: command tx timeout [ 444.881707][T17797] pim6reg: entered allmulticast mode [ 444.898235][T17794] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 445.320002][T17821] netlink: 'syz.3.3191': attribute type 10 has an invalid length. [ 445.374446][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.392869][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.402315][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.413807][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.422703][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.471148][T17821] team0: Port device dummy0 added [ 445.511045][T17828] IPv6: addrconf: prefix option has invalid lifetime [ 445.663803][T17830] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 445.676540][T17822] lo speed is unknown, defaulting to 1000 [ 445.715123][T17832] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3194'. [ 445.731101][T17832] netlink: Conntrack attr has 3 unknown bytes [ 445.798232][T17830] bond1: entered promiscuous mode [ 445.819539][T17830] bond1: entered allmulticast mode [ 445.826726][T17830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.853662][T17836] macvlan2: entered promiscuous mode [ 445.869895][T17836] macvlan2: entered allmulticast mode [ 445.884712][T17836] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.193049][T17855] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.749478][T17822] chnl_net:caif_netlink_parms(): no params data found [ 446.843898][ T5846] Bluetooth: hci2: command tx timeout [ 447.048957][T17902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 447.085157][T17902] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.105544][T17902] gretap2: entered promiscuous mode [ 447.124422][T17902] gretap2: entered allmulticast mode [ 447.149503][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.166594][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.176067][T17822] bridge_slave_0: entered allmulticast mode [ 447.185097][T17822] bridge_slave_0: entered promiscuous mode [ 447.224394][T17822] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.234669][T17822] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.243757][T17822] bridge_slave_1: entered allmulticast mode [ 447.252147][T17822] bridge_slave_1: entered promiscuous mode [ 447.264306][T17917] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 447.292824][T17917] bond1: (slave lo): Enslaving as an active interface with an up link [ 447.310953][T17917] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 447.369373][T17822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.382964][T17822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.457930][T17822] team0: Port device team_slave_0 added [ 447.472924][T17921] : renamed from virt_wifi0 [ 447.481559][ T5846] Bluetooth: hci1: command tx timeout [ 447.495150][T17822] team0: Port device team_slave_1 added [ 447.537975][T17822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.547598][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.584146][T17822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.597449][T17822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.604878][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.631236][T17822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.825476][T17822] hsr_slave_0: entered promiscuous mode [ 447.835207][T17822] hsr_slave_1: entered promiscuous mode [ 447.851150][T17822] debugfs: 'hsr0' already exists in 'hsr' [ 447.858181][T17822] Cannot create hsr debugfs directory [ 447.955960][T17937] __nla_validate_parse: 10 callbacks suppressed [ 447.955982][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 447.975059][T17938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3225'. [ 448.066203][T17938] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 448.085101][T17938] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3225'. [ 448.225185][T17952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3230'. [ 448.450252][T17822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.464641][T17822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.476640][T17822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 448.618674][T17822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.629962][T17822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.645690][T17822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 448.755240][T17822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.767894][T17822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.779401][T17822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 448.853686][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 448.864598][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 448.988420][T17822] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.010347][T17822] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.033016][T17822] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 449.139903][T17984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3241'. [ 449.212028][T17986] nbd: nbd3 already in use [ 449.220313][T17986] block nbd3: NBD_DISCONNECT [ 449.230749][T17986] block nbd3: Send disconnect failed -32 [ 449.389506][ T6824] bridge0: port 3(batadv0) entered disabled state [ 449.400466][ T6824] bridge_slave_1: left promiscuous mode [ 449.407259][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.434523][ T6824] bridge_slave_0: left allmulticast mode [ 449.443152][ T6824] bridge_slave_0: left promiscuous mode [ 449.455650][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.528895][ T6824] dvmrp8: left allmulticast mode [ 449.572201][ T5846] Bluetooth: hci1: command tx timeout [ 449.700366][T18006] netlink: 'syz.3.3247': attribute type 2 has an invalid length. [ 449.915043][ T6824] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 449.928217][T18009] IPv6: Can't replace route, no match found [ 449.937900][T18009] IPv6: Can't replace route, no match found [ 450.027638][ T6824] erspan0 (unregistering): left allmulticast mode [ 450.080969][ T6824] batman_adv: batadv0: Removing interface: gretap1 [ 450.140217][T18012] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 450.149761][ T9545] IPVS: starting estimator thread 0... [ 450.272720][T18013] IPVS: using max 29 ests per chain, 69600 per kthread [ 450.498353][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.512882][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.524029][ T6824] bond0 (unregistering): Released all slaves [ 450.538668][ T6824] bond1 (unregistering): (slave lo): Releasing backup interface [ 450.548317][ T6824] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 450.563844][ T6824] bond1 (unregistering): Released all slaves [ 450.586600][ T6824] bond2 (unregistering): Released all slaves [ 450.605447][ T6824] bond3 (unregistering): Released all slaves [ 450.623494][ T6824] bond4 (unregistering): Released all slaves [ 450.655996][ T6824] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 450.666388][ T6824] bond5 (unregistering): Released all slaves [ 450.684101][ T6824] bond6 (unregistering): Released all slaves [ 450.704018][ T6824] bond7 (unregistering): Released all slaves [ 450.728051][ T6824] bond8 (unregistering): Released all slaves [ 450.826227][T18006] 9: entered promiscuous mode [ 450.846333][T18016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3249'. [ 450.881037][T18009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3248'. [ 451.156618][T18022] can: request_module (can-proto-0) failed. [ 451.156959][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 451.254078][T18026] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 451.264820][T17822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.286707][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.304589][T17822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.338490][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.355843][T17822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.379530][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.398167][T17822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.417392][T17822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.585624][T17822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.614954][T17822] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.636392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.643507][ T5846] Bluetooth: hci1: command tx timeout [ 451.643750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.703868][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.711166][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.209938][T17822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.317964][T18069] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 452.337722][T17822] veth0_vlan: entered promiscuous mode [ 452.359523][T17822] veth1_vlan: entered promiscuous mode [ 452.444878][T18069] bond2: entered promiscuous mode [ 452.464435][T18069] bond2: entered allmulticast mode [ 452.482748][T18069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.675303][T17822] veth0_macvtap: entered promiscuous mode [ 452.718507][T17822] veth1_macvtap: entered promiscuous mode [ 452.805303][T17822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.838986][T17822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.888108][T11349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.903697][T11349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.914095][T11349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.944757][T18093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.954369][T11349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.012420][T18101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.235302][T11349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.263345][T11349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.316118][T18112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.387011][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.412539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.453307][T18121] __nla_validate_parse: 6 callbacks suppressed [ 453.453326][T18121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3273'. [ 453.483472][T18121] netlink: 'syz.4.3273': attribute type 7 has an invalid length. [ 453.506059][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3273'. [ 453.540647][T18121] erspan0: entered promiscuous mode [ 453.563460][T18121] gretap0: entered promiscuous mode [ 453.648577][T18126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3274'. [ 453.723354][ T5846] Bluetooth: hci1: command tx timeout [ 453.799472][T18126] bond3 (unregistering): Released all slaves [ 453.812161][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 453.929366][T18128] lo speed is unknown, defaulting to 1000 [ 454.554589][T18167] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3287'. [ 454.767310][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 454.809804][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 454.848749][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 454.896320][T18188] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 454.996925][T18196] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3296'. [ 455.039584][T18198] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3295'. [ 455.137276][T18198] pim6reg1: entered promiscuous mode [ 455.144182][T18198] pim6reg1: entered allmulticast mode [ 455.355818][T18205] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20000 [ 455.763552][T18216] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 455.802988][ T5846] Bluetooth: hci1: command tx timeout [ 456.041163][T18227] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 456.204868][T18236] netlink: 'syz.4.3306': attribute type 4 has an invalid length. [ 456.266502][T18240] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.282063][T18242] netlink: 'syz.4.3306': attribute type 4 has an invalid length. [ 456.478774][T18253] netlink: 'syz.0.3308': attribute type 15 has an invalid length. [ 456.585480][ T8843] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 256 - 0 [ 456.598593][T18253] netlink: 'syz.0.3308': attribute type 15 has an invalid length. [ 456.618199][ T8843] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 456.633885][T18257] smc: removing ib device syz2 [ 456.635606][ T8843] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 456.661344][ T8843] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 456.840799][T18265] veth3: entered promiscuous mode [ 457.500509][T18300] netlink: 'syz.2.3323': attribute type 1 has an invalid length. [ 457.715759][T18301] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 458.215040][T18327] pimreg: entered allmulticast mode [ 458.462788][T18338] __nla_validate_parse: 22 callbacks suppressed [ 458.462810][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.559098][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.569723][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3331'. [ 458.580952][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.628702][T18343] hsr_slave_0: left promiscuous mode [ 458.676820][T18343] hsr_slave_1: left promiscuous mode [ 458.814986][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.851282][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.894498][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.968658][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 458.981882][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 459.015420][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 459.319663][T18376] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 459.338163][T18376] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 459.565869][T18386] tipc: Started in network mode [ 459.571023][T18386] tipc: Node identity , cluster identity 4711 [ 459.612932][T18384] netlink: 'syz.2.3341': attribute type 15 has an invalid length. [ 460.394739][ T8843] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.411156][T18423] netlink: 'syz.0.3352': attribute type 1 has an invalid length. [ 460.450398][ T8843] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.470787][T18427] netlink: 'syz.3.3353': attribute type 3 has an invalid length. [ 460.483930][ T8843] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.657887][T18423] bond1: entered promiscuous mode [ 460.678974][T18423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.708754][ T8843] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.742177][T18436] openvswitch: netlink: Flow key attribute not present in set flow. [ 460.995366][T18452] atomic_op ffff8880970b5198 conn xmit_atomic 0000000000000000 [ 461.635531][T18472] bond2: option all_slaves_active: invalid value (222) [ 461.659894][T18472] bond2 (unregistering): Released all slaves [ 462.010531][ T6824] tipc: Disabling bearer [ 462.049322][ T6824] tipc: Left network mode [ 462.712075][T18523] netlink: 'syz.2.3380': attribute type 2 has an invalid length. [ 462.940640][T18532] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 462.984647][T18531] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 463.032995][T18536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.498634][T18548] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 463.535473][T18548] bond2 (unregistering): Released all slaves [ 463.590199][T18551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.805691][T18562] __nla_validate_parse: 72 callbacks suppressed [ 463.805709][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 463.825634][T18562] netlink: 70 bytes leftover after parsing attributes in process `syz.4.3391'. [ 463.836350][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 463.867349][T18562] netlink: 70 bytes leftover after parsing attributes in process `syz.4.3391'. [ 463.957226][T18571] ip6gre0: Master is either lo or non-ether device [ 463.970952][T18571] ip6gre0: Master is either lo or non-ether device [ 463.980668][T18569] syzkaller1: entered promiscuous mode [ 464.007352][T18569] syzkaller1: entered allmulticast mode [ 464.033337][T18571] ip6gre0: Master is either lo or non-ether device [ 464.143535][T18571] ip6gre0: Master is either lo or non-ether device [ 464.156070][T18579] netlink: 'syz.2.3397': attribute type 12 has an invalid length. [ 464.184476][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3398'. [ 464.274753][T18587] netlink: 'syz.4.3398': attribute type 1 has an invalid length. [ 464.300287][T18587] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3398'. [ 464.315458][T18591] xt_hashlimit: invalid interval [ 464.317914][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 464.320489][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 464.376317][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'. [ 464.718463][T18614] Bluetooth: MGMT ver 1.23 [ 464.949988][ T6824] hsr_slave_0: left promiscuous mode [ 464.979115][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.024131][ T6824] veth1_vlan: left promiscuous mode [ 465.118458][T18634] x_tables: unsorted entry at hook 3 [ 465.138866][T18640] x_tables: unsorted entry at hook 3 [ 465.312881][T18652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3415'. [ 465.369933][T18652] netlink: 'syz.4.3415': attribute type 6 has an invalid length. [ 465.397011][T18652] netlink: 'syz.4.3415': attribute type 5 has an invalid length. [ 466.326845][T18639] syzkaller0: entered promiscuous mode [ 466.345889][T18639] syzkaller0: entered allmulticast mode [ 466.615778][T18671] netlink: 'syz.1.3420': attribute type 11 has an invalid length. [ 467.148222][ T6824] IPVS: stop unused estimator thread 0... [ 467.752158][T18723] netlink: 'syz.0.3431': attribute type 9 has an invalid length. [ 467.792745][T18723] netlink: 'syz.0.3431': attribute type 3 has an invalid length. [ 468.187112][T18742] netlink: 'syz.3.3438': attribute type 3 has an invalid length. [ 468.353774][T18754] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 468.486392][T18760] netlink: 'syz.3.3443': attribute type 2 has an invalid length. [ 468.902199][T18779] __nla_validate_parse: 9 callbacks suppressed [ 468.902220][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 469.068249][T18788] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 469.117590][T18790] netlink: 'syz.0.3453': attribute type 10 has an invalid length. [ 469.140190][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 469.219766][T18790] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 469.248815][T18789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.267786][T18788] : entered promiscuous mode [ 469.429817][T18809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3458'. [ 469.448041][T18811] netlink: 'syz.3.3460': attribute type 3 has an invalid length. [ 469.510587][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 469.544571][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'. [ 469.558255][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3461'. [ 469.599079][ T6824] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.599512][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 469.621194][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'. [ 469.644696][ T6824] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.658008][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3461'. [ 469.673610][ T6824] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.691662][ T6824] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.885784][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 470.086131][T18837] netlink: 'syz.0.3467': attribute type 3 has an invalid length. [ 470.290581][T18863] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 470.329591][T18863] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 470.337706][T18863] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 470.605397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.726367][T18894] netlink: 'syz.2.3483': attribute type 5 has an invalid length. [ 471.576400][T18942] syzkaller0: entered promiscuous mode [ 471.584644][T18942] syzkaller0: entered allmulticast mode [ 471.695164][T18951] netlink: 'syz.0.3502': attribute type 12 has an invalid length. [ 471.919015][T18963] netlink: 'syz.2.3507': attribute type 1 has an invalid length. [ 472.859943][T19011] netlink: 'syz.2.3524': attribute type 58 has an invalid length. [ 472.912566][T19014] netlink: 'syz.3.3522': attribute type 3 has an invalid length. [ 473.198766][T19031] netlink: 'syz.4.3529': attribute type 10 has an invalid length. [ 473.238088][T19031] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.259472][T19031] bridge_slave_1: left allmulticast mode [ 473.273734][T19031] bridge_slave_1: left promiscuous mode [ 473.286253][T19031] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.332645][T19031] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 473.428163][T19043] syzkaller0: entered promiscuous mode [ 473.439113][T19043] syzkaller0: entered allmulticast mode [ 473.450930][T19043] tipc: Started in network mode [ 473.457279][T19043] tipc: Node identity ee03db6e08af, cluster identity 4711 [ 473.470898][T19043] tipc: Enabled bearer , priority 0 [ 473.485330][T19042] tipc: Resetting bearer [ 473.514551][T19042] tipc: Disabling bearer [ 474.003173][T19064] __nla_validate_parse: 21 callbacks suppressed [ 474.003196][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3542'. [ 474.029099][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 474.040072][T19064] netlink: 'syz.2.3542': attribute type 7 has an invalid length. [ 474.060757][T19064] netlink: 'syz.2.3542': attribute type 8 has an invalid length. [ 474.080586][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 474.276473][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'. [ 474.296608][T19080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3545'. [ 474.308200][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 474.352484][T19080] syzkaller0: entered promiscuous mode [ 474.377778][T19080] syzkaller0: entered allmulticast mode [ 474.525162][T19094] netlink: 'syz.3.3550': attribute type 3 has an invalid length. [ 474.536543][T19094] netlink: 'syz.3.3550': attribute type 1 has an invalid length. [ 474.582036][T19094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3550'. [ 474.636124][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3550'. [ 474.659878][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 474.707473][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3550'. [ 474.755754][T19106] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.763232][T19106] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.009072][T19126] batman_adv: batadv0: Adding interface: dummy0 [ 475.016025][T19126] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.043383][T19126] batman_adv: batadv0: Interface activated: dummy0 [ 475.058787][T19127] batadv0: mtu less than device minimum [ 475.067362][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.080769][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.092602][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.104394][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.116073][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.127916][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.139734][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.151494][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 475.163231][T19127] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.744886][T19145] netlink: 'syz.0.3567': attribute type 29 has an invalid length. [ 478.031849][T19175] IPVS: set_ctl: invalid protocol: 174 127.0.0.1:20001 [ 478.116610][T19167] ip6t_srh: unknown srh invflags 4000 [ 478.490472][T19183] syzkaller0: entered promiscuous mode [ 478.496368][T19183] syzkaller0: entered allmulticast mode [ 478.543648][T19199] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 478.595241][T19201] netlink: 'syz.2.3580': attribute type 1 has an invalid length. [ 479.434551][T19223] __nla_validate_parse: 11 callbacks suppressed [ 479.434572][T19223] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3586'. [ 479.452970][T19223] netlink: 'syz.2.3586': attribute type 2 has an invalid length. [ 481.188223][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 481.309952][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 481.654846][T19265] netlink: 'syz.3.3596': attribute type 15 has an invalid length. [ 481.686474][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3596'. [ 481.801018][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3599'. [ 481.851186][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 482.302735][T19300] bridge_slave_0: left allmulticast mode [ 482.332123][T19300] bridge_slave_0: left promiscuous mode [ 482.361695][T19300] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.410545][T19300] bridge_slave_1: left allmulticast mode [ 482.446960][T19300] bridge_slave_1: left promiscuous mode [ 482.459796][T19300] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.505522][T19300] bond0: (slave bond_slave_0): Releasing backup interface [ 482.543459][T19300] bond0: (slave bond_slave_1): Releasing backup interface [ 482.568772][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3608'. [ 482.584123][T19300] team0: Port device team_slave_0 removed [ 482.620507][T19300] team0: Port device team_slave_1 removed [ 482.645857][T19300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.654753][T19300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.675967][T19300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.685259][T19300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.769340][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3610'. [ 482.778864][T19319] tipc: Invalid UDP bearer configuration [ 482.778926][T19319] tipc: Enabling of bearer rejected, failed to enable media [ 482.808151][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3612'. [ 482.974298][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 483.016363][T19331] syzkaller0: entered promiscuous mode [ 483.029676][T19331] syzkaller0: entered allmulticast mode [ 483.365486][T19347] netlink: 'syz.3.3621': attribute type 29 has an invalid length. [ 483.386136][T19347] netlink: 'syz.3.3621': attribute type 29 has an invalid length. [ 483.416836][T19351] netlink: 'syz.0.3623': attribute type 18 has an invalid length. [ 483.493609][ T1018] netdevsim netdevsim0 : set [0, 1] type 1 family 0 port 8472 - 0 [ 483.501957][T19351] netlink: 'syz.0.3623': attribute type 18 has an invalid length. [ 483.526003][ T1018] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 483.599335][ T1018] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 483.628238][ T1018] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 483.680409][T19365] netlink: 'syz.2.3626': attribute type 10 has an invalid length. [ 483.725646][T19365] dummy0: entered promiscuous mode [ 483.745398][T19365] bridge0: port 1(dummy0) entered blocking state [ 483.772795][T19365] bridge0: port 1(dummy0) entered disabled state [ 483.784109][T19365] dummy0: entered allmulticast mode [ 483.844599][T19378] sctp: [Deprecated]: syz.3.3629 (pid 19378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.844599][T19378] Use struct sctp_sack_info instead [ 484.256238][T19407] xt_l2tp: missing protocol rule (udp|l2tpip) [ 484.360035][T19417] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 484.518249][T19430] __nla_validate_parse: 9 callbacks suppressed [ 484.518270][T19430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3643'. [ 484.553263][T19429] net_ratelimit: 12 callbacks suppressed [ 484.553281][T19429] wlan1: mtu greater than device maximum [ 484.890705][T19448] bond2: entered promiscuous mode [ 484.996645][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3654'. [ 485.090915][T19458] team0: Port device team_slave_0 removed [ 485.636217][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3663'. [ 485.922826][T19507] openvswitch: netlink: IP tunnel dst address not specified [ 486.001344][T19515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3670'. [ 486.057258][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3667'. [ 486.478969][T19540] bond3: option min_links: invalid value (18446744073709551614) [ 486.488173][T19540] bond3: option min_links: allowed values 0 - 2147483647 [ 486.499839][T19550] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 486.509733][T19540] bond3 (unregistering): Released all slaves [ 486.580451][T19554] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 486.914324][T19565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3680'. [ 487.589595][T19608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3693'. [ 487.689532][T19616] openvswitch: netlink: Message has 4 unknown bytes. [ 487.730416][T19616] netlink: 'syz.3.3695': attribute type 2 has an invalid length. [ 487.760560][T19616] netlink: 'syz.3.3695': attribute type 8 has an invalid length. [ 487.807018][T19616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3695'. [ 488.076689][T19632] ipvlan2: entered promiscuous mode [ 488.207673][ T30] audit: type=1107 audit(1776672868.771:6): pid=19646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>bֽYUH#(||WoC[2׹ uMv7t&i'rb|84$ie;s,F?=xFumƙs=c1' [ 488.323670][T19654] "syz.1.3706" (19654) uses obsolete ecb(arc4) skcipher [ 488.355833][T19658] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3708'. [ 488.614124][T19675] netlink: 'syz.1.3712': attribute type 11 has an invalid length. [ 488.634114][T19675] netlink: 'syz.1.3712': attribute type 11 has an invalid length. [ 488.656541][T19675] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3712'. [ 489.103402][T19698] team0: No ports can be present during mode change [ 489.745060][T19735] IPVS: length: 8 != 1152 [ 489.778820][T19740] netlink: 'syz.0.3728': attribute type 10 has an invalid length. [ 489.867518][T19740] team0: Device ipvlan1 failed to register rx_handler [ 489.887169][T19747] xt_TCPMSS: Only works on TCP SYN packets [ 489.910711][T19749] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 490.025076][T19749] batman_adv: batadv0: Adding interface: netdevsim0 [ 490.046131][T19749] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.110403][T19749] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 490.124525][T19755] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.150898][T19759] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.316436][T19759] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.406562][T19759] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.425509][T19759] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.468889][T19759] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.484828][T19759] netlink: 'syz.2.3731': attribute type 29 has an invalid length. [ 490.626994][T19780] netlink: 'syz.4.3738': attribute type 29 has an invalid length. [ 490.669032][T19780] 8021q: VLANs not supported on lo [ 490.850376][T19784] team0: Device gtp0 is up. Set it down before adding it as a team port [ 490.967053][T19795] __nla_validate_parse: 5 callbacks suppressed [ 490.967073][T19795] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3741'. [ 491.368202][T19817] syzkaller0: entered promiscuous mode [ 491.410808][T19817] syzkaller0: entered allmulticast mode [ 491.882006][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 491.901631][T19842] netlink: 'syz.2.3751': attribute type 11 has an invalid length. [ 492.018428][T19845] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3752'. [ 492.205506][T19851] tipc: Started in network mode [ 492.220541][T19851] tipc: Node identity 5a5ef44b9adb, cluster identity 4711 [ 492.244101][T19851] tipc: Enabled bearer , priority 0 [ 492.337015][T19851] syzkaller0: entered promiscuous mode [ 492.345872][T19851] syzkaller0: entered allmulticast mode [ 492.426490][T19861] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3756'. [ 492.490384][T19857] tipc: Resetting bearer [ 492.565232][T19849] tipc: Resetting bearer [ 492.626984][T19849] tipc: Disabling bearer [ 493.020931][T19888] sch_fq: defrate 0 ignored. [ 493.221599][T19890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.271052][T19903] x_tables: duplicate underflow at hook 1 [ 493.407507][T19904] bond1: (slave lo): Releasing backup interface [ 493.425397][T19904] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 493.463136][T19904] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 493.506226][T19904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.584521][T19910] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 493.599767][T19910] bond3 (unregistering): Released all slaves [ 494.114828][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 494.296587][T19939] openvswitch: netlink: Key type 343 is out of range max 32 [ 494.317289][T19941] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3777'. [ 494.340529][T19939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3776'. [ 494.358764][T19941] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 494.373568][T19939] atomic_op ffff888055808998 conn xmit_atomic 0000000000000000 [ 494.383350][ T5835] block nbd3: Receive control failed (result -32) [ 494.408708][T19939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3776'. [ 494.419494][T19950] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3777'. [ 494.809264][T19965] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 494.833038][T19965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.037144][T19972] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3782'. [ 495.126450][T19980] validate_nla: 5 callbacks suppressed [ 495.126468][T19980] netlink: 'syz.3.3785': attribute type 29 has an invalid length. [ 495.164448][T19982] netlink: 'syz.3.3785': attribute type 29 has an invalid length. [ 495.194015][T19980] netlink: 'syz.3.3785': attribute type 29 has an invalid length. [ 495.239345][T19988] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 495.286090][T19985] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3787'. [ 495.610013][T20000] netlink: 'syz.3.3791': attribute type 21 has an invalid length. [ 495.658182][T19999] bridge_slave_0: entered allmulticast mode [ 496.318936][T20032] __nla_validate_parse: 7 callbacks suppressed [ 496.318956][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3799'. [ 496.465389][T20036] netlink: 'syz.1.3803': attribute type 11 has an invalid length. [ 496.490770][T20036] netlink: 'syz.1.3803': attribute type 4 has an invalid length. [ 496.499456][T20036] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.3803'. [ 496.629561][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3807'. [ 496.889600][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 497.027395][T20054] syzkaller0: entered promiscuous mode [ 497.033145][T20054] syzkaller0: entered allmulticast mode [ 497.040584][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3812'. [ 497.197285][T20085] IPv4: Oversized IP packet from 127.202.26.0 [ 499.390283][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 499.433765][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 499.525197][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 501.405039][T20099] vlan2: entered allmulticast mode [ 501.410225][T20099] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 501.787944][T20128] x_tables: duplicate entry at hook 2 [ 501.898938][T20137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3828'. [ 501.918491][T20139] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 502.025034][T20137] openvswitch: netlink: IP tunnel dst address not specified [ 502.050541][T20147] netlink: 'syz.0.3835': attribute type 1 has an invalid length. [ 502.085498][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 502.108479][T20147] netlink: 'syz.0.3835': attribute type 1 has an invalid length. [ 502.120552][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 502.125155][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 502.135809][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'. [ 502.149488][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 502.196787][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'. [ 502.214728][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 502.226790][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'. [ 502.237127][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 503.007229][T20197] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 503.068063][T20197] bond3 (unregistering): Released all slaves [ 503.569929][T20241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 503.655010][T20242] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005e: 0000 [#1] SMP KASAN PTI [ 503.667046][T20242] KASAN: null-ptr-deref in range [0x00000000000002f0-0x00000000000002f7] [ 503.675512][T20242] CPU: 0 UID: 0 PID: 20242 Comm: syz.4.3861 Not tainted syzkaller #0 PREEMPT(full) [ 503.684929][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 503.695031][T20242] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 503.700454][T20242] Code: 20 15 49 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d 70 98 94 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 ae 7c f6 4d 39 64 24 58 0f 85 6a 11 00 [ 503.720094][T20242] RSP: 0018:ffffc9000587f7c0 EFLAGS: 00010202 [ 503.726214][T20242] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a491503 [ 503.734215][T20242] RDX: 0000000000000000 RSI: ffffffff8e22a053 RDI: 00000000000002f0 [ 503.742217][T20242] RBP: ffffc9000587f980 R08: ffffc9000587f8e7 R09: 0000000000000000 [ 503.750228][T20242] R10: ffffc9000587f8c0 R11: fffff52000b0ff1d R12: 0000000000000298 [ 503.756968][T20232] syzkaller0: entered promiscuous mode [ 503.758234][T20242] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b0ff10 [ 503.758254][T20242] FS: 00007f4063a846c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 503.780669][T20242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.787289][T20242] CR2: 00007fff19b46e88 CR3: 000000007c748000 CR4: 00000000003526f0 [ 503.789496][T20232] syzkaller0: entered allmulticast mode [ 503.795302][T20242] Call Trace: [ 503.795313][T20242] [ 503.795324][T20242] ? wake_up_q+0x99/0xd0 [ 503.811567][T20242] ? preempt_schedule_thunk+0x16/0x30 [ 503.816986][T20242] ? preempt_schedule_common+0x82/0xd0 [ 503.822487][T20242] ? l2cap_unregister_user+0x36/0x170 [ 503.827901][T20242] ? __pfx___mutex_lock+0x10/0x10 [ 503.832962][T20242] ? __up_read+0x2fe/0x6b0 [ 503.837418][T20242] ? __pfx___up_read+0x10/0x10 [ 503.842216][T20242] ? hidp_session_find+0xce/0x100 [ 503.847270][T20242] l2cap_unregister_user+0x36/0x170 [ 503.852521][T20242] hidp_connection_del+0xb0/0x170 [ 503.857573][T20242] hidp_sock_ioctl+0x3ab/0x650 [ 503.862371][T20242] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 503.867713][T20242] ? do_vfs_ioctl+0x1166/0x1530 [ 503.872600][T20242] sock_do_ioctl+0x101/0x320 [ 503.877234][T20242] ? __pfx_sock_do_ioctl+0x10/0x10 [ 503.882378][T20242] ? do_futex+0x395/0x420 [ 503.886762][T20242] sock_ioctl+0x5c6/0x7f0 [ 503.891126][T20242] ? __pfx_sock_ioctl+0x10/0x10 [ 503.896018][T20242] ? __fget_files+0x2a/0x420 [ 503.900648][T20242] ? __fget_files+0x3a0/0x420 [ 503.905374][T20242] ? __fget_files+0x2a/0x420 [ 503.909991][T20242] ? bpf_lsm_file_ioctl+0x9/0x20 [ 503.914988][T20242] ? __pfx_sock_ioctl+0x10/0x10 [ 503.919896][T20242] __se_sys_ioctl+0xfc/0x170 [ 503.924505][T20242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.930591][T20242] do_syscall_64+0x15f/0xf80 [ 503.935204][T20242] ? trace_irq_disable+0x3b/0x140 [ 503.940266][T20242] ? clear_bhb_loop+0x40/0x90 [ 503.944975][T20242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.950897][T20242] RIP: 0033:0x7f4062b9c819 [ 503.955331][T20242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.974956][T20242] RSP: 002b:00007f4063a84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.983383][T20242] RAX: ffffffffffffffda RBX: 00007f4062e16090 RCX: 00007f4062b9c819 [ 503.991375][T20242] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 000000000000000c [ 503.999395][T20242] RBP: 00007f4062c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 504.007389][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.015384][T20242] R13: 00007f4062e16128 R14: 00007f4062e16090 R15: 00007ffd73851808 [ 504.023382][T20242] [ 504.026440][T20242] Modules linked in: [ 504.034063][T20242] ---[ end trace 0000000000000000 ]--- [ 504.035402][T20250] netlink: 'syz.0.3864': attribute type 3 has an invalid length. [ 504.056991][T20242] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 504.079928][T20242] Code: 20 15 49 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d 70 98 94 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 ae 7c f6 4d 39 64 24 58 0f 85 6a 11 00 [ 504.100951][T20242] RSP: 0018:ffffc9000587f7c0 EFLAGS: 00010202 [ 504.108577][T20242] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a491503 [ 504.119833][T20242] RDX: 0000000000000000 RSI: ffffffff8e22a053 RDI: 00000000000002f0 [ 504.129208][T20242] RBP: ffffc9000587f980 R08: ffffc9000587f8e7 R09: 0000000000000000 [ 504.138273][T20242] R10: ffffc9000587f8c0 R11: fffff52000b0ff1d R12: 0000000000000298 [ 504.147468][T20242] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b0ff10 [ 504.156772][T20242] FS: 00007f4063a846c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 504.167358][T20242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.174885][T20242] CR2: 00007f4062be9f00 CR3: 000000007c748000 CR4: 00000000003526f0 [ 504.183558][T20242] Kernel panic - not syncing: Fatal exception [ 504.190278][T20242] Kernel Offset: disabled [ 504.194605][T20242] Rebooting in 86400 seconds..