last executing test programs: 3.515454573s ago: executing program 4 (id=1939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff0008000340000000092c0000001e0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000639b8cabef62c919b493a312d9e91f4601000000000000000000fc83000a000000000000"], 0xc0}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r9, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000340)={'vcan0\x00', {0x2, 0x0, @dev}}) 3.176639533s ago: executing program 0 (id=1945): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x190010, r0, 0xeeaeb000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1, 0x0, 0x200000000000000}, 0x38) 3.021168309s ago: executing program 1 (id=1947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYRES8], 0xc0}, 0x1, 0x0, 0x0, 0x818}, 0x0) 2.976238412s ago: executing program 4 (id=1949): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="629ef49efe", 0x5}], 0x1}, 0x44006) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180), 0x43) (async, rerun: 32) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) 2.904533663s ago: executing program 0 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0xe, 0x2}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x9}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x200, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfffc, 0x3]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}]}}]}, 0xa8}}, 0x48004) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffd, 0x3, 0x8, 0x80}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x230, 0x0, 0x410, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7add}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x4}}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x4004) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$unix(0x1, 0x1, 0x0) 2.883102033s ago: executing program 2 (id=1951): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0xa}, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3f, &(0x7f0000000200)={@random="e72cc6da748a", @random="2ef40d2ab746", @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, 'n', "cc47d6", 0xdada, "d7198aa16babc24b938e3edb17cd6c9f32150bffe22397acbc5534c44fcf0a684826b7f965eb2e5604"}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r2, 0x79f70b28a21117bf, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000050) 2.868428103s ago: executing program 1 (id=1952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7}, {0x5, 0xb}}}, 0x24}}, 0x44010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.805086584s ago: executing program 3 (id=1953): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x808}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.796061526s ago: executing program 4 (id=1954): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa202, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'macvlan0\x00', 0x4000}) sendto(r2, &(0x7f00000001c0)="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", 0x141, 0x4044010, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x4, 0x1}}, 0x80) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000540)) r7 = socket(0xa, 0x3, 0x3a) close(r7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000020000000a00000008000300", @ANYRES32=r12, @ANYBLOB="10005000a07267037c9e"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r14, 0x11c, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="80a102000004000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES64=r13], 0x44}}, 0x0) 2.705106589s ago: executing program 2 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$qrtr(0x2a, 0x2, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0x80000000}, 0x20) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="aaa72ebe59724785cd", 0x9}, {&(0x7f0000000140)="8080cbcc0706c9d3144d8c3974bc7e89e127fb4ed5e5c4a87502717f4a3ef6d6ba8af068d16bce0da83f95f8f025c451baa17527f8beb465151798da2639a834b1ab3d652a8a39a936678a6e6c41540ff514c2145947f930d6b58313a9b9f3e96cc19aae0476a3d9f4e2eeecb70d426274c57c8679fb412544e491e7fe7a3398e7a24927276b3db0c95818ffd2c459109bf3f305f5320301ccee3cf1e288aefb564d5b6b7430f7bdc7ef9745eb1a5c8f49f6b09c0c3c079512a01728908f584eaf29c8f5750fecf7a937c2f14ba3069d7171f85fd4bf305e", 0xd8}, {&(0x7f0000000240)="847995d39df81a292766149d0ae1d5b86d5cbc9cbb052e9c0fe961e33b63348c9bbce6557934fa74de5328e1bc9ffcef2489ab96ebce54c4f8254e70803775394a34bab295bbd06aade968be0f842ae7f9322ee10fb3299698f0207615779d6be952e294d2f5", 0x66}, {&(0x7f00000002c0)="7aafa4b0f8236d2a0af50c094c3d9aa9e381e52ac9d11dc8a9aa68025e3b97c3ad52c11b623bedc23e8651f5f1ce803564e069cad489932b7be9dbaea57a86bd16dbc6b127b9823b0c842753fc5534736abc15ba9b89ac9a45764786266545c40050e37a5213", 0x66}, {&(0x7f0000000500)="bc4271792a18c0eec28f8690f6eafd9817f27d641bb464ce2aed701670fd476811bcef6acda88594ca318343632b717178f830c39ab00cecd758a1caddbee74bafd69519557bc7dd3363255dda95581361186f424ee7c0d4b147652ee94a17a1a1f159cd80462edd0385db554a41f8faf0fedb5941d1778c2a9e28558ecd9cff829e1a0090eb8d4db8c53a89508ebb41984445f2aed9f2ff52f366d09ab14ae3fb2bae4846e7b70ea96efe223fa93b9c92cd8c89170aa2afac54fa78560b918527334a29598a6ca871fb361ed4ba3701355c0c7fe23652a032ee11096a8183513f3b954f1aa27f7cca40dbc9c094a875b5b9d8fe39bb5ffea3664b2126f7", 0xfe}, {&(0x7f0000000600)="853c9ae8799e0bf981b930d527d0ecf2a5ae3314d81c36919c83687ee2a10ada7a6743e1a22e600f503155a858fbc29baaa391b4f5cff0d17bfadb5b63fe36cb899424b7a0a53ff0d9248f06cfa170faaa2ce374c0f0f8d4f02b15f42081736ff06165f3ebf3fcdc475a054612dba6faf0a1829675bb3dcafb2e13183c8c9b018d704d51a1a636bd89f1bcbb124631d220973429b852a2ebc3a6", 0x9a}], 0x6) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000980)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 2.605021387s ago: executing program 2 (id=1956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002dbd7000fedbdf250c0000000c009900ffffff7f1c0000000800370001000000080037000200000005000800020000007a51e7bfd3f46f7e8a517dd045d8e6eb54c7690ab3257c50d2024c1e3c186c88d840a61d7be4eb54ecc1fa0becbb2de682d6d40afe6991887613d6678c3752dfac6856891f0647e81089b0ec9542f42a5389eb63000daa5d3e6cbafbe62a1726ead47ba58d002b49556bfdaf47af126a533f8ef2fc310a"], 0x38}, 0x1, 0x0, 0x0, 0x24040004}, 0x40000) 2.60018511s ago: executing program 1 (id=1957): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbd725060800046efb9b4487969fcf00ffffffff0000fd00000000000002006021095431c22c50abfdec3b69f7ea11ad79bffb1e55d247dbe1157d1dbd8a332b7497834c3caf6fb57ad395a5dcd5978b505f58e044000888246cc4b2c2dfecf0958108aabf693dc0da2dd1d1fa024030065aaf534654c4b5cc37d94e67bb0b3218622c56f138e29d434d6d5f3906af6cec9cb5f8024a8b0ed066a664c7e4"], 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xc, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}}, 0x0) 2.495972361s ago: executing program 0 (id=1958): setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x48002) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.468862773s ago: executing program 3 (id=1959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x8c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@generic="7a7c09db63673a2c0b08de02721cc7103362e64c4e7a578d4b5afbe160cbd5e810b3f26f4c64fb81519bb69f761a6ab92de0a56f4fb3aa17b0ebae49778248d6e799ecf73fb0eb467072a2c0ba4a187e17c09547b254d5d2ed050ac8a75c5300630e80c5df523b8357b82e96c93a20311b4a113a1a12"]}, 0x8c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000002b859ea4583b5b00000000009500000000000000308690be668c284d12be6831801e24426aa8be7264841e6e6b8458b0ef638e51c6aaf434bcffbabf8579bf063585d49b19725a837f3a8824a9c41fdeb8e808d8320a9d54215a19bb096e04ce94c1c8e1fa3b54eac9f3c33eaaf4f03faca731fe00599342028b13efca0ddf9c1a50ebeccf369db65a5ce2f29e7dba44fd27638e707f0e9d10a1927bea582cac4e8245ff1bc356825234fc"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) close(r10) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4d00000068898b228c18a4647b3f590b2003d98a31f3aa358fffea0fed726ee02dad57373649607ea397da7cee1c1a4cc4c9a47d400b0cd201f4dee0268b14dd295aa522e58fedf5d7913bc9aed1d76f0fbd", @ANYRES16=r6, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r8, @ANYBLOB="080026006c090000080035000100000008003500000000000a00340002020202020200001800508009000100408922a0bd0000000500020001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="080027bd7000ffdbdf2531000000080001007c00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900400000004000000008005200", @ANYRES32=r13, @ANYBLOB="8de74deefd3627e66b91d1aae37ed4fa79252d7f230dec04072bb2e7478a10b79815a8d236752afdb48bf41e47a4e490b4ff3c811d07482b6044970eec13bf1e7459e1c25ee64f61040000000b40b611f8424eb79d82631d2fa11aa1a9a3a425901ac0ad6489d01e8e615962e6c1637686ef5ab69176a844a1edb57024284ba33748d81a8769985d0c33698f778909da7922e55cad67"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x8, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x57}, 0x1, {0x7ef9f58b}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x9}}}}}}}}, 0x0) getsockopt$inet_mptcp_buf(r15, 0x11c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3e006daf", @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="0c009900060000006800000014005a8010000180040001000600020000280000"], 0x3c}}, 0x0) 1.34912538s ago: executing program 2 (id=1960): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x30, r2, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd4, 0x38}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004804) 1.348197132s ago: executing program 1 (id=1961): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="00000000000000cf87c07773dbff8600b7080000000000007ba4f8d8721277a1ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000063000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 1.303437817s ago: executing program 3 (id=1962): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.284107227s ago: executing program 4 (id=1963): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x35e3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000140)=0x8) 1.166358723s ago: executing program 0 (id=1964): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xff01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) 1.166133105s ago: executing program 1 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x4) accept(r5, 0x0, 0x0) shutdown(r5, 0x0) 1.165430732s ago: executing program 2 (id=1966): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) r2 = openat$cgroup_ro(r1, &(0x7f0000001740)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) sendfile(r2, r2, 0x0, 0xa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_inet_SIOCDARP(r3, 0x8953, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x12061) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)="70a92ae466fb256f893283e0e2912f72c1df41", 0x13}, {&(0x7f0000000140)="d8d0e133096df663c330a0fc5780a6ea4e6a3ad13e10f06e744e3251bd1e", 0x1e}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="bdbf248e6a0eccf4188a0dedf347e83ab39d683e2cb5be009d9ada7e295468f263e4472e3d1113f980535be0d1d1f45e2235f081e01404d240afb038f29a1e86c1dc223d99a256d2b1b6cbf48b70b6d4df98c0b1776f8b547d928fa002b28f4a6260f541a7b1c8edadd634610d9819ce5df99671373bcec2f96dad588b16782b9a2daa021eddca1329837bf4e9daaf731995fd7b82bc362cfb80fd0e432d4e0c3e5429772af767bacfba0ae97d46fcc2288029b8bdea4f7ff527eb7833b6a505bf1c60579708adb76ac62ac2e33370f473d5297a", 0xd4}, {&(0x7f0000000180)="47d936df27a835b267c99abb59d68140ea0fc14f7c9f7d9bfabb6f1114a28b5b92f3d735687a91aab15cf62c7cfd9cccf9c8936ac78e33d4777e4165cb3effe4b0984475473c30ea6da0d1ed", 0x4c}, {&(0x7f0000001340)="8e98dab2f913710bc513b63c75957599fd772e385e604b14d19f618909a01bb1dfa5d582f17c53fce324b2b0acb1ce7fdf62063b80bf96b0e96fa0dd94a9a03632340765983a1ecf94c93cc64147c33042fd1b085208e7e01c8f9863775f0562a8b796181d803e10e74924ac392d23c629345c780bdabf0a3acfc01c963f6fd94beee99a3f79b4b569cc65c128147f731923b7832b65aa3211a9644b7c03a7f824fe6ac96c3da0d4b703a4b4149f4bfa0aae925eaa066af7f255e4e39abd06b3f86eb7ab8802e4940e59d4", 0xcb}], 0x6, 0x0, 0x0, 0x10}, 0x814) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001500)={0x0, 0x4, 0x2a, 0x3, 0x8000, 0xc1b79828}, &(0x7f0000001540)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r7, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0xfffffffc, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8150) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001580)={r5}, &(0x7f00000015c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000d140)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f000000e8c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f000000e980)={&(0x7f000000e880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000000e940)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fcdbdf257c0000f8ec142874077feb9d0c090048000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x2000c044) 872.955279ms ago: executing program 3 (id=1967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000018fdf462f67d527f153a00090000000000000000001c140000fe000001000000a19a0da3fbc1e1"], 0x24}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000300)}, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000018fdf462f67d527f153a00090000000000000000001c140000fe000001000000a19a0da3fbc1e1"], 0x24}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) socket(0x2, 0x80805, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xca) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18) (async) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000300)}, 0x10) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (async) 802.58168ms ago: executing program 4 (id=1968): syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) accept(r1, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) 745.004367ms ago: executing program 2 (id=1969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @mcast1, @loopback, 0x9, 0x0, 0x0, 0x0, 0x780000000, 0x272001b}) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x4e21}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf7de}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r0}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r3, &(0x7f0000000100)="b8", 0x1, 0x2004c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x6, 0x5, 0x4, 0x60691, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x20000}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x73, 0x73, 0x4, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x49, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x3, 0x80}, {0x2, 0x10000, 0x51}], "a61cb3"}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @ptr]}, {0x0, [0x5f, 0x0]}}, &(0x7f00000002c0)=""/224, 0x90, 0xe0, 0x0, 0x90c}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x10001, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) socket(0xa, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x5, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @generic={0x5, 0x3, 0x9, 0x7fff, 0x9}], &(0x7f0000000100)='GPL\x00', 0x0, 0x22, &(0x7f0000000140)=""/34, 0x41000, 0x69, '\x00', r5, @fallback=0x12, r6, 0x8, &(0x7f0000000400)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xf, 0xdd, 0x101}, 0x10, r7, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[r8, r9], &(0x7f0000000780)=[{0x5, 0x4, 0x1, 0x2}, {0x5, 0x2, 0x8, 0xc}], 0x10, 0x9}, 0x94) r10 = socket$inet6(0xa, 0x800, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, 0x1406, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x4040054) 744.671612ms ago: executing program 1 (id=1970): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x18}}, {{&(0x7f0000003640)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000003880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9d}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003c80)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005b40)=[{0x0}], 0x1, &(0x7f0000005bc0)}}], 0x5, 0x20000044) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdc00, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, 0x0, 0x44010) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, r3, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a'], 0x48}, 0x300}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000095000000000000006f2439b45155f44b0708f03bca184452614c0e3997caab11a78aad26ade54c9086a148e9715af50a0db63ef69613d9ebc01bba64aaa1d929051e9b03ec359d95fa3b94e5c267573ef3822d5ae7c66b57d2cc75a41aeccad29acbb9cc8d21cd68935cf0c082ea4a7ff63161570c2042dbf0e185643d32125776521db60d8ac4afafa5f8d6e663c50cb93550fcb922d98b32253916ee35222021df035431"], &(0x7f0000000080)='GPL\x00'}, 0x90) 520.170752ms ago: executing program 3 (id=1971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x90) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "eb6404074c369780d3df843c4e5e039f"}, @TCA_CT_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1010, 0x4) 428.728326ms ago: executing program 4 (id=1972): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}}, 0x6000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r7, 0x1, 0xfffffffe, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) unshare(0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r10, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r11, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x21, 0x1ff, 0xffff38ce, 0x1, 0x6, 0x7f, 0x2, 0x3, 0x3, 0x6, 0x9, 0x2, 0x6, 0xb6, 0x3, 0x4bd, [0x9, 0x1]}}) 229.148968ms ago: executing program 3 (id=1973): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)="4fa1f49ff8a930286f7a2043220c00340905aa398464cf67c5e786558ea0a2ec2ac69b5e4bd9e78ccf0abcb03a1b826ebbf50f6ebce9e8f8bfe63e5354bff39a239e1f67ad8f0b", 0x47) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @x25={0x2, 0xc, 0x17, "1f0380df9fed3de00fabfc"}}, 0x1c) 228.64613ms ago: executing program 0 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000180)) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0xb026e000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 0s ago: executing program 0 (id=1975): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916780000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e0440de4d32bf923a01dab8772203304bacfa6e3fcb1fd915cfa6f4348378f0212c592b2d5c926a4fc745d34b4cb37e6ae5650dcba5265e553a48e2eec9cf66065dcfeba3a7c4e121f2a71c57599d6f0925a737c5be835723fa5d4b04db8878b324e1edcc8b054acbcbd2cb80fa76b5e26aec5407aacd523c213f69148e6678748d7403fdaf47a138f57f011f39cb7a9e3f401ff8ae747054585dd435aa224d2c093749088a6bdd10de35cb22d3db67e9be6c9b8d6bdf2c5b7739d97d32b0ec10058d19a5357158f95e403cb443d", 0xce}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000000000000000007000000443cc8710008000a010102fffff74000000000ff36e7513b01010000000009e000008bbde8ee1d79010703ea00003a2f095ae80f9556ad6577bcb43c452710dfb7ce9e2462035eba73ea0751df955d717dc6b4eff9a043c353b65dde5fa634f6d98bfddeaedb22c689b5d549311bbde94fce9f0562c466faeb48d9c0875d82cae9917a985dbd3902ef1532c326bec35971820044f0441e647c80e79fe1eb072f25dbb9823c9501e59e5d7ee89255b581a4c4a6ac43dd861a67af3176d3546ebfc2b088d08419eb5da8b4bab292ecf5cd8f346db024e590d002fa1ca1af501dce1b1caa1a97cf75773ee094be56ce23ca8b00b283a22a1ac65f2004b87e38d02a70da8abac2c8d366f9a7179d818e9eddfe866f366e77462f749b42ba16f8aadfe0206d039ec516eb8a9915bfc2a3bec35c159f4ac8dc349e4ca2209f986973f829927d63e924853dec83695b49b2b50a50a459b7c5e902ffabb350e62f7e0552b5a33f243819cbb589c95034cef100a77334733251ee80f776d76d5dd5646a00"/411], 0x50}, 0x4048000) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) accept4$netrom(r3, &(0x7f0000000340)={{}, [@bcast, @default, @remote, @remote, @null, @null]}, &(0x7f0000000580)=0x48, 0x80000) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="607be25f2ef1280ed2c663ad71511dde7f74dd31fb0e5a9dbe2ee7745c3636ae33443fa73a387c92566fc67599610cabb9a3fcc284c5d0e7824e32b0d8fd3acef8af71e5f4784bd40778d418042d76c4e25c840db0b8022dddb286e48c9d34d0bcfe943d2cb2b3e77998406bdc487c63740e9d450f16ca09323f1ffa6c83e41bd8da053dfd564f5ebf6bf529217bec9611005a3955f9082f30027a5a7fb021a5eaf79760c0ab0f42ca4b091855c9c192f234f9e3f5ada9", 0xb7}], 0x1}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 82.189876][ T5850] cgroup: Unknown subsys name 'net' [ 82.319421][ T5850] cgroup: Unknown subsys name 'cpuset' [ 82.328578][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.996257][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.393635][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.402080][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.412445][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.421224][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.430444][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.438285][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.441857][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.446488][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.462087][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.471660][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.480263][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.527466][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.533709][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.536838][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.549603][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.569290][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.575256][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.585165][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.585477][ T5184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.593807][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.606562][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.607578][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.614979][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.648447][ T5184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.661589][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.318260][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.500081][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 89.556658][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 89.588758][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 89.666775][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.751678][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.759276][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.767589][ T5862] bridge_slave_0: entered allmulticast mode [ 89.775122][ T5862] bridge_slave_0: entered promiscuous mode [ 89.818481][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.826944][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.834685][ T5862] bridge_slave_1: entered allmulticast mode [ 89.842357][ T5862] bridge_slave_1: entered promiscuous mode [ 89.950424][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.958052][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.965307][ T5860] bridge_slave_0: entered allmulticast mode [ 89.972919][ T5860] bridge_slave_0: entered promiscuous mode [ 90.028156][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.036186][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.043960][ T5860] bridge_slave_1: entered allmulticast mode [ 90.051578][ T5860] bridge_slave_1: entered promiscuous mode [ 90.062926][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.090316][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.098330][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.105970][ T5872] bridge_slave_0: entered allmulticast mode [ 90.114030][ T5872] bridge_slave_0: entered promiscuous mode [ 90.156831][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.181656][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.190298][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.197834][ T5861] bridge_slave_0: entered allmulticast mode [ 90.208196][ T5861] bridge_slave_0: entered promiscuous mode [ 90.218385][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.225925][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.233482][ T5872] bridge_slave_1: entered allmulticast mode [ 90.240953][ T5872] bridge_slave_1: entered promiscuous mode [ 90.291256][ T5862] team0: Port device team_slave_0 added [ 90.297523][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.304958][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.312557][ T5861] bridge_slave_1: entered allmulticast mode [ 90.320660][ T5861] bridge_slave_1: entered promiscuous mode [ 90.368909][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.376258][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.383832][ T5871] bridge_slave_0: entered allmulticast mode [ 90.393022][ T5871] bridge_slave_0: entered promiscuous mode [ 90.403470][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.417546][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.429606][ T5862] team0: Port device team_slave_1 added [ 90.475085][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.484502][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.492262][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.502449][ T5871] bridge_slave_1: entered allmulticast mode [ 90.510209][ T5871] bridge_slave_1: entered promiscuous mode [ 90.548404][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.555421][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.583288][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.596130][ T5877] Bluetooth: hci0: command tx timeout [ 90.603785][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.616998][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.652562][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.659932][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.686832][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.700323][ T5877] Bluetooth: hci3: command tx timeout [ 90.706885][ T5880] Bluetooth: hci1: command tx timeout [ 90.706975][ T5184] Bluetooth: hci2: command tx timeout [ 90.721096][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.748370][ T5184] Bluetooth: hci4: command tx timeout [ 90.779927][ T5860] team0: Port device team_slave_0 added [ 90.790260][ T5860] team0: Port device team_slave_1 added [ 90.830130][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.845248][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.889292][ T5861] team0: Port device team_slave_0 added [ 90.896074][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.903176][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.929966][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.943740][ T5872] team0: Port device team_slave_0 added [ 90.982552][ T5861] team0: Port device team_slave_1 added [ 90.989568][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.996807][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.023274][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.044022][ T5872] team0: Port device team_slave_1 added [ 91.112416][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.119642][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.146516][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.177322][ T5871] team0: Port device team_slave_0 added [ 91.190876][ T5862] hsr_slave_0: entered promiscuous mode [ 91.198718][ T5862] hsr_slave_1: entered promiscuous mode [ 91.240873][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.248207][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.275575][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.307178][ T5871] team0: Port device team_slave_1 added [ 91.392306][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.399975][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.426990][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.477926][ T5860] hsr_slave_0: entered promiscuous mode [ 91.484298][ T5860] hsr_slave_1: entered promiscuous mode [ 91.491412][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 91.497614][ T5860] Cannot create hsr debugfs directory [ 91.518335][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.525945][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.552964][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.618981][ T5861] hsr_slave_0: entered promiscuous mode [ 91.630560][ T5861] hsr_slave_1: entered promiscuous mode [ 91.638218][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 91.643968][ T5861] Cannot create hsr debugfs directory [ 91.650815][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.658368][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.684629][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.698709][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.706503][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.732641][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.931889][ T5872] hsr_slave_0: entered promiscuous mode [ 91.939056][ T5872] hsr_slave_1: entered promiscuous mode [ 91.945291][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 91.951185][ T5872] Cannot create hsr debugfs directory [ 91.984557][ T5871] hsr_slave_0: entered promiscuous mode [ 91.991910][ T5871] hsr_slave_1: entered promiscuous mode [ 91.998363][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 92.004106][ T5871] Cannot create hsr debugfs directory [ 92.275379][ T9] cfg80211: failed to load regulatory.db [ 92.475415][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.524318][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.559210][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.610620][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.668735][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.682264][ T5184] Bluetooth: hci0: command tx timeout [ 92.693139][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.704679][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.719993][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.746061][ T5184] Bluetooth: hci3: command tx timeout [ 92.749621][ T5877] Bluetooth: hci1: command tx timeout [ 92.757604][ T5184] Bluetooth: hci2: command tx timeout [ 92.824672][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.825907][ T5184] Bluetooth: hci4: command tx timeout [ 92.883331][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.901037][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.921154][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.021438][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.050046][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.063225][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.077667][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.204391][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.219719][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.252141][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.264395][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.295099][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.314639][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.369655][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.385018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.392544][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.408853][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.443735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.450909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.484809][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.492018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.539039][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.552288][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.559643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.631987][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.649616][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.657109][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.704762][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.712092][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.761158][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.854289][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.900626][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.934056][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.958159][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.965350][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.039559][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.046915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.131779][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.202878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.210405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.249434][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.291160][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.298501][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.434649][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.598964][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.731224][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.754144][ T5860] veth0_vlan: entered promiscuous mode [ 94.776247][ T5184] Bluetooth: hci0: command tx timeout [ 94.827156][ T5184] Bluetooth: hci1: command tx timeout [ 94.827605][ T5877] Bluetooth: hci2: command tx timeout [ 94.832620][ T5184] Bluetooth: hci3: command tx timeout [ 94.882758][ T5860] veth1_vlan: entered promiscuous mode [ 94.911057][ T5877] Bluetooth: hci4: command tx timeout [ 94.989522][ T5861] veth0_vlan: entered promiscuous mode [ 95.029269][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.072781][ T5860] veth0_macvtap: entered promiscuous mode [ 95.093167][ T5860] veth1_macvtap: entered promiscuous mode [ 95.116272][ T5861] veth1_vlan: entered promiscuous mode [ 95.218907][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.230793][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.265855][ T5861] veth0_macvtap: entered promiscuous mode [ 95.279128][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.289422][ T5861] veth1_macvtap: entered promiscuous mode [ 95.318125][ T192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.339691][ T5871] veth0_vlan: entered promiscuous mode [ 95.348106][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.357453][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388205][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.404784][ T5871] veth1_vlan: entered promiscuous mode [ 95.425124][ T5862] veth0_vlan: entered promiscuous mode [ 95.461088][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.478971][ T5862] veth1_vlan: entered promiscuous mode [ 95.500757][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.561923][ T5871] veth0_macvtap: entered promiscuous mode [ 95.574898][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.586229][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613404][ T5871] veth1_macvtap: entered promiscuous mode [ 95.621910][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.632798][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.671200][ T5872] veth0_vlan: entered promiscuous mode [ 95.717182][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.744232][ T5872] veth1_vlan: entered promiscuous mode [ 95.754535][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.783205][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.790819][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.820411][ T192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.834910][ T192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.855934][ T5862] veth0_macvtap: entered promiscuous mode [ 95.870410][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.880208][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.921942][ T5862] veth1_macvtap: entered promiscuous mode [ 95.922050][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.936886][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.009700][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.021565][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.042518][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.071737][ T5872] veth0_macvtap: entered promiscuous mode [ 96.084718][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.176963][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.190897][ T5872] veth1_macvtap: entered promiscuous mode [ 96.212064][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.244957][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.284774][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.294894][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340456][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.352665][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.363701][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.373118][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.386810][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.503153][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.528572][ T5988] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 96.554558][ T5988] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 96.557457][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.572983][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.584397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.599407][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.602590][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.619103][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.628347][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.826537][ T5877] Bluetooth: hci0: command tx timeout [ 96.834419][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.880775][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.907147][ T5877] Bluetooth: hci3: command tx timeout [ 96.916536][ T5877] Bluetooth: hci2: command tx timeout [ 96.916546][ T5184] Bluetooth: hci1: command tx timeout [ 96.953948][ T5998] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.986688][ T5877] Bluetooth: hci4: command tx timeout [ 97.019132][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.038799][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.043469][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.072254][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.241731][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.279306][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.742175][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.952503][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 98.087066][ T6028] syzkaller1: entered promiscuous mode [ 98.092784][ T6028] syzkaller1: entered allmulticast mode [ 98.182971][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.340682][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.424155][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.469686][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.551396][ T6056] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 99.363963][ T6080] netlink: 'syz.0.31': attribute type 58 has an invalid length. [ 99.403506][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 99.726966][ T6089] sctp: [Deprecated]: syz.3.34 (pid 6089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.726966][ T6089] Use struct sctp_sack_info instead [ 100.010614][ T6099] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.242562][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.533091][ T6123] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 100.540758][ T6125] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 100.587124][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 101.222555][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 101.273155][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 101.391257][ T6159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.530318][ T6159] sctp: [Deprecated]: syz.2.56 (pid 6159) Use of int in maxseg socket option. [ 101.530318][ T6159] Use struct sctp_assoc_value instead [ 101.827601][ T6176] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.61'. [ 101.835189][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 101.842320][ T6176] netlink: zone id is out of range [ 101.860977][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 101.878340][ T6176] netlink: zone id is out of range [ 101.907810][ T6176] netlink: zone id is out of range [ 101.912998][ T6176] netlink: zone id is out of range [ 101.975803][ T6176] netlink: zone id is out of range [ 101.998826][ T6176] netlink: zone id is out of range [ 102.021920][ T6176] netlink: zone id is out of range [ 102.046230][ T6176] netlink: zone id is out of range [ 102.312185][ T6202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.424740][ T6207] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 102.452060][ T6207] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 102.515781][ T6207] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 102.526123][ T6209] team0: Device ip6gre1 is of different type [ 102.537621][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.616199][ T6216] netlink: 512 bytes leftover after parsing attributes in process `syz.4.73'. [ 102.727817][ T6219] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 102.769362][ T6219] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 103.456668][ T6257] netlink: 'syz.2.86': attribute type 2 has an invalid length. [ 103.464358][ T6257] netlink: 244 bytes leftover after parsing attributes in process `syz.2.86'. [ 103.567873][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.610214][ T6260] netlink: 272 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.655660][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.930507][ T6287] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 103.941945][ T6282] IPVS: stopping backup sync thread 6287 ... [ 103.954704][ T6283] netlink: 'syz.1.89': attribute type 1 has an invalid length. [ 103.979789][ T6283] netlink: 224 bytes leftover after parsing attributes in process `syz.1.89'. [ 103.979976][ T43] IPVS: starting estimator thread 0... [ 104.005425][ T6283] block nbd1: not configured, cannot reconfigure [ 104.020134][ T6284] Zero length message leads to an empty skb [ 104.149381][ T6289] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.624924][ T6322] netlink: 'syz.4.101': attribute type 10 has an invalid length. [ 104.659085][ T6318] netlink: 'syz.1.100': attribute type 30 has an invalid length. [ 104.695234][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.712818][ T6322] bridge_slave_1: left allmulticast mode [ 104.719079][ T6322] bridge_slave_1: left promiscuous mode [ 104.725067][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.766791][ T6322] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 105.659774][ T6359] tipc: Failed to obtain node identity [ 105.665482][ T6359] tipc: Enabling of bearer rejected, failed to enable media [ 105.874358][ T6365] syzkaller0: entered promiscuous mode [ 105.893136][ T6365] syzkaller0: entered allmulticast mode [ 105.929889][ T6370] tipc: Started in network mode [ 105.945250][ T6370] tipc: Node identity , cluster identity 4711 [ 105.990077][ T6370] tipc: Failed to obtain node identity [ 106.018636][ T6370] tipc: Enabling of bearer rejected, failed to enable media [ 106.233234][ T6383] syz.3.121 uses obsolete (PF_INET,SOCK_PACKET) [ 107.634168][ T6399] __nla_validate_parse: 9 callbacks suppressed [ 107.634190][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.124'. [ 107.842211][ T6410] veth1_to_bond: entered allmulticast mode [ 107.923288][ T6414] tipc: Enabling of bearer rejected, failed to enable media [ 108.035109][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 108.077762][ T6421] net_ratelimit: 220 callbacks suppressed [ 108.077781][ T6421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.122212][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 108.396232][ T6433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.134'. [ 108.485821][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 108.528618][ T6400] veth1_to_bond: left allmulticast mode [ 108.699404][ T6450] Bluetooth: MGMT ver 1.23 [ 108.968137][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 108.982498][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 109.217068][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'. [ 109.242266][ T6469] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 110.432365][ T6515] sctp: failed to load transform for md5: -2 [ 110.513219][ T6530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.161'. [ 110.620262][ T6532] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 110.701706][ T6537] netlink: 'syz.2.163': attribute type 2 has an invalid length. [ 110.713412][ T6532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.751540][ T5877] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 110.757892][ T5184] Bluetooth: hci2: command 0x0401 tx timeout [ 110.784769][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.884298][ T6532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.894289][ T6549] atomic_op ffff888054bb7198 conn xmit_atomic 0000000000000000 [ 110.923683][ T6532] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.942559][ T6532] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 111.560940][ T6577] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 111.707222][ T6580] tipc: Started in network mode [ 111.712165][ T6580] tipc: Node identity 26a4c98fba5d, cluster identity 4711 [ 111.734630][ T6580] tipc: Enabled bearer , priority 0 [ 111.746310][ T6580] syzkaller0: entered promiscuous mode [ 111.765855][ T6580] syzkaller0: entered allmulticast mode [ 111.864579][ T6580] tipc: Resetting bearer [ 111.924464][ T6580] tipc: Enabling of bearer rejected, already enabled [ 112.004975][ T6580] tipc: Resetting bearer [ 112.050619][ T6580] tipc: Disabling bearer [ 112.275184][ T6605] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 112.690254][ T959] IPVS: starting estimator thread 0... [ 112.702002][ T6620] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 112.727474][ T6628] netlink: 'syz.1.190': attribute type 39 has an invalid length. [ 112.786330][ T6624] IPVS: using max 29 ests per chain, 69600 per kthread [ 113.015406][ T6639] __nla_validate_parse: 3 callbacks suppressed [ 113.015429][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 113.314371][ T6642] syzkaller0: entered promiscuous mode [ 113.363544][ T6642] syzkaller0: entered allmulticast mode [ 113.400243][ T6647] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 113.446363][ T6647] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 115.255215][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.440946][ T6699] 8021q: VLANs not supported on wg0 [ 115.811253][ T6718] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 116.288081][ T6743] bridge1: entered promiscuous mode [ 116.294239][ T6747] netlink: 516 bytes leftover after parsing attributes in process `syz.3.220'. [ 116.317476][ T6743] bridge1: entered allmulticast mode [ 116.345320][ T6749] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 116.373608][ T6749] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 116.556884][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 116.605818][ T6765] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.225'. [ 116.627105][ T6764] netlink: 340 bytes leftover after parsing attributes in process `syz.1.226'. [ 116.897073][ T6778] netlink: 84 bytes leftover after parsing attributes in process `syz.0.228'. [ 117.011687][ T6790] IPVS: set_ctl: invalid protocol: 93 127.0.0.1:20003 [ 117.094272][ T6780] netlink: 52 bytes leftover after parsing attributes in process `syz.1.229'. [ 117.249086][ T6797] sctp: [Deprecated]: syz.2.232 (pid 6797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.249086][ T6797] Use struct sctp_sack_info instead [ 117.393399][ T6802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.600017][ T6808] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 117.832754][ T6820] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 117.901445][ T6820] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 118.427432][ T6845] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.246'. [ 118.468048][ T6844] tap0: tun_chr_ioctl cmd 1074025677 [ 118.473794][ T6844] tap0: linktype set to 65534 [ 118.596791][ T6846] erspan0: entered promiscuous mode [ 118.973637][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 118.976193][ T6868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.288661][ T6886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.262'. [ 119.446740][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 120.262199][ T6929] tipc: Enabling of bearer rejected, failed to enable media [ 120.305340][ T6926] netlink: 'syz.1.272': attribute type 12 has an invalid length. [ 120.652030][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'. [ 120.778960][ T6943] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.871775][ T6952] netlink: 'syz.0.279': attribute type 4 has an invalid length. [ 121.244411][ T6968] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.283'. [ 121.396326][ T6975] netlink: 788 bytes leftover after parsing attributes in process `syz.3.286'. [ 121.623352][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 121.639432][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 122.178674][ T7009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.297'. [ 122.821829][ T1162] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.859463][ T7045] netlink: 'syz.2.309': attribute type 33 has an invalid length. [ 122.873199][ T1162] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.902981][ T1162] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.921007][ T1162] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.093031][ T7056] netlink: 'syz.3.311': attribute type 11 has an invalid length. [ 123.124578][ T7018] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 123.326606][ T7063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.459995][ T7071] __nla_validate_parse: 9 callbacks suppressed [ 123.460017][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 123.513490][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'. [ 123.737818][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 123.800099][ T7077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.319'. [ 123.950958][ T7093] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 124.036275][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.064237][ T7093] bond0: (slave team0): Enslaving as an active interface with an up link [ 124.345953][ T5877] Bluetooth: hci0: command 0x0c20 tx timeout [ 124.598090][ T192] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.616386][ T7116] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.126330][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 125.628638][ T7162] netlink: 'syz.0.344': attribute type 29 has an invalid length. [ 125.698685][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.099583][ T7183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.351'. [ 126.150201][ T7183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.351'. [ 126.251337][ T7186] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 126.368345][ T7202] netlink: 80 bytes leftover after parsing attributes in process `syz.1.353'. [ 126.665900][ T5877] Bluetooth: hci4: command tx timeout [ 127.223722][ T7230] netlink: 'syz.2.361': attribute type 5 has an invalid length. [ 127.965469][ T7261] netlink: 'syz.2.368': attribute type 11 has an invalid length. [ 128.011231][ T7261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.368'. [ 128.075075][ T5954] IPVS: starting estimator thread 0... [ 128.141718][ T7271] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 128.151456][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 128.186734][ T7269] IPVS: using max 26 ests per chain, 62400 per kthread [ 128.265833][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.511680][ T7280] tipc: Enabling of bearer rejected, failed to enable media [ 129.147894][ T7315] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 129.531008][ T7334] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 129.762221][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 129.832949][ T7344] sctp: [Deprecated]: syz.3.389 (pid 7344) Use of int in max_burst socket option. [ 129.832949][ T7344] Use struct sctp_assoc_value instead [ 130.013663][ T7352] netlink: 'syz.4.392': attribute type 39 has an invalid length. [ 130.106093][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 130.299296][ T7354] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.516355][ T7370] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 130.687783][ T7379] syzkaller0: entered promiscuous mode [ 130.693761][ T7379] syzkaller0: entered allmulticast mode [ 130.780064][ T7379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.398'. [ 130.831770][ T7388] netlink: 'syz.0.401': attribute type 21 has an invalid length. [ 130.861102][ T7388] netlink: 156 bytes leftover after parsing attributes in process `syz.0.401'. [ 131.052957][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 131.286259][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.316072][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.351191][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.390003][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.406'. [ 131.476162][ T1162] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 132.229587][ T7463] netlink: 104 bytes leftover after parsing attributes in process `syz.0.422'. [ 132.841857][ T7455] netlink: 'syz.2.419': attribute type 13 has an invalid length. [ 132.859433][ T7455] netlink: 'syz.2.419': attribute type 17 has an invalid length. [ 132.965869][ T7455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 133.250002][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.257366][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.314149][ T7515] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 133.338578][ T7511] netlink: 'syz.4.434': attribute type 6 has an invalid length. [ 133.414444][ T7513] netlink: 'syz.4.434': attribute type 6 has an invalid length. [ 133.839601][ T5877] block nbd0: Receive control failed (result -32) [ 134.062425][ T7556] Unsupported xt match [ 134.062447][ T7556] unable to load match [ 134.103254][ T7559] lo: entered promiscuous mode [ 134.184225][ T7559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.675421][ T7591] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 134.800803][ T7597] bond1: (slave bridge3): making interface the new active one [ 134.813537][ T7597] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 134.848276][ T7596] pim6reg1: entered promiscuous mode [ 134.859296][ T7596] pim6reg1: entered allmulticast mode [ 135.027601][ T7607] veth1_to_bond: entered allmulticast mode [ 135.068479][ T7607] __nla_validate_parse: 6 callbacks suppressed [ 135.068504][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 135.084579][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 135.101537][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 135.162963][ T7606] veth1_to_bond: left allmulticast mode [ 135.183723][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 135.186776][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 135.271302][ T7614] tipc: Started in network mode [ 135.287339][ T7614] tipc: Node identity 4a7ddff7ae09, cluster identity 4711 [ 135.298216][ T7614] tipc: Enabled bearer , priority 0 [ 135.323207][ T7614] syzkaller0: entered promiscuous mode [ 135.330615][ T7614] syzkaller0: entered allmulticast mode [ 135.412722][ T7613] tipc: Resetting bearer [ 135.453604][ T7613] tipc: Disabling bearer [ 135.570081][ T7630] trusted_key: syz.0.468 sent an empty control message without MSG_MORE. [ 136.292800][ T7644] netlink: 96 bytes leftover after parsing attributes in process `syz.1.474'. [ 136.348929][ T7650] veth0: entered promiscuous mode [ 136.423894][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 136.433007][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.447839][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz.3.478'. [ 136.487831][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 136.521158][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 136.646911][ T7665] netlink: 'syz.4.480': attribute type 8 has an invalid length. [ 136.907167][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 136.926489][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 136.983670][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 137.254335][ T7691] nbd: nbd0 already in use [ 137.314648][ T7676] infiniband syz0: set down [ 137.319524][ T7676] infiniband syz0: added wlan1 [ 137.333830][ T5954] wlan1 speed is unknown, defaulting to 1000 [ 137.390276][ T7676] RDS/IB: syz0: added [ 137.396835][ T7676] smc: adding ib device syz0 with port count 1 [ 137.419411][ T7676] smc: ib device syz0 port 1 has pnetid [ 137.475011][ T5954] wlan1 speed is unknown, defaulting to 1000 [ 137.485252][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 138.551502][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 138.610992][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.145320][ T7779] netlink: 'syz.2.516': attribute type 4 has an invalid length. [ 139.568916][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 140.121793][ T7798] bridge0: entered promiscuous mode [ 140.128631][ T7798] macvtap1: entered allmulticast mode [ 140.134268][ T7798] bridge0: entered allmulticast mode [ 140.176089][ T7798] bridge0: port 3(macvtap1) entered blocking state [ 140.194482][ T7798] bridge0: port 3(macvtap1) entered disabled state [ 140.217346][ T7798] bridge0: left allmulticast mode [ 140.225005][ T7798] bridge0: left promiscuous mode [ 140.362591][ T7803] bridge0: entered promiscuous mode [ 140.382959][ T7803] macsec1: entered promiscuous mode [ 140.393231][ T7803] macsec1: entered allmulticast mode [ 140.418219][ T7803] bridge0: entered allmulticast mode [ 140.448968][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 140.469815][ T7812] __nla_validate_parse: 15 callbacks suppressed [ 140.469837][ T7812] netlink: 48 bytes leftover after parsing attributes in process `syz.0.525'. [ 140.495348][ T7817] netlink: 'syz.2.527': attribute type 3 has an invalid length. [ 140.662857][ T7823] netlink: 14 bytes leftover after parsing attributes in process `syz.0.529'. [ 140.770949][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 140.937437][ T7823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.956207][ T7823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.983049][ T7823] bond0 (unregistering): Released all slaves [ 141.151921][ T7676] wlan1 speed is unknown, defaulting to 1000 [ 141.291349][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 141.457241][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 142.112634][ T7891] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 142.350092][ T7903] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 142.413324][ T7903] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 142.424560][ T7903] gretap1: entered promiscuous mode [ 142.436557][ T7903] gretap1: entered allmulticast mode [ 142.504190][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 142.542958][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 142.716631][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 142.748359][ T7913] veth5: entered promiscuous mode [ 142.780177][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 142.855325][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 142.881140][ T5964] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.895008][ T5964] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.917350][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.936002][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.021349][ T5877] block nbd1: Receive control failed (result -32) [ 143.160455][ T7942] bond1 (unregistering): Released all slaves [ 143.307072][ T7955] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 143.812701][ T7991] bridge_slave_1: left allmulticast mode [ 143.826266][ T7991] bridge_slave_1: left promiscuous mode [ 143.855973][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.929757][ T7991] bridge_slave_0: left allmulticast mode [ 143.935969][ T7991] bridge_slave_0: left promiscuous mode [ 143.945531][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.405626][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.413634][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.476638][ T8019] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 145.192785][ T8068] vcan0: entered allmulticast mode [ 145.498309][ T8079] __nla_validate_parse: 8 callbacks suppressed [ 145.498332][ T8079] netlink: 596 bytes leftover after parsing attributes in process `syz.3.602'. [ 145.984432][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.605'. [ 146.022198][ T8075] netlink: 'syz.3.602': attribute type 29 has an invalid length. [ 146.054385][ T8077] netlink: 'syz.3.602': attribute type 29 has an invalid length. [ 146.482445][ T8093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.608'. [ 146.595005][ T8103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.666277][ T8108] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 146.678895][ T8108] netlink: 224 bytes leftover after parsing attributes in process `syz.0.612'. [ 146.682372][ T8106] xt_policy: too many policy elements [ 146.693093][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 146.703662][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 146.729662][ T8110] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 146.746247][ T8110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.612'. [ 146.768827][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 146.937138][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 147.244350][ T8141] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 147.254676][ T8141] macvtap1: entered promiscuous mode [ 147.264428][ T8141] macvtap1: entered allmulticast mode [ 147.270225][ T8141] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 147.293233][ T8146] tipc: Enabled bearer , priority 0 [ 147.294264][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 147.310198][ T8146] syzkaller0: entered promiscuous mode [ 147.316775][ T8146] syzkaller0: entered allmulticast mode [ 147.332338][ T8143] macvtap2: entered promiscuous mode [ 147.339574][ T8143] macvtap2: entered allmulticast mode [ 147.354670][ T8146] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 147.389629][ T8146] tipc: Resetting bearer [ 147.433451][ T8145] tipc: Resetting bearer [ 147.466645][ T8145] tipc: Disabling bearer [ 147.784732][ T8168] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 147.800867][ T8168] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 148.166801][ T8187] sctp: [Deprecated]: syz.0.636 (pid 8187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.166801][ T8187] Use struct sctp_sack_info instead [ 148.219713][ T8193] tipc: Started in network mode [ 148.243586][ T8193] tipc: Node identity 3ed77ce4f5dd, cluster identity 4711 [ 148.264401][ T8193] tipc: Enabled bearer , priority 0 [ 148.290196][ T8193] syzkaller0: entered promiscuous mode [ 148.301614][ T8193] syzkaller0: entered allmulticast mode [ 148.377677][ T8198] tipc: Enabled bearer , priority 0 [ 148.408266][ T8193] tipc: Resetting bearer [ 148.430525][ T8190] tipc: Resetting bearer [ 148.493959][ T8190] tipc: Disabling bearer [ 148.522722][ T8198] tipc: Resetting bearer [ 148.532787][ T8199] netlink: 'syz.0.640': attribute type 13 has an invalid length. [ 148.600196][ T8196] tipc: Disabling bearer [ 148.705427][ T8210] netlink: 'syz.4.644': attribute type 12 has an invalid length. [ 148.735821][ T8210] netlink: 'syz.4.644': attribute type 29 has an invalid length. [ 148.797063][ T8210] netlink: 'syz.4.644': attribute type 2 has an invalid length. [ 148.850436][ T8210] netlink: 'syz.4.644': attribute type 3 has an invalid length. [ 148.888041][ T8230] netlink: 'syz.3.646': attribute type 39 has an invalid length. [ 148.951085][ T8234] netlink: 'syz.0.648': attribute type 12 has an invalid length. [ 150.454991][ T8311] sctp: [Deprecated]: syz.2.665 (pid 8311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.454991][ T8311] Use struct sctp_sack_info instead [ 150.913289][ T8329] netlink: 'syz.2.671': attribute type 23 has an invalid length. [ 151.015745][ T8331] Bluetooth: MGMT ver 1.23 [ 151.021136][ T8331] __nla_validate_parse: 16 callbacks suppressed [ 151.021156][ T8331] netlink: 308 bytes leftover after parsing attributes in process `syz.0.670'. [ 151.145777][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 151.267484][ T8339] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.675'. [ 151.278105][ T8342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'. [ 151.296114][ T8339] netlink: 165 bytes leftover after parsing attributes in process `syz.0.675'. [ 151.313001][ T8340] pim6reg: entered allmulticast mode [ 151.417393][ T8342] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.553678][ T8352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 151.565903][ T8355] sctp: [Deprecated]: syz.0.678 (pid 8355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.565903][ T8355] Use struct sctp_sack_info instead [ 151.768800][ T8367] netlink: 260 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.909196][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.918738][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.933036][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.969497][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'. [ 152.219296][ T8389] tipc: Started in network mode [ 152.224495][ T8389] tipc: Node identity 764602d64dee, cluster identity 4711 [ 152.224522][ T8391] xt_l2tp: missing protocol rule (udp|l2tpip) [ 152.237717][ T8389] tipc: Enabled bearer , priority 0 [ 152.254518][ T8391] tipc: Started in network mode [ 152.259893][ T8391] tipc: Node identity e276654c2d, cluster identity 4711 [ 152.268015][ T8391] tipc: Enabled bearer , priority 0 [ 152.277719][ T8391] syzkaller0: entered promiscuous mode [ 152.283947][ T8391] syzkaller0: entered allmulticast mode [ 152.293577][ T8389] tipc: Resetting bearer [ 152.319401][ T8388] tipc: Disabling bearer [ 152.338850][ T8391] tipc: Resetting bearer [ 152.356433][ T8390] tipc: Resetting bearer [ 152.392966][ T8390] tipc: Disabling bearer [ 152.475530][ T8402] IPv6: Can't replace route, no match found [ 152.684496][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.697948][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.716192][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.741792][ T8417] netlink: 'syz.4.701': attribute type 11 has an invalid length. [ 152.751779][ T8417] netlink: 'syz.4.701': attribute type 11 has an invalid length. [ 152.995893][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.269008][ T8450] validate_nla: 2 callbacks suppressed [ 153.269028][ T8450] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 153.359270][ T8450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.466668][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.482842][ T8453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.496252][ T8453] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.511754][ T8453] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 153.684693][ T8448] veth3: entered promiscuous mode [ 153.716286][ T8450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.830784][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.883817][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.935861][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.943295][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.974204][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.992207][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.020545][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.046026][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.064196][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.074435][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.098192][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.117194][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.127919][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.135271][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.201202][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.219636][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.227872][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.232062][ T8492] netlink: 'syz.4.721': attribute type 12 has an invalid length. [ 154.235773][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.253117][ T8491] netlink: 'syz.4.721': attribute type 12 has an invalid length. [ 154.260219][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.278468][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.286094][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.294674][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.306438][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.324945][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.335758][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.350276][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.359653][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.367662][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.374919][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.383661][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.402069][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.410170][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.422609][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.433489][ T8476] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.651717][ T8513] openvswitch: netlink: Flow key attr not present in new flow. [ 154.922702][ T8533] netlink: 'syz.4.734': attribute type 30 has an invalid length. [ 155.373060][ T8561] sctp: [Deprecated]: syz.3.744 (pid 8561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.373060][ T8561] Use struct sctp_sack_info instead [ 155.586162][ T8574] netlink: 'syz.4.748': attribute type 5 has an invalid length. [ 155.626098][ T8574] geneve2: entered promiscuous mode [ 155.646783][ T8574] geneve2: entered allmulticast mode [ 155.696912][ T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 155.719333][ T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 155.756246][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 155.791878][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 155.902055][ T8591] netlink: 'syz.1.752': attribute type 83 has an invalid length. [ 156.188765][ T8609] __nla_validate_parse: 14 callbacks suppressed [ 156.188788][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 156.291108][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.757'. [ 156.434034][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 156.550436][ T30] audit: type=1804 audit(1757344444.509:2): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.763" name="/newroot/149/cgroup.controllers" dev="tmpfs" ino=775 res=1 errno=0 [ 156.584417][ T8642] netlink: zone id is out of range [ 156.632832][ T30] audit: type=1800 audit(1757344444.509:3): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.763" name="cgroup.controllers" dev="tmpfs" ino=775 res=0 errno=0 [ 156.634552][ T8642] netlink: zone id is out of range [ 156.695408][ T8642] netlink: zone id is out of range [ 156.702543][ T8642] netlink: zone id is out of range [ 156.710799][ T8642] netlink: zone id is out of range [ 156.711566][ T8638] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 156.716271][ T8642] netlink: zone id is out of range [ 156.716286][ T8642] netlink: zone id is out of range [ 156.716297][ T8642] netlink: zone id is out of range [ 156.716307][ T8642] netlink: zone id is out of range [ 156.835725][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.871187][ T8547] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.890497][ T192] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.923218][ T192] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.965940][ T192] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.041915][ T8663] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.770'. [ 157.271328][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.772'. [ 157.284344][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 157.320129][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.772'. [ 157.351194][ T8671] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 157.521029][ T8681] team0: Device ip6gre1 is of different type [ 157.597509][ T8688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 157.964370][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 157.994265][ T8712] sctp: [Deprecated]: syz.1.784 (pid 8712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.994265][ T8712] Use struct sctp_sack_info instead [ 158.211098][ T8721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 158.231544][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 158.472848][ T8732] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 158.823829][ T8758] sctp: [Deprecated]: syz.3.799 (pid 8758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.823829][ T8758] Use struct sctp_sack_info instead [ 158.957318][ T8768] syz.4.804 uses old SIOCAX25GETINFO [ 159.336920][ T8784] netlink: 'syz.4.808': attribute type 2 has an invalid length. [ 159.560514][ T8755] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 159.767885][ T8808] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 160.122299][ T8823] erspan0: entered promiscuous mode [ 160.189882][ T8827] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 161.242459][ T8879] Bluetooth: MGMT ver 1.23 [ 161.293777][ T8879] tipc: Enabled bearer , priority 0 [ 161.372364][ T8886] __nla_validate_parse: 7 callbacks suppressed [ 161.372387][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.841'. [ 161.415926][ T8878] tipc: Disabling bearer [ 161.462207][ T8890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.841'. [ 161.720314][ T8906] net_ratelimit: 10 callbacks suppressed [ 161.720336][ T8906] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 161.739033][ T8908] sctp: [Deprecated]: syz.0.847 (pid 8908) Use of int in max_burst socket option. [ 161.739033][ T8908] Use struct sctp_assoc_value instead [ 161.914004][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 162.093897][ T8923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'. [ 162.170222][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 162.727769][ T8956] bond2 (unregistering): Released all slaves [ 163.126456][ T8979] openvswitch: netlink: Message has 2 unknown bytes. [ 163.133436][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.155185][ T8981] sctp: [Deprecated]: syz.3.867 (pid 8981) Use of int in max_burst socket option. [ 163.155185][ T8981] Use struct sctp_assoc_value instead [ 163.162550][ T8979] IPv6: sit2: Disabled Multicast RS [ 163.178217][ T8979] sit2: entered allmulticast mode [ 163.302350][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 163.465132][ T9005] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 163.517074][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 163.542155][ T9009] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 163.781207][ T9023] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 163.813216][ T9024] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 163.882804][ T9032] netlink: 92 bytes leftover after parsing attributes in process `syz.1.880'. [ 164.013426][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.124307][ T9031] bond0: (slave wlan0): Enslaving as an active interface with a down link [ 164.150308][ T9035] vlan0: entered allmulticast mode [ 164.157033][ T9035] veth1: entered allmulticast mode [ 164.163281][ T9035] bond0: (slave vlan0): Opening slave failed [ 164.193346][ T9047] Bluetooth: MGMT ver 1.23 [ 164.339724][ T9056] netlink: 68 bytes leftover after parsing attributes in process `syz.1.886'. [ 164.420038][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'. [ 164.653958][ T9081] netlink: 'syz.4.893': attribute type 15 has an invalid length. [ 164.668431][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.677803][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.681703][ T9084] netlink: 'syz.4.893': attribute type 15 has an invalid length. [ 164.980278][ T9096] lo: entered promiscuous mode [ 164.992671][ T9096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.119133][ T9097] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 165.129142][ T9103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.225690][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.289744][ T9111] netlink: 'syz.0.905': attribute type 4 has an invalid length. [ 165.302325][ T9108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.309644][ T9108] IPv6: NLM_F_CREATE should be set when creating new route [ 165.317044][ T9108] IPv6: NLM_F_CREATE should be set when creating new route [ 165.324565][ T9108] IPv6: NLM_F_CREATE should be set when creating new route [ 165.333638][ T9108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.341456][ T9113] 8021q: VLANs not supported on ip_vti0 [ 165.341726][ T9112] netlink: 'syz.0.905': attribute type 4 has an invalid length. [ 165.645456][ T9128] nft_compat: unsupported protocol 0 [ 165.794977][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.815268][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.020361][ T9126] syz_tun: entered allmulticast mode [ 166.033136][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.043450][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 166.059216][ T9120] syz_tun: left allmulticast mode [ 166.083384][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.121863][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 166.149904][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.192952][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 166.274266][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.290466][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 166.572618][ T9167] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 166.605801][ T9167] __nla_validate_parse: 9 callbacks suppressed [ 166.605823][ T9167] netlink: 172 bytes leftover after parsing attributes in process `syz.2.918'. [ 166.638439][ T9176] netlink: 108 bytes leftover after parsing attributes in process `syz.4.922'. [ 166.672258][ T9176] netlink: 108 bytes leftover after parsing attributes in process `syz.4.922'. [ 166.691381][ T9179] netlink: 'syz.3.923': attribute type 39 has an invalid length. [ 166.701048][ T9176] netlink: 84 bytes leftover after parsing attributes in process `syz.4.922'. [ 166.794598][ T9186] pim6reg: entered allmulticast mode [ 167.127524][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 167.210367][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 167.334725][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 167.449023][ T9239] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 167.550677][ T9239] bond2: entered promiscuous mode [ 167.580681][ T9239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.650505][ T9245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.660275][ T9245] bond2: (slave bond3): making interface the new active one [ 167.668060][ T9245] bond3: entered promiscuous mode [ 167.676401][ T9245] bond2: (slave bond3): Enslaving as an active interface with an up link [ 167.758922][ T9260] delete_channel: no stack [ 167.768917][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.944'. [ 168.514728][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 168.533935][ T9282] netlink: 'syz.2.949': attribute type 17 has an invalid length. [ 168.544960][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 168.938244][ T9303] netlink: 'syz.1.954': attribute type 1 has an invalid length. [ 168.999406][ T9305] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 169.705311][ T9314] openvswitch: netlink: IP tunnel dst address not specified [ 169.722154][ T9314] openvswitch: netlink: IP tunnel dst address not specified [ 169.746046][ T9312] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 170.081247][ T9328] bond2: entered allmulticast mode [ 170.096026][ T9328] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.122603][ T9329] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 170.277146][ T9343] bridge0: port 3(vlan2) entered blocking state [ 170.301064][ T9343] bridge0: port 3(vlan2) entered disabled state [ 170.323024][ T9343] vlan2: entered allmulticast mode [ 170.339571][ T9343] bridge0: entered allmulticast mode [ 170.372956][ T9343] vlan2: left allmulticast mode [ 170.381956][ T9343] bridge0: left allmulticast mode [ 170.505061][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.520724][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.643165][ T9323] bridge0: left allmulticast mode [ 170.718781][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.753892][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.893256][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.931316][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.546315][ T9402] sctp: [Deprecated]: syz.4.986 (pid 9402) Use of int in max_burst socket option. [ 171.546315][ T9402] Use struct sctp_assoc_value instead [ 171.730935][ T9412] netlink: 'syz.4.989': attribute type 30 has an invalid length. [ 171.759283][ T9411] netlink: 'syz.4.989': attribute type 30 has an invalid length. [ 171.989298][ T9424] netem: incorrect gi model size [ 171.994845][ T9424] netem: change failed [ 172.012790][ T9419] __nla_validate_parse: 10 callbacks suppressed [ 172.012812][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 172.046018][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 172.081417][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 172.123448][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 172.143012][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 172.203400][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 172.298950][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 172.311311][ T9437] macsec0: entered promiscuous mode [ 172.338332][ T9437] macsec0: entered allmulticast mode [ 172.354891][ T9437] veth1_macvtap: entered allmulticast mode [ 172.364037][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 172.374544][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 172.393779][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.992'. [ 173.227889][ T9487] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 173.271917][ T9487] `: renamed from bond0 (while UP) [ 174.082387][ T9532] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 174.094355][ T9532] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 174.258006][ T959] IPVS: starting estimator thread 0... [ 174.355883][ T9545] IPVS: using max 26 ests per chain, 62400 per kthread [ 174.507022][ T9540] netlink: 'syz.1.1025': attribute type 11 has an invalid length. [ 174.940389][ T9572] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 175.003196][ T9577] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 175.258782][ T9595] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 175.326259][ T9597] netlink: 'syz.3.1040': attribute type 5 has an invalid length. [ 175.422989][ T9601] raw_sendmsg: syz.3.1042 forgot to set AF_INET. Fix it! [ 175.951261][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.975089][ T9627] macsec4: entered promiscuous mode [ 175.982768][ T9627] bridge0: entered promiscuous mode [ 175.990079][ T9627] macsec4: entered allmulticast mode [ 175.996271][ T9627] bridge0: entered allmulticast mode [ 176.003199][ T9627] bridge0: port 3(macsec4) entered blocking state [ 176.013501][ T9627] bridge0: port 3(macsec4) entered disabled state [ 176.029208][ T9627] bridge0: left allmulticast mode [ 176.034462][ T9627] bridge0: left promiscuous mode [ 176.383648][ T9647] netlink: 'syz.3.1057': attribute type 5 has an invalid length. [ 176.493256][ T9654] netlink: 'syz.3.1063': attribute type 7 has an invalid length. [ 176.509501][ T9654] netlink: 'syz.3.1063': attribute type 8 has an invalid length. [ 176.700392][ T9668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.873426][ T9672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.894370][ T9679] tipc: Enabling of bearer rejected, failed to enable media [ 177.099655][ T9687] __nla_validate_parse: 85 callbacks suppressed [ 177.099677][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 177.121327][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 177.256530][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 177.317440][ T9694] xt_HMARK: proto mask must be zero with L3 mode [ 177.454394][ T9703] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 177.493063][ T9703] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1072'. [ 177.948679][ T9720] team0: Port device team_slave_0 removed [ 177.978764][ T9720] team0: Port device team_slave_1 removed [ 177.996123][ T9720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.027458][ T9720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.044427][ T9720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.053706][ T9720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.083691][ T9720] bond0: (slave wlan0): Releasing active interface [ 178.125008][ T9726] erspan0: entered allmulticast mode [ 178.132204][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 178.277935][ T9734] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1081'. [ 178.308035][ T9735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1082'. [ 178.560212][ T9748] macsec4: entered promiscuous mode [ 178.565954][ T9748] macsec4: entered allmulticast mode [ 178.693777][ T9755] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.728350][ T9755] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.758741][ T9755] gretap1: entered promiscuous mode [ 178.776138][ T9755] gretap1: entered allmulticast mode [ 178.792097][ T9757] tipc: Enabled bearer , priority 12 [ 178.825011][ T9757] nbd: must specify a size in bytes for the device [ 179.028839][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'. [ 179.281703][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'. [ 179.363540][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 179.913968][ T10] tipc: Node number set to 3480642892 [ 179.945687][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.204714][ T9783] veth1_macvtap: left allmulticast mode [ 180.211476][ T9783] macsec0: left promiscuous mode [ 180.296852][ T9783] bridge1: left promiscuous mode [ 180.377141][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.415413][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.515776][ T192] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.544456][ T192] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.569794][ T192] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.624718][ T192] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.677523][ T192] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.698769][ T9842] netlink: 'syz.2.1102': attribute type 142 has an invalid length. [ 180.739916][ T192] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.853034][ T9854] x_tables: ip_tables: ipvs.0 match: invalid size 40 (kernel) != (user) 72 [ 181.468509][ T9890] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 181.547954][ T9892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.555800][ T9892] IPv6: NLM_F_CREATE should be set when creating new route [ 182.172313][ T9917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.295345][ T9924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.307440][ T9934] netlink: 'syz.3.1129': attribute type 4 has an invalid length. [ 182.315223][ T9934] __nla_validate_parse: 9 callbacks suppressed [ 182.315243][ T9934] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1129'. [ 182.342716][ T9924] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 182.363271][ T9924] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 182.389250][ T9942] netlink: 'syz.4.1133': attribute type 11 has an invalid length. [ 182.416304][ T9942] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1133'. [ 182.438163][ T9934] `: renamed from bond0 [ 182.649576][ T9951] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1136'. [ 182.679952][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 183.167319][ T9977] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 183.221217][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 183.292292][ T9977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.301809][ T9977] bond4: (slave bond5): making interface the new active one [ 183.310294][ T9977] bond4: (slave bond5): Enslaving as an active interface with an up link [ 183.343801][ T9991] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 183.357140][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1143'. [ 183.395329][ T9988] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 183.418612][ T9977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.501812][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 183.515708][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1149'. [ 183.778383][T10007] erspan0: left promiscuous mode [ 183.881452][T10007] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.930672][T10007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.979013][ T5877] block nbd2: Receive control failed (result -32) [ 212.119294][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 212.119645][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 212.125993][ T5877] Bluetooth: hci2: command 0x0401 tx timeout [ 235.625888][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.578368][T10019] netlink: 'syz.4.1157': attribute type 21 has an invalid length. [ 237.586527][T10019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1157'. [ 237.840184][T10035] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.852669][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 237.883787][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 237.897767][T10030] netlink: 'syz.0.1158': attribute type 3 has an invalid length. [ 237.907190][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 237.918256][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 237.977762][T10039] geneve2: entered promiscuous mode [ 237.994270][T10039] geneve2: entered allmulticast mode [ 238.033449][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.056710][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.105557][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.133218][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.253039][T10059] netlink: 'syz.4.1164': attribute type 11 has an invalid length. [ 238.262170][T10059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1164'. [ 238.423861][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 238.424766][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 238.471142][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 238.573340][T10075] macvlan0: entered promiscuous mode [ 238.582506][T10075] macvlan0: entered allmulticast mode [ 238.666726][T10077] syzkaller1: entered promiscuous mode [ 238.674200][T10077] syzkaller1: entered allmulticast mode [ 238.802897][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 238.961299][T10086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.981273][T10095] IPVS: set_ctl: invalid protocol: 31435 172.20.20.63:20002 [ 238.990785][T10094] netlink: 'syz.1.1175': attribute type 18 has an invalid length. [ 239.173552][ T5964] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.211024][ T5964] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.435886][ T5964] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.455225][ T5964] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.620411][T10111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.781667][T10086] gtp0: entered promiscuous mode [ 239.813167][T10086] gtp0: entered allmulticast mode [ 239.860368][T10111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.002364][T10111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.100830][T10125] syz.2.1181 (10125) used greatest stack depth: 16696 bytes left [ 240.220439][T10111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.261674][T10136] tipc: Enabled bearer , priority 0 [ 240.279477][T10133] syzkaller0: entered promiscuous mode [ 240.303085][T10133] syzkaller0: entered allmulticast mode [ 240.563306][ T8549] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.616646][ T5964] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.638513][ T5964] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.659759][T10135] tipc: Resetting bearer [ 240.689535][T10135] tipc: Disabling bearer [ 240.754799][ T8548] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.914797][T10167] syzkaller0: entered promiscuous mode [ 240.923620][T10167] syzkaller0: entered allmulticast mode [ 240.935044][T10167] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 241.212855][T10182] bridge_slave_0: invalid flags given to default FDB implementation [ 241.230112][T10182] bridge_slave_0: invalid flags given to default FDB implementation [ 241.349033][T10189] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 241.363654][T10189] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 241.678171][ T5964] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.700904][ T5964] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.721571][ T5964] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.733944][ T5964] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.854076][T10212] dvmrp0: entered allmulticast mode [ 241.864359][T10212] dvmrp0: left allmulticast mode [ 241.971224][T10223] netlink: 'syz.4.1212': attribute type 3 has an invalid length. [ 242.387612][T10254] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 242.395879][T10258] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 242.602888][T10268] __nla_validate_parse: 10 callbacks suppressed [ 242.602910][T10268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1224'. [ 242.699648][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 242.737665][T10282] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1228'. [ 242.766557][T10280] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 242.914977][T10280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.118810][T10295] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 243.214600][T10311] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1231'. [ 243.231448][T10280] vlan2: entered allmulticast mode [ 243.242499][T10280] veth1: entered allmulticast mode [ 243.266113][T10299] pim6reg527: entered allmulticast mode [ 243.641089][T10331] xt_l2tp: wrong L2TP version: 0 [ 243.703349][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 244.569606][T10385] netlink: 'syz.3.1251': attribute type 83 has an invalid length. [ 244.622767][T10386] ip6gretap1: entered allmulticast mode [ 244.642119][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 244.793129][T10397] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 244.949199][T10406] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 245.021143][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 245.203587][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 245.381633][T10427] macvlan0: left allmulticast mode [ 245.428430][T10431] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 245.601053][T10431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.659453][T10436] bond4: (slave geneve3): making interface the new active one [ 245.712540][T10436] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 245.738535][T10450] netlink: 'syz.3.1268': attribute type 12 has an invalid length. [ 245.750411][T10450] netlink: 'syz.3.1268': attribute type 29 has an invalid length. [ 245.751328][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1272'. [ 245.762910][T10450] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1268'. [ 245.778779][T10450] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 245.856411][T10462] netlink: 'syz.3.1273': attribute type 1 has an invalid length. [ 245.872221][T10455] netem: invalid attributes len -24 [ 245.877900][T10455] netem: change failed [ 245.955108][T10463] bond0: (slave gretap2): making interface the new active one [ 245.965056][T10463] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 245.997499][T10470] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.786981][T10490] netlink: 'syz.3.1281': attribute type 39 has an invalid length. [ 246.845061][T10495] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 246.917160][T10505] tipc: Invalid UDP bearer configuration [ 246.917225][T10505] tipc: Enabling of bearer rejected, failed to enable media [ 248.052930][T10587] netlink: 'syz.0.1309': attribute type 1 has an invalid length. [ 248.069602][T10587] netlink: 'syz.0.1309': attribute type 11 has an invalid length. [ 248.080760][T10587] __nla_validate_parse: 5 callbacks suppressed [ 248.080783][T10587] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1309'. [ 248.236749][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 248.257337][T10594] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1311'. [ 248.275601][T10594] xt_socket: unknown flags 0xd0 [ 248.573040][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 248.591912][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 248.600778][T10617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.610797][T10617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1319'. [ 248.691876][T10621] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1321'. [ 248.713252][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1322'. [ 248.732719][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'. [ 248.928848][T10641] tc_dump_action: action bad kind [ 248.989107][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'. [ 250.073162][T10689] syzkaller0: entered promiscuous mode [ 250.079218][T10689] syzkaller0: entered allmulticast mode [ 250.198463][T10689] tipc: Enabled bearer , priority 0 [ 250.367732][T10704] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 250.669547][T10715] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.707800][T10687] tipc: Resetting bearer [ 251.144789][T10736] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 251.268052][ T5954] tipc: Node number set to 3406462180 [ 254.331262][T10687] tipc: Disabling bearer [ 254.538391][T10740] __nla_validate_parse: 6 callbacks suppressed [ 254.538411][T10740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1353'. [ 254.729724][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 254.796275][T10753] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1358'. [ 254.811283][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 255.242543][T10675] Set syz1 is full, maxelem 65536 reached [ 255.266260][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 255.306745][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 255.608807][T10782] wg2: entered promiscuous mode [ 255.626260][T10782] wg2: entered allmulticast mode [ 255.704168][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1370'. [ 255.757507][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 255.841102][T10793] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1373'. [ 256.025059][T10793] syzkaller0: entered promiscuous mode [ 256.032052][T10793] syzkaller0: entered allmulticast mode [ 256.040182][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1375'. [ 256.093031][T10793] tipc: Enabled bearer , priority 0 [ 256.164430][T10815] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 256.255219][T10821] bond6: (slave geneve2): making interface the new active one [ 256.263768][T10821] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 256.305702][ T8548] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.323239][ T8548] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.333122][ T8548] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.362071][ T8548] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.450812][T10826] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 256.470662][T10833] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 256.535118][T10832] netlink: 'syz.1.1385': attribute type 12 has an invalid length. [ 256.642703][T10792] tipc: Resetting bearer [ 256.966243][T10856] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20000 [ 257.079021][T10859] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 257.206517][ T5954] tipc: Node number set to 3832864759 [ 258.444782][T10792] tipc: Disabling bearer [ 258.489555][T10859] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 258.620696][T10872] openvswitch: netlink: Missing key (keys=40, expected=80) [ 259.240305][T10895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.045723][T10935] nbd: must specify a device to reconfigure [ 260.279982][T10946] __nla_validate_parse: 11 callbacks suppressed [ 260.280004][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 260.902309][T10974] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.075887][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1419'. [ 261.131510][T10975] unsupported nla_type 52263 [ 261.146825][T10986] pim6reg1: entered promiscuous mode [ 261.168705][T10986] pim6reg1: entered allmulticast mode [ 261.325058][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 261.423254][T10996] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1423'. [ 261.510639][T11003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.725711][T11013] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1429'. [ 261.768986][T11013] IPVS: ip_vs_add_dest(): server weight less than zero [ 261.840497][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 261.918774][T11027] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 261.928197][T11025] netlink: 430 bytes leftover after parsing attributes in process `syz.2.1435'. [ 262.061479][T11034] openvswitch: netlink: Missing key (keys=40, expected=100) [ 262.211397][T11036] wlan1 speed is unknown, defaulting to 1000 [ 262.454780][ T192] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.492320][ T192] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.562126][ T192] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.582916][ T192] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.638288][T11056] gre1: entered promiscuous mode [ 262.654773][T11056] gre1: entered allmulticast mode [ 262.744580][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 262.978303][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1450'. [ 263.135887][T11085] netlink: 'syz.3.1453': attribute type 4 has an invalid length. [ 263.849544][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 265.822546][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 265.858575][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 265.925197][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1463'. [ 265.954278][T11136] netlink: 211672 bytes leftover after parsing attributes in process `syz.2.1467'. [ 265.955319][T11128] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 266.123771][T11143] team0: Device gtp0 is of different type [ 266.219262][T11149] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 266.271738][T11148] tipc: New replicast peer: 255.255.255.255 [ 266.276976][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 266.278797][T11148] tipc: Enabled bearer , priority 10 [ 266.287208][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 266.617021][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 266.787545][T11185] netlink: 'syz.4.1481': attribute type 64 has an invalid length. [ 266.788427][T11186] netlink: 'syz.4.1481': attribute type 64 has an invalid length. [ 266.811345][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1481'. [ 266.831926][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1481'. [ 267.287476][T11216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.413639][T11223] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 267.597855][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 267.698686][T11236] netlink: 'syz.3.1498': attribute type 17 has an invalid length. [ 267.716484][T11236] erspan0: left allmulticast mode [ 267.755124][T11236] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 267.803528][T11236] gretap1: left promiscuous mode [ 267.809762][T11236] gretap1: left allmulticast mode [ 267.816445][T11236] macsec4: left promiscuous mode [ 267.821401][T11236] macsec4: left allmulticast mode [ 267.828352][T11236] gtp0: left promiscuous mode [ 267.833082][T11236] gtp0: left allmulticast mode [ 268.699392][T11302] ip6gre3: entered allmulticast mode [ 269.127329][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 269.678294][T11357] sctp: [Deprecated]: syz.4.1537 (pid 11357) Use of int in max_burst socket option deprecated. [ 269.678294][T11357] Use struct sctp_assoc_value instead [ 270.848923][T11420] __nla_validate_parse: 11 callbacks suppressed [ 270.848947][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 270.881727][T11420] team0: Device ip6gre1 is of different type [ 271.286020][T11445] netlink: 'syz.4.1562': attribute type 33 has an invalid length. [ 271.523699][T11457] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1565'. [ 271.884379][T11470] delete_channel: no stack [ 271.939119][T11472] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1571'. [ 272.392716][T11500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.451150][T11500] netlink: 'syz.4.1581': attribute type 4 has an invalid length. [ 272.509645][T11508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.659491][T11511] syzkaller0: entered promiscuous mode [ 272.683940][T11511] syzkaller0: entered allmulticast mode [ 273.106234][T11494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.116244][T11494] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 273.209402][T11494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.245533][T11494] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 273.309670][T11494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.386253][T11494] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 273.450823][T11494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.457335][T11494] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 273.870023][T11552] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1593'. [ 273.889779][ T5863] wlan1 speed is unknown, defaulting to 1000 [ 273.897621][T11552] netlink: zone id is out of range [ 273.902824][T11552] netlink: zone id is out of range [ 273.971697][T11552] netlink: get zone limit has 8 unknown bytes [ 274.277818][T11566] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 274.313225][T11566] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1598'. [ 274.457959][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'. [ 274.513859][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 274.631286][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 274.773459][T11593] netlink: 'syz.2.1606': attribute type 58 has an invalid length. [ 274.790825][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 275.012983][T11607] : entered promiscuous mode [ 275.230001][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'. [ 275.701949][T11647] syzkaller0: entered promiscuous mode [ 275.711099][T11647] syzkaller0: entered allmulticast mode [ 275.720576][T11648] tipc: Enabled bearer , priority 0 [ 275.731294][T11647] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.762254][T11647] tipc: Resetting bearer [ 275.770778][T11646] tipc: Resetting bearer [ 275.869022][T11646] tipc: Disabling bearer [ 275.922034][T11665] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.165316][T11669] syzkaller0: entered promiscuous mode [ 276.176617][T11669] syzkaller0: entered allmulticast mode [ 276.655863][T11688] __nla_validate_parse: 6 callbacks suppressed [ 276.655884][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 278.285782][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.310051][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.325869][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.344123][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.372550][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.385654][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.393734][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.407375][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.418861][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.435766][T11698] netlink: 'syz.0.1637': attribute type 3 has an invalid length. [ 278.522539][T11712] tipc: Enabled bearer , priority 0 [ 278.626728][T11712] syzkaller0: entered promiscuous mode [ 278.650899][T11712] syzkaller0: entered allmulticast mode [ 278.736360][T11712] tipc: Resetting bearer [ 278.780803][T11711] tipc: Resetting bearer [ 278.869831][T11711] tipc: Disabling bearer [ 278.909962][T11736] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1650'. [ 279.358622][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1658'. [ 279.583727][T11758] bond5: (slave bridge7): making interface the new active one [ 279.663854][T11758] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 279.770943][T11776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.809048][T11776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.829920][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.830224][T11779] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1667'. [ 279.852358][T11776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.863877][T11776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.880165][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'. [ 281.009277][T11841] tipc: Enabled bearer , priority 0 [ 281.209928][T11841] syzkaller0: entered promiscuous mode [ 281.236936][T11841] syzkaller0: entered allmulticast mode [ 281.243837][T11841] tipc: Resetting bearer [ 281.312655][T11845] team0: Port device geneve0 added [ 281.359048][T11839] tipc: Resetting bearer [ 283.396575][T11839] tipc: Disabling bearer [ 283.559669][T11871] __nla_validate_parse: 111 callbacks suppressed [ 283.559689][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 283.621436][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'. [ 283.744539][T11877] team0: Device wireguard0 is of different type [ 283.777633][T11886] lo: entered promiscuous mode [ 283.785385][T11886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.320410][T11918] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.329134][T11918] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.336404][T11918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.754710][T11938] can: request_module (can-proto-5) failed. [ 284.770612][T11945] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1715'. [ 284.954983][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 284.972071][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 284.989160][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1718'. [ 284.996870][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 285.049386][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 285.071468][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 285.125104][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 285.524378][T11984] validate_nla: 16 callbacks suppressed [ 285.524402][T11984] netlink: 'syz.0.1725': attribute type 2 has an invalid length. [ 285.549566][T11984] netlink: 'syz.0.1725': attribute type 7 has an invalid length. [ 285.584327][T11988] netlink: 'syz.2.1730': attribute type 33 has an invalid length. [ 285.601126][T11990] netem: change failed [ 285.903209][T12004] syzkaller1: entered promiscuous mode [ 285.923080][T12004] syzkaller1: entered allmulticast mode [ 286.173168][T12020] netlink: 'syz.2.1740': attribute type 5 has an invalid length. [ 286.247681][T12020] geneve2: entered promiscuous mode [ 286.253066][T12020] geneve2: entered allmulticast mode [ 286.260508][ T192] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 286.271728][ T192] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 286.287388][T12028] netlink: 'syz.0.1741': attribute type 6 has an invalid length. [ 286.295315][ T192] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 286.329486][ T192] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 286.377679][T12028] pim6reg1: entered promiscuous mode [ 286.383079][T12028] pim6reg1: entered allmulticast mode [ 286.575323][T12050] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 286.750949][T12058] veth5: entered allmulticast mode [ 287.074025][T12073] netem: change failed [ 287.657687][T12115] tipc: Enabled bearer , priority 10 [ 287.696647][T12115] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 287.699206][T12100] "syz.3.1763" (12100) uses obsolete ecb(arc4) skcipher [ 287.766103][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.775109][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.837023][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.854784][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.128334][T12136] tipc: Enabled bearer , priority 0 [ 288.304109][T12136] syzkaller0: entered promiscuous mode [ 288.310055][T12136] syzkaller0: entered allmulticast mode [ 288.316546][T12136] tipc: Resetting bearer [ 288.351658][T12148] tipc: Can't bind to reserved service type 0 [ 288.378417][T12135] tipc: Resetting bearer [ 288.632048][T12158] __nla_validate_parse: 40 callbacks suppressed [ 288.632068][T12158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1784'. [ 288.777479][ T9832] tipc: Node number set to 2633615759 [ 290.242946][T12135] tipc: Disabling bearer [ 290.375024][T12172] syzkaller0: entered promiscuous mode [ 290.394919][T12172] syzkaller0: entered allmulticast mode [ 290.421765][T12170] tipc: Enabled bearer , priority 0 [ 290.576647][T12171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 290.604998][T12170] IPVS: Scheduler module ip_vs_sip not found [ 290.628376][T12187] IPv6: sit1: Disabled Multicast RS [ 290.635013][T12187] sit1: entered allmulticast mode [ 290.637730][T12191] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 290.657133][T12191] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1793'. [ 290.722801][T12170] tipc: Resetting bearer [ 290.745948][T12169] tipc: Resetting bearer [ 290.782419][T12169] tipc: Disabling bearer [ 291.537634][T12223] tipc: Enabled bearer , priority 0 [ 291.585098][T12223] syzkaller0: entered promiscuous mode [ 291.630808][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 291.645568][T12223] syzkaller0: entered allmulticast mode [ 291.695209][T12223] tipc: Resetting bearer [ 291.701839][T12230] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 291.747179][T12221] tipc: Resetting bearer [ 291.817528][T12221] tipc: Disabling bearer [ 292.000720][T12246] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 292.038324][T12252] netlink: 'syz.1.1813': attribute type 83 has an invalid length. [ 292.444749][T12276] netlink: 'syz.0.1820': attribute type 8 has an invalid length. [ 292.455954][T12276] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 293.503605][T12342] sock: sock_timestamping_bind_phc: sock not bind to device [ 293.534699][T12347] netlink: 'syz.1.1841': attribute type 1 has an invalid length. [ 293.564952][T12347] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 293.667353][T12355] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 293.894809][T12372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1849'. [ 293.922293][T12372] gretap3: entered promiscuous mode [ 294.082023][T12382] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1851'. [ 294.108239][T12383] team0: Device wireguard0 is of different type [ 294.311477][T12389] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 294.683348][T12420] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 294.686634][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1860'. [ 294.767230][T12419] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 294.791929][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 294.827294][T12419] openvswitch: netlink: Actions may not be safe on all matching packets [ 294.905160][T12431] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 294.923502][T12431] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1864'. [ 294.957230][T12431] nbd: couldn't find device at index 1048576 [ 295.017108][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 295.090038][T12442] dvmrp0: entered allmulticast mode [ 295.141866][T12447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 295.182088][T12449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 295.356486][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 295.367818][T12455] bridge_slave_1: left allmulticast mode [ 295.373560][T12455] bridge_slave_1: left promiscuous mode [ 295.380245][T12455] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.395868][T12455] bridge_slave_0: left allmulticast mode [ 295.401862][T12455] bridge_slave_0: left promiscuous mode [ 295.407950][T12455] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.421439][T12460] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 295.659483][T12470] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 295.667645][T12467] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1880'. [ 295.683684][T12470] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 295.702178][T12471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.927629][T12480] syzkaller1: entered promiscuous mode [ 295.942344][T12480] syzkaller1: entered allmulticast mode [ 295.982414][T12484] bridge0: port 3(vlan2) entered blocking state [ 295.991300][T12484] bridge0: port 3(vlan2) entered disabled state [ 295.998405][T12484] vlan2: entered allmulticast mode [ 296.003658][T12484] bridge0: entered allmulticast mode [ 296.013880][T12484] vlan2: left allmulticast mode [ 296.025264][T12484] bridge0: left allmulticast mode [ 296.160471][T12495] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 297.406296][T12572] syzkaller1: entered promiscuous mode [ 297.411844][T12572] syzkaller1: entered allmulticast mode [ 297.459360][T12574] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 297.482447][T12574] netlink: 'syz.1.1908': attribute type 3 has an invalid length. [ 297.516105][T12574] NCSI netlink: No device for ifindex 131080 [ 297.625014][T12588] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 297.633310][T12588] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 298.658127][T12650] netlink: 'syz.1.1931': attribute type 2 has an invalid length. [ 298.766389][T12654] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 298.998395][T12664] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 299.019349][T12664] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 299.037685][T12666] tipc: Enabling of bearer rejected, failed to enable media [ 299.058395][T12669] tipc: Enabled bearer , priority 0 [ 299.089922][T12669] syzkaller0: entered promiscuous mode [ 299.110224][T12669] syzkaller0: entered allmulticast mode [ 299.135297][T12669] __nla_validate_parse: 18 callbacks suppressed [ 299.135318][T12669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1939'. [ 299.149172][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 299.202157][T12669] tipc: Resetting bearer [ 299.216196][T12662] tipc: Resetting bearer [ 299.282919][T12662] tipc: Disabling bearer [ 299.590485][T12698] syzkaller0: entered promiscuous mode [ 299.600168][T12698] syzkaller0: entered allmulticast mode [ 299.646481][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 299.649015][T12701] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 299.670650][T12704] netlink: 'syz.3.1953': attribute type 20 has an invalid length. [ 299.779000][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 299.796236][ T8549] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.806214][T12704] netlink: 'syz.3.1953': attribute type 20 has an invalid length. [ 299.822135][ T8549] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.844078][ T8549] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.869738][ T8549] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.886596][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1957'. [ 300.240920][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.248681][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.494250][T12712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.527488][T12712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.792169][T12712] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 300.967850][T12721] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1959'. [ 301.031284][ T192] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.067186][ T192] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.077064][ T192] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.104111][ T192] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.135736][ T192] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.170232][ T192] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.202288][ T192] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.225236][ T192] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 301.259456][T12743] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1963'. [ 301.458425][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 301.736324][T12765] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 301.752670][T12763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.857392][T12765] ip6erspan0: entered promiscuous mode [ 302.016297][T12780] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1971'. [ 302.227364][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 302.260679][T12790] syzkaller1: entered promiscuous mode [ 302.275392][T12790] syzkaller1: entered allmulticast mode [ 302.432971][T12792] wlan1 speed is unknown, defaulting to 1000 [ 302.466250][T12787] [ 302.468678][T12787] ====================================================== [ 302.475893][T12787] WARNING: possible circular locking dependency detected [ 302.483023][T12787] syzkaller #0 Not tainted [ 302.487441][T12787] ------------------------------------------------------ [ 302.494715][T12787] syz.4.1972/12787 is trying to acquire lock: [ 302.500780][T12787] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 302.510559][T12787] [ 302.510559][T12787] but task is already holding lock: [ 302.517920][T12787] ffff888142b458f8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 302.528281][T12787] [ 302.528281][T12787] which lock already depends on the new lock. [ 302.528281][T12787] [ 302.538691][T12787] [ 302.538691][T12787] the existing dependency chain (in reverse order) is: [ 302.547726][T12787] [ 302.547726][T12787] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 302.556444][T12787] lock_acquire+0x120/0x360 [ 302.561498][T12787] blk_alloc_queue+0x538/0x620 [ 302.566826][T12787] __blk_mq_alloc_disk+0x15c/0x340 [ 302.572658][T12787] nbd_dev_add+0x46c/0xae0 [ 302.577616][T12787] nbd_init+0x168/0x1f0 [ 302.582307][T12787] do_one_initcall+0x233/0x820 [ 302.587688][T12787] do_initcall_level+0x104/0x190 [ 302.593342][T12787] do_initcalls+0x59/0xa0 [ 302.598219][T12787] kernel_init_freeable+0x334/0x4b0 [ 302.604156][T12787] kernel_init+0x1d/0x1d0 [ 302.609031][T12787] ret_from_fork+0x3fc/0x770 [ 302.614254][T12787] ret_from_fork_asm+0x1a/0x30 [ 302.619573][T12787] [ 302.619573][T12787] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 302.626806][T12787] lock_acquire+0x120/0x360 [ 302.632009][T12787] fs_reclaim_acquire+0x72/0x100 [ 302.637481][T12787] prepare_alloc_pages+0x153/0x610 [ 302.643112][T12787] __alloc_frozen_pages_noprof+0x123/0x370 [ 302.649447][T12787] __alloc_pages_noprof+0xa/0x30 [ 302.655026][T12787] pcpu_populate_chunk+0x182/0xb30 [ 302.660681][T12787] pcpu_alloc_noprof+0xcbf/0x16b0 [ 302.666346][T12787] bpf_map_alloc_percpu+0xbc/0x1b0 [ 302.672004][T12787] prealloc_init+0x225/0x630 [ 302.677206][T12787] htab_map_alloc+0x6ce/0xc70 [ 302.682418][T12787] map_create+0xaa0/0x14d0 [ 302.687401][T12787] __sys_bpf+0x60f/0x870 [ 302.692283][T12787] __x64_sys_bpf+0x7c/0x90 [ 302.697315][T12787] do_syscall_64+0xfa/0x3b0 [ 302.702456][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.708876][T12787] [ 302.708876][T12787] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 302.716630][T12787] validate_chain+0xb9b/0x2140 [ 302.721916][T12787] __lock_acquire+0xab9/0xd20 [ 302.727129][T12787] lock_acquire+0x120/0x360 [ 302.732159][T12787] __mutex_lock+0x187/0x1350 [ 302.737261][T12787] pcpu_alloc_noprof+0x286/0x16b0 [ 302.742807][T12787] sbitmap_init_node+0x1e1/0x630 [ 302.748279][T12787] sbitmap_queue_init_node+0x3e/0x4d0 [ 302.754172][T12787] blk_mq_init_tags+0x110/0x280 [ 302.759544][T12787] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 302.765530][T12787] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 302.772002][T12787] nbd_start_device+0x17f/0xb10 [ 302.777394][T12787] nbd_genl_connect+0x135b/0x18f0 [ 302.783504][T12787] genl_family_rcv_msg_doit+0x212/0x300 [ 302.789569][T12787] genl_rcv_msg+0x60e/0x790 [ 302.794693][T12787] netlink_rcv_skb+0x205/0x470 [ 302.800011][T12787] genl_rcv+0x28/0x40 [ 302.804538][T12787] netlink_unicast+0x82c/0x9e0 [ 302.809944][T12787] netlink_sendmsg+0x805/0xb30 [ 302.815261][T12787] __sock_sendmsg+0x21c/0x270 [ 302.820509][T12787] ____sys_sendmsg+0x505/0x830 [ 302.825812][T12787] ___sys_sendmsg+0x21f/0x2a0 [ 302.831104][T12787] __x64_sys_sendmsg+0x19b/0x260 [ 302.836575][T12787] do_syscall_64+0xfa/0x3b0 [ 302.841634][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.848137][T12787] [ 302.848137][T12787] other info that might help us debug this: [ 302.848137][T12787] [ 302.858368][T12787] Chain exists of: [ 302.858368][T12787] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 302.858368][T12787] [ 302.872560][T12787] Possible unsafe locking scenario: [ 302.872560][T12787] [ 302.880046][T12787] CPU0 CPU1 [ 302.885462][T12787] ---- ---- [ 302.890862][T12787] lock(&q->q_usage_counter(io)#52); [ 302.896369][T12787] lock(fs_reclaim); [ 302.903309][T12787] lock(&q->q_usage_counter(io)#52); [ 302.911210][T12787] lock(pcpu_alloc_mutex); [ 302.915716][T12787] [ 302.915716][T12787] *** DEADLOCK *** [ 302.915716][T12787] [ 302.923871][T12787] 6 locks held by syz.4.1972/12787: [ 302.929061][T12787] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 302.937340][T12787] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 302.946307][T12787] #2: ffff888025a09188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 302.957703][T12787] #3: ffff888025a090d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 302.968853][T12787] #4: ffff888142b458f8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 302.979634][T12787] #5: ffff888142b45930 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 302.990658][T12787] [ 302.990658][T12787] stack backtrace: [ 302.996574][T12787] CPU: 0 UID: 0 PID: 12787 Comm: syz.4.1972 Not tainted syzkaller #0 PREEMPT(full) [ 302.996597][T12787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.996607][T12787] Call Trace: [ 302.996615][T12787] [ 302.996624][T12787] dump_stack_lvl+0x189/0x250 [ 302.996648][T12787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.996665][T12787] ? __pfx__printk+0x10/0x10 [ 302.996685][T12787] ? print_lock_name+0xde/0x100 [ 302.996705][T12787] print_circular_bug+0x2ee/0x310 [ 302.996722][T12787] check_noncircular+0x134/0x160 [ 302.996740][T12787] validate_chain+0xb9b/0x2140 [ 302.996763][T12787] __lock_acquire+0xab9/0xd20 [ 302.996786][T12787] ? pcpu_alloc_noprof+0x286/0x16b0 [ 302.996806][T12787] lock_acquire+0x120/0x360 [ 302.996826][T12787] ? pcpu_alloc_noprof+0x286/0x16b0 [ 302.996850][T12787] __mutex_lock+0x187/0x1350 [ 302.996865][T12787] ? pcpu_alloc_noprof+0x286/0x16b0 [ 302.996885][T12787] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 302.996906][T12787] ? kasan_save_track+0x4f/0x80 [ 302.996924][T12787] ? kasan_save_track+0x3e/0x80 [ 302.996940][T12787] ? __kasan_kmalloc+0x93/0xb0 [ 302.996957][T12787] ? blk_mq_init_tags+0x85/0x280 [ 302.996974][T12787] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 302.996994][T12787] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 302.997008][T12787] ? pcpu_alloc_noprof+0x286/0x16b0 [ 302.997026][T12787] ? nbd_genl_connect+0x135b/0x18f0 [ 302.997046][T12787] ? genl_family_rcv_msg_doit+0x212/0x300 [ 302.997064][T12787] ? genl_rcv_msg+0x60e/0x790 [ 302.997080][T12787] ? __pfx___mutex_lock+0x10/0x10 [ 302.997092][T12787] ? ____sys_sendmsg+0x505/0x830 [ 302.997108][T12787] ? do_syscall_64+0xfa/0x3b0 [ 302.997121][T12787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.997140][T12787] pcpu_alloc_noprof+0x286/0x16b0 [ 302.997165][T12787] sbitmap_init_node+0x1e1/0x630 [ 302.997180][T12787] ? __kasan_kmalloc+0x93/0xb0 [ 302.997199][T12787] sbitmap_queue_init_node+0x3e/0x4d0 [ 302.997215][T12787] blk_mq_init_tags+0x110/0x280 [ 302.997233][T12787] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 302.997256][T12787] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 302.997271][T12787] ? kfree+0x18e/0x440 [ 302.997290][T12787] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 302.997312][T12787] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 302.997333][T12787] ? sysfs_add_file_mode_ns+0x259/0x300 [ 302.997357][T12787] nbd_start_device+0x17f/0xb10 [ 302.997380][T12787] ? device_create_file+0xf4/0x1c0 [ 302.997394][T12787] nbd_genl_connect+0x135b/0x18f0 [ 302.997417][T12787] ? __pfx_nbd_genl_connect+0x10/0x10 [ 302.997441][T12787] ? __nla_parse+0x40/0x60 [ 302.997463][T12787] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 302.997483][T12787] genl_family_rcv_msg_doit+0x212/0x300 [ 302.997503][T12787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.997524][T12787] ? stack_trace_save+0x9c/0xe0 [ 302.997543][T12787] genl_rcv_msg+0x60e/0x790 [ 302.997568][T12787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.997584][T12787] ? __pfx_nbd_genl_connect+0x10/0x10 [ 302.997608][T12787] netlink_rcv_skb+0x205/0x470 [ 302.997629][T12787] ? __lock_acquire+0xab9/0xd20 [ 302.997648][T12787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.997665][T12787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.997691][T12787] ? down_read+0x1ad/0x2e0 [ 302.997705][T12787] genl_rcv+0x28/0x40 [ 302.997720][T12787] netlink_unicast+0x82c/0x9e0 [ 302.997742][T12787] ? __pfx_netlink_unicast+0x10/0x10 [ 302.997761][T12787] ? netlink_sendmsg+0x642/0xb30 [ 302.997773][T12787] ? skb_put+0x11b/0x210 [ 302.997788][T12787] netlink_sendmsg+0x805/0xb30 [ 302.997804][T12787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.997818][T12787] ? aa_sock_msg_perm+0xf1/0x1d0 [ 302.997832][T12787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.997849][T12787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.997862][T12787] __sock_sendmsg+0x21c/0x270 [ 302.997882][T12787] ____sys_sendmsg+0x505/0x830 [ 302.997899][T12787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.997917][T12787] ? import_iovec+0x74/0xa0 [ 302.997935][T12787] ___sys_sendmsg+0x21f/0x2a0 [ 302.997950][T12787] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.997977][T12787] ? __fget_files+0x2a/0x420 [ 302.997990][T12787] ? __fget_files+0x3a0/0x420 [ 302.998006][T12787] __x64_sys_sendmsg+0x19b/0x260 [ 302.998022][T12787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.998041][T12787] ? rcu_is_watching+0x15/0xb0 [ 302.998056][T12787] ? do_syscall_64+0xbe/0x3b0 [ 302.998071][T12787] do_syscall_64+0xfa/0x3b0 [ 302.998083][T12787] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.998103][T12787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.998117][T12787] ? clear_bhb_loop+0x60/0xb0 [ 302.998132][T12787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.998147][T12787] RIP: 0033:0x7fc10e38ebe9 [ 302.998161][T12787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.998174][T12787] RSP: 002b:00007fc10f1c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.998193][T12787] RAX: ffffffffffffffda RBX: 00007fc10e5c5fa0 RCX: 00007fc10e38ebe9 [ 302.998203][T12787] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000a [ 302.998214][T12787] RBP: 00007fc10e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 302.998223][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.998231][T12787] R13: 00007fc10e5c6038 R14: 00007fc10e5c5fa0 R15: 00007ffd4b85e418 [ 302.998248][T12787] [ 303.526452][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.746220][T12787] nbd3: detected capacity change from 0 to 127 [ 303.758358][ T5880] block nbd3: Receive control failed (result -32) [ 303.758785][ T5184] block nbd3: Receive control failed (result -32)