last executing test programs: 1.798530044s ago: executing program 4 (id=4080): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x4000050) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff5f}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) (async) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c4c5c5b04500"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.649095658s ago: executing program 4 (id=4081): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x800442d3, 0x200000f3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0xc, 0x9}, 0x2) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r4, 0x3a, 0x1, 0x0, 0x20000000) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x100800, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)}, 0x78) 1.586150063s ago: executing program 0 (id=4083): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000980)={0x0, 0xb01}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "008e948fe8a078aed61eafdf6c3ac48365183721a85750f1"}}]}, 0x150}}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r4, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x9, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.419805116s ago: executing program 0 (id=4086): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4841}, 0x4004044) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x7}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40c8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000040}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x104000, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x9}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000580)={r5, 0x99, "3302b34498343e73b3c55e4b01cd483dc7ff07d4a0f248efe6010684e9d3276fe08daa3327ab21a75276281a953a6f8eb840e63b02db771ba599f6a6d02957902d998ff448a29200b1b8cd7d99fe037f5dd253c0c232813c749f5b1934f9a21a9efd01e3c5b67b3b7a11cac4b73999c6e8af9f2c38f94c8c8167a40c76b7d22f49ea4928d4f4b125ad624a98d0be13d58747fd3a637f37ca85"}, &(0x7f0000000640)=0xa1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000680), 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8008094) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r9, 0x10, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x4000040) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r10, 0xa11, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1d}, 0x4000000) write$bt_hci(r4, &(0x7f0000000ac0)={0x1, @le_set_cig_params={{0x2062, 0x18}, {0xfb, "b68251", "10472b", 0x1, 0x4, 0x3, 0x0, 0x4000, 0x1, [{0x5, 0x0, 0x7fff, 0x8, 0x2, 0x9, 0xc}]}}}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r11, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r12, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000c80)={0x3, 'team_slave_1\x00', {0x3}, 0x2}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r12, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x10) openat$cgroup_devices(r4, &(0x7f0000000f00)='devices.deny\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000f40)={r6, 0x9a, "4d51c12e463c6e24eb4ef1f0d7e4b250108de4977301cf357fb6ab1e61ee72d18c41c381f91ed965971a9a099ff29860d9fa55c58500db8bac1e091438a060e47827e6408850017e53ae4e9dc4f4e7aeb8958db1a5d94c868539199bf13debc1d4c19055eb51239b7e2163faef38125dd8eb6988237b1ea7899e22b915fc02db1cc016ec3b0a2427e873842361dbaf5fcb4269acd4e707a0eda9"}, &(0x7f0000001000)=0xa2) 1.331217486s ago: executing program 1 (id=4088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x7df9bd2ca29e3677}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x4, 0x0, 0x1bb, 0x4}}]}}}]}, 0x84}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) close(0x3) close(0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f00000020c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xd6c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4}]}}, {0x0, 0x0, 0xd54, 0x0, @gue={{0x1, 0x1, 0x2, 0x6, 0x0, @void}, "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"}}}}}}, 0x0) 1.252972874s ago: executing program 0 (id=4089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @loopback, 0xfffffff8}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) 1.198642988s ago: executing program 3 (id=4090): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000003c0)=0x4, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendmsg(r0, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) (async) sendmsg(r0, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) 1.119209852s ago: executing program 2 (id=4091): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110340000003a29fedb2e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.118597353s ago: executing program 1 (id=4092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 1.079354307s ago: executing program 4 (id=4093): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast2, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x2, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x2, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x456, 0x2b}, 0xa, @in=@loopback, 0xffffffde, 0x0, 0x2, 0x81, 0x7}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000006000000010000000900010073797a300000000078000000090a010400000000000000000100000008110a40000000000900020073797a310000000009000100730011800a0001006c696d69740000002c0002800c0002400000000000000003080003400000002008000440000000010c000140fffffffffffbffff140000001000010000000000000000000000000a0000000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='\x00', 0x8000, &(0x7f0000000080)={@align=0xa1, {0xf24, 0x9a9, 0x40, 0x9}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}, {[0x7f, 0x14000000, 0x0, 0x4]}, 0x3, 0x77, &(0x7f0000000180)=""/119}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x25000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x48, 0x0, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 999.824504ms ago: executing program 2 (id=4094): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffc}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="bd591511", 0x4}], 0x1}}], 0x1, 0x400300) (async) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 913.521104ms ago: executing program 1 (id=4095): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x2, 0x5, 0xf55}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x7fffffff}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r4}, &(0x7f0000000380)=0x8) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r4, 0xc}, &(0x7f0000000240)=0x8) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0xa}, &(0x7f0000000080)=0xffffff5a) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) 840.573866ms ago: executing program 2 (id=4096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 759.450033ms ago: executing program 0 (id=4097): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000280)=0x7, 0x4) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvfrom$unix(r2, 0x0, 0x0, 0x2002, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x5, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) 758.662452ms ago: executing program 4 (id=4098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = socket$kcm(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="2c0900000003", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x4}}}}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="6f5e85b55cef1353e29f2e6c708e07154ed5c23fe06331955bd0d2c48725e5ffbde893f3c44ac1f6a829a2b14727a85eca099cad00187abfa89423dcfe92464d6d8b1543108cab1e7c86e59e8fa0d2b46978f9d2ef3a498c38dbdd97c2ca350c4b79bfd115a0a3ef0e3b92402baa537c0e974aa9463f2d23bbc7bd191aa54fdc5e4e6775f8af710d1085987032df00"/156, @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x10) write$tun(r0, &(0x7f0000000100)={@void, @val={0x4, 0x1, 0x7, 0x2, 0x81, 0x4}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x27, 0x4, 0x0, 0x0, 0xa8, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1, {[@end, @generic={0x86, 0xc, "2a12ce8bb975332c6885"}, @timestamp_addr={0x44, 0x34, 0x38, 0x1, 0x4, [{@broadcast, 0xc5}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe7ec48b4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@remote, 0x5}]}, @timestamp_addr={0x44, 0x44, 0x62, 0x1, 0x8, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}, {@broadcast, 0x3}, {@multicast2, 0x5}, {@multicast1, 0xa}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x8}, {@multicast2, 0x2}, {@multicast1, 0x4}]}]}}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0xc0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet6_int(r7, 0x29, 0x3a, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r8, 0x0, 0x18, 0x0, &(0x7f0000003d00)) socket(0x40000000015, 0x5, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000050000000500000000000810040000000c000000030000afeee50f29649e0e844706040000000000d9d400040000000000000500000004000000ff03000b0000000000000700000000060000000000000e0300000000000000020000000000001203000000002e5f300000000000000000000000000000f6b06ffa10709b27e019612dcfe2238f67fb240f41e24f9a3e7ed4827cd9135dbc5568135257f520b08395a3203bc2747b8b"], &(0x7f0000000240)=""/5, 0x81, 0x5, 0x1, 0x1c5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000005000000010000000600000010000000", @ANYRES32=r9, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="04000000000000000726a8cd1622e5f1ef05000000040000000000000000000000007d67fc40f530921ec81f4808d800000000"], 0x50) 712.016162ms ago: executing program 3 (id=4099): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 622.758946ms ago: executing program 0 (id=4100): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x20}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 585.685206ms ago: executing program 2 (id=4101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000086400dffacaf90e000300", @ANYRES32=r2, @ANYBLOB="080005000c0000041400040074756e6c3000000001000000000000001f04aa703f6d40af4f2a5f660333e319b4d4c3eaec895b6c7cc25d5c25982ff923ea645b2ce7cffd15fca70b9b052940d0e25a36173545c1c92f6ee8df7219492e335b4afd115ffa1f4e8b6218876b83353c9f0b94f5a74734875c1ae55a6abd4a0c66f771716c4be069cda2703727a2752ceb631a6efdb80b422c32340a79694d986f53f1bd852455384fe3656562710521"], 0x38}}, 0x0) 485.099325ms ago: executing program 3 (id=4102): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) 475.299939ms ago: executing program 1 (id=4103): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket(0x8, 0x800, 0x1) (async) r1 = socket(0x8, 0x800, 0x1) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @local}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x80000005}, 0x8) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x40c0) (async) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x40c0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000280)=0x7, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000280)=0x7, 0x4) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r9, 0x1}, 0x14}}, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r4, 0xffff, 0x1}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000300)={r10, 0x6, 0x101}, 0x8) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) 348.28986ms ago: executing program 2 (id=4104): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x4040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map, 0xffffffffffffffff, 0x1d}, 0x20) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7e00000000005e87bf659aa9b000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x8811) 275.531066ms ago: executing program 4 (id=4105): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, 0x2, 0xfff, 0xfffffffb, 0x310, 0x86, 0xbe, 0x7}, &(0x7f0000000000)=0x9c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0x7fffffff}}, [0x6, 0x6, 0x40, 0x80000000, 0x9, 0x1, 0x1, 0x0, 0x62, 0x8000, 0x1, 0x864, 0x8001, 0x2]}, &(0x7f0000000300)=0x100) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 263.255715ms ago: executing program 1 (id=4106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000ecd3f78", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25170000000c0006800800060001000000"], 0x20}}, 0x48c0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000002540)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000025c0)={&(0x7f0000000440)="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", &(0x7f0000001440)=""/87, &(0x7f00000014c0)="22bad523a9579294967d635b413731e7da7e3cba36873daa33836bd153b3a9dd60c4bc8752ee9fe18fc991ad107eff87d2a4eb28b4c63bcec6d5e2955645123f8d291472c872ed2f53fca86cb0f3ae11ddf688b2de9a1542264487f341e3ddbcbb8555b8365729ea00ac1da695eda4a1519b", &(0x7f0000001540)="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", 0x7ff00000, r3}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000180)='Z((\x00', 0x10000, &(0x7f00000001c0)={@_ha_fsid={[0x60c, 0x4]}, {0x85e, 0x2, 0x3, 0xe2}}, 0x63, &(0x7f0000000200), &(0x7f0000000240)=0x3b}, {[0x10000, 0x9, 0x5, 0x5]}, 0x1, 0x50, &(0x7f00000002c0)=""/80}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) 209.181583ms ago: executing program 0 (id=4107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00030000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x94}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010425bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="d8b9af6b0000000014000300776c616e300000000099ecdaa00000000a0001"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 208.2176ms ago: executing program 3 (id=4108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000660b000000896d56b567db6b6f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRES64], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) getsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000040000000000000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b700225a1c0efde0e162000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x94) 142.354062ms ago: executing program 3 (id=4109): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x3, @random="dda55d54b10e", 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'wlan1\x00'}}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipmr_newroute={0x5c, 0x18, 0x800, 0x70bd2a, 0x25dfdbfe, {0x80, 0x80, 0x10, 0x5, 0x0, 0x0, 0xc8}, [@RTA_IIF={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_PREFSRC={0x8, 0x7, @local}, @RTA_UID={0x8, 0x19, r4}, @RTA_IIF={0x8, 0x3, r2}, @RTA_UID={0x8, 0x19, r4}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x5c}}, 0x0) 48.048444ms ago: executing program 3 (id=4110): r0 = socket(0x15, 0x4, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 38.080402ms ago: executing program 2 (id=4111): r0 = socket$inet(0x2, 0x80001, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10020010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0xd27, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) 33.202248ms ago: executing program 1 (id=4112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40012100, 0x0, 0x2e) r3 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="8f4961884fc4", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x6, 0x2, 0x4}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x1c}}, 0x0) accept$ax25(r4, 0x0, 0x0) 0s ago: executing program 4 (id=4113): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) sendfile(r1, r0, &(0x7f0000000380)=0xfffffffffffffffb, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000014130200000068430000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="000000002a5dec3bef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r6, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x400) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000400)={0x1, 'rose0\x00', {}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): T13488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.088762][T13488] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 288.146072][T13544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'. [ 288.202843][T13544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'. [ 288.213624][T13488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.219589][T13488] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 288.278940][T13488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.315695][T13488] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 288.533079][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 289.466589][T13615] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 289.708569][T13637] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 289.732513][T13637] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 289.974083][T13655] xt_l2tp: invalid flags combination: 8 [ 290.221234][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2109'. [ 290.349050][T13682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2115'. [ 290.590985][T13693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2117'. [ 290.765202][T13700] pim6reg: entered allmulticast mode [ 290.951606][T13712] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2122'. [ 291.247028][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'. [ 291.295185][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'. [ 291.735654][T13692] lo speed is unknown, defaulting to 1000 [ 292.677732][T13804] tipc: Cannot configure node identity twice [ 292.700670][T13804] tipc: Cannot configure node identity twice [ 292.950944][T13815] netlink: 'syz.0.2149': attribute type 33 has an invalid length. [ 293.022028][T13817] netlink: 'syz.4.2151': attribute type 13 has an invalid length. [ 293.030013][T13817] netlink: 'syz.4.2151': attribute type 5 has an invalid length. [ 293.117918][T13815] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 293.135439][T13815] bond5 (unregistering): Released all slaves [ 293.279715][T13822] bond6 (unregistering): Released all slaves [ 293.357781][T13687] lo speed is unknown, defaulting to 1000 [ 293.651498][T13828] syzkaller0: entered promiscuous mode [ 293.680254][T13828] syzkaller0: entered allmulticast mode [ 296.077140][T13896] __nla_validate_parse: 4 callbacks suppressed [ 296.077159][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'. [ 297.335094][T13923] netlink: 'syz.1.2167': attribute type 8 has an invalid length. [ 297.357942][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2167'. [ 297.736904][T13931] netlink: 408 bytes leftover after parsing attributes in process `syz.4.2166'. [ 298.066149][T13923] bond0: entered promiscuous mode [ 298.090191][T13923] bond_slave_0: entered promiscuous mode [ 298.096254][T13923] bond_slave_1: entered promiscuous mode [ 298.115224][T13923] bridge_slave_1: entered promiscuous mode [ 298.160299][T13923] gretap0: entered promiscuous mode [ 298.218682][T13923] bond0: left promiscuous mode [ 298.245716][T13923] bond_slave_0: left promiscuous mode [ 298.284069][T13923] bond_slave_1: left promiscuous mode [ 298.302961][T13923] bridge_slave_1: left promiscuous mode [ 298.336339][T13923] gretap0: left promiscuous mode [ 298.475551][T13907] lo speed is unknown, defaulting to 1000 [ 298.590832][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 299.150884][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 299.556648][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 300.396243][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2180'. [ 300.418917][T13987] syzkaller0: entered promiscuous mode [ 300.427486][T13987] syzkaller0: entered allmulticast mode [ 300.433377][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2180'. [ 301.482105][T14048] sctp: [Deprecated]: syz.4.2191 (pid 14048) Use of int in max_burst socket option. [ 301.482105][T14048] Use struct sctp_assoc_value instead [ 301.512602][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 301.639501][T14049] bond0: entered promiscuous mode [ 301.672582][T14049] bond0: left promiscuous mode [ 301.800793][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'. [ 301.837062][T14063] syzkaller0: entered promiscuous mode [ 301.857459][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2194'. [ 301.880524][T14063] syzkaller0: entered allmulticast mode [ 301.889934][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2194'. [ 301.920986][T14065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'. [ 302.091190][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 302.323321][T14086] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2200'. [ 302.347055][T14086] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 302.667487][T14097] netlink: 'syz.3.2203': attribute type 11 has an invalid length. [ 302.679641][T14091] sit0: left promiscuous mode [ 302.684524][T14091] sit0: entered allmulticast mode [ 303.507609][T14148] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 303.847813][T14169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.883165][T14170] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2221'. [ 303.892280][T14168] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2223'. [ 303.892308][T14168] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2223'. [ 304.114151][T14178] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 304.137158][T14179] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 304.525979][T14202] tipc: Enabling of bearer rejected, failed to enable media [ 304.905552][T14229] netlink: 'syz.4.2239': attribute type 20 has an invalid length. [ 304.935363][T14229] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.071808][T14239] netlink: 'syz.1.2244': attribute type 1 has an invalid length. [ 305.281204][T14252] x_tables: duplicate underflow at hook 1 [ 307.024166][T14348] __nla_validate_parse: 4 callbacks suppressed [ 307.024185][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2263'. [ 307.171415][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2264'. [ 307.206864][T14358] IPv6: Can't replace route, no match found [ 307.228249][T14358] IPv6: Can't replace route, no match found [ 307.685153][T14386] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.703353][T14386] bond6: (slave lo): Enslaving as an active interface with an up link [ 307.714722][T14386] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 307.737790][T14387] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 307.799482][ T5894] lo speed is unknown, defaulting to 1000 [ 307.807247][ T9] lo speed is unknown, defaulting to 1000 [ 307.807247][ T5894] syz0: Port: 1 Link DOWN [ 307.853734][T12088] lo speed is unknown, defaulting to 1000 [ 307.934165][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 307.975880][T14409] gre1: entered promiscuous mode [ 307.983950][T14409] gre1: entered allmulticast mode [ 307.998060][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2280'. [ 308.014446][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2283'. [ 308.175859][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 308.205660][T14427] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 308.373114][T14431] netlink: 'syz.0.2288': attribute type 10 has an invalid length. [ 308.735299][T14456] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 308.813624][T14441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.122314][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 309.174411][T14475] netlink: 'syz.4.2303': attribute type 4 has an invalid length. [ 309.242997][T14477] syzkaller0: entered promiscuous mode [ 309.248536][T14477] syzkaller0: entered allmulticast mode [ 309.306521][T14485] netlink: 'syz.0.2306': attribute type 2 has an invalid length. [ 309.318245][T14477] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 309.764360][T14519] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 309.777703][T14519] bond7 (unregistering): Released all slaves [ 309.854044][T14522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2317'. [ 309.933273][T14525] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 309.945381][T14525] bond7 (unregistering): Released all slaves [ 310.280814][T14537] syz.0.2321 (14537) used greatest stack depth: 17472 bytes left [ 310.281367][T14544] syzkaller0: entered promiscuous mode [ 310.297037][T14544] syzkaller0: entered allmulticast mode [ 310.322856][T14543] netlink: 'syz.4.2323': attribute type 2 has an invalid length. [ 310.336497][T14543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.492001][T14513] ieee80211 phy41: Failed to add default virtual iface [ 310.562234][T14556] netlink: 'syz.4.2327': attribute type 1 has an invalid length. [ 310.589072][T14556] netlink: 'syz.4.2327': attribute type 2 has an invalid length. [ 310.643406][T14561] openvswitch: netlink: IP tunnel dst address not specified [ 310.677503][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2329'. [ 310.859485][T14575] xt_hashlimit: size too large, truncated to 1048576 [ 310.896827][T14579] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 310.927844][T14579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 311.140980][T14589] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 311.190695][T14587] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20002 [ 311.276380][T14594] syzkaller0: entered promiscuous mode [ 311.289877][T14594] syzkaller0: entered allmulticast mode [ 311.655446][T14622] netlink: 'syz.1.2346': attribute type 1 has an invalid length. [ 311.888855][T14636] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 312.189855][T14655] __nla_validate_parse: 4 callbacks suppressed [ 312.189877][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 312.266805][T14655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2358'. [ 312.361915][T14667] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2362'. [ 312.388221][T14667] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 312.425588][T14673] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 312.435006][T14673] netlink: 476 bytes leftover after parsing attributes in process `syz.4.2363'. [ 312.444910][T14673] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2363'. [ 312.449568][T14667] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 312.485714][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 312.510731][T14667] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 312.534972][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2363'. [ 312.627285][T14680] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 312.786257][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 313.407216][T14720] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 313.532992][T14720] bond4 (unregistering): Released all slaves [ 313.902357][T14734] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2376'. [ 313.931119][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2376'. [ 314.349715][T14749] syzkaller0: entered promiscuous mode [ 314.377271][T14749] syzkaller0: entered allmulticast mode [ 315.772763][T14764] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 315.791865][T14766] bridge5: entered promiscuous mode [ 315.816984][T14766] bridge5: entered allmulticast mode [ 316.017125][T14786] netlink: 'syz.0.2389': attribute type 2 has an invalid length. [ 316.155506][T14794] openvswitch: netlink: Flow actions attr not present in new flow. [ 316.581772][T14828] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 316.620651][T14826] netlink: 'syz.4.2400': attribute type 4 has an invalid length. [ 316.735155][T14834] bond4: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.761893][T14834] bond4: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 316.776855][T14834] bond4: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 317.222460][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.287270][T14864] bond9: option resend_igmp: invalid value (32767) [ 317.296039][T14864] bond9: option resend_igmp: allowed values 0 - 255 [ 317.339926][T14864] bond9 (unregistering): Released all slaves [ 317.706651][T14893] netlink: 'syz.4.2419': attribute type 2 has an invalid length. [ 317.718508][T14893] __nla_validate_parse: 10 callbacks suppressed [ 317.718529][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 317.770490][T14896] IPv4: Oversized IP packet from 172.20.20.11 [ 317.978795][T14905] bond9: entered promiscuous mode [ 317.984476][T14905] bond9: entered allmulticast mode [ 317.990161][T14905] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.998848][T14911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2425'. [ 318.119285][T14918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.142936][T14918] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.539508][T14934] vlan4: entered allmulticast mode [ 318.669401][T14936] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2436'. [ 318.709999][T14939] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 318.722601][T14939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2437'. [ 318.782012][T14940] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 318.806823][T14940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2437'. [ 319.169920][T14962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2441'. [ 319.540406][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 319.562604][T14995] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 319.577569][T14995] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 319.708573][T15002] netlink: 'syz.2.2454': attribute type 1 has an invalid length. [ 319.737283][T15004] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2452'. [ 319.749671][T15004] netlink: Conntrack attr has 3 unknown bytes [ 319.789480][T15002] netlink: 'syz.2.2454': attribute type 2 has an invalid length. [ 319.829010][T15013] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2453'. [ 319.978156][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 320.135036][T15027] bond0 (unregistering): Released all slaves [ 320.187803][T15036] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 320.268486][T15038] tipc: Enabled bearer , priority 0 [ 320.476858][T15038] syzkaller0: entered promiscuous mode [ 320.501118][T15038] syzkaller0: entered allmulticast mode [ 320.513514][T15055] netlink: 'syz.3.2466': attribute type 4 has an invalid length. [ 320.519781][T15038] tipc: Resetting bearer [ 320.551137][T15057] xt_addrtype: ipv6 does not support BROADCAST matching [ 320.629447][T15037] tipc: Resetting bearer [ 320.786202][T15068] netlink: 'syz.3.2470': attribute type 11 has an invalid length. [ 322.266217][T15037] tipc: Disabling bearer [ 322.276249][T15070] veth0: entered promiscuous mode [ 322.340543][T15078] bond0: left allmulticast mode [ 322.345479][T15078] bond0: left promiscuous mode [ 322.373043][T15078] team0 (unregistering): Port device macvlan2 removed [ 322.390496][T15070] veth0: left promiscuous mode [ 322.434735][T15078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.463449][T15071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.613981][T15103] netlink: 'syz.3.2478': attribute type 1 has an invalid length. [ 322.653125][T15105] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 322.745333][T15109] __nla_validate_parse: 8 callbacks suppressed [ 322.745353][T15109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2477'. [ 322.792262][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 322.806164][T15111] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 322.853117][T15107] ip6gre1: entered promiscuous mode [ 322.932392][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2481'. [ 323.045438][T15126] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 323.197980][T15131] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 323.275617][T15131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.394963][T15144] netlink: 'syz.3.2491': attribute type 21 has an invalid length. [ 323.505514][T15147] syzkaller0: entered promiscuous mode [ 323.522349][T15147] syzkaller0: entered allmulticast mode [ 323.605992][T15153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2494'. [ 323.639596][T15153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2494'. [ 323.701455][T15155] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 323.729860][T15155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.246418][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'. [ 324.285919][T15195] siw: device registration error -23 [ 324.332071][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.339528][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.578505][T15184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.603995][T15184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.704939][T15184] tipc: Resetting bearer [ 324.875424][T15193] syz_tun: entered promiscuous mode [ 324.887772][T15193] macvtap1: entered promiscuous mode [ 324.906669][T15193] syz_tun: left promiscuous mode [ 325.071654][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.081783][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.094696][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.166568][T15214] netlink: 'syz.3.2509': attribute type 3 has an invalid length. [ 325.218270][T15214] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2509'. [ 325.275989][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.294282][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.310587][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.330465][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.339409][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.360885][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 325.380627][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2512'. [ 325.389828][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 325.420637][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.451757][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.481247][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.510874][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.562904][T15240] netlink: 'syz.3.2514': attribute type 33 has an invalid length. [ 325.945907][ T9603] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.959007][ T9603] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.978400][ T9603] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.998741][ T9603] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.313650][T15238] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 326.338153][T15238] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 326.416954][T15295] openvswitch: netlink: IP tunnel dst address not specified [ 326.505247][T15302] xt_hashlimit: size too large, truncated to 1048576 [ 326.789305][T15315] netlink: 'syz.3.2535': attribute type 58 has an invalid length. [ 327.508734][T15358] bridge0: port 3(wlan0) entered blocking state [ 327.529295][T15358] bridge0: port 3(wlan0) entered disabled state [ 327.549646][T15358] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 327.591600][T15362] netlink: 'syz.0.2551': attribute type 58 has an invalid length. [ 328.022657][T15386] bond6 (unregistering): Released all slaves [ 328.023080][T15385] nbd: must specify an index to disconnect [ 328.074913][T15388] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 328.315368][T15411] tipc: Enabled bearer , priority 0 [ 328.356170][T15414] syzkaller0: entered promiscuous mode [ 328.364462][T15414] syzkaller0: entered allmulticast mode [ 328.473162][T15423] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 328.523298][T15414] tipc: Resetting bearer [ 328.546032][T15427] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 328.563481][T15414] tipc: Disabling bearer [ 328.595410][T15423] netlink: 'syz.2.2565': attribute type 4 has an invalid length. [ 328.622677][T15425] netlink: 'syz.3.2566': attribute type 2 has an invalid length. [ 328.817066][T15430] bond6: (slave gretap1): making interface the new active one [ 328.865183][T15430] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 329.180876][T15466] __nla_validate_parse: 13 callbacks suppressed [ 329.180896][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2575'. [ 329.616472][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 329.733385][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2578'. [ 329.735071][T15486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2581'. [ 329.787750][T15494] syzkaller0: entered promiscuous mode [ 329.793457][T15494] syzkaller0: entered allmulticast mode [ 329.905984][T15502] netlink: 'syz.4.2583': attribute type 23 has an invalid length. [ 330.046487][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 330.293038][T15519] netlink: 'syz.0.2589': attribute type 11 has an invalid length. [ 330.304847][T15519] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.2589'. [ 330.403325][T15523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2591'. [ 331.459567][T15515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 331.469553][T15525] tipc: Enabling of bearer rejected, failed to enable media [ 331.479922][T15456] lo speed is unknown, defaulting to 1000 [ 331.514608][T15515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2589'. [ 331.801832][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 331.882974][T15540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 331.895300][T15540] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 331.913570][T15540] gretap1: entered promiscuous mode [ 331.924659][T15540] gretap1: entered allmulticast mode [ 332.184894][T15507] lo speed is unknown, defaulting to 1000 [ 333.371916][T15585] netem: incorrect gi model size [ 333.392852][T15585] netem: change failed [ 333.987194][T15602] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 334.133059][T15604] syzkaller0: entered promiscuous mode [ 334.147931][T15604] syzkaller0: entered allmulticast mode [ 334.203146][T15609] __nla_validate_parse: 9 callbacks suppressed [ 334.203165][T15609] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2615'. [ 334.232113][T15603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2615'. [ 334.329821][T15614] bond8: entered promiscuous mode [ 334.357494][T15613] macvlan3: entered promiscuous mode [ 334.371048][T15613] macvlan3: entered allmulticast mode [ 334.382248][T15613] bond8: (slave macvlan3): Opening slave failed [ 334.494811][T15624] Bluetooth: MGMT ver 1.23 [ 334.525867][T15624] bridge0: entered promiscuous mode [ 334.531308][T15624] bridge0: entered allmulticast mode [ 334.755130][T15639] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 334.808133][T15639] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 334.992704][T15656] netlink: 'syz.3.2633': attribute type 33 has an invalid length. [ 335.013007][T15656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2633'. [ 335.055410][T15654] pimreg: entered allmulticast mode [ 335.155681][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 335.183506][T15667] bond0 (unregistering): Released all slaves [ 335.683947][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 335.849710][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2650'. [ 335.893106][T15704] sit1: entered promiscuous mode [ 335.906441][T15704] sit1: entered allmulticast mode [ 335.954540][T15708] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2651'. [ 336.095729][T15719] veth0: entered promiscuous mode [ 336.122561][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'. [ 336.254363][T15722] syzkaller0: entered promiscuous mode [ 336.268454][T15722] syzkaller0: entered allmulticast mode [ 336.327783][T15722] tipc: Enabled bearer , priority 0 [ 336.351361][T15721] tipc: Resetting bearer [ 336.376386][T15721] tipc: Disabling bearer [ 336.401216][T15731] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 336.419357][T15731] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2661'. [ 336.611165][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 336.628737][T15744] block nbd0: Unsupported socket: should be TCP or UNIX. [ 337.102604][T15739] netlink: 'syz.4.2667': attribute type 16 has an invalid length. [ 337.124589][T15739] netlink: 'syz.4.2667': attribute type 17 has an invalid length. [ 337.145463][T15739] lo: left promiscuous mode [ 337.194295][T15739] tunl0: left promiscuous mode [ 337.216781][T15739] gre0: left promiscuous mode [ 337.237831][T15739] gretap0: left promiscuous mode [ 337.256073][T15739] erspan0: left promiscuous mode [ 337.263825][T15739] ip_vti0: left promiscuous mode [ 337.279240][T15739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.318552][T15779] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 337.493850][T15779] bond6: entered promiscuous mode [ 337.499562][T15779] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.526632][T15781] bond6: (slave bridge8): making interface the new active one [ 337.534683][T15781] bridge8: entered promiscuous mode [ 337.542158][T15781] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 337.584367][T15786] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 337.654897][T15785] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 337.754927][T15793] tipc: New replicast peer: 255.255.255.255 [ 337.784439][T15793] tipc: Enabled bearer , priority 10 [ 337.990028][T15808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.774938][T15807] lo speed is unknown, defaulting to 1000 [ 339.390553][T15932] __nla_validate_parse: 5 callbacks suppressed [ 339.390575][T15932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2708'. [ 339.420472][T15932] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2708'. [ 339.466972][T15936] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 339.512295][T15939] tipc: Enabled bearer , priority 0 [ 339.788338][T15950] SET target dimension over the limit! [ 339.821797][T15947] netlink: 'syz.0.2713': attribute type 29 has an invalid length. [ 340.510596][ T5901] tipc: Node number set to 760538215 [ 341.116698][T15981] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2722'. [ 341.225075][T15983] syzkaller1: entered promiscuous mode [ 341.231315][T15983] syzkaller1: entered allmulticast mode [ 341.433829][T16007] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2727'. [ 341.559995][T16012] syzkaller0: entered promiscuous mode [ 341.594411][T16012] syzkaller0: entered allmulticast mode [ 341.721885][T16023] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2730'. [ 341.759602][T16023] syzkaller1: entered promiscuous mode [ 341.783944][T16023] syzkaller1: entered allmulticast mode [ 342.029507][T16035] tipc: Enabling of bearer rejected, failed to enable media [ 342.043129][T16037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2736'. [ 342.152913][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2738'. [ 342.273384][T16055] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2740'. [ 342.301366][T16051] netlink: 'syz.0.2740': attribute type 6 has an invalid length. [ 342.390311][T16065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2742'. [ 342.484937][T16070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2740'. [ 343.641053][T16119] netlink: 'syz.1.2754': attribute type 10 has an invalid length. [ 343.660518][T16119] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 343.897758][T16134] tipc: Enabling of bearer rejected, media not registered [ 344.021627][T16144] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 344.693826][ T30] audit: type=1107 audit(1771828406.394:4): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 344.801072][T16186] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 344.830732][T16189] __nla_validate_parse: 7 callbacks suppressed [ 344.830750][T16189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2772'. [ 344.874636][T16182] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2771'. [ 344.886320][T16182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2771'. [ 345.083195][T16204] tipc: Enabling of bearer rejected, failed to enable media [ 345.587898][T16201] lo speed is unknown, defaulting to 1000 [ 345.671977][T16241] netlink: 'syz.4.2782': attribute type 3 has an invalid length. [ 345.824707][T16247] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 345.874537][T16247] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2783'. [ 345.914733][T16247] netlink: 'syz.0.2783': attribute type 1 has an invalid length. [ 345.940911][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 345.950920][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'. [ 345.983387][T16253] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 346.005732][T16253] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 346.033259][T16249] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 346.050273][T16249] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 346.280551][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2787'. [ 346.323173][T16257] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2787'. [ 347.404775][T16305] syzkaller0: entered promiscuous mode [ 347.420530][T16305] syzkaller0: entered allmulticast mode [ 347.666251][T16320] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 347.681495][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.692407][T16320] bridge0: entered allmulticast mode [ 347.734136][T16326] veth3: entered allmulticast mode [ 348.290384][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2802'. [ 350.528201][T16401] gtp1: entered promiscuous mode [ 350.550868][T16401] gtp1: entered allmulticast mode [ 350.782217][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2814'. [ 350.836442][T16426] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 351.047809][T16449] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2816'. [ 351.278955][T16458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2820'. [ 351.305416][T16454] syzkaller0: entered promiscuous mode [ 351.312433][T16454] syzkaller0: entered allmulticast mode [ 351.521799][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 351.575049][T16472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2823'. [ 352.987082][T16470] team1: entered promiscuous mode [ 353.010634][T16470] team1: entered allmulticast mode [ 353.096561][T16489] netlink: 'syz.4.2827': attribute type 3 has an invalid length. [ 353.595387][T16516] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 353.604232][T16516] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2836'. [ 353.613847][T16516] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2836'. [ 353.625408][T16516] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 353.634259][T16516] netlink: 'syz.2.2836': attribute type 8 has an invalid length. [ 353.644118][T16516] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2836'. [ 353.773428][T16506] lo speed is unknown, defaulting to 1000 [ 354.528412][T16555] syzkaller0: entered promiscuous mode [ 354.567832][T16555] syzkaller0: entered allmulticast mode [ 354.611899][T16558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2847'. [ 354.637085][ T30] audit: type=1800 audit(1771828416.344:5): pid=16568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2848" name="memory.events" dev="tmpfs" ino=2841 res=0 errno=0 [ 354.662288][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2848'. [ 354.691024][ T30] audit: type=1804 audit(1771828416.374:6): pid=16568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2848" name="/newroot/555/memory.events" dev="tmpfs" ino=2841 res=1 errno=0 [ 355.058837][T16502] lo speed is unknown, defaulting to 1000 [ 355.086523][T16588] syzkaller1: entered promiscuous mode [ 355.100044][T16588] syzkaller1: entered allmulticast mode [ 357.022818][T16604] tipc: Enabling of bearer rejected, failed to enable media [ 357.541158][T16636] netlink: 'syz.1.2868': attribute type 4 has an invalid length. [ 357.548958][T16636] __nla_validate_parse: 1 callbacks suppressed [ 357.548975][T16636] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2868'. [ 357.664016][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.673881][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.682517][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.702151][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.711692][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.763338][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.772541][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.781285][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.789379][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.799953][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.556825][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 358.674917][T16673] syzkaller1: entered promiscuous mode [ 358.691444][T16673] syzkaller1: entered allmulticast mode [ 358.824448][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'. [ 358.931232][T16686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2878'. [ 359.205508][T16701] openvswitch: netlink: IP tunnel dst address not specified [ 359.272011][T16638] lo speed is unknown, defaulting to 1000 [ 359.731151][T16720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2887'. [ 359.845371][T16727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2889'. [ 359.855484][ T5825] Bluetooth: hci5: command tx timeout [ 359.877091][T16726] syzkaller0: entered promiscuous mode [ 359.884075][T16726] syzkaller0: entered allmulticast mode [ 359.962667][T16733] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 360.116361][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 360.180832][T16741] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 360.183644][T16744] ip6t_srh: unknown srh invflags 4000 [ 360.212585][T16638] chnl_net:caif_netlink_parms(): no params data found [ 360.303798][T16751] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 360.387147][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 360.403340][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2896'. [ 360.514921][T16638] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.522263][T16638] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.529562][T16638] bridge_slave_0: entered allmulticast mode [ 360.538175][T16638] bridge_slave_0: entered promiscuous mode [ 360.546905][T16638] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.554330][T16638] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.562128][T16638] bridge_slave_1: entered allmulticast mode [ 360.570015][T16638] bridge_slave_1: entered promiscuous mode [ 360.612602][T16638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.625716][T16638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.674682][T16638] team0: Port device team_slave_0 added [ 360.692568][T16638] team0: Port device team_slave_1 added [ 360.716780][T16778] netlink: 'syz.3.2902': attribute type 11 has an invalid length. [ 360.725352][T16778] netlink: 'syz.3.2902': attribute type 11 has an invalid length. [ 360.734178][T16778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2902'. [ 360.775257][T16638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.782828][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.809850][T16638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.835038][T16638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.842480][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.869265][T16638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.021362][T16638] hsr_slave_0: entered promiscuous mode [ 361.055627][T16638] hsr_slave_1: entered promiscuous mode [ 361.069950][T16638] debugfs: 'hsr0' already exists in 'hsr' [ 361.076574][T16638] Cannot create hsr debugfs directory [ 361.417465][T16638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.431927][T16638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.572274][T16638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.585900][T16638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.717758][T16638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.742436][T16638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.905505][T16638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.925701][T16638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.931783][ T5825] Bluetooth: hci5: command tx timeout [ 362.257760][T16638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.306383][T16638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.347041][T16638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.386214][T16638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.584250][T16857] __nla_validate_parse: 1 callbacks suppressed [ 362.584268][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 362.617460][T16857] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 362.691024][T16857] team1: entered promiscuous mode [ 362.707634][T16857] team1: entered allmulticast mode [ 362.717876][T16869] lo: Caught tx_queue_len zero misconfig [ 362.848957][T16638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.918099][T16873] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 362.926562][T16873] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2925'. [ 362.956495][T16638] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.975932][T16882] dvmrp8: entered allmulticast mode [ 362.997457][T16881] dvmrp8: left allmulticast mode [ 363.061012][T15924] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.068303][T15924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.078528][T15924] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.085743][T15924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.107642][T16889] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2930'. [ 363.118596][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 363.141478][T16891] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 363.189422][T16892] syzkaller0: entered promiscuous mode [ 363.201530][T16892] syzkaller0: entered allmulticast mode [ 363.236525][T16890] 0: reclassify loop, rule prio 0, protocol 800 [ 363.333219][T16901] veth0: entered promiscuous mode [ 363.349004][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'. [ 363.401780][T16901] veth0 (unregistering): left promiscuous mode [ 363.628473][T16917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2938'. [ 363.666509][T16917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2938'. [ 363.739081][T16926] netlink: 'syz.2.2939': attribute type 17 has an invalid length. [ 363.767821][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2939'. [ 363.789892][T16638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.801207][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2939'. [ 363.859316][T16932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.928971][T16638] veth0_vlan: entered promiscuous mode [ 363.957442][T16638] veth1_vlan: entered promiscuous mode [ 364.010581][ T5825] Bluetooth: hci5: command tx timeout [ 364.042953][T16939] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.049320][T16939] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.061464][T16638] veth0_macvtap: entered promiscuous mode [ 364.072622][T16638] veth1_macvtap: entered promiscuous mode [ 364.104193][T16638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.118846][T16638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.162943][T15916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.178188][T15916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.187583][T15916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.219770][T15916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.457264][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.470507][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.541494][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.549376][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.723592][T16945] lo speed is unknown, defaulting to 1000 [ 364.859040][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 365.072326][T16970] syzkaller0: entered promiscuous mode [ 365.089197][T16970] syzkaller0: entered allmulticast mode [ 366.100260][ T5825] Bluetooth: hci5: command tx timeout [ 366.949592][T17018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.956921][T17018] IPv6: NLM_F_CREATE should be set when creating new route [ 366.964338][T17018] IPv6: NLM_F_CREATE should be set when creating new route [ 367.181469][T17035] netlink: 'syz.3.2966': attribute type 2 has an invalid length. [ 367.205785][T17035] netlink: 'syz.3.2966': attribute type 1 has an invalid length. [ 367.243782][T17036] syzkaller0: entered promiscuous mode [ 367.249321][T17036] syzkaller0: entered allmulticast mode [ 367.693804][T17054] delete_channel: no stack [ 367.810810][T17057] syzkaller0: entered promiscuous mode [ 367.816352][T17057] syzkaller0: entered allmulticast mode [ 367.841965][T17058] __nla_validate_parse: 3 callbacks suppressed [ 367.841983][T17058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2972'. [ 369.464534][T17088] tipc: New replicast peer: 255.255.255.255 [ 369.519804][T17088] tipc: Enabled bearer , priority 10 [ 369.589889][T17085] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.610495][T17085] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 369.756910][T17107] "syz.3.2982" (17107) uses obsolete ecb(arc4) skcipher [ 369.967614][T17120] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2986'. [ 369.986676][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2985'. [ 370.220451][T17132] netlink: 'syz.3.2990': attribute type 15 has an invalid length. [ 370.254789][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 370.322191][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.332130][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.341546][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.352555][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.360879][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.369589][T15920] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.380842][T17132] netlink: 'syz.3.2990': attribute type 15 has an invalid length. [ 370.424276][T15920] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.462173][T17132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 370.473138][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.500430][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.507889][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.528622][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.541275][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.600305][T15920] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.638665][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2993'. [ 370.697666][T15920] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 370.799993][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 370.823612][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 371.033712][T17165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3000'. [ 371.050712][T17162] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 371.238151][T17176] netlink: 'syz.0.3003': attribute type 10 has an invalid length. [ 371.249142][T17176] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.259097][T17176] bridge_slave_1: left allmulticast mode [ 371.265343][T17176] bridge_slave_1: left promiscuous mode [ 371.284757][T17176] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.321550][T17176] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 371.332890][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 371.439301][T17140] lo speed is unknown, defaulting to 1000 [ 371.485841][T17184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.102044][T17140] chnl_net:caif_netlink_parms(): no params data found [ 372.290569][T17140] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.298306][T17140] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.307775][T17140] bridge_slave_0: entered allmulticast mode [ 372.316466][T17140] bridge_slave_0: entered promiscuous mode [ 372.339549][T17218] syzkaller0: entered promiscuous mode [ 372.346006][T17218] syzkaller0: entered allmulticast mode [ 372.354989][T17140] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.363849][T17140] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.371276][T17140] bridge_slave_1: entered allmulticast mode [ 372.379902][T17140] bridge_slave_1: entered promiscuous mode [ 372.453471][T17140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.469473][T17140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.541795][T17140] team0: Port device team_slave_0 added [ 372.584130][T17230] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 372.650724][ T5825] Bluetooth: hci0: command tx timeout [ 372.658675][T17232] netlink: 'syz.2.3016': attribute type 1 has an invalid length. [ 372.678383][T17140] team0: Port device team_slave_1 added [ 372.767896][T17140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.779642][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.807758][T17140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.821920][T17140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.848424][T17140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.920162][T17140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.941447][T17242] __nla_validate_parse: 5 callbacks suppressed [ 372.941465][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3019'. [ 373.147880][T17140] hsr_slave_0: entered promiscuous mode [ 373.158695][T17140] hsr_slave_1: entered promiscuous mode [ 373.165262][T17140] debugfs: 'hsr0' already exists in 'hsr' [ 373.171223][T17140] Cannot create hsr debugfs directory [ 373.317970][T17260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3024'. [ 373.758209][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 373.972409][T17290] tipc: MTU too low for tipc bearer [ 373.980673][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3032'. [ 373.992105][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3033'. [ 374.292151][T17305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.485594][T17140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.515361][T17140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.583100][T17140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.624747][T17140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.731053][ T5825] Bluetooth: hci0: command tx timeout [ 374.903674][T17330] IPv6: sit2: Disabled Multicast RS [ 374.940615][T17330] sit2: entered allmulticast mode [ 375.194681][T17140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.248414][T17352] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.325490][T17140] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.364265][T15920] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.371501][T15920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.406997][T15920] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.414215][T15920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.434039][T17372] netlink: 'syz.0.3052': attribute type 9 has an invalid length. [ 375.443446][T17374] netlink: 'syz.0.3052': attribute type 9 has an invalid length. [ 375.452367][T17370] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3050'. [ 375.509032][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3052'. [ 375.606433][T17382] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 375.630000][T17383] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 375.643860][T17382] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3053'. [ 375.659993][T17383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3053'. [ 375.883173][T17397] bond0: entered promiscuous mode [ 375.888670][T17397] bond_slave_0: entered promiscuous mode [ 375.895468][T17397] bond_slave_1: entered promiscuous mode [ 375.905606][T17397] bridge_slave_1: entered promiscuous mode [ 375.914541][T17397] bond0: left promiscuous mode [ 375.919598][T17397] bond_slave_0: left promiscuous mode [ 375.941879][T17400] netlink: 'syz.4.3059': attribute type 83 has an invalid length. [ 375.951430][T17397] bond_slave_1: left promiscuous mode [ 375.958507][T17397] bridge_slave_1: left promiscuous mode [ 376.056656][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.128902][T17405] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3060'. [ 376.226445][T17140] veth0_vlan: entered promiscuous mode [ 376.247798][T17140] veth1_vlan: entered promiscuous mode [ 376.275433][T17405] nbd: must specify at least one socket [ 376.285631][T17140] veth0_macvtap: entered promiscuous mode [ 376.296388][T17140] veth1_macvtap: entered promiscuous mode [ 376.317266][T17140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.329255][T17140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.406875][ T87] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.446336][ T87] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.506114][ T87] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.516291][ T87] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.553533][T17423] lo: entered promiscuous mode [ 376.558373][T17423] lo: entered allmulticast mode [ 376.606133][T17427] netlink: 'syz.4.3064': attribute type 3 has an invalid length. [ 376.798221][T15919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.820542][ T5825] Bluetooth: hci0: command tx timeout [ 376.837362][T15919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.952255][T15918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.978161][T15918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.113382][T17451] nbd: must specify a size in bytes for the device [ 377.174416][T17453] gretap0: entered promiscuous mode [ 377.601540][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.614608][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.634384][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.651622][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.659581][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.127270][T17500] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 378.292304][T17475] lo speed is unknown, defaulting to 1000 [ 378.655609][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.892674][ T5825] Bluetooth: hci0: command tx timeout [ 379.086298][T17546] __nla_validate_parse: 4 callbacks suppressed [ 379.086318][T17546] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3095'. [ 379.160482][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3095'. [ 379.177883][T17546] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3095'. [ 379.382480][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'. [ 379.414885][T17562] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 379.417425][T17563] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 379.442559][T17475] chnl_net:caif_netlink_parms(): no params data found [ 379.668848][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3101'. [ 379.684827][T17475] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.692412][T17475] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.699796][T17475] bridge_slave_0: entered allmulticast mode [ 379.707399][ T5825] Bluetooth: hci1: command tx timeout [ 379.719677][T17475] bridge_slave_0: entered promiscuous mode [ 379.733739][T17578] bridge0: left allmulticast mode [ 379.758160][T17475] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.766534][T17475] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.775601][T17475] bridge_slave_1: entered allmulticast mode [ 379.783529][T17475] bridge_slave_1: entered promiscuous mode [ 379.805022][T17578] veth0_to_bond: left allmulticast mode [ 379.811065][T17578] veth0_to_bond: left promiscuous mode [ 379.817089][T17578] bridge3: port 2(veth0_to_bond) entered disabled state [ 379.832775][T17578] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 379.911296][T17475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.927398][T17475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.983321][T17475] team0: Port device team_slave_0 added [ 379.995005][T17475] team0: Port device team_slave_1 added [ 380.033835][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 380.052066][T17475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.059280][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.088267][T17475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.103004][T17475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.110817][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.137304][T17475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.224807][T17475] hsr_slave_0: entered promiscuous mode [ 380.234349][T17475] hsr_slave_1: entered promiscuous mode [ 380.241459][T17475] debugfs: 'hsr0' already exists in 'hsr' [ 380.247851][T17475] Cannot create hsr debugfs directory [ 380.421078][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3109'. [ 380.873791][T17475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.895450][T17475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.953916][T17629] netlink: 'syz.4.3115': attribute type 2 has an invalid length. [ 381.046876][T17475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.081354][T17475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.168868][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 381.214417][T17475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.227809][T17475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.313170][T17475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.341073][T17475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.417232][T17664] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3123'. [ 381.447226][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 381.519405][T17667] block nbd3: Unsupported socket: should be TCP or UNIX. [ 381.696674][T17475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 381.717739][T17475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 381.735880][T17475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 381.773044][ T5825] Bluetooth: hci1: command tx timeout [ 381.785398][T17475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 381.942578][T17698] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 381.996612][T17475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.018914][T17704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.075170][T17475] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.093131][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.100580][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.155143][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.162458][T15916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.358319][T17712] syzkaller0: entered promiscuous mode [ 382.366968][T17712] syzkaller0: entered allmulticast mode [ 383.160992][T17717] tipc: Enabled bearer , priority 0 [ 383.181219][T17712] tipc: Enabling of bearer rejected, already enabled [ 383.305539][T17712] tipc: Resetting bearer [ 383.383037][T17712] tipc: Disabling bearer [ 383.440450][T15916] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.470622][T15916] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.511714][T15919] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.549377][T17475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.572074][T15919] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.615142][T17755] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 383.764465][T17475] veth0_vlan: entered promiscuous mode [ 383.826168][T17475] veth1_vlan: entered promiscuous mode [ 383.861908][ T5825] Bluetooth: hci1: command tx timeout [ 383.957720][T17475] veth0_macvtap: entered promiscuous mode [ 384.041859][T17475] veth1_macvtap: entered promiscuous mode [ 384.067267][T17475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.098068][T17475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.116828][T15918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.136820][T15918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.151018][T17768] Bluetooth: MGMT ver 1.23 [ 384.171400][T17768] xt_cgroup: path and classid specified [ 384.214977][T15918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.243546][T15918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.502253][T15920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.518979][T15920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.579403][T15918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.597374][ T30] audit: type=1800 audit(1771828446.304:7): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3157" name="memory.events" dev="tmpfs" ino=3249 res=0 errno=0 [ 384.623172][T15918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.756800][T17799] __nla_validate_parse: 2 callbacks suppressed [ 384.756822][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 385.176212][T17829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.623426][T17850] IPv6: NLM_F_REPLACE set, but no existing node found! [ 385.675926][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.686325][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.696861][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.728931][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.741073][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.784310][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3171'. [ 385.934685][ T5825] Bluetooth: hci1: command tx timeout [ 386.208614][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.216521][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.299940][T17872] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 386.336794][T17876] netem: change failed [ 386.448322][T17853] lo speed is unknown, defaulting to 1000 [ 386.484399][T17882] nbd: illegal input index 2958377 [ 386.622949][T17891] gre1: entered promiscuous mode [ 386.635958][T17891] gre1: entered allmulticast mode [ 386.664438][T17895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.972157][T17915] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3193'. [ 387.168215][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 387.182455][T17923] openvswitch: netlink: Flow actions attr not present in new flow. [ 387.444383][T17944] netlink: 'syz.0.3202': attribute type 4 has an invalid length. [ 387.546085][T17952] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 387.558165][T17853] chnl_net:caif_netlink_parms(): no params data found [ 387.739212][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.746789][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.754598][T17853] bridge_slave_0: entered allmulticast mode [ 387.762933][T17853] bridge_slave_0: entered promiscuous mode [ 387.770890][ T5825] Bluetooth: hci2: command tx timeout [ 387.782261][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.789584][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.797242][T17853] bridge_slave_1: entered allmulticast mode [ 387.805284][T17853] bridge_slave_1: entered promiscuous mode [ 387.849591][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.863060][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.914266][T17853] team0: Port device team_slave_0 added [ 387.923474][T17853] team0: Port device team_slave_1 added [ 387.976613][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.983787][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.010756][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.031652][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.039042][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.079926][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.246626][T17974] netlink: 'syz.1.3211': attribute type 12 has an invalid length. [ 388.272184][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 388.298896][T17853] hsr_slave_0: entered promiscuous mode [ 388.306526][T17853] hsr_slave_1: entered promiscuous mode [ 388.320780][T17853] debugfs: 'hsr0' already exists in 'hsr' [ 388.330251][T17853] Cannot create hsr debugfs directory [ 388.351840][T17979] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 388.389316][T17982] xt_hashlimit: size too large, truncated to 1048576 [ 388.396629][T17979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3211'. [ 388.408001][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3213'. [ 388.784203][T17853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 388.889441][T18010] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 388.908811][T17853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 388.908985][T18010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3219'. [ 389.077763][T17853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 389.096202][T18024] netlink: 'syz.1.3223': attribute type 27 has an invalid length. [ 389.187100][T18010] syzkaller0: entered promiscuous mode [ 389.196402][T18010] syzkaller0: entered allmulticast mode [ 389.222010][T17853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 389.851529][ T5825] Bluetooth: hci2: command tx timeout [ 390.998115][T17853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.035338][T17853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.077196][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 391.093708][T17853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.115977][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 391.131168][T17853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.202662][T18074] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 391.229753][T18073] netlink: 'syz.4.3237': attribute type 11 has an invalid length. [ 391.251067][T18073] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3237'. [ 391.328035][T18088] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 391.371284][T18088] bond4 (unregistering): Released all slaves [ 391.675770][ T29] IPVS: starting estimator thread 0... [ 391.770884][T18112] IPVS: using max 27 ests per chain, 64800 per kthread [ 391.930723][ T5825] Bluetooth: hci2: command tx timeout [ 391.943671][T18122] netlink: 'syz.2.3248': attribute type 16 has an invalid length. [ 391.973771][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.991665][T18122] netlink: 'syz.2.3248': attribute type 3 has an invalid length. [ 392.024627][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.031722][T18122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3248'. [ 392.063848][T15916] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.071188][T15916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.131882][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.139111][T15916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.258550][T17853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.281335][T18132] x_tables: duplicate underflow at hook 4 [ 392.296659][T18138] netlink: 'syz.1.3251': attribute type 1 has an invalid length. [ 392.346281][T18140] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 392.371757][T18138] bond1: entered promiscuous mode [ 392.377567][T18138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.432353][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 392.493924][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 392.731423][T18166] netlink: 'syz.0.3257': attribute type 1 has an invalid length. [ 392.745826][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3256'. [ 392.823308][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.856114][T18164] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3256'. [ 392.869099][T18164] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3256'. [ 392.918756][T17853] veth0_vlan: entered promiscuous mode [ 392.947612][T17853] veth1_vlan: entered promiscuous mode [ 393.056049][T17853] veth0_macvtap: entered promiscuous mode [ 393.087390][T17853] veth1_macvtap: entered promiscuous mode [ 393.151514][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.182549][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.241227][T15917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.271888][T15917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.322327][T15917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.337408][T15917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.599926][T18197] syzkaller0: entered promiscuous mode [ 393.615369][T18197] syzkaller0: entered allmulticast mode [ 393.634812][T18215] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 393.743554][T15918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.801291][T15918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.841676][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.849840][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.885208][T18225] sit1: entered promiscuous mode [ 393.892054][T18225] sit1: entered allmulticast mode [ 394.014808][ T5825] Bluetooth: hci2: command tx timeout [ 394.245045][T18234] netlink: 'syz.1.3273': attribute type 1 has an invalid length. [ 394.586147][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.602929][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.611238][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.619375][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.627711][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.153087][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 396.185952][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 396.231921][T18251] netlink: 'syz.0.3278': attribute type 1 has an invalid length. [ 396.479002][T18266] sctp: [Deprecated]: syz.0.3281 (pid 18266) Use of int in maxseg socket option. [ 396.479002][T18266] Use struct sctp_assoc_value instead [ 396.658956][ T5828] Bluetooth: hci4: command tx timeout [ 396.730770][T18241] lo speed is unknown, defaulting to 1000 [ 396.866535][T18283] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 396.883305][T18283] bond2: entered promiscuous mode [ 396.888402][T18283] bond2: entered allmulticast mode [ 396.895307][T18283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.915388][T18282] pim6reg: entered allmulticast mode [ 396.924016][T18287] pim6reg: left allmulticast mode [ 396.974376][T18289] xt_l2tp: invalid flags combination: 0 [ 397.080996][T18289] delete_channel: no stack [ 397.174905][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3288'. [ 397.196434][T18294] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 397.213980][T18294] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3288'. [ 397.505682][T18313] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3295'. [ 397.624346][T18318] ipvlan2: entered allmulticast mode [ 397.629769][T18318] batadv_slave_1: entered allmulticast mode [ 397.639832][T18318] batman_adv: batadv0: Adding interface: ipvlan2 [ 397.646290][T18318] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.675968][T18318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.710679][T18318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.728364][T18318] batman_adv: batadv0: Interface activated: ipvlan2 [ 397.776043][T18319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3297'. [ 397.787558][T18241] chnl_net:caif_netlink_parms(): no params data found [ 397.972377][T18336] netlink: 'syz.3.3299': attribute type 2 has an invalid length. [ 397.981841][T18241] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.989630][T18336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3299'. [ 397.999073][T18241] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.008553][T18241] bridge_slave_0: entered allmulticast mode [ 398.017915][T18241] bridge_slave_0: entered promiscuous mode [ 398.046144][T18241] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.053639][T18241] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.061943][T18241] bridge_slave_1: entered allmulticast mode [ 398.069975][T18241] bridge_slave_1: entered promiscuous mode [ 398.146008][T18241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.162138][T18241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.258407][T18241] team0: Port device team_slave_0 added [ 398.267606][T18241] team0: Port device team_slave_1 added [ 398.309870][T18241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.339125][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.366353][T18241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.379739][T18241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.451555][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.552360][T18241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.719639][T18241] hsr_slave_0: entered promiscuous mode [ 398.726686][T18241] hsr_slave_1: entered promiscuous mode [ 398.732664][ T5828] Bluetooth: hci4: command tx timeout [ 398.743130][T18241] debugfs: 'hsr0' already exists in 'hsr' [ 398.749001][T18241] Cannot create hsr debugfs directory [ 398.797587][T18367] netlink: 'syz.2.3311': attribute type 1 has an invalid length. [ 398.847648][T18367] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.3311'. [ 399.465549][T18241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.483300][T18241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 399.561580][T18394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.595312][T18385] netlink: 'syz.2.3317': attribute type 25 has an invalid length. [ 399.614832][T18385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3317'. [ 399.702348][T18241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.744718][T18241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 399.871734][T18399] syzkaller0: entered promiscuous mode [ 399.878265][T18399] syzkaller0: entered allmulticast mode [ 399.978376][T18241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.992294][T18241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 400.247916][T18428] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3332'. [ 400.811667][ T5828] Bluetooth: hci4: command tx timeout [ 401.593028][T18241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.606286][T18241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 401.937223][T18241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.974526][T18241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.983367][T18445] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 402.015407][T18241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.070715][T18241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.172427][T18467] __nla_validate_parse: 1 callbacks suppressed [ 402.172447][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3342'. [ 402.374123][T18241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.425046][T18241] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.461068][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.468334][T15919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.554867][T15920] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.562117][T15920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.682137][T18488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3347'. [ 402.693313][T18241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.780787][T18494] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3349'. [ 402.890725][ T5828] Bluetooth: hci4: command tx timeout [ 402.896383][T18498] x_tables: duplicate underflow at hook 3 [ 403.011190][T18503] openvswitch: netlink: IPv4 tunnel dst address is zero [ 403.044910][T18512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3352'. [ 403.105907][T18501] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3351'. [ 403.271980][T18241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.478898][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3359'. [ 403.496095][T18535] xfrm1: entered promiscuous mode [ 403.504054][T18535] xfrm1: entered allmulticast mode [ 403.512323][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3359'. [ 403.724867][T18241] veth0_vlan: entered promiscuous mode [ 403.745319][T18241] veth1_vlan: entered promiscuous mode [ 403.787187][T18241] veth0_macvtap: entered promiscuous mode [ 403.805734][T18241] veth1_macvtap: entered promiscuous mode [ 403.833229][T18241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.846920][T18241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.865437][T15915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.879517][T15915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.891036][T15915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.906012][T15915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.927963][T18501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.152110][T15917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.183481][T18565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3365'. [ 406.194037][T15917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.269654][T18563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.291829][T18565] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.299518][T18565] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.338438][T15917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.350546][T15917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.534249][T18578] netlink: 'syz.4.3274': attribute type 13 has an invalid length. [ 406.560937][T18578] veth0_macvtap: left promiscuous mode [ 406.575337][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 406.584569][T18578] macvtap0: entered allmulticast mode [ 406.594313][T18578] macvtap0: refused to change device tx_queue_len [ 406.622121][T18580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 406.742821][T18585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.744887][T18561] lo speed is unknown, defaulting to 1000 [ 407.045521][T18595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.052079][T18595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 407.070004][T18595] netlink: 'syz.2.3376': attribute type 20 has an invalid length. [ 407.080634][T18597] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 407.088592][T18597] netlink: 'syz.0.3377': attribute type 2 has an invalid length. [ 407.097034][T18597] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 407.107771][T18597] netlink: 'syz.0.3377': attribute type 3 has an invalid length. [ 407.123846][T18595] netlink: 'syz.2.3376': attribute type 20 has an invalid length. [ 407.132548][T15919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.141874][T15919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.153752][T15919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.173352][T15919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.219077][T18600] __nla_validate_parse: 6 callbacks suppressed [ 407.219097][T18600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3378'. [ 407.349924][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 407.464080][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3384'. [ 407.473331][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 407.634758][T18623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3385'. [ 407.792447][T18631] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3389'. [ 407.833591][T18632] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3389'. [ 407.852167][T18634] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 407.878297][T18634] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3390'. [ 407.900275][T18634] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3390'. [ 407.926861][T18634] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3390'. [ 410.184755][T18672] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 410.304083][T18680] delete_channel: no stack [ 410.822768][T18699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.855526][T18706] netlink: 'syz.4.3411': attribute type 1 has an invalid length. [ 410.979282][T18711] netlink: 'syz.3.3414': attribute type 23 has an invalid length. [ 411.358488][T18721] ieee802154 phy1 wpan1: encryption failed: -22 [ 412.259963][T18776] __nla_validate_parse: 9 callbacks suppressed [ 412.259983][T18776] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3435'. [ 412.293386][T18775] netlink: 'syz.0.3436': attribute type 2 has an invalid length. [ 412.322410][T18772] tipc: Started in network mode [ 412.327350][T18772] tipc: Node identity 6238fde03ac, cluster identity 4711 [ 412.355524][T18772] tipc: Enabled bearer , priority 0 [ 412.424099][T18772] syzkaller0: entered promiscuous mode [ 412.429806][T18772] syzkaller0: entered allmulticast mode [ 412.436411][T18772] tipc: Resetting bearer [ 412.456067][T18788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3438'. [ 412.476270][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 412.568827][T18769] tipc: Resetting bearer [ 414.326073][T18769] tipc: Disabling bearer [ 414.369359][T12088] tipc: Node number set to 1492712928 [ 414.762521][T18846] syzkaller0: entered promiscuous mode [ 414.778959][T18846] syzkaller0: entered allmulticast mode [ 414.926770][T18862] netlink: zone id is out of range [ 414.941649][T18862] netlink: del zone limit has 4 unknown bytes [ 414.951227][T18862] netlink: zone id is out of range [ 414.959235][T18862] netlink: del zone limit has 4 unknown bytes [ 415.039341][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'. [ 415.177931][T18864] bond3: entered promiscuous mode [ 415.189137][T18864] bond3: entered allmulticast mode [ 415.195559][T18864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.413711][T18892] vlan3: entered allmulticast mode [ 415.419102][T18892] hsr0: entered allmulticast mode [ 415.426468][T18892] hsr_slave_0: entered allmulticast mode [ 415.438005][T18892] hsr_slave_1: entered allmulticast mode [ 415.631030][T18906] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 415.674338][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3475'. [ 415.687520][T18910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.738685][T18913] IPv6: addrconf: prefix option has invalid lifetime [ 415.745498][T18913] IPv6: addrconf: prefix option has invalid lifetime [ 416.105674][T18934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3481'. [ 416.145735][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 416.249472][T18932] syzkaller0: entered promiscuous mode [ 416.255940][T18932] syzkaller0: entered allmulticast mode [ 416.567318][T18964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3493'. [ 416.621020][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 416.995371][T18937] lo speed is unknown, defaulting to 1000 [ 417.092797][T18984] syzkaller1: entered promiscuous mode [ 417.098401][T18984] syzkaller1: entered allmulticast mode [ 417.288561][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3500'. [ 417.300909][T18990] sctp: [Deprecated]: syz.3.3500 (pid 18990) Use of int in max_burst socket option deprecated. [ 417.300909][T18990] Use struct sctp_assoc_value instead [ 417.313562][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 417.417979][T18988] smc: removing ib device syz0 [ 417.519497][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 417.551277][T18997] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3502'. [ 417.915106][T19010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3507'. [ 418.038285][T19014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3506'. [ 418.166874][T19008] raw_sendmsg: syz.3.3505 forgot to set AF_INET. Fix it! [ 418.346103][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 418.587105][T19029] openvswitch: netlink: IP tunnel TTL not specified. [ 418.675861][T19031] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3511'. [ 419.322240][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'. [ 420.389323][T19072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3521'. [ 420.447232][T19072] netlink: 'syz.1.3521': attribute type 1 has an invalid length. [ 421.212965][T19087] netlink: 'syz.3.3525': attribute type 9 has an invalid length. [ 421.221627][T19087] netlink: 'syz.3.3525': attribute type 11 has an invalid length. [ 421.229492][T19087] netlink: 'syz.3.3525': attribute type 12 has an invalid length. [ 421.475578][T19092] netlink: 'syz.1.3526': attribute type 3 has an invalid length. [ 421.806620][T19105] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 422.783070][T19149] __nla_validate_parse: 10 callbacks suppressed [ 422.783092][T19149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3545'. [ 423.272419][T19171] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3554'. [ 423.314684][T19180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.357374][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3556'. [ 423.423622][T19181] bridge_slave_1: left allmulticast mode [ 423.481940][T19181] bridge_slave_1: left promiscuous mode [ 423.487805][T19181] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.533475][T19192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.559930][T19181] bridge_slave_0: left allmulticast mode [ 423.567405][T19181] bridge_slave_0: left promiscuous mode [ 423.589713][T19181] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.607084][T19195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3559'. [ 423.622176][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 423.633120][T19196] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 423.991072][T19212] syzkaller0: entered promiscuous mode [ 424.033352][T19212] syzkaller0: entered allmulticast mode [ 424.046480][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 424.295722][T19236] nbd: couldn't find a device at index 0 [ 424.376307][T19238] bond2: option fail_over_mac: invalid value (16) [ 424.386017][T19238] bond2 (unregistering): Released all slaves [ 424.430360][T19236] gtp0: entered promiscuous mode [ 424.435614][T19236] gtp0: entered allmulticast mode [ 424.471267][T19238] netlink: 'syz.3.3571': attribute type 3 has an invalid length. [ 424.621484][T19252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3574'. [ 424.685170][T19254] syz.3.3576 uses old SIOCAX25GETINFO [ 424.744427][T19257] bond4 (unregistering): Released all slaves [ 424.795796][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 424.851294][T19265] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3579'. [ 425.259742][T19276] ip6gre1: entered allmulticast mode [ 425.563750][T19304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3594'. [ 425.676043][T19300] netlink: 'syz.0.3593': attribute type 3 has an invalid length. [ 426.591282][T19355] netlink: 'syz.3.3607': attribute type 5 has an invalid length. [ 426.622561][T19355] geneve2: entered promiscuous mode [ 426.628714][T19355] geneve2: entered allmulticast mode [ 426.639601][T15920] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 426.676836][T15920] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 426.703593][T15920] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 426.734737][T15920] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 426.888683][T19360] tipc: Started in network mode [ 426.896703][T19360] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 426.913021][T19360] tipc: Enabling of bearer rejected, failed to enable media [ 427.358296][T19387] tipc: Started in network mode [ 427.363554][T19387] tipc: Node identity 5e9645daedb2, cluster identity 4711 [ 427.371785][T19387] tipc: Enabled bearer , priority 0 [ 427.382891][T19387] syzkaller0: entered promiscuous mode [ 427.400972][T19387] syzkaller0: entered allmulticast mode [ 427.436533][T19387] tipc: Resetting bearer [ 427.446108][T19386] tipc: Resetting bearer [ 427.475583][T19386] tipc: Disabling bearer [ 427.877093][T19418] __nla_validate_parse: 9 callbacks suppressed [ 427.877115][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3626'. [ 427.998325][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 428.063216][T19428] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3627'. [ 428.262337][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3631'. [ 428.283686][T19445] netlink: 'syz.3.3633': attribute type 10 has an invalid length. [ 428.421862][T19450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 428.513679][T19462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.995201][T19497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3647'. [ 429.034533][T19498] netlink: 'syz.1.3649': attribute type 5 has an invalid length. [ 429.047525][T19498] netlink: 'syz.1.3649': attribute type 1 has an invalid length. [ 429.060206][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3649'. [ 429.146171][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 429.330710][T19510] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 429.544568][T19523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.667465][T19526] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3657'. [ 429.874644][T19538] netlink: 'syz.0.3658': attribute type 62 has an invalid length. [ 429.903323][T19540] netlink: 'syz.2.3661': attribute type 83 has an invalid length. [ 429.932310][T19544] netlink: 'syz.2.3661': attribute type 83 has an invalid length. [ 430.133113][T19549] team0: entered promiscuous mode [ 430.138227][T19549] team_slave_0: entered promiscuous mode [ 430.156694][T19549] team_slave_1: entered promiscuous mode [ 430.175762][T19549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 430.199426][T19554] tipc: Enabled bearer , priority 11 [ 430.224040][T19555] wireguard0: entered promiscuous mode [ 430.229835][T19555] wireguard0: entered allmulticast mode [ 430.240509][T19555] team0: Device wireguard0 is of different type [ 430.636223][T19568] netlink: 'syz.0.3669': attribute type 3 has an invalid length. [ 430.881455][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 430.956375][T19580] lo: entered promiscuous mode [ 430.964933][T19580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.139691][T19584] netlink: 'syz.2.3676': attribute type 1 has an invalid length. [ 431.175837][T19591] delete_channel: no stack [ 431.188824][T19584] netlink: 'syz.2.3676': attribute type 1 has an invalid length. [ 431.310783][ T9] tipc: Node number set to 1 [ 431.339363][T19602] netlink: 'syz.0.3680': attribute type 2 has an invalid length. [ 431.353000][T19601] dvmrp6: entered allmulticast mode [ 431.394185][T19602] 9: entered promiscuous mode [ 431.418464][T19601] netlink: 'syz.1.3681': attribute type 1 has an invalid length. [ 431.883056][T19626] bridge_slave_0: left allmulticast mode [ 431.888851][T19626] bridge_slave_0: left promiscuous mode [ 431.895189][T19626] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.967917][T19626] bridge_slave_1: left allmulticast mode [ 431.989915][T19626] bridge_slave_1: left promiscuous mode [ 431.997196][T19626] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.077413][T19626] bond0: (slave bond_slave_0): Releasing backup interface [ 432.189318][T19626] bond0: (slave bond_slave_1): Releasing backup interface [ 432.250869][T19626] team0: Port device team_slave_0 removed [ 432.313502][T19626] team0: Port device team_slave_1 removed [ 432.352879][T19626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.430530][T19626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.465990][T19626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.537363][T19626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.569706][T19626] tipc: Resetting bearer [ 432.660005][T19626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.010962][T19647] __nla_validate_parse: 4 callbacks suppressed [ 433.010982][T19647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3691'. [ 433.460742][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3696'. [ 433.940939][T19665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 433.950681][T19665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 434.007183][T19691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.068401][T19691] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 434.127177][T19694] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 434.359249][T19697] netlink: 'syz.2.3706': attribute type 1 has an invalid length. [ 434.408567][T19697] bond2: entered promiscuous mode [ 434.428845][T19471] Set syz1 is full, maxelem 65536 reached [ 434.452708][T19697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.618456][T19719] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 434.781990][T19731] netlink: 'syz.2.3716': attribute type 4 has an invalid length. [ 434.986645][T15919] bridge_slave_0: left promiscuous mode [ 434.993947][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.305351][T15919] bond1 (unregistering): (slave bridge2): Removing an active aggregator [ 435.314976][T15919] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 435.323175][T15919] bond1 (unregistering): (slave bridge2): the permanent HWaddr of slave - 5a:84:44:72:2c:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 435.394987][T15919] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 435.607403][T15919] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 435.616762][T15919] bridge8 (unregistering): left promiscuous mode [ 435.656162][T15919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.671609][T15919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.682017][T15919] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 435.697284][T15919] bond0 (unregistering): Released all slaves [ 435.708310][T15919] bond1 (unregistering): Released all slaves [ 435.723536][T15919] bond2 (unregistering): Released all slaves [ 435.738217][T15919] bond3 (unregistering): Released all slaves [ 435.754478][T15919] bond4 (unregistering): Released all slaves [ 435.770004][T15919] bond5 (unregistering): Released all slaves [ 435.799231][T15919] bond6 (unregistering): Released all slaves [ 435.925721][T15919] tipc: Disabling bearer [ 435.939875][T15919] tipc: Left network mode [ 437.143050][T15919] hsr_slave_1: left promiscuous mode [ 437.160206][T15919] pimreg (unregistering): left allmulticast mode [ 437.268739][T15919] team0 (unregistering): Port device team_slave_1 removed [ 437.286766][T15919] team0 (unregistering): Port device team_slave_0 removed [ 437.435794][T19706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.446337][T19716] netlink: 'syz.4.3712': attribute type 1 has an invalid length. [ 437.468932][T19716] netlink: 'syz.4.3712': attribute type 3 has an invalid length. [ 437.493698][T19716] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3712'. [ 437.518916][T19716] NCSI netlink: No device for ifindex 813332851 [ 437.765276][T19751] tipc: Started in network mode [ 437.785583][T19751] tipc: Node identity 2a77d9db454a, cluster identity 4711 [ 437.819386][T19751] tipc: Enabled bearer , priority 0 [ 437.881437][T19756] syzkaller0: entered promiscuous mode [ 437.917055][T19756] syzkaller0: entered allmulticast mode [ 437.939906][T19764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.952246][T19764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.963123][T19764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.976867][T19764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.052744][T15919] IPVS: stop unused estimator thread 0... [ 438.183166][T19751] tipc: Resetting bearer [ 438.266370][T19751] tipc: Disabling bearer [ 438.394323][T19786] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3727'. [ 438.500637][T19792] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3730'. [ 438.590345][T19792] tap0: tun_chr_ioctl cmd 1074025678 [ 438.606931][T19792] tap0: group set to 0 [ 438.806955][T19805] syzkaller0: entered promiscuous mode [ 438.813166][T19805] syzkaller0: entered allmulticast mode [ 439.408906][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 439.460669][T19846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3749'. [ 440.010549][T19877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3757'. [ 440.105628][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.185958][T19883] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 440.209597][T19887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.245767][T19883] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 440.428786][T19906] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 440.631462][T19916] delete_channel: no stack [ 440.684309][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3769'. [ 440.698381][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 440.708697][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 440.737962][T19920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3771'. [ 440.737962][T19921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3771'. [ 440.783707][T19926] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.803163][T19926] bond6: (slave lo): Enslaving as an active interface with an up link [ 440.821232][T19926] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 440.851801][T19927] syzkaller1: entered promiscuous mode [ 440.864155][T19927] syzkaller1: entered allmulticast mode [ 440.903811][T19927] netlink: 'syz.2.3772': attribute type 4 has an invalid length. [ 441.562714][T19958] sctp: [Deprecated]: syz.4.3781 (pid 19958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.562714][T19958] Use struct sctp_sack_info instead [ 441.606112][T19957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.734733][T19968] openvswitch: netlink: Multiple metadata blocks provided [ 442.358603][T20006] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 442.554425][T19993] netlink: 'syz.4.3792': attribute type 16 has an invalid length. [ 442.580295][T19993] netlink: 'syz.4.3792': attribute type 17 has an invalid length. [ 442.804768][T19993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.988206][T20031] syzkaller0: entered promiscuous mode [ 443.000318][T20031] syzkaller0: entered allmulticast mode [ 443.184754][T20043] netlink: 'syz.1.3804': attribute type 3 has an invalid length. [ 443.339755][T20054] netlink: 'syz.3.3809': attribute type 3 has an invalid length. [ 443.424633][T20057] unsupported nlmsg_type 40 [ 443.488946][T20059] __nla_validate_parse: 7 callbacks suppressed [ 443.488966][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3810'. [ 443.520457][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'. [ 443.699129][T20068] xt_CT: No such helper "syz1" [ 443.703233][T20072] netlink: 'syz.1.3813': attribute type 10 has an invalid length. [ 443.725877][T20072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3813'. [ 443.750810][T20076] smc: net device team0 applied user defined pnetid SYZ2 [ 443.760283][T20072] dummy0: entered promiscuous mode [ 443.766363][T20072] bridge0: port 3(dummy0) entered blocking state [ 443.864205][T20072] bridge0: port 3(dummy0) entered disabled state [ 443.960163][T20072] dummy0: entered allmulticast mode [ 445.324797][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3822'. [ 445.334692][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3822'. [ 445.610791][T20128] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3828'. [ 445.717176][T20132] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 445.920925][T20145] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20004 [ 446.006212][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3836'. [ 446.521555][T20174] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 446.572633][T20173] netlink: 'syz.4.3842': attribute type 1 has an invalid length. [ 446.581808][T20173] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3842'. [ 446.605731][T20173] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3842'. [ 446.640998][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 446.658685][T20173] syzkaller0: entered promiscuous mode [ 446.666102][T20173] syzkaller0: entered allmulticast mode [ 446.703164][T20173] tipc: Enabled bearer , priority 0 [ 446.714768][T20179] syzkaller1: entered promiscuous mode [ 446.734293][T20179] syzkaller1: entered allmulticast mode [ 446.747413][T20171] tipc: Resetting bearer [ 446.824723][T20171] tipc: Disabling bearer [ 447.220485][T20202] syzkaller0: entered promiscuous mode [ 447.226021][T20202] syzkaller0: entered allmulticast mode [ 447.431101][T20215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.105695][T20249] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 448.501820][T20278] hsr_slave_0 (unregistering): left promiscuous mode [ 448.623297][T20288] pim6reg: entered allmulticast mode [ 448.657101][T20288] pim6reg: left allmulticast mode [ 448.788008][T20294] tunl0: entered promiscuous mode [ 448.805863][T20294] netlink: 'syz.1.3880': attribute type 3 has an invalid length. [ 448.816369][T20294] __nla_validate_parse: 4 callbacks suppressed [ 448.816388][T20294] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3880'. [ 448.954477][T20305] Bluetooth: MGMT ver 1.23 [ 449.138646][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'. [ 449.186317][T12083] hid-generic 0005:0006:5504.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 449.238071][T20326] netlink: 'syz.1.3891': attribute type 142 has an invalid length. [ 449.394049][T20331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3893'. [ 449.420280][T20331] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 449.449075][T20335] netlink: 'syz.4.3895': attribute type 1 has an invalid length. [ 449.526225][T20335] bond2: entered promiscuous mode [ 449.545456][T20335] bond2: entered allmulticast mode [ 449.557246][T20335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.655487][T20347] syzkaller1: entered promiscuous mode [ 449.680219][T20347] syzkaller1: entered allmulticast mode [ 449.740573][T20351] xt_hashlimit: size too large, truncated to 1048576 [ 449.868503][T20360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.923541][T20364] netlink: 'syz.4.3904': attribute type 10 has an invalid length. [ 450.016048][T20364] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 450.046793][T20371] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 450.260842][T15920] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.290738][T15920] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.302909][T15920] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.341630][T20387] pimreg: entered allmulticast mode [ 450.372832][T15920] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.937841][T20427] netlink: 'syz.0.3923': attribute type 10 has an invalid length. [ 450.956743][T20427] : entered promiscuous mode [ 451.246577][T20447] netlink: 'syz.2.3929': attribute type 33 has an invalid length. [ 451.257829][T20447] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3929'. [ 451.274124][T20447] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3929'. [ 451.389472][T20449] netlink: 'syz.1.3931': attribute type 9 has an invalid length. [ 451.623207][T20472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3936'. [ 451.623625][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 451.675844][T20472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3936'. [ 451.829628][T20488] delete_channel: no stack [ 451.868834][T20484] bond3: Unable to set up delay as MII monitoring is disabled [ 451.914290][T20484] bond3 (unregistering): Released all slaves [ 452.252574][T20509] netlink: 'syz.2.3946': attribute type 1 has an invalid length. [ 452.531558][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'. [ 452.678242][T20532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3954'. [ 453.019485][T20545] pimreg3: entered allmulticast mode [ 453.025447][T15915] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.045512][T15915] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.105443][T15915] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.119593][T15915] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.139007][T15915] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.158499][T15915] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.178664][T15915] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.198378][T15915] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.230398][T20551] netlink: 'syz.4.3959': attribute type 1 has an invalid length. [ 453.238343][T20551] netlink: 'syz.4.3959': attribute type 2 has an invalid length. [ 453.334717][T20555] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 453.349780][T20555] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 453.643059][T20573] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 453.761236][T20583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.099694][T20599] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 2, id = 0 [ 454.412645][T20616] __nla_validate_parse: 3 callbacks suppressed [ 454.412666][T20616] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3978'. [ 454.518092][T20616] bond4 (unregistering): Released all slaves [ 454.577111][T20631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3980'. [ 454.586643][T20630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3980'. [ 454.630961][T20634] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 454.737437][T20637] validate_nla: 2 callbacks suppressed [ 454.737459][T20637] netlink: 'syz.1.3981': attribute type 21 has an invalid length. [ 454.891971][T20646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.985482][T20646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.074997][T20639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.099997][T20656] gre0: entered promiscuous mode [ 455.105906][T20639] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.112854][T20656] gre0: entered allmulticast mode [ 455.140189][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 455.504005][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3992'. [ 456.172572][ T5894] IPVS: starting estimator thread 0... [ 456.270182][T20704] IPVS: using max 31 ests per chain, 74400 per kthread [ 456.623316][T20716] netlink: 'syz.2.4005': attribute type 1 has an invalid length. [ 456.631644][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4005'. [ 458.441430][T20672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.610769][T20723] netlink: 'syz.2.4008': attribute type 16 has an invalid length. [ 458.618833][T20723] netlink: 'syz.2.4008': attribute type 17 has an invalid length. [ 458.648708][T20723] gre0: left promiscuous mode [ 458.673279][T20723] gre0: left allmulticast mode [ 458.683108][T20731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 458.730973][T20723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.742635][T20723] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.755241][T20723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.854338][T20737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4013'. [ 459.077376][T20744] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4015'. [ 459.199150][T20751] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4017'. [ 459.284663][T20753] nbd: couldn't find a device at index 0 [ 459.597620][T20761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4020'. [ 459.637045][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4020'. [ 460.163300][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4025'. [ 460.192421][T20772] sctp: [Deprecated]: syz.0.4024 (pid 20772) Use of int in max_burst socket option deprecated. [ 460.192421][T20772] Use struct sctp_assoc_value instead [ 460.283884][T20778] netlink: 'syz.3.4027': attribute type 12 has an invalid length. [ 460.333820][T20782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.365269][T20782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.421172][T20789] ip6_vti0: entered promiscuous mode [ 460.433016][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'. [ 460.480693][T20787] block nbd3: server does not support multiple connections per device. [ 460.504639][T20787] block nbd3: shutting down sockets [ 460.514794][T20782] netlink: 'syz.1.4025': attribute type 2 has an invalid length. [ 460.530812][T20782] netlink: 'syz.1.4025': attribute type 8 has an invalid length. [ 460.560633][T20782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4025'. [ 460.705271][T20800] sctp: [Deprecated]: syz.4.4032 (pid 20800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.705271][T20800] Use struct sctp_sack_info instead [ 461.165931][T20815] netlink: 'syz.1.4036': attribute type 4 has an invalid length. [ 461.310901][T20829] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4040'. [ 461.324663][T20829] netlink: 'syz.1.4040': attribute type 4 has an invalid length. [ 461.456703][T20841] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4043'. [ 461.503226][T20842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4042'. [ 461.586170][T20847] netlink: 'syz.0.4045': attribute type 13 has an invalid length. [ 461.600279][T20846] netlink: 'syz.0.4045': attribute type 13 has an invalid length. [ 461.639312][T20851] netlink: 'syz.3.4047': attribute type 3 has an invalid length. [ 461.818144][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4048'. [ 461.965625][T20848] syzkaller1: entered promiscuous mode [ 461.976192][T20848] syzkaller1: entered allmulticast mode [ 462.242626][T20881] veth0: entered promiscuous mode [ 462.301303][T20880] veth0: left promiscuous mode [ 462.326086][T20887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4055'. [ 462.360327][T20887] netlink: 'syz.2.4055': attribute type 33 has an invalid length. [ 462.370668][T20890] lo: Caught tx_queue_len zero misconfig [ 462.547909][T20887] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 462.559916][T20887] bond3 (unregistering): Released all slaves [ 462.602823][T20896] bridge0: entered promiscuous mode [ 462.608216][T20896] macsec1: entered promiscuous mode [ 462.630260][T20896] macsec1: entered allmulticast mode [ 462.646558][T20896] bridge0: entered allmulticast mode [ 462.660514][T20896] bridge0: port 3(macsec1) entered blocking state [ 462.667447][T20896] bridge0: port 3(macsec1) entered disabled state [ 462.679947][T20896] bridge0: left allmulticast mode [ 462.687275][T20896] bridge0: left promiscuous mode [ 463.074937][T20925] gtp0: entered promiscuous mode [ 463.085945][T20925] gtp0: entered allmulticast mode [ 463.641742][T20973] netlink: 'syz.0.4083': attribute type 10 has an invalid length. [ 464.125091][T20992] ip6t_REJECT: ECHOREPLY is not supported [ 464.234359][T20989] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 464.282915][T20990] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 464.386420][T21006] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 464.662331][T21021] __nla_validate_parse: 14 callbacks suppressed [ 464.662354][T21021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4101'. [ 464.759795][T21026] sctp: [Deprecated]: syz.1.4103 (pid 21026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.759795][T21026] Use struct sctp_sack_info instead [ 464.825215][T21025] bond2: entered promiscuous mode [ 464.860221][T21025] bond2: entered allmulticast mode [ 464.894507][T21025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.976371][T21038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4107'. [ 465.212950][T21056] [ 465.215345][T21056] ====================================================== [ 465.222404][T21056] WARNING: possible circular locking dependency detected [ 465.229480][T21056] syzkaller #0 Not tainted [ 465.233937][T21056] ------------------------------------------------------ [ 465.240993][T21056] syz.0.4107/21056 is trying to acquire lock: [ 465.247087][T21056] ffff888055af0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xb5/0x1410 [ 465.256905][T21056] [ 465.256905][T21056] but task is already holding lock: [ 465.264310][T21056] ffffffff8fbc12b0 (dev_addr_sem){++++}-{4:4}, at: do_setlink+0x806/0x4590 [ 465.272990][T21056] [ 465.272990][T21056] which lock already depends on the new lock. [ 465.272990][T21056] [ 465.283417][T21056] [ 465.283417][T21056] the existing dependency chain (in reverse order) is: [ 465.292451][T21056] [ 465.292451][T21056] -> #2 (dev_addr_sem){++++}-{4:4}: [ 465.299861][T21056] down_read+0x47/0x2e0 [ 465.304654][T21056] address_show+0x25/0x250 [ 465.309646][T21056] dev_attr_show+0x58/0xc0 [ 465.314602][T21056] sysfs_kf_seq_show+0x310/0x490 [ 465.320085][T21056] seq_read_iter+0x4ef/0xe10 [ 465.325229][T21056] vfs_read+0x582/0xa70 [ 465.329929][T21056] ksys_read+0x150/0x270 [ 465.334709][T21056] do_syscall_64+0x14d/0xf80 [ 465.339848][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.346300][T21056] [ 465.346300][T21056] -> #1 (kn->active#13){++++}-{0:0}: [ 465.353800][T21056] kernfs_drain+0x284/0x600 [ 465.358852][T21056] __kernfs_remove+0x3cf/0x660 [ 465.364162][T21056] kernfs_remove_by_name_ns+0xaf/0x130 [ 465.370175][T21056] sysfs_remove_group+0xfc/0x2e0 [ 465.375662][T21056] sysfs_remove_groups+0x54/0xb0 [ 465.381145][T21056] device_remove_attrs+0x229/0x280 [ 465.386804][T21056] device_del+0x51f/0x8f0 [ 465.391767][T21056] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 465.398736][T21056] unregister_netdevice_queue+0x31f/0x360 [ 465.405001][T21056] _cfg80211_unregister_wdev+0x155/0x570 [ 465.411180][T21056] ieee80211_remove_interfaces+0x49c/0x6d0 [ 465.417533][T21056] ieee80211_unregister_hw+0x5d/0x2c0 [ 465.423481][T21056] mac80211_hwsim_del_radio+0x28a/0x490 [ 465.429563][T21056] mac80211_hwsim_netlink_notify+0xfae/0x1310 [ 465.436171][T21056] notifier_call_chain+0x1be/0x400 [ 465.441846][T21056] blocking_notifier_call_chain+0x6a/0x90 [ 465.448116][T21056] netlink_release+0x123b/0x1ad0 [ 465.453597][T21056] sock_close+0xc3/0x240 [ 465.458653][T21056] __fput+0x44f/0xa70 [ 465.463191][T21056] task_work_run+0x1d9/0x270 [ 465.468412][T21056] get_signal+0x11eb/0x1330 [ 465.473462][T21056] arch_do_signal_or_restart+0xbc/0x830 [ 465.479641][T21056] exit_to_user_mode_loop+0x86/0x480 [ 465.485472][T21056] do_syscall_64+0x32d/0xf80 [ 465.490620][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.497082][T21056] [ 465.497082][T21056] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 465.504862][T21056] __lock_acquire+0x15a5/0x2cf0 [ 465.510284][T21056] lock_acquire+0xf0/0x2e0 [ 465.515260][T21056] __mutex_lock+0x19f/0x1300 [ 465.520407][T21056] ieee80211_change_mac+0xb5/0x1410 [ 465.526168][T21056] netif_set_mac_address+0x317/0x4e0 [ 465.532017][T21056] do_setlink+0x9b1/0x4590 [ 465.536986][T21056] rtnl_newlink+0x15a9/0x1be0 [ 465.542215][T21056] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 465.547705][T21056] netlink_rcv_skb+0x232/0x4b0 [ 465.553049][T21056] netlink_unicast+0x80f/0x9b0 [ 465.558362][T21056] netlink_sendmsg+0x813/0xb40 [ 465.563754][T21056] ____sys_sendmsg+0xa68/0xad0 [ 465.569064][T21056] ___sys_sendmsg+0x2a5/0x360 [ 465.574304][T21056] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.579798][T21056] do_syscall_64+0x14d/0xf80 [ 465.584935][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.591370][T21056] [ 465.591370][T21056] other info that might help us debug this: [ 465.591370][T21056] [ 465.601614][T21056] Chain exists of: [ 465.601614][T21056] &rdev->wiphy.mtx --> kn->active#13 --> dev_addr_sem [ 465.601614][T21056] [ 465.614433][T21056] Possible unsafe locking scenario: [ 465.614433][T21056] [ 465.621904][T21056] CPU0 CPU1 [ 465.627316][T21056] ---- ---- [ 465.632779][T21056] lock(dev_addr_sem); [ 465.636973][T21056] lock(kn->active#13); [ 465.643769][T21056] lock(dev_addr_sem); [ 465.650473][T21056] lock(&rdev->wiphy.mtx); [ 465.655057][T21056] [ 465.655057][T21056] *** DEADLOCK *** [ 465.655057][T21056] [ 465.663217][T21056] 2 locks held by syz.0.4107/21056: [ 465.668482][T21056] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 465.677576][T21056] #1: ffffffff8fbc12b0 (dev_addr_sem){++++}-{4:4}, at: do_setlink+0x806/0x4590 [ 465.686666][T21056] [ 465.686666][T21056] stack backtrace: [ 465.692600][T21056] CPU: 0 UID: 0 PID: 21056 Comm: syz.0.4107 Not tainted syzkaller #0 PREEMPT(full) [ 465.692624][T21056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.692642][T21056] Call Trace: [ 465.692648][T21056] [ 465.692656][T21056] dump_stack_lvl+0xe8/0x150 [ 465.692684][T21056] print_circular_bug+0x2e1/0x300 [ 465.692714][T21056] check_noncircular+0x12e/0x150 [ 465.692741][T21056] __lock_acquire+0x15a5/0x2cf0 [ 465.692768][T21056] ? __lock_acquire+0x6b5/0x2cf0 [ 465.692794][T21056] lock_acquire+0xf0/0x2e0 [ 465.692813][T21056] ? ieee80211_change_mac+0xb5/0x1410 [ 465.692841][T21056] __mutex_lock+0x19f/0x1300 [ 465.692856][T21056] ? ieee80211_change_mac+0xb5/0x1410 [ 465.692882][T21056] ? ieee80211_change_mac+0xb5/0x1410 [ 465.692905][T21056] ? __pfx___mutex_lock+0x10/0x10 [ 465.692921][T21056] ? ib_device_get_by_netdev+0x480/0x4f0 [ 465.692945][T21056] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 465.692966][T21056] ? __pfx_hsr_netdev_notify+0x10/0x10 [ 465.692982][T21056] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 465.693001][T21056] ieee80211_change_mac+0xb5/0x1410 [ 465.693023][T21056] ? ip6_route_dev_notify+0x9a/0x5b0 [ 465.693043][T21056] ? notifier_call_chain+0x3da/0x400 [ 465.693072][T21056] netif_set_mac_address+0x317/0x4e0 [ 465.693100][T21056] ? __pfx_netif_set_mac_address+0x10/0x10 [ 465.693124][T21056] ? down_write+0x16d/0x200 [ 465.693142][T21056] ? do_setlink+0x99a/0x4590 [ 465.693166][T21056] do_setlink+0x9b1/0x4590 [ 465.693189][T21056] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.693211][T21056] ? __pfx_do_setlink+0x10/0x10 [ 465.693233][T21056] ? __lock_acquire+0x6b5/0x2cf0 [ 465.693271][T21056] ? __pfx___mutex_trylock_common+0x10/0x10 [ 465.693298][T21056] ? rcu_is_watching+0x15/0xb0 [ 465.693320][T21056] ? trace_contention_end+0x3d/0x150 [ 465.693346][T21056] ? __mutex_lock+0x319/0x1300 [ 465.693361][T21056] ? __pfx___nla_validate_parse+0x10/0x10 [ 465.693387][T21056] ? rtnl_newlink+0x8a1/0x1be0 [ 465.693409][T21056] ? __pfx___mutex_lock+0x10/0x10 [ 465.693427][T21056] ? full_name_hash+0x92/0xe0 [ 465.693453][T21056] rtnl_newlink+0x15a9/0x1be0 [ 465.693478][T21056] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.693497][T21056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.693531][T21056] ? kasan_quarantine_put+0xbb/0x1f0 [ 465.693547][T21056] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.693578][T21056] ? kmem_cache_free+0x187/0x630 [ 465.693595][T21056] ? nlmon_xmit+0xb0/0x100 [ 465.693624][T21056] ? __lock_acquire+0x6b5/0x2cf0 [ 465.693648][T21056] ? __local_bh_enable_ip+0xd0/0x130 [ 465.693670][T21056] ? lockdep_hardirqs_on+0x7a/0x110 [ 465.693694][T21056] ? __dev_queue_xmit+0x274/0x38a0 [ 465.693720][T21056] ? __local_bh_enable_ip+0xd0/0x130 [ 465.693739][T21056] ? __dev_queue_xmit+0x274/0x38a0 [ 465.693776][T21056] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.693796][T21056] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 465.693818][T21056] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 465.693837][T21056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.693855][T21056] ? ref_tracker_free+0x693/0x840 [ 465.693874][T21056] ? __copy_skb_header+0xa3/0x4a0 [ 465.693902][T21056] ? __pfx_ref_tracker_free+0x10/0x10 [ 465.693927][T21056] netlink_rcv_skb+0x232/0x4b0 [ 465.693947][T21056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.693968][T21056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.693992][T21056] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.694014][T21056] netlink_unicast+0x80f/0x9b0 [ 465.694035][T21056] ? __pfx_netlink_unicast+0x10/0x10 [ 465.694052][T21056] ? netlink_sendmsg+0x650/0xb40 [ 465.694070][T21056] ? skb_put+0x11b/0x210 [ 465.694094][T21056] netlink_sendmsg+0x813/0xb40 [ 465.694117][T21056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.694138][T21056] ? aa_sock_msg_perm+0xf1/0x1b0 [ 465.694158][T21056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.694176][T21056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.694195][T21056] ____sys_sendmsg+0xa68/0xad0 [ 465.694218][T21056] ? futex_unqueue+0x211/0x240 [ 465.694241][T21056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.694275][T21056] ? import_iovec+0x73/0xa0 [ 465.694300][T21056] ___sys_sendmsg+0x2a5/0x360 [ 465.694327][T21056] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.694354][T21056] ? futex_wait+0x29a/0x380 [ 465.694389][T21056] ? __fget_files+0x2a/0x420 [ 465.694412][T21056] ? __fget_files+0x3a0/0x420 [ 465.694439][T21056] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.694465][T21056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.694494][T21056] ? rcu_is_watching+0x15/0xb0 [ 465.694523][T21056] do_syscall_64+0x14d/0xf80 [ 465.694548][T21056] ? trace_irq_disable+0x3b/0x150 [ 465.694573][T21056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.694589][T21056] ? clear_bhb_loop+0x40/0x90 [ 465.694608][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.694630][T21056] RIP: 0033:0x7f909439c629 [ 465.694649][T21056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.694664][T21056] RSP: 002b:00007f90951b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.694682][T21056] RAX: ffffffffffffffda RBX: 00007f9094616090 RCX: 00007f909439c629 [ 465.694695][T21056] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 465.694706][T21056] RBP: 00007f9094432b39 R08: 0000000000000000 R09: 0000000000000000 [ 465.694716][T21056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.694726][T21056] R13: 00007f9094616128 R14: 00007f9094616090 R15: 00007fff601b4778 [ 465.694747][T21056] [ 466.255505][T21038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4107'. [ 466.264890][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'. [ 466.264926][T21056] netlink: 'syz.0.4107': attribute type 5 has an invalid length. [ 466.264942][T21056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4107'. [ 466.296281][T21038] bridge_slave_1: entered promiscuous mode [ 466.303028][T21038] bridge_slave_1: entered allmulticast mode [ 466.314340][T21056] geneve2: entered promiscuous mode [ 466.319601][T21056] geneve2: entered allmulticast mode [ 466.328013][T15915] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 466.342705][T15915] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 466.354748][T15915] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 466.365080][T15915] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 466.377525][T21057] base_sock_release(ffff88804ab95080) sk=ffff8880564de000