last executing test programs: 36.622640413s ago: executing program 0 (id=3364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd, 0x100, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x4, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) (async) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd, 0x100, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x4, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) (async) 36.354798953s ago: executing program 0 (id=3368): socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02399484860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x30000000}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 35.638797695s ago: executing program 0 (id=3374): r0 = socket$phonet(0x23, 0x2, 0x1) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) 6.866592489s ago: executing program 0 (id=3376): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800a000fe08000008009f000d000002080026006c0900"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.852900516s ago: executing program 0 (id=3380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0xb35, 0x70bd22, 0x25dfdbfb}, 0x14}}, 0xa0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0xb35, 0x70bd22, 0x25dfdbfb}, 0x14}}, 0xa0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000034) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000034) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.851725631s ago: executing program 0 (id=3382): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r2, r0}) 3.872026151s ago: executing program 3 (id=3410): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbea252800000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000006b0000000a00060007d187f8952e00000c002a00bd060802110000010a0006000802110000000000040034000a003400020202020202000004002a00"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x20008010) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x1ff, 0x10}, &(0x7f0000000500)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001c40)) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x3, 0x2) (async) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x38, &(0x7f0000000080)}, 0x12022) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000d000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x130, 0x1b, 0x400, 0x70bd27, 0x25dfdbfc, {0x16}, [@generic="4c97679173704a6bd02cef28504533921578e1015888485c4721a658c50ce29aae30e8ec07ddd1338eb80dc3bb839cc86ac23128", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="3547700ccd6ec1dc249775cf406a6b00699a43cbc9af69584bbaf91e32c651996cc937249a8e4847d50168dcf6c8e1c255cf71e2f95e955553c4e14366424bb4c8", @generic="8a42f60b57bd706151a18b13e06e88d7a2f59142d7ddc429ba8187a277121438c8794f8819905ebbe84fc6b6acb190e6f40d901d3895bc111f07f3a5379b8342d2d605c038194fdd0167242c5c01fe0f3616d89467c4d001560b4ae62e7eb448222b2595cc18cd3395f7d27d3d0b6cb2ce96c48c48979dbae70405b446cdcff64a", @typed={0xe, 0x85, 0x0, 0x0, @str='syzkaller\x00'}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r11, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r11, 0x1) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) 3.721773018s ago: executing program 1 (id=3411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x800, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000180)="08c9d84784ec44c8283394800130f548fc00dcfb5d39ec6f635764979174caf4ab19e01b9fb936435068d564a0deac7ebef8597276d6c1d9c4b7e5a20bc23e50a5ca04b5df4e93278c485b2e696157aeebf50be58a87b6f054d003d244a81d25ab2e389b1665e15aaf08443545e7b041e68a156fb269fde6dd00b96321e7824b8912a55321dc0c05af941af975e41bed87c24905d9fe6126a9edbd036ab1191243a29c205c2ca20f42b3", 0xaa}, {&(0x7f0000000380)="54cea1a2ff36fc1ffc93c44263e1048613cc58a85bb872b478da9533455b8dd5a46d6bc3c7fab793aa90cfbd0ddca37eb23afafd6e71cfb09b64f6de81df782f0e5f81e778cd36118f9c4f3d140c137b9b4e015528dad82e13773d14b171051643887277d2d3fcdb14360b6ac394593fb900e8adc5c26e7f33868dfd6e7f1c7751293d97c3f8f18aa0c6bb146fd23cae29f97a88fcbf", 0x96}, {&(0x7f00000005c0)="93e1207af153eb83f32e6522ed87f5bb537abf5b69c8a2309ef0d4f4a78aa895d982b727fa1c320f54ff932dfb3e05bd78451c7418ccef0820d9014d10de3215e5e3917b375790e8bb0f130398e6881ad133d87a", 0x54}, {&(0x7f0000000640)="02317dde0f03979ce85b138ce866057e0f7dedd0985faba633c01b795aff1d802ea9cdda82c6e27f9c3f88df66813e3a076fbe08388853ef8625d0ea6725ecbdfdb210d920bda36e4a4e181c8655b511fadde774ee4dd7184156db458669cfd3bf75c87c0926ab70b13d830f34f9c20a740702eb6806a21c7b57d86988f46f89dcd4c2288aee852ade385a56d0aadf29d7bc06f11b5e8ebce80ae8c68b3324e957ef04f7fc711d491ac7046a469032f16051a7585881f041c004df950588e208122efcf7", 0xc4}, {&(0x7f0000000740)="7439837bae53db6af897789af0b0f004c394053dda1cbe8b91fc03ff1873499bf73b01c9aef2d8b9ab9b86ded25ac086b4f4eeaa9a771d421acf3961d917b878341b415d7b34a9e7861bb11c72e9f58e1f53d8b0e48fbbaaad9c35281c09337610888d7024be904404306f8f58eff2784c", 0x71}, {&(0x7f00000007c0)="8899caa325bc52f8d1ae8baa2ffb8cd46505609ad0d9ea3ad2232596a1", 0x1d}, {&(0x7f00000008c0)="05d98ac0662b0d208a100eaa03bb51988f26400024a16017c7b20646a703767fe6f13980d5d6ccaf5da3dbbb1af7118b1ec516ca13f747988a2241822fbbadf6683273289263d1ba7563eb0f2a20dee86aa603623349d8d77cc43383ade66a0418765a0cce4062a7cf3230af04b8fd1891060a9f259084a5cfcb3b4586aa44ed3e42ad1a23f9802660b21f6f384a2202ac593836ddbb3a9ac21164d33cbef61638802e87e2a4160edb921ef1db48d60f248bca09c50efd9e83c69fae33879601b9e5fd4c17240b851119739d23f9d590d7dfacedba019cc8561847383489cdaae43d8b7f4c240a71dd69cd258d32601498c0f15a8be1cc66", 0xf8}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="a9ae54b16b6be334299a4a45038bc6e5ccc50407fa9b95f86ad02538aa82cd047167f3237d56548436446def8ade6e08efb5c012ba8c24a489cb78223fe82ef34e0453146aa798344ebdf866ad6e", 0x4e}, {&(0x7f0000002a40)="380bfe8c9f753c3f909d5be42c4795a65017251b8c5e5a1b11aaf4a4ccc5a65d7c407cf79f73388a60ffc2c7deab021a515821cdcabc812f3872242efaffbad20273d8a4f79fc1be2dd5fb8df1b1d0d6c18d09ac5a6d5f70a41c649fbc56d39650cad120abe6e0992452f2751fe471f2b5ef5f7613a58b3d9ec326d1e0856b679d3967887899af5fb754fb984c3d7ebd03967f5f590ec6c53030709c", 0x9c}], 0xa}, 0x48c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.160461722s ago: executing program 2 (id=3415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400ddea4e883e41b88e00000000d6a6460000020000000000000000000000080017004e224e22"], 0x24}}, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'\x00', {0x2, 0x4e21, @remote}}) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.508679618s ago: executing program 4 (id=3416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xff9c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001880)={@multicast2, @multicast2, 0x0}, &(0x7f00000018c0)=0xc) sendto$packet(r5, &(0x7f0000000880)="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", 0x1000, 0x800, &(0x7f0000001900)={0x11, 0xf7, r6, 0x1, 0x2}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x49, 0x0, 0x0, 0xffefffff}, {0x6, 0x20, 0x0, 0x1}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 2.154582917s ago: executing program 1 (id=3417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xb90, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 1.978363306s ago: executing program 4 (id=3418): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 1.977790894s ago: executing program 3 (id=3419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x8cd0468688a66181, 0x8000d, 0x80, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000080}, 0x4050) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x3f, &(0x7f0000000080), 0x4) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r10, 0x0, 0x13, 0x0, &(0x7f0000000080)) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r11, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000400)={0x67, @remote, 0x4e24, 0x3, 'fo\x00', 0x20, 0x8, 0x3b}, 0x2c) setsockopt$inet_tcp_TLS_RX(r10, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "2a7320b30793545a", "42350034e8b7b01eedf5f0204b8ed7c7", "8b5bd5bc", "e21e310776eafa85"}, 0x28) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x6) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000ff000000000000000700fa00"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r3, &(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x80, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000ba6fae467ce773890900010073797a3000000100fff9090001797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100657874686472000014000280080001400000000c08000640000000040900010073797a3000000000140000001100010000000000000000000700000a00"/191], 0xc4}}, 0x0) 1.97729771s ago: executing program 2 (id=3420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x280, 0x0, 0x370, 0x280, 0x370, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x28, r3, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}}, 0x8800) 1.656987484s ago: executing program 3 (id=3421): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)={0x34, r0, 0x90d, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x1ffe000, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES8=r1, @ANYBLOB="00012bbd7000ffdbdf25010000000000000001410000002000170000101d0000c8676574683a6272696467655f736c6176655f310000", @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.55654697s ago: executing program 1 (id=3422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) 1.375989874s ago: executing program 4 (id=3423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b", 0xb0}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f2", 0x3f}], 0x2, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(r4, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x15}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socket$xdp(0x2c, 0x3, 0x0) epoll_create(0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000540)="ad56b6c5820fae9d6ccd3292ea54c7beef915d564c90c2004e264aa55bad11e95a4c9472da0960472b466e572604dead37af00887728f5b9606f17c630f20000000400", 0x43) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.374805803s ago: executing program 1 (id=3424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x14, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x14, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x88, 0x0, 0x85, 0x0, 0x0, 0x8, 0x65}], {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) 1.22252742s ago: executing program 3 (id=3425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) r1 = socket(0x10, 0x80002, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @private}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtclass={0x8c, 0x28, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xd}, {0xa, 0xfff1}, {0xc, 0xd}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1f, 0x2, 0x6, 0x7730, 0x1, 0x991}, {0x8, 0x1, 0x0, 0xeb, 0xa3eb, 0x97e}, 0x68, 0x0, 0x4, 0x8, 0x2}}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0x8c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) (async) socket(0x10, 0x80002, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @private}, &(0x7f0000000040)=0xc) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtclass={0x8c, 0x28, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xd}, {0xa, 0xfff1}, {0xc, 0xd}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1f, 0x2, 0x6, 0x7730, 0x1, 0x991}, {0x8, 0x1, 0x0, 0xeb, 0xa3eb, 0x97e}, 0x68, 0x0, 0x4, 0x8, 0x2}}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0x8c}}, 0x0) (async) 1.140303299s ago: executing program 1 (id=3426): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30203, 0x48104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 927.379919ms ago: executing program 4 (id=3427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/206, &(0x7f0000000300)=0xce) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x5, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) 925.513403ms ago: executing program 2 (id=3428): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000240)="26dfdc0295c8ce1fa0663f38cfd7b0906db3a1deb650370be79f6d106f3878c25db132e8a9bcc8c9b231c5ddfae778d5cc3aeedd6606e8af3363e8f1afe8e3da41da88c626e96cee085248feba1e1b33ff6db62bc2fc9bc0eaa1524496866cdd114321eece258b08fe38b5ce9245789bfa092ea7bacecbd32b39d9a4ea22c82f18bf7497ec609fe3112c876cfa7e6f21e2b7ebdab87b1ca103e482e16f00baf1f1dd2447374e9cd84273fbe6791dc61c6dc86ea5beeae2dc78348340db6a8d0462f4a7658687e1311df9d2552408253323daac1f5e2952909f09874ab3693841a7853bdc92968d4f72406dba46d35573e1e872625c5b5056", 0xf8, 0x48084, &(0x7f0000000340)={0xa, 0x0, 0x7fffffff, @empty, 0x8, 0x2}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) socket$l2tp6(0xa, 0x2, 0x73) (async) sendto$l2tp6(r0, &(0x7f0000000240)="26dfdc0295c8ce1fa0663f38cfd7b0906db3a1deb650370be79f6d106f3878c25db132e8a9bcc8c9b231c5ddfae778d5cc3aeedd6606e8af3363e8f1afe8e3da41da88c626e96cee085248feba1e1b33ff6db62bc2fc9bc0eaa1524496866cdd114321eece258b08fe38b5ce9245789bfa092ea7bacecbd32b39d9a4ea22c82f18bf7497ec609fe3112c876cfa7e6f21e2b7ebdab87b1ca103e482e16f00baf1f1dd2447374e9cd84273fbe6791dc61c6dc86ea5beeae2dc78348340db6a8d0462f4a7658687e1311df9d2552408253323daac1f5e2952909f09874ab3693841a7853bdc92968d4f72406dba46d35573e1e872625c5b5056", 0xf8, 0x48084, &(0x7f0000000340)={0xa, 0x0, 0x7fffffff, @empty, 0x8, 0x2}, 0x20) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) (async) 892.624818ms ago: executing program 3 (id=3429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x3, 0x0, 0x0, {0x1}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x41) 698.694185ms ago: executing program 2 (id=3430): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @empty}], 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xc}, {0x4, 0x1}, {0xffff, 0xad9d0b04e8f61bff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 607.292228ms ago: executing program 3 (id=3431): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x130, 0x30, 0x10, 0x0, 0x25dfdbfc, {0x9}, [{0x11c, 0x1, [@m_connmark={0x118, 0x20, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x3, 0x7, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x999, 0x20000000, 0x7, 0x5}, 0x49a9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0x2, 0x5, 0x3}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2e1, 0x5, 0x5, 0x1, 0xb3}, 0x8000}}]}, {0x75, 0x6, "86628d0c17c7c01590a8fb4c3a0f84a8763ca5740e287c7a71310346824f22579d5a8703d83dcec07e22b31fa08e2459092e0764aebe3fbe666a84e5dad65f703f5c905a77e98ad13bfe5ece0999ff3191d67c6cbea97cc588268677932051e7e43bd0c72206b6c623f7b3d294022593b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 592.751312ms ago: executing program 4 (id=3432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80032002) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x38, r2, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}]}, 0x38}, 0x1, 0x2}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000)=0xd939, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) (async, rerun: 64) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async, rerun: 64) sendmsg$inet_sctp(r5, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1a000}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r8, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x72}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', r10, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xd, 0x0, &(0x7f0000000100)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x94) (rerun: 64) 358.677473ms ago: executing program 1 (id=3433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@exit, @generic={0x0, 0x0, 0x4, 0x23, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x0, 0x6, 0x6, 0x5, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x63, &(0x7f00000002c0)=""/99, 0x41100, 0x4, '\x00', 0x0, @fallback=0xb2e3abc36742e23c, r3, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x0, 0x5, 0x1}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x6e}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1e0, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xdc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xcb, 0xc, "5c6802f3e6aa6608c048b15449a629118bc75ba2e488781fce3068a8ed0b30835c9605048e913d28152df26c97a828825ba854f8cd6c74a424f95e206502f58069165611a445fe9519a11b1a31ba2e143e5fc66ed191777e33c744b874e2cd6ea4e4e99527c3b6bbeb56f94bf2cddd337991e4f5249bc15508b54334bcc465588d1e1744117b521bc49e0a1c0f807c1337cf62272b412460b9cce81c37565955b73e5b06e1915f990eab5f6f7aa0b8f11e515dfc3820dd5d8e11052f75e642632b0f2945297930"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) getsockopt$sock_cred(r5, 0x1, 0xa, 0xfffffffffffffffd, &(0x7f0000000040)) close(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xefff, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880) close(0x3) 303.011189ms ago: executing program 2 (id=3434): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) epoll_create(0x10) (async) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x2}) (async, rerun: 64) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b136bc80", @ANYRES16=0x0, @ANYBLOB="020229bd7000fbdbdf251600000005000200010000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async, rerun: 32) shutdown(r0, 0x0) 191.365966ms ago: executing program 4 (id=3435): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x68c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x584, 0x2, [@TCA_BPF_ACT={0x530, 0x1, [@m_xt={0x130, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x130, 0xa, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x8000, 0x3, 0x5, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0xf, 0x9, 0x6000000a, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0xe696, 0x7, 0x2, 0x0, 0x9}}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x8c, 0x20, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "821c7bd76df1489f654641570d214499"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0ba22cb4da640f8e4acc5bbaaf3c6a6d"}]}, {0x3c, 0x6, "c62543422143f076b12a19773f602b93a7835a674e427db034f91317010bd8fce3dbe3626398028c762a773b48bb3c23070e97456af6622a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x120, 0x1c, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x772f, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x45, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd906"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x2, 0x1, 0x79b, 0x8, {0x1, 0x2, 0x8, 0x4, 0x1, 0x5}, {0x2, 0x0, 0x3, 0x0, 0x2, 0x9}, 0x0, 0xb4, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xbc, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x88, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x59, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040c4) socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a00000200000024000180140001"], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r6 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r6, 0x0, 0x19, &(0x7f0000000080)=0x3, 0x2) 0s ago: executing program 2 (id=3436): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="b5e729bd7000fbdbb50f040000000c00018008000300010000"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e3000000000000000000008000800063fe7ff8a254300867c00691371ac935b8436628e59759abbb973b177744ee5ae30789b2b489d6ce4f2acfe202a94d0cdeee7c5468cfbbd3840a7a0141c3e1b0491a6b876a89623854326486df9a52adfbe769d516715cb6b237ed1c4ed4b970a94e7508a8ce9c2fbca"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="142a0c58b0ddba4137b239d057b5e6ed8902000200", @ANYRES16=r6, @ANYBLOB="080426bd7000fbdbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r0, @ANYBLOB="0100fffffffffbdbdf25010000000800050000000000"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Resetting bearer [ 246.840985][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 249.454849][T11597] tipc: Disabling bearer [ 249.473174][ T10] tipc: Node number set to 2886997039 [ 249.513824][ T5636] Bluetooth: hci4: link tx timeout [ 249.521920][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.534260][ T5636] Bluetooth: hci4: link tx timeout [ 249.539630][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.690794][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 249.781388][T11650] hsr_slave_0: left promiscuous mode [ 249.803267][T11650] hsr_slave_1: left promiscuous mode [ 249.827249][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 249.837091][ T5636] Bluetooth: hci4: link tx timeout [ 249.842663][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.852857][ T5636] Bluetooth: hci4: link tx timeout [ 249.861430][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 249.981666][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 250.030634][T11670] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.201943][T11682] IPv6: sit1: Disabled Multicast RS [ 250.240998][T11685] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20001 [ 250.607115][ T5636] Bluetooth: hci4: link tx timeout [ 250.612480][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.769918][ T5636] Bluetooth: hci4: link tx timeout [ 250.775123][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.816890][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 250.959557][T11720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1571'. [ 251.000564][T11720] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 251.059404][ T10] »»»»»» speed is unknown, defaulting to 1000 [ 251.065610][T11723] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 251.084023][ T10] syś2: Port: 1 Link DOWN [ 251.176592][ T29] »»»»»» speed is unknown, defaulting to 1000 [ 251.199975][ T29] syś2: Port: 1 Link ACTIVE [ 251.274415][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 251.561913][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 251.612927][T11761] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 251.727548][T11761] bond4: entered promiscuous mode [ 251.747964][T11761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.778027][T11763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.787961][T11763] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 251.804155][T11763] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 251.822878][T11763] bond4: (slave vcan0): making interface the new active one [ 251.838705][T11763] vcan0: entered promiscuous mode [ 251.849761][T11763] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 251.917058][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 252.083497][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 252.092791][T11777] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1586'. [ 252.106353][T11777] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1586'. [ 252.109263][T11779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.122784][T11779] IPv6: NLM_F_CREATE should be set when creating new route [ 252.130093][T11779] IPv6: NLM_F_CREATE should be set when creating new route [ 252.137358][T11779] IPv6: NLM_F_CREATE should be set when creating new route [ 252.153213][T11779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.372934][T11790] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 252.626313][T11802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1595'. [ 252.655021][T11803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.963173][T11818] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 252.986568][T11818] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1600'. [ 253.006271][T11818] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 253.043001][T11820] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 253.051461][T11818] netlink: 'syz.4.1600': attribute type 8 has an invalid length. [ 253.069242][T11820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.076524][T11820] IPv6: NLM_F_CREATE should be set when creating new route [ 253.079035][T11818] netlink: 582 bytes leftover after parsing attributes in process `syz.4.1600'. [ 253.093846][T11818] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1600'. [ 253.100065][T11828] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 253.114391][T11828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.124150][T11826] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1602'. [ 253.144659][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1600'. [ 253.171218][T11818] netlink: 'syz.4.1600': attribute type 10 has an invalid length. [ 253.339261][T11833] syzkaller1: entered promiscuous mode [ 253.351502][T11833] syzkaller1: entered allmulticast mode [ 253.366163][T11845] nbd: error processing sock list [ 253.694405][T11854] syzkaller1: entered promiscuous mode [ 253.717614][T11854] syzkaller1: entered allmulticast mode [ 254.454317][T11891] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 254.497605][T11891] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.681227][T11899] macvtap0: entered allmulticast mode [ 254.724477][T11899] veth0_macvtap: entered allmulticast mode [ 254.876027][T11914] ip_vti0: entered promiscuous mode [ 255.801789][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905698][T11949] bridge0: port 1(batadv1) entered blocking state [ 255.914353][T11949] bridge0: port 1(batadv1) entered disabled state [ 255.923064][T11949] batadv1: entered allmulticast mode [ 255.936034][T11949] batadv1: entered promiscuous mode [ 256.225238][T11961] validate_nla: 7 callbacks suppressed [ 256.225260][T11961] netlink: 'syz.1.1644': attribute type 3 has an invalid length. [ 256.261444][T11961] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 256.402847][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 256.412972][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 256.696089][T11976] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 256.835771][T11977] team0: Port device team_slave_0 removed [ 257.051889][T11994] __nla_validate_parse: 20 callbacks suppressed [ 257.051911][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1651'. [ 257.092553][T11994] block nbd0: Unsupported socket: should be TCP or UNIX. [ 257.181974][T11994] ±’: renamed from syz_tun (while UP) [ 257.240906][T11994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.256758][T12004] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1656'. [ 257.268016][T12002] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 257.376462][T12013] ipt_REJECT: TCP_RESET invalid for non-tcp [ 257.905581][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 258.096101][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 258.208964][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'. [ 258.218490][T12062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.234877][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'. [ 258.274288][T12063] xt_recent: Unsupported userspace flags (000000b1) [ 258.301332][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1673'. [ 258.346539][T12065] ip6tnl1: entered allmulticast mode [ 258.763217][T12086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 259.012152][T12098] syzkaller0: entered promiscuous mode [ 259.027919][T12098] syzkaller0: entered allmulticast mode [ 259.412016][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1690'. [ 259.460244][T12116] netlink: 'syz.3.1690': attribute type 49 has an invalid length. [ 259.648176][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1693'. [ 260.174689][T12143] syzkaller0: entered promiscuous mode [ 260.181451][T12143] syzkaller0: entered allmulticast mode [ 260.774764][T12183] netlink: 'syz.0.1713': attribute type 1 has an invalid length. [ 260.894907][T12187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.261373][T12206] syzkaller0: entered promiscuous mode [ 263.280207][T12206] syzkaller0: entered allmulticast mode [ 263.493206][T12222] SET target dimension over the limit! [ 263.643536][T12226] netlink: 'syz.3.1724': attribute type 12 has an invalid length. [ 264.166339][T12256] __nla_validate_parse: 9 callbacks suppressed [ 264.166361][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 264.254580][T12255] syzkaller1: entered promiscuous mode [ 264.270400][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 264.280783][T12255] syzkaller1: entered allmulticast mode [ 264.319962][T12256] xfrm2: entered promiscuous mode [ 264.325572][T12256] xfrm2: entered allmulticast mode [ 264.557491][T12273] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1735'. [ 264.587436][T12273] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1735'. [ 264.652485][T12271] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1735'. [ 264.669942][T12271] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1735'. [ 264.820494][T12286] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 264.966953][T12300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1740'. [ 265.093857][T12293] bond6: (slave bridge7): making interface the new active one [ 265.119658][T12293] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 266.007642][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 266.300387][T12362] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 4, id = 0 [ 266.400879][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 266.411936][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1760'. [ 266.443345][T12361] IPVS: stopping master sync thread 12362 ... [ 266.909318][T12395] tipc: New replicast peer: 255.255.255.255 [ 266.921177][T12395] tipc: Enabled bearer , priority 10 [ 267.375136][T12419] Cannot find del_set index 3 as target [ 267.523262][T12425] tipc: Enabling of bearer rejected, already enabled [ 267.556341][T12425] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 267.700585][T12425] bond5: entered promiscuous mode [ 267.736957][T12425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.763840][T12431] gre3: entered promiscuous mode [ 267.898292][T12425] bond5: (slave bridge7): making interface the new active one [ 267.921335][T12425] bridge7: entered promiscuous mode [ 267.949725][T12425] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 268.084686][T12444] xfrm2: entered promiscuous mode [ 268.109224][T12444] xfrm2: entered allmulticast mode [ 268.587846][T12471] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 268.612559][T12471] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 268.965099][ T49] tipc: Subscription rejected, illegal request [ 269.007665][T12490] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 269.085609][T12494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.093804][T12490] netlink: 'syz.0.1794': attribute type 1 has an invalid length. [ 269.144378][T12497] xt_hashlimit: size too large, truncated to 1048576 [ 269.230821][T12502] –: renamed from vxcan1 (while UP) [ 269.510855][T12514] __nla_validate_parse: 11 callbacks suppressed [ 269.510876][T12514] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1805'. [ 269.869821][T12530] netlink: 'syz.3.1811': attribute type 4 has an invalid length. [ 269.887696][T12530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1811'. [ 269.925789][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'. [ 269.968367][T12530] .`: renamed from bond0 [ 269.993655][T12535] batman_adv: batadv0: Adding interface: dummy0 [ 270.000264][T12535] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.031247][T12535] batman_adv: batadv0: Interface activated: dummy0 [ 270.095522][T12539] batadv0: mtu less than device minimum [ 270.120868][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.134301][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.146462][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.158591][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.170577][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.182535][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.190361][T12542] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 270.195593][T12539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 270.253042][T12533] bond0: entered promiscuous mode [ 270.259201][T12533] bond0: entered allmulticast mode [ 270.282310][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 270.490440][T12517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.593120][T12559] xt_limit: Overflow, try lower: 604147548/4200216962 [ 271.110444][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'. [ 271.130697][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 271.264312][T12585] netlink: 'syz.0.1830': attribute type 1 has an invalid length. [ 271.378572][T12590] pimreg: left allmulticast mode [ 271.483036][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 271.494276][T12591] x_tables: duplicate underflow at hook 3 [ 271.606204][T12602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1834'. [ 272.433899][T12643] netlink: 'syz.2.1848': attribute type 21 has an invalid length. [ 272.479178][T12643] netlink: 'syz.2.1848': attribute type 6 has an invalid length. [ 272.516729][T12643] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1848'. [ 272.563826][T12651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1851'. [ 272.586996][T12652] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 273.103470][T12683] netlink: 'syz.2.1859': attribute type 3 has an invalid length. [ 273.249623][T12688] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20002 [ 273.376201][T12690] veth0_to_bond: default FDB implementation only supports local addresses [ 273.488787][T12695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.535350][T12695] batadv_slave_1: entered promiscuous mode [ 274.028380][T12710] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.121128][T12720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.313773][T12735] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 274.419153][T12735] syzkaller0: entered promiscuous mode [ 274.440305][T12735] syzkaller0: entered allmulticast mode [ 276.605512][T12744] net_ratelimit: 32 callbacks suppressed [ 276.605536][T12744] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 276.897340][T12773] __nla_validate_parse: 5 callbacks suppressed [ 276.897371][T12773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1886'. [ 276.948240][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1886'. [ 276.969200][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 277.037073][T12777] netlink: 'syz.3.1888': attribute type 28 has an invalid length. [ 277.045535][T12777] netlink: 'syz.3.1888': attribute type 3 has an invalid length. [ 277.053490][T12777] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1888'. [ 277.204119][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1889'. [ 277.564907][T12801] ip6t_srh: unknown srh match flags 5F28 [ 277.851272][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 277.882709][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 278.042106][T12820] syzkaller0: entered promiscuous mode [ 278.064287][T12820] syzkaller0: entered allmulticast mode [ 278.155791][T12828] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1902'. [ 278.339768][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 278.883658][T12861] netlink: 'syz.0.1911': attribute type 2 has an invalid length. [ 278.911750][T12861] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1911'. [ 279.361418][T12884] xt_hashlimit: overflow, try lower: 3/0 [ 280.479836][T12937] netlink: 'syz.0.1939': attribute type 29 has an invalid length. [ 281.106077][T12962] batadv1: left allmulticast mode [ 281.136256][T12962] batadv1: left promiscuous mode [ 281.161802][T12962] bridge0: port 1(batadv1) entered disabled state [ 281.418965][T12973] syzkaller1: entered promiscuous mode [ 281.424715][T12973] syzkaller1: entered allmulticast mode [ 281.446084][T12968] ipvlan0 speed is unknown, defaulting to 1000 [ 281.512442][T12981] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.688278][T12990] netlink: 'syz.1.1956': attribute type 32 has an invalid length. [ 281.691992][T12982] bond6: option resend_igmp: invalid value (32767) [ 281.717997][T12982] bond6: option resend_igmp: allowed values 0 - 255 [ 281.731315][T12982] bond6 (unregistering): Released all slaves [ 282.134347][T13001] __nla_validate_parse: 40 callbacks suppressed [ 282.134369][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 282.511209][T12968] »»»»»» speed is unknown, defaulting to 1000 [ 282.513822][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 282.616152][T13024] bridge_slave_1: left allmulticast mode [ 282.648034][T13024] bridge_slave_1: left promiscuous mode [ 282.664484][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.695867][T13024] bridge_slave_0: left allmulticast mode [ 282.703376][T13024] bridge_slave_0: left promiscuous mode [ 282.710258][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.879804][T13043] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 282.887958][T13043] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1968'. [ 283.087019][T13048] netlink: 'syz.4.1969': attribute type 58 has an invalid length. [ 283.127236][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1969'. [ 283.370595][T13051] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1971'. [ 283.519706][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1974'. [ 283.545039][T13058] netlink: 'syz.1.1974': attribute type 7 has an invalid length. [ 283.560575][T13058] netlink: 'syz.1.1974': attribute type 8 has an invalid length. [ 283.569068][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 283.733104][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 284.267533][T13090] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 284.462997][T13096] netlink: 'syz.1.1984': attribute type 12 has an invalid length. [ 284.534438][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 284.556627][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 284.566591][T13104] netlink: 'syz.3.1985': attribute type 39 has an invalid length. [ 284.692052][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a23e400: rx timeout, send abort [ 284.819765][T13114] netlink: 'syz.1.1988': attribute type 30 has an invalid length. [ 284.876890][T13111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.019912][T13118] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.030006][T13118] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.192251][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a23fc00: rx timeout, send abort [ 285.200871][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a23e400: abort rx timeout. Force session deactivation [ 285.690331][T13139] bond7: entered promiscuous mode [ 285.700718][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a23fc00: abort rx timeout. Force session deactivation [ 285.726106][T13139] bond7: entered allmulticast mode [ 285.995038][T13164] netlink: 'syz.0.2004': attribute type 7 has an invalid length. [ 286.024156][T13164] netlink: 'syz.0.2004': attribute type 8 has an invalid length. [ 286.336558][T13176] syzkaller0: entered promiscuous mode [ 286.360025][T13176] syzkaller0: entered allmulticast mode [ 287.301003][T13220] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 287.598189][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.555038][T13245] __nla_validate_parse: 76 callbacks suppressed [ 288.555061][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 289.601150][T13247] netlink: 'syz.0.2023': attribute type 3 has an invalid length. [ 289.632663][T13247] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 289.661979][T13247] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2023'. [ 289.805556][T13260] netlink: 'syz.3.2027': attribute type 49 has an invalid length. [ 289.946566][T13267] sctp: [Deprecated]: syz.0.2030 (pid 13267) Use of int in max_burst socket option. [ 289.946566][T13267] Use struct sctp_assoc_value instead [ 290.744486][T13280] syzkaller0: entered promiscuous mode [ 290.757017][T13280] syzkaller0: entered allmulticast mode [ 290.784428][T13295] syzkaller0: entered promiscuous mode [ 290.790853][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 290.819114][T13295] syzkaller0: entered allmulticast mode [ 291.026094][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2043'. [ 291.035988][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2043'. [ 293.130282][T13313] netlink: 'syz.3.2042': attribute type 4 has an invalid length. [ 293.399612][T13322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2044'. [ 293.431728][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 293.436700][T13331] netlink: 'syz.1.2047': attribute type 12 has an invalid length. [ 293.461715][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2049'. [ 293.471563][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2044'. [ 293.501635][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 293.607867][T13331] bond4: option primary_reselect: invalid value (255) [ 293.821692][T13347] __nla_validate_parse: 1 callbacks suppressed [ 293.821714][T13347] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2052'. [ 293.891440][T13331] bond4 (unregistering): Released all slaves [ 293.966193][T13336] ip6erspan1: entered allmulticast mode [ 294.186499][T13356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2055'. [ 294.351736][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 294.450111][T13372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2059'. [ 295.006749][T13359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.013503][T13359] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 295.032520][T13359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.039666][T13359] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 295.053208][T13359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.059644][T13359] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 295.070670][T13359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.079974][T13359] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 295.621562][T13404] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2068'. [ 295.870648][T13415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2071'. [ 295.898619][T13415] netlink: 'syz.3.2071': attribute type 7 has an invalid length. [ 295.933506][T13415] netlink: 'syz.3.2071': attribute type 8 has an invalid length. [ 295.955796][T13418] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2072'. [ 295.995292][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'. [ 296.190975][T13432] x_tables: duplicate underflow at hook 1 [ 296.344167][T13439] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 296.402112][T13439] bond5 (unregistering): Released all slaves [ 297.172851][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 297.367873][T13499] netlink: 'syz.1.2092': attribute type 142 has an invalid length. [ 297.379177][T13501] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 297.393819][T13501] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 297.678056][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2097'. [ 298.206891][T13543] netlink: 'syz.4.2102': attribute type 2 has an invalid length. [ 298.215834][T13524] "syz.3.2098" (13524) uses obsolete ecb(arc4) skcipher [ 298.234735][T13543] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 298.545338][T13561] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 298.750181][T13576] netlink: 'syz.2.2107': attribute type 21 has an invalid length. [ 298.783876][T13576] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.977483][T13561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.214201][T13597] sch_fq: defrate 0 ignored. [ 299.253282][T13597] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 299.269144][T13582] syzkaller1: entered promiscuous mode [ 299.294588][T13582] syzkaller1: entered allmulticast mode [ 299.300697][T13597] netlink: 'syz.0.2111': attribute type 11 has an invalid length. [ 299.349900][T13597] __nla_validate_parse: 2 callbacks suppressed [ 299.349921][T13597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2111'. [ 299.452296][T13597] syzkaller0: entered promiscuous mode [ 299.459042][T13597] syzkaller0: entered allmulticast mode [ 299.556471][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2112'. [ 299.598991][T13603] bond0: (slave bond_slave_1): Releasing backup interface [ 299.707772][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 300.165331][ T7831] tipc: Subscription rejected, illegal request [ 300.183443][T13630] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2119'. [ 300.236150][T13630] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 300.413265][T13641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.522477][ T5841] IPVS: starting estimator thread 0... [ 300.593319][T13650] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004 [ 300.623161][T13646] IPVS: using max 27 ests per chain, 64800 per kthread [ 300.643100][T13650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.157330][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 301.177374][T13671] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2132'. [ 301.227356][T13671] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2132'. [ 301.823944][T13676] batman_adv: batadv0: Interface deactivated: dummy0 [ 301.945266][T13676] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.976792][T13699] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 302.282350][T13711] validate_nla: 1 callbacks suppressed [ 302.282373][T13711] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 302.436895][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 302.474129][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 302.556728][T13711] bond6: entered promiscuous mode [ 302.592636][T13711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.030978][T13739] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2149'. [ 303.093080][T13739] netlink: 'syz.4.2149': attribute type 4 has an invalid length. [ 303.613495][T13763] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 303.927940][ T30] audit: type=1800 audit(1779509207.454:11): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2154" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2045 res=0 errno=0 [ 304.331415][T13797] bond0: (slave bond_slave_1): Releasing backup interface [ 304.398226][T13803] __nla_validate_parse: 6 callbacks suppressed [ 304.398248][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 304.452335][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 304.962987][T13840] netlink: 'syz.1.2171': attribute type 20 has an invalid length. [ 304.973540][T13840] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.022036][T13845] netlink: 'syz.3.2170': attribute type 4 has an invalid length. [ 305.100453][T13833] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 305.131744][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 305.144431][T13833] bond9 (unregistering): Released all slaves [ 305.164845][T13854] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2173'. [ 305.183818][T13855] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2174'. [ 305.187415][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 305.204836][T13854] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2173'. [ 305.216387][T13854] netlink: 'syz.1.2173': attribute type 2 has an invalid length. [ 305.225889][T13854] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2173'. [ 305.251048][ T5754] »»»»»» speed is unknown, defaulting to 1000 [ 305.292052][ T5754] syś2: Port: 1 Link DOWN [ 305.510902][T13867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2178'. [ 305.530479][T13866] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 305.555839][T13867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2178'. [ 305.949958][T13892] netlink: zone id is out of range [ 305.955338][T13892] netlink: zone id is out of range [ 305.961665][T13892] netlink: zone id is out of range [ 305.967354][T13892] netlink: zone id is out of range [ 305.974897][T13892] netlink: zone id is out of range [ 305.995110][T13892] netlink: zone id is out of range [ 306.032708][T13892] netlink: zone id is out of range [ 306.063219][T13892] netlink: zone id is out of range [ 306.084445][T13892] netlink: zone id is out of range [ 306.110232][T13892] netlink: zone id is out of range [ 307.303366][T13961] x_tables: duplicate underflow at hook 3 [ 307.874256][T13978] xt_TCPMSS: Only works on TCP SYN packets [ 308.128176][T13993] ip6gre0: Master is either lo or non-ether device [ 308.155390][T13995] ip6gre0: Master is either lo or non-ether device [ 308.899820][T14023] macvlan0: entered promiscuous mode [ 309.580902][T14048] IPVS: Error connecting to the multicast addr [ 309.630360][T14048] IPVS: Error connecting to the multicast addr [ 309.720232][T14058] __nla_validate_parse: 28 callbacks suppressed [ 309.720254][T14058] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2230'. [ 309.890388][T14067] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2232'. [ 310.120226][T14081] netlink: 'syz.2.2235': attribute type 142 has an invalid length. [ 310.133790][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'. [ 310.153109][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'. [ 310.167308][T14085] netlink: 207288 bytes leftover after parsing attributes in process `syz.1.2236'. [ 310.186966][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'. [ 310.470788][T14099] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2243'. [ 310.864255][T14113] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 310.893065][T14113] netlink: 'syz.0.2247': attribute type 4 has an invalid length. [ 310.920285][T14113] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2247'. [ 310.941113][T14118] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 311.419523][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'. [ 311.444026][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 312.640437][T14202] net_ratelimit: 52 callbacks suppressed [ 312.640462][T14202] netlink: Unknown conntrack attr (type=2304, max=9) [ 312.675173][T14202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.682602][T14202] IPv6: NLM_F_CREATE should be set when creating new route [ 312.689956][T14202] IPv6: NLM_F_CREATE should be set when creating new route [ 312.832172][T14207] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 313.940704][T14253] bond9: entered allmulticast mode [ 313.997965][T14257] veth9: entered allmulticast mode [ 314.242303][T14269] vcan1: entered promiscuous mode [ 314.268905][T14269] vcan1: entered allmulticast mode [ 314.786744][T14286] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 314.847247][T14286] bond10 (unregistering): Released all slaves [ 314.912871][T14254] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 314.956398][T14303] 8021q: VLANs not supported on tunl0 [ 315.026164][T14303] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 315.491654][T14328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.649244][T14335] __nla_validate_parse: 15 callbacks suppressed [ 315.649278][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2315'. [ 315.773895][T14335] ip6tnl2: entered allmulticast mode [ 315.861770][T14348] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 315.878652][T14348] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2321'. [ 316.053491][T14355] vlan0: entered promiscuous mode [ 316.226271][T14361] netlink: 'syz.2.2327': attribute type 1 has an invalid length. [ 316.350314][T14367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2327'. [ 316.351068][T14361] bond7: entered promiscuous mode [ 316.437100][T14361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.476246][T14369] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 316.535342][T14366] bond7: (slave bridge8): making interface the new active one [ 316.551657][T14366] bridge8: entered promiscuous mode [ 316.566734][T14366] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 316.582673][T14376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.660425][T14369] bond7: entered promiscuous mode [ 316.666094][T14369] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.120750][T14398] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 317.146914][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'. [ 317.247181][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288595][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 317.355879][T14369] bond7: (slave bridge10): making interface the new active one [ 317.364626][T14369] bridge10: entered promiscuous mode [ 317.371548][T14369] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 317.603891][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 318.404100][T14455] ipt_rpfilter: unknown options [ 318.414655][T14453] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2348'. [ 318.468182][T14457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2348'. [ 318.517261][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 318.545254][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 318.757962][T14453] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 318.860316][T14453] bond8 (unregistering): Released all slaves [ 318.890361][ T49] batman_adv: batadv1: IGMP Querier appeared [ 318.897836][ T49] batman_adv: batadv1: MLD Querier appeared [ 318.977873][T14473] netlink: 'syz.1.2355': attribute type 12 has an invalid length. [ 319.025327][T14474] netlink: 'syz.1.2355': attribute type 12 has an invalid length. [ 319.876137][T14506] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.900465][T14506] bond8: (slave bond9): Enslaving as an active interface with an up link [ 320.165511][T14525] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 320.224651][T14521] veth5: entered allmulticast mode [ 320.242743][T14527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.285124][T14527] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 320.487963][T14539] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.531410][T14539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.806889][T14552] netlink: 'syz.2.2378': attribute type 3 has an invalid length. [ 320.830326][T14552] __nla_validate_parse: 6 callbacks suppressed [ 320.830346][T14552] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2378'. [ 320.922270][T14555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2379'. [ 320.992897][T14562] netlink: 'syz.1.2381': attribute type 10 has an invalid length. [ 321.011741][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 321.187038][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 321.199445][T14576] syzkaller0: entered promiscuous mode [ 321.213460][T14576] syzkaller0: entered allmulticast mode [ 321.246201][T14578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2385'. [ 321.377394][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 321.412669][T14585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.446172][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 321.611354][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 321.611987][T14592] syzkaller0: entered promiscuous mode [ 321.652555][T14592] syzkaller0: entered allmulticast mode [ 321.681512][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 321.718028][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 322.383274][T14639] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 322.544881][T14650] netlink: 'syz.2.2407': attribute type 18 has an invalid length. [ 322.934811][T14664] netlink: 'syz.3.2411': attribute type 4 has an invalid length. [ 323.096267][T14667] syzkaller0: entered promiscuous mode [ 323.128387][T14667] syzkaller0: entered allmulticast mode [ 323.550526][T14696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.569477][T14696] netlink: 'syz.1.2420': attribute type 21 has an invalid length. [ 323.715633][T14705] netlink: 'syz.4.2425': attribute type 30 has an invalid length. [ 323.896283][T14716] netlink: 'syz.0.2426': attribute type 2 has an invalid length. [ 324.060170][T14725] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 324.236600][T14725] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.335169][T14732] bond7: (slave geneve3): making interface the new active one [ 324.346259][T14732] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 324.437462][T14738] syzkaller0: entered promiscuous mode [ 324.446877][T14738] syzkaller0: entered allmulticast mode [ 326.914504][T14746] syzkaller0: entered promiscuous mode [ 326.921382][T14746] syzkaller0: entered allmulticast mode [ 327.006912][T14763] __nla_validate_parse: 40 callbacks suppressed [ 327.006933][T14763] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2436'. [ 327.216670][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2440'. [ 327.262814][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2444'. [ 327.744145][T14806] netlink: 'syz.1.2450': attribute type 1 has an invalid length. [ 327.755950][T14806] nbd: error processing sock list [ 327.828005][T14806] xt_hashlimit: size too large, truncated to 1048576 [ 327.876446][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 328.381435][T14826] geneve2: entered promiscuous mode [ 328.401255][T14826] geneve2: entered allmulticast mode [ 328.445724][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.491054][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.531264][ T7831] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.564160][ T7831] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.773169][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2462'. [ 328.817232][T14846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2462'. [ 329.134872][T14864] netlink: 'syz.1.2469': attribute type 3 has an invalid length. [ 329.184943][T14857] bond10: option mode: invalid value (133) [ 329.193625][ T30] audit: type=1804 audit(1779509232.734:12): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2466" name="/newroot/463/cgroup.controllers" dev="tmpfs" ino=2390 res=1 errno=0 [ 329.217787][ T30] audit: type=1800 audit(1779509232.734:13): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2466" name="cgroup.controllers" dev="tmpfs" ino=2390 res=0 errno=0 [ 329.251875][T14857] bond10 (unregistering): Released all slaves [ 329.289651][T14864] netlink: 'syz.1.2469': attribute type 3 has an invalid length. [ 329.507895][T14878] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2470'. [ 329.704870][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'. [ 329.741377][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 329.904760][T14896] netlink: 'syz.3.2477': attribute type 9 has an invalid length. [ 329.959622][T14902] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 329.967937][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 330.082398][T14900] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 330.189044][T14914] veth1_to_team: entered promiscuous mode [ 330.201124][T14914] gretap0: entered promiscuous mode [ 330.230581][T14914] hsr2: entered promiscuous mode [ 330.444957][T14930] netlink: 'syz.3.2486': attribute type 5 has an invalid length. [ 330.575904][T14930] geneve3: entered promiscuous mode [ 330.591710][T14930] geneve3: entered allmulticast mode [ 330.617158][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 330.641572][T14927] unsupported nlmsg_type 40 [ 330.646748][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 330.646796][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 330.646830][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 331.075615][T14957] netlink: 'syz.4.2494': attribute type 30 has an invalid length. [ 331.105173][T14956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.203700][T14960] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 331.337027][T14957] bond8: option arp_missed_max: invalid value (0) [ 331.354272][T14957] bond8: option arp_missed_max: allowed values 1 - 255 [ 331.379383][T14957] bond8 (unregistering): Released all slaves [ 331.496848][T14975] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 331.721259][T14975] bond10: entered promiscuous mode [ 331.735468][T14975] bond10: entered allmulticast mode [ 331.744058][T14975] 8021q: adding VLAN 0 to HW filter on device bond10 [ 331.915691][T14990] bond4 (unregistering): Released all slaves [ 332.236886][T15009] netlink: 'syz.3.2509': attribute type 10 has an invalid length. [ 332.609910][T15032] __nla_validate_parse: 14 callbacks suppressed [ 332.609932][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'. [ 332.771342][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 333.029064][T15044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2517'. [ 333.055477][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'. [ 333.102823][T15046] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2518'. [ 333.146939][T15046] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2518'. [ 333.243768][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2519'. [ 333.415213][T15053] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 333.636170][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2525'. [ 333.685438][T15065] netlink: 'syz.0.2525': attribute type 5 has an invalid length. [ 333.709730][T15065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2525'. [ 333.728814][T15071] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2527'. [ 333.771383][T15071] openvswitch: netlink: Flow key attr not present in new flow. [ 333.813568][T15065] geneve4: entered promiscuous mode [ 333.836180][T15065] geneve4: entered allmulticast mode [ 333.863526][ T7821] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 333.930693][T15072] syzkaller0: entered promiscuous mode [ 333.957655][T15072] syzkaller0: entered allmulticast mode [ 333.996199][ T7821] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 334.032507][ T7821] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 334.049476][ T7821] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 334.357448][T15102] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 334.623373][T15102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.661774][T15106] bridge_slave_0: invalid flags given to default FDB implementation [ 334.794088][T15109] bond8 (unregistering): Released all slaves [ 335.141833][T15139] syzkaller0: entered promiscuous mode [ 335.155231][T15139] syzkaller0: entered allmulticast mode [ 335.190964][T15142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 335.551129][T15160] blkio.reset_stats is deprecated [ 335.565257][T15165] IPv6: addrconf: prefix option has invalid lifetime [ 335.572082][T15165] IPv6: addrconf: prefix option has invalid lifetime [ 335.796783][T15173] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 336.205385][T15192] macvlan0: entered allmulticast mode [ 336.233110][T15192] dummy0: entered allmulticast mode [ 336.300928][T15210] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 337.085472][T15239] netlink: 'syz.1.2573': attribute type 3 has an invalid length. [ 337.683008][T15258] veth0_to_bridge: entered promiscuous mode [ 337.763585][T15258] veth0_to_bridge: left promiscuous mode [ 337.915661][T15265] syz.1.2584 (15265) used greatest stack depth: 17232 bytes left [ 337.928239][T15271] __nla_validate_parse: 22 callbacks suppressed [ 337.928259][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 338.251372][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 338.587367][T15306] netlink: 'syz.2.2598': attribute type 11 has an invalid length. [ 338.626784][T15307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2596'. [ 338.631939][T15306] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.2598'. [ 338.863767][T15312] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 338.882568][T15317] netlink: 'syz.0.2601': attribute type 2 has an invalid length. [ 338.892442][T15312] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.905410][T15312] gretap1: entered promiscuous mode [ 338.913557][T15312] gretap1: entered allmulticast mode [ 338.930451][T15323] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 0, id = 0 [ 339.454898][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.876177][T15368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.978039][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2620'. [ 340.145564][T15387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2623'. [ 340.173043][T15387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2623'. [ 340.189828][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'. [ 340.455435][T15404] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2627'. [ 340.605375][T15408] netlink: 'syz.2.2629': attribute type 12 has an invalid length. [ 340.869455][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 341.351548][T15449] ipvlan0 speed is unknown, defaulting to 1000 [ 341.632575][ T30] audit: type=1107 audit(1779509245.164:14): pid=15463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='„BśŃā”ĪĢĪ¬_ćįĘ²µa“üóNĖĶšąč6ę“uAh£™ņ]øŃyh‚l»‡]&ÕĢ±0ņµ' [ 342.084285][T15449] »»»»»» speed is unknown, defaulting to 1000 [ 342.326036][T15492] netlink: 'syz.1.2653': attribute type 1 has an invalid length. [ 342.341711][T15492] netlink: 'syz.1.2653': attribute type 2 has an invalid length. [ 342.504792][T15492] netlink: 'syz.1.2653': attribute type 1 has an invalid length. [ 342.518760][T15492] netlink: 'syz.1.2653': attribute type 2 has an invalid length. [ 343.313736][T15538] __nla_validate_parse: 4 callbacks suppressed [ 343.313759][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 343.365845][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 343.370024][T15538] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 343.380192][T15540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2663'. [ 343.410594][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2663'. [ 343.491726][T15545] netlink: 'syz.2.2665': attribute type 3 has an invalid length. [ 343.514852][T15545] netlink: 'syz.2.2665': attribute type 1 has an invalid length. [ 343.535285][T15545] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2665'. [ 343.547498][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2666'. [ 343.732807][T15549] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 343.738574][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'. [ 343.812341][T15553] tc_dump_action: action bad kind [ 343.827836][T15560] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2666'. [ 344.197926][T15580] netlink: 'syz.4.2673': attribute type 1 has an invalid length. [ 344.262721][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.291722][T15580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.301404][T15572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2672'. [ 344.301565][T15583] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.318822][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.322294][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2672'. [ 344.332387][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.344106][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.352304][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.361629][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.369789][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.378000][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.386465][T15583] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 344.564985][T15598] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 346.260591][T15678] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 346.660994][T15702] veth1_virt_wifi: entered promiscuous mode [ 346.705509][T15702] xt_hashlimit: invalid rate [ 346.961255][T15717] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 347.269610][T15731] bond0: entered promiscuous mode [ 347.284732][T15731] bond_slave_0: entered promiscuous mode [ 347.353370][T15736] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 347.368173][T15736] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 347.777620][T15753] syzkaller0: entered promiscuous mode [ 347.794345][T15753] syzkaller0: entered allmulticast mode [ 347.803076][T15756] macvlan0: entered promiscuous mode [ 347.819318][T15756] dummy0: entered promiscuous mode [ 347.832918][T15756] macvlan0: left allmulticast mode [ 347.843883][T15756] dummy0: left allmulticast mode [ 348.164919][T15766] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:5 [ 348.343572][ T30] audit: type=1107 audit(1779509251.874:15): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='„$-µqA`é­evZŻSŃś]:§pźŠ=Ć© ų1MCØĮ?cńĘYśŁ·ßĻr‘;.Ŗŗy/å„“J“~"“²æųz ’ ;’ęŖWŲ¼ĮSĀ§uoŸ!˜B!^"nŖŽō' [ 348.474129][T15778] xt_socket: unknown flags 0xe4 [ 348.532806][T15782] veth0: entered promiscuous mode [ 348.553620][T15779] veth0: left promiscuous mode [ 348.566855][T15785] __nla_validate_parse: 22 callbacks suppressed [ 348.566873][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2741'. [ 348.909217][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 348.918302][T15802] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 348.931507][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 348.951689][T15797] bond5 (unregistering): Released all slaves [ 348.980819][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2747'. [ 348.996093][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2749'. [ 349.013120][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.033589][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.071578][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.118697][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.150235][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.195338][T15809] ipvlan2: entered allmulticast mode [ 349.203940][T15809] batadv_slave_1: entered allmulticast mode [ 349.217605][T15809] batman_adv: batadv0: Adding interface: ipvlan2 [ 349.231010][T15809] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.239047][T15813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2751'. [ 349.270550][T15809] batman_adv: batadv0: Interface activated: ipvlan2 [ 349.284172][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.302506][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.324244][T15815] syz_tun: refused to change device tx_queue_len [ 349.604285][T15827] validate_nla: 29 callbacks suppressed [ 349.604306][T15827] netlink: 'syz.4.2756': attribute type 1 has an invalid length. [ 349.605942][T15805] net_ratelimit: 18 callbacks suppressed [ 349.605960][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.675684][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.841753][T15844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2761'. [ 349.881622][T15829] veth9: entered promiscuous mode [ 349.927472][T15805] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.985880][T15831] syzkaller0: entered promiscuous mode [ 350.012967][T15831] syzkaller0: entered allmulticast mode [ 350.144286][T15854] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2762'. [ 350.196906][T15861] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2765'. [ 351.025275][T15891] vlan1: entered allmulticast mode [ 351.035388][T15891] bond0: entered allmulticast mode [ 351.283002][T15907] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 351.422295][T15907] bond10: entered promiscuous mode [ 351.428175][T15907] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.499991][T15907] bond10: (slave bridge0): making interface the new active one [ 351.533882][T15907] bridge0: entered promiscuous mode [ 351.553634][T15907] bridge0: left promiscuous mode [ 351.714264][T15922] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.740343][T15922] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 351.762747][T15922] team0: Failed to send options change via netlink (err -105) [ 351.815509][T15922] team0: Port device batadv1 added [ 351.976377][T15940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2787'. [ 352.997726][T15993] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 353.010130][T15993] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 353.198286][T16000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.826742][T16033] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 353.971138][T16033] bond11: entered promiscuous mode [ 353.977449][T16033] 8021q: adding VLAN 0 to HW filter on device bond11 [ 354.255683][T16067] __nla_validate_parse: 2 callbacks suppressed [ 354.255704][T16067] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2814'. [ 354.553302][T16038] veth0_macvtap: left allmulticast mode [ 354.775054][T16067] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.847071][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.877231][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.900722][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 354.953802][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 256 - 0 [ 354.995546][T16085] netlink: 'syz.0.2815': attribute type 4 has an invalid length. [ 354.997581][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.072880][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.082667][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.092773][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 256 - 0 [ 355.104430][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.122133][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.144591][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.164334][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 256 - 0 [ 355.246250][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.274437][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.284662][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 355.327289][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 256 - 0 [ 355.510837][T16120] xt_hashlimit: invalid rate [ 355.743642][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2827'. [ 355.766346][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2827'. [ 355.975031][T16143] batadv_slave_1: entered allmulticast mode [ 356.177382][T16156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2833'. [ 357.447960][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2849'. [ 357.507729][T16222] netlink: 'syz.1.2852': attribute type 18 has an invalid length. [ 358.197184][T16242] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.221714][T16242] bond6: (slave lo): Enslaving as an active interface with an up link [ 358.235773][T16242] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 358.700430][T16275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2871'. [ 358.743068][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 359.169752][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2879'. [ 359.424576][T16320] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 359.576122][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 359.631291][T16340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2889'. [ 359.667596][T16327] bond8: (slave geneve3): making interface the new active one [ 359.676973][T16327] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 359.714413][ T3378] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 359.762374][ T3378] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 359.803735][ T3378] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 359.918785][ T3378] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 360.031377][T16356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2894'. [ 360.207173][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'. [ 361.361757][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.380696][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.390803][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.403311][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.415125][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.447842][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.459742][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.470320][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.483541][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.493641][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.713109][T16424] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 361.729489][T16424] bond11 (unregistering): Released all slaves [ 362.448151][T16458] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2924'. [ 362.485718][T16458] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 362.647400][T16413] ipvlan0 speed is unknown, defaulting to 1000 [ 362.673726][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2926'. [ 362.687920][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 362.702998][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 362.703139][T16463] netlink: 'syz.0.2926': attribute type 12 has an invalid length. [ 362.740984][T16463] netlink: 'syz.0.2926': attribute type 11 has an invalid length. [ 362.811493][T16463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.497037][T16500] sctp: [Deprecated]: syz.3.2935 (pid 16500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.497037][T16500] Use struct sctp_sack_info instead [ 363.560139][ T5646] Bluetooth: hci5: command tx timeout [ 363.576199][T16413] »»»»»» speed is unknown, defaulting to 1000 [ 363.646018][T16507] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 363.696478][T16507] netlink: 'syz.2.2939': attribute type 11 has an invalid length. [ 363.717099][T16507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2939'. [ 363.784653][T16507] ve: renamed from gre0 (while UP) [ 363.792842][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2941'. [ 363.810115][T16512] netlink: 'syz.4.2941': attribute type 7 has an invalid length. [ 363.839710][T16512] netlink: 'syz.4.2941': attribute type 8 has an invalid length. [ 364.345386][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.354148][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.364540][T16413] bridge_slave_0: entered allmulticast mode [ 364.372109][T16413] bridge_slave_0: entered promiscuous mode [ 364.391395][T16539] syzkaller0: entered promiscuous mode [ 364.397000][T16539] syzkaller0: entered allmulticast mode [ 364.404445][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.412355][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.420384][T16413] bridge_slave_1: entered allmulticast mode [ 364.427611][T16413] bridge_slave_1: entered promiscuous mode [ 364.499659][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.517328][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.569327][T16413] team0: Port device team_slave_0 added [ 364.586855][T16413] team0: Port device team_slave_1 added [ 364.684779][T16548] __nla_validate_parse: 3 callbacks suppressed [ 364.684799][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 364.811568][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.829764][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.900271][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.963437][T16555] pim6reg: entered allmulticast mode [ 364.978135][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.997720][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.041526][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.128052][T16565] sctp: [Deprecated]: syz.3.2954 (pid 16565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.128052][T16565] Use struct sctp_sack_info instead [ 365.214986][T16567] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2955'. [ 365.360870][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.390806][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.407507][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.436241][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.444945][T16413] hsr_slave_0: entered promiscuous mode [ 365.459636][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.474632][T16413] hsr_slave_1: entered promiscuous mode [ 365.487606][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.514239][T16413] debugfs: 'hsr0' already exists in 'hsr' [ 365.515780][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.520383][T16413] Cannot create hsr debugfs directory [ 365.548860][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'. [ 365.639688][ T5646] Bluetooth: hci5: command tx timeout [ 365.888108][T16598] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 366.382775][T16413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.394412][T16413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.653149][T16413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.682122][T16413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.768216][T16633] netlink: set zone limit has 4 unknown bytes [ 366.804818][T16636] netlink: zone id is out of range [ 366.815544][T16636] netlink: zone id is out of range [ 366.832370][T16636] netlink: zone id is out of range [ 366.837810][T16636] netlink: zone id is out of range [ 366.845270][T16636] netlink: zone id is out of range [ 366.889575][T16636] netlink: zone id is out of range [ 366.897374][T16636] netlink: zone id is out of range [ 366.911594][T16413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.922613][T16636] netlink: zone id is out of range [ 366.927795][T16636] netlink: zone id is out of range [ 366.933701][T16413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.024472][T16639] ip_vti0: left promiscuous mode [ 367.079192][T16413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.101532][T16413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.263798][T16646] geneve4: entered promiscuous mode [ 367.269740][T16646] geneve4: entered allmulticast mode [ 367.718607][ T5646] Bluetooth: hci5: command tx timeout [ 367.970742][T16413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.027587][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.043376][T16413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.051179][T16684] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 368.072245][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.257412][T16684] 8021q: adding VLAN 0 to HW filter on device bond11 [ 368.290978][T16413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.315912][T16701] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 368.342996][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.361942][T16413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.386996][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 368.478108][T16713] veth0: entered promiscuous mode [ 368.689664][T16718] syzkaller0: entered promiscuous mode [ 368.703811][T16718] syzkaller0: entered allmulticast mode [ 368.743363][T16709] veth0: left promiscuous mode [ 368.886873][T16727] geneve4: entered promiscuous mode [ 368.920022][T16727] geneve4: entered allmulticast mode [ 368.994267][T16413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.032020][ T7818] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 369.052082][ T7818] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 369.076884][ T7818] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 369.097175][T16735] xt_CT: No such helper "snmp_trap" [ 369.118969][ T7818] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 369.153337][T16741] sctp: [Deprecated]: syz.3.3000 (pid 16741) Use of int in max_burst socket option. [ 369.153337][T16741] Use struct sctp_assoc_value instead [ 369.165541][T16738] dvmrp0: entered allmulticast mode [ 369.244540][T16413] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.279816][T16747] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 369.297563][T16746] netlink: 'syz.4.3001': attribute type 9 has an invalid length. [ 369.331089][T16747] bond12 (unregistering): Released all slaves [ 369.436540][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.443927][ T7818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.467984][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.475303][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.767093][T16768] __nla_validate_parse: 66 callbacks suppressed [ 369.767115][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3007'. [ 369.809492][ T5646] Bluetooth: hci5: command tx timeout [ 369.815184][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3007'. [ 369.849271][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3008'. [ 370.435013][T16798] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3014'. [ 370.732888][T16824] netlink: 'syz.2.3019': attribute type 2 has an invalid length. [ 370.748130][T16413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.837835][T16413] veth0_vlan: entered promiscuous mode [ 370.857945][T16413] veth1_vlan: entered promiscuous mode [ 370.916749][T16413] veth0_macvtap: entered promiscuous mode [ 370.945579][T16413] veth1_macvtap: entered promiscuous mode [ 370.959747][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'. [ 370.981388][T16829] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3021'. [ 371.008012][T16413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.041720][T16413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.063627][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.076279][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.089308][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.110476][ T1173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.299289][T16797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.473741][ T7825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.501601][ T7825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.538312][T16838] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 373.570041][T16838] bond0: (slave lo): Error: Device can not be enslaved while up [ 373.654866][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.689209][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.752577][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3028'. [ 373.803482][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888069ac1c00: rx timeout, send abort [ 373.984532][T16865] xt_ipcomp: unknown flags 1D [ 373.991700][T16866] xt_ipcomp: unknown flags 1D [ 374.202106][T16875] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 374.231813][T16875] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3035'. [ 374.303686][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888069ac2c00: rx timeout, send abort [ 374.312800][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888069ac1c00: abort rx timeout. Force session deactivation [ 374.463239][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.474965][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.489705][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.505719][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.523319][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.670769][T16888] batadv0: entered promiscuous mode [ 374.711137][T16888] macsec2: entered promiscuous mode [ 374.729182][T16888] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 374.744719][T16888] batadv0: left promiscuous mode [ 374.812238][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888069ac2c00: abort rx timeout. Force session deactivation [ 375.084766][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3040'. [ 375.426711][T16922] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3045'. [ 375.770359][T16943] vlan2: entered allmulticast mode [ 375.775761][T16943] bridge_slave_0: entered allmulticast mode [ 375.814661][T16884] ipvlan0 speed is unknown, defaulting to 1000 [ 375.831346][T16944] net_ratelimit: 20 callbacks suppressed [ 375.831367][T16944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.052247][T16953] batadv0: entered promiscuous mode [ 376.069051][T16953] macsec1: entered promiscuous mode [ 376.080963][T16953] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 376.090694][T16953] batadv0: left promiscuous mode [ 376.132163][T16955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'. [ 376.426447][T16884] »»»»»» speed is unknown, defaulting to 1000 [ 376.573022][T16980] netem: change failed [ 376.582229][T16981] netem: change failed [ 376.598870][ T5636] Bluetooth: hci0: command tx timeout [ 376.932036][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3064'. [ 377.029797][T17013] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3065'. [ 377.141229][T17012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3066'. [ 377.287713][T17017] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 377.363445][T17026] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 377.425732][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 377.443900][T17026] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.546069][T17030] syz_tun: entered allmulticast mode [ 377.663452][T17029] syz_tun: left allmulticast mode [ 377.903874][T17055] x_tables: duplicate underflow at hook 3 [ 377.951682][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.976822][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.996261][T16884] bridge_slave_0: entered allmulticast mode [ 378.017466][T16884] bridge_slave_0: entered promiscuous mode [ 378.067414][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.084704][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.096463][T16884] bridge_slave_1: entered allmulticast mode [ 378.106127][T16884] bridge_slave_1: entered promiscuous mode [ 378.185344][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.217502][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.266045][T17068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3080'. [ 378.287544][T16884] team0: Port device team_slave_0 added [ 378.298785][T16884] team0: Port device team_slave_1 added [ 378.343965][T17074] netlink: 210984 bytes leftover after parsing attributes in process `syz.3.3082'. [ 378.375550][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.383922][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.426231][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.446312][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.457990][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.489282][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.535465][T17077] netlink: 'syz.1.3083': attribute type 1 has an invalid length. [ 378.579931][T17077] ip_vti0: entered promiscuous mode [ 378.631453][T16884] hsr_slave_0: entered promiscuous mode [ 378.655941][T16884] hsr_slave_1: entered promiscuous mode [ 378.682684][T16884] debugfs: 'hsr0' already exists in 'hsr' [ 378.683019][ T5636] Bluetooth: hci0: command tx timeout [ 378.696510][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.699994][T16884] Cannot create hsr debugfs directory [ 378.965837][T17093] syzkaller0: entered promiscuous mode [ 378.975762][T17096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.977318][T17093] syzkaller0: entered allmulticast mode [ 379.077598][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 379.135105][T17087] tipc: Enabled bearer , priority 0 [ 379.259785][T17080] tipc: Resetting bearer [ 379.307650][T17080] tipc: Disabling bearer [ 379.834370][T16884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.855972][T16884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.867116][T16884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 380.063128][T17131] bond13 (unregistering): Released all slaves [ 380.131670][T17143] sctp: [Deprecated]: syz.0.3097 (pid 17143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.131670][T17143] Use struct sctp_sack_info instead [ 380.223422][T17146] netlink: 'syz.4.3101': attribute type 2 has an invalid length. [ 380.252101][T17149] netem: change failed [ 380.377765][T16884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.391626][T16884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.407678][T16884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 380.649920][T16884] team0: Port device netdevsim1 removed [ 380.671340][T16884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.686722][T16884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.714103][T16884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 380.733504][T17174] __nla_validate_parse: 6 callbacks suppressed [ 380.733525][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 380.758168][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 380.771225][ T5636] Bluetooth: hci0: command tx timeout [ 380.835380][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3106'. [ 381.010886][T17181] netlink: 'syz.4.3110': attribute type 1 has an invalid length. [ 381.027479][T16884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.041233][T16884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 381.052723][T16884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 381.744922][T17221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3121'. [ 381.770539][T17221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3121'. [ 381.925579][T17228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3123'. [ 382.085768][T17194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.111272][T16884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 382.149460][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.171361][T16884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.210040][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.218348][T16884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.242597][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.309707][T16884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.327263][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.716540][T16884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.783105][T16884] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.832339][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.839727][ T7821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.848242][ T5636] Bluetooth: hci0: command tx timeout [ 382.886647][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.893922][ T7821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.952126][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 383.028597][T17277] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 383.050851][T17277] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3135'. [ 383.072945][T17283] x_tables: duplicate underflow at hook 2 [ 383.096646][T17282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3136'. [ 384.137690][T17302] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 384.617026][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 385.001926][T16884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.201798][T17351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.209186][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 385.215000][T16884] veth0_vlan: entered promiscuous mode [ 385.217188][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 385.256330][T16884] veth1_vlan: entered promiscuous mode [ 385.257307][T17352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.396403][T17359] netlink: 'syz.4.3150': attribute type 32 has an invalid length. [ 385.422050][T16884] veth0_macvtap: entered promiscuous mode [ 385.512806][T17359] bond13: Setting coupled_control to off (0) [ 385.543808][T16884] veth1_macvtap: entered promiscuous mode [ 385.681763][T16884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.782743][T16884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.792119][T17378] __nla_validate_parse: 4 callbacks suppressed [ 385.792153][T17378] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3156'. [ 385.842974][ T7823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.861805][ T7823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.896520][T17379] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3154'. [ 385.907323][ T7823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.954334][ T7823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.220615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.230790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.332373][ T7832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.344080][ T7832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.379310][T17395] openvswitch: netlink: Flow actions attr not present in new flow. [ 386.499756][T17402] xt_limit: Overflow, try lower: 271964/0 [ 386.516966][T17400] syzkaller0: entered promiscuous mode [ 386.548104][T17400] syzkaller0: entered allmulticast mode [ 386.636159][T17400] tipc: Started in network mode [ 386.664754][T17400] tipc: Node identity aa781188a047, cluster identity 4711 [ 386.703133][T17400] tipc: Enabled bearer , priority 0 [ 386.758343][T17398] tipc: Resetting bearer [ 386.864368][T17398] tipc: Disabling bearer [ 386.871587][T17417] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3167'. [ 386.999838][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.015760][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.032970][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.042307][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.055061][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.155624][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 387.217323][T17428] xt_CONNSECMARK: invalid mode: 0 [ 387.571810][T17443] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 387.802338][T17443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 387.885359][T17447] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 387.936026][T17455] bond12: entered promiscuous mode [ 387.957073][T17455] bond12: entered allmulticast mode [ 388.188324][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 388.221973][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 388.242850][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.254706][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 388.382064][T17420] ipvlan0 speed is unknown, defaulting to 1000 [ 388.467889][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 388.516778][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 388.546933][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.567327][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 388.611166][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 388.752755][T17480] bond13: entered promiscuous mode [ 388.774988][T17480] 8021q: adding VLAN 0 to HW filter on device bond13 [ 388.805327][T17482] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 388.816717][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 388.836686][T17482] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 388.862761][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 388.973536][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 388.985085][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 388.996362][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.024227][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 389.079233][ T5636] Bluetooth: hci3: command tx timeout [ 389.120374][T17420] »»»»»» speed is unknown, defaulting to 1000 [ 389.223241][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 389.243505][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 389.252955][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 389.264961][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.276866][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 389.317125][T17506] ip6t_srh: unknown srh match flags 5F28 [ 389.355549][T17505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3188'. [ 389.390808][T17508] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 389.463574][T17508] tipc: Enabled bearer , priority 14 [ 389.536421][T17512] netlink: 'syz.1.3189': attribute type 1 has an invalid length. [ 389.592667][T17514] macvtap1: entered promiscuous mode [ 389.598070][T17514] team0: entered promiscuous mode [ 389.603562][T17514] team_slave_0: entered promiscuous mode [ 389.610998][T17514] team_slave_1: entered promiscuous mode [ 389.619406][T17514] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 389.628034][T17514] team0: Device macvtap1 is already an upper device of the team interface [ 389.649963][T17514] team0: left promiscuous mode [ 389.654134][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3189'. [ 389.861184][T17512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.927969][T17517] bond1: (slave veth3): Enslaving as an active interface with a down link [ 389.938150][ T5754] team_slave_0: left promiscuous mode [ 389.945082][ T5754] team_slave_1: left promiscuous mode [ 389.971575][T17521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 389.985738][T17521] bond1: (slave batadv1): making interface the new active one [ 390.013545][T17521] batadv1: entered promiscuous mode [ 390.025710][T17521] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 390.316827][T17539] xt_hashlimit: size too large, truncated to 1048576 [ 390.729343][T17553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.159652][ T5636] Bluetooth: hci3: command tx timeout [ 391.477690][ T12] bond7 (unregistering): (slave geneve3): Releasing active interface [ 392.314119][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.323713][ T12] bond_slave_0: left allmulticast mode [ 392.334054][ T12] bond0 (unregistering): Released all slaves [ 392.347102][ T12] team0: Port device bond1 removed [ 392.354075][ T12] bond1 (unregistering): Released all slaves [ 392.370981][ T12] bond2 (unregistering): Released all slaves [ 392.392402][ T12] bond3 (unregistering): (slave lo): Releasing backup interface [ 392.400903][ T12] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 392.417103][ T12] bond3 (unregistering): Released all slaves [ 392.436264][ T12] bond4 (unregistering): (slave vcan0): Releasing backup interface [ 392.445249][ T12] vcan0: left promiscuous mode [ 392.452149][ T12] bond4 (unregistering): Released all slaves [ 392.467079][ T12] bond5 (unregistering): Released all slaves [ 392.490750][ T12] bond6 (unregistering): Released all slaves [ 392.506339][ T12] bond7 (unregistering): Released all slaves [ 392.522858][ T12] bond8 (unregistering): Released all slaves [ 392.539772][ T12] bond9 (unregistering): Released all slaves [ 392.565021][ T12] bond10 (unregistering): Released all slaves [ 392.587202][ T12] bond11 (unregistering): Released all slaves [ 392.604138][ T12] bond12 (unregistering): Released all slaves [ 392.621309][ T12] bond13 (unregistering): Released all slaves [ 392.642014][ T2173] tipc: Node number set to 171905416 [ 392.752077][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 392.971339][T17578] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 393.015166][T17578] netlink: 'syz.2.3201': attribute type 2 has an invalid length. [ 393.056757][T17578] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 393.065435][T17578] netlink: 'syz.2.3201': attribute type 2 has an invalid length. [ 393.238541][ T5636] Bluetooth: hci3: command tx timeout [ 393.279375][ T12] tipc: Left network mode [ 393.313045][T17594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3204'. [ 393.384968][T17584] xt_bpf: check failed: parse error [ 393.760246][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.799726][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.830166][T17420] bridge_slave_0: entered allmulticast mode [ 393.865385][T17420] bridge_slave_0: entered promiscuous mode [ 394.391057][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.436382][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.448317][T17420] bridge_slave_1: entered allmulticast mode [ 394.466169][T17420] bridge_slave_1: entered promiscuous mode [ 394.826873][T17420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.869557][T17420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.321517][ T5636] Bluetooth: hci3: command tx timeout [ 395.383908][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 395.423039][T17420] team0: Port device team_slave_0 added [ 395.481392][T17657] ipvlan2: entered promiscuous mode [ 395.487267][T17657] bridge0: port 3(ipvlan2) entered blocking state [ 395.494995][T17657] bridge0: port 3(ipvlan2) entered disabled state [ 395.503788][T17657] ipvlan2: entered allmulticast mode [ 395.510012][T17657] bridge0: entered allmulticast mode [ 395.524111][T17657] ipvlan2: left allmulticast mode [ 395.531838][T17657] bridge0: left allmulticast mode [ 395.563761][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 395.566336][T17420] team0: Port device team_slave_1 added [ 395.762349][T17420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.790096][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.827009][T17676] Cannot find add_set index 65532 as target [ 395.837278][T17420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.885222][T17675] netlink: 'syz.3.3226': attribute type 29 has an invalid length. [ 395.909988][T17420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.932520][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.961256][T17420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.981026][T17679] netlink: 'syz.3.3226': attribute type 29 has an invalid length. [ 396.199170][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'. [ 396.473368][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 396.603838][T17420] hsr_slave_0: entered promiscuous mode [ 396.644186][T17420] hsr_slave_1: entered promiscuous mode [ 396.673774][T17420] debugfs: 'hsr0' already exists in 'hsr' [ 396.703281][T17420] Cannot create hsr debugfs directory [ 396.824269][T17718] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 397.147912][T17739] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 397.157156][ T9] IPVS: starting estimator thread 0... [ 397.268972][T17740] IPVS: using max 26 ests per chain, 62400 per kthread [ 397.357635][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 397.363672][T17747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3242'. [ 397.399292][ T5636] Bluetooth: hci3: command tx timeout [ 397.897700][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 398.016018][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 398.026512][T17770] syzkaller0: entered promiscuous mode [ 398.033104][T17770] syzkaller0: entered allmulticast mode [ 401.093461][T17776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3252'. [ 401.270270][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3254'. [ 401.285228][T17797] veth0: entered promiscuous mode [ 401.315063][T17794] lo: entered allmulticast mode [ 401.322699][T17790] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 401.339443][T17790] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 401.448183][T17794] pimreg: entered allmulticast mode [ 401.475798][T17789] veth0: left promiscuous mode [ 401.508020][T17801] pimreg: left allmulticast mode [ 401.619980][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3258'. [ 401.620884][T17809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'. [ 401.630176][T17803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3258'. [ 401.687994][T17805] »»»»»»: entered promiscuous mode [ 401.702992][T17805] netlink: 'syz.3.3258': attribute type 2 has an invalid length. [ 401.717412][T17805] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 401.784226][T17793] lo: left allmulticast mode [ 401.927201][T17817] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3261'. [ 402.030158][T17821] IPVS: set_ctl: invalid protocol: 162 172.20.20.79:21 [ 402.083759][T17823] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 402.111205][ T659] batadv1: left promiscuous mode [ 402.417219][T17837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3266'. [ 402.626574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.655738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.776397][ T12] veth1_macvtap: left promiscuous mode [ 402.796407][ T12] veth0_macvtap: left promiscuous mode [ 403.056319][ T12] team0 (unregistering): Port device batadv1 removed [ 403.402914][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 403.413128][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 403.424061][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'. [ 403.556883][ T12] team0 (unregistering): Port device team_slave_1 removed [ 403.591490][ T12] team0 (unregistering): Port device team_slave_0 removed [ 403.662447][ T12] team0 (unregistering): Port device veth0_to_bond removed [ 404.001556][T17888] pimreg: entered allmulticast mode [ 404.032183][ T7823] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.069353][ T7823] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.110463][ T7823] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.138829][ T7823] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.353361][T17917] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 404.457569][T17917] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 404.757075][T17420] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.779094][T17928] openvswitch: netlink: Flow key attribute not present in set flow. [ 404.832373][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.843293][T17420] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.860332][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.877754][T17420] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.959832][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.985003][T17420] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.003019][ T12] IPVS: stop unused estimator thread 0... [ 405.062804][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.283742][T17957] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 405.495062][T17420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.653220][T17420] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.691130][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.698509][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.748094][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.755340][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.886587][T17981] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 405.899695][T17982] xt_hashlimit: size too large, truncated to 1048576 [ 405.915983][T17981] netlink: 'syz.1.3297': attribute type 11 has an invalid length. [ 406.333951][T18003] __nla_validate_parse: 12 callbacks suppressed [ 406.333975][T18003] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3302'. [ 406.403328][T18003] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3302'. [ 406.466025][T18003] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3302'. [ 406.516254][T18003] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3302'. [ 407.216287][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'. [ 407.276728][T18033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.658619][T18053] netlink: 'syz.2.3312': attribute type 49 has an invalid length. [ 408.241326][T18053] ip6gretap0: entered promiscuous mode [ 408.248912][T18053] ip6gretap0: entered allmulticast mode [ 408.403225][T18073] IPVS: Error connecting to the multicast addr [ 408.452613][T17420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.689572][T18088] netlink: 'syz.3.3319': attribute type 11 has an invalid length. [ 408.725513][T18088] netlink: 'syz.3.3319': attribute type 11 has an invalid length. [ 408.749265][T18088] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3319'. [ 408.835706][T18097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'. [ 408.846694][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 408.862770][T18096] netlink: 'syz.0.3321': attribute type 1 has an invalid length. [ 408.883822][T18089] syzkaller0: entered promiscuous mode [ 408.921881][T18089] syzkaller0: entered allmulticast mode [ 408.941314][T18096] xt_TPROXY: Can be used only with -p tcp or -p udp [ 412.547926][T18141] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 412.549301][T18149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.793765][T18157] bridge0: port 2(wlan1) entered blocking state [ 412.818177][T18162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.833610][T18157] bridge0: port 2(wlan1) entered disabled state [ 412.849925][T18157] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 412.891628][T18157] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 413.003910][T17420] veth0_vlan: entered promiscuous mode [ 413.075455][T17420] veth1_vlan: entered promiscuous mode [ 413.277711][T17420] veth0_macvtap: entered promiscuous mode [ 413.348213][T17420] veth1_macvtap: entered promiscuous mode [ 413.354877][T18187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3341'. [ 413.446223][T17420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.567916][T17420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.605644][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3343'. [ 413.628026][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.646839][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.673954][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.773893][T18194] syzkaller1: entered promiscuous mode [ 413.788248][T18194] syzkaller1: entered allmulticast mode [ 413.806835][T18210] netlink: 'syz.3.3348': attribute type 3 has an invalid length. [ 413.827352][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.290960][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.326582][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.513666][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.547667][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.566342][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3354'. [ 414.577770][T18238] netlink: 'syz.3.3353': attribute type 27 has an invalid length. [ 414.623668][T18238] netlink: 'syz.3.3353': attribute type 4 has an invalid length. [ 414.639585][T18238] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3353'. [ 414.907189][T18247] netlink: 'syz.4.3164': attribute type 13 has an invalid length. [ 415.509941][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.527989][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.536956][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.564096][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.576803][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.807874][T18284] netlink: 'syz.4.3361': attribute type 1 has an invalid length. [ 416.546718][T18311] veth5: entered allmulticast mode [ 416.637152][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 416.692290][ T1121] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.701879][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 416.718482][ T1121] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.743028][ T1121] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.789625][ T1121] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.930674][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3371'. [ 416.961140][T18333] sch_fq: defrate 0 ignored. [ 417.234107][T18268] ipvlan0 speed is unknown, defaulting to 1000 [ 417.281690][T18351] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3378'. [ 417.360389][T18352] tipc: Started in network mode [ 417.378499][T18352] tipc: Node identity fac1cdc2ac3, cluster identity 4711 [ 417.387675][T18352] tipc: Enabled bearer , priority 0 [ 417.399287][T18352] syzkaller0: entered promiscuous mode [ 417.414305][T18352] syzkaller0: entered allmulticast mode [ 417.465686][T18352] tipc: Resetting bearer [ 417.522934][T18349] tipc: Resetting bearer [ 417.647200][T18349] tipc: Disabling bearer [ 417.651439][ T5646] Bluetooth: hci4: command tx timeout [ 418.310628][T18268] »»»»»» speed is unknown, defaulting to 1000 [ 418.612127][T18268] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.619844][T18268] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.627094][T18268] bridge_slave_0: entered allmulticast mode [ 418.635346][T18268] bridge_slave_0: entered promiscuous mode [ 418.643428][T18268] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.651018][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.658234][T18268] bridge_slave_1: entered allmulticast mode [ 418.666158][T18268] bridge_slave_1: entered promiscuous mode [ 418.699764][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.711897][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.744347][T18268] team0: Port device team_slave_0 added [ 418.752622][T18268] team0: Port device team_slave_1 added [ 418.779290][T18268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.786277][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.814072][T18268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.831950][T18268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.839701][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.866571][T18268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.918181][T18268] hsr_slave_0: entered promiscuous mode [ 418.925677][T18268] hsr_slave_1: entered promiscuous mode [ 418.932358][T18268] debugfs: 'hsr0' already exists in 'hsr' [ 418.938133][T18268] Cannot create hsr debugfs directory [ 419.099536][T18268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.113078][T18268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 419.207723][T18268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.218737][T18268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 419.290811][T18268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.301413][T18268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 419.396033][T18268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.407042][T18268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 419.572304][T18268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.582093][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.591036][T18268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.601588][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.610598][T18268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.622925][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.631417][T18268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.643262][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.725815][T18268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.733111][ T5646] Bluetooth: hci4: command tx timeout [ 419.756081][T18268] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.769904][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.777120][ T7832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.794817][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.802018][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.160639][T18268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.218303][T18268] veth0_vlan: entered promiscuous mode [ 420.234800][T18268] veth1_vlan: entered promiscuous mode [ 420.271573][T18268] veth0_macvtap: entered promiscuous mode [ 420.284900][T18268] veth1_macvtap: entered promiscuous mode [ 420.303348][T18268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.321503][T18268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.337894][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.348336][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.361661][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.371752][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.485205][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.503683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.532943][ T7823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.542906][ T7823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.798695][ T5646] Bluetooth: hci4: command tx timeout [ 423.879016][ T5646] Bluetooth: hci4: command tx timeout [ 435.028661][ T12] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 435.035545][ T12] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 435.046256][ T12] bridge0: port 2(wlan1) entered disabled state [ 435.056731][ T12] batadv1: left allmulticast mode [ 435.062159][ T12] batadv1: left promiscuous mode [ 435.067369][ T12] bridge0: port 1(batadv1) entered disabled state [ 435.318136][ T12] gretap0 (unregistering): left promiscuous mode [ 435.672731][ T12] bond6 (unregistering): (slave bridge7): Releasing active interface [ 435.783572][ T12] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 435.792205][ T12] bridge10 (unregistering): left promiscuous mode [ 435.907080][ T12] .` (unregistering): Released all slaves [ 435.917611][ T12] bond1 (unregistering): Released all slaves [ 435.933972][ T12] bond2 (unregistering): Released all slaves [ 435.950682][ T12] bond3 (unregistering): Released all slaves [ 435.972485][ T12] bond4 (unregistering): Released all slaves [ 435.992451][ T12] bond5 (unregistering): Released all slaves [ 436.010357][ T12] bond6 (unregistering): Released all slaves [ 436.027588][ T12] bond0 (unregistering): Released all slaves [ 436.045018][ T12] bond7 (unregistering): Released all slaves [ 436.061159][ T12] bond8 (unregistering): (slave bond9): Releasing backup interface [ 436.073375][ T12] bond8 (unregistering): Released all slaves [ 436.089402][ T12] bond9 (unregistering): Released all slaves [ 436.108132][ T12] bond10 (unregistering): Released all slaves [ 436.131240][ T12] bond11 (unregistering): Released all slaves [ 436.148674][ T12] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 436.163399][ T12] bond12 (unregistering): Released all slaves [ 436.177900][ T12] bond13 (unregistering): Released all slaves [ 436.402276][ T12] tipc: Disabling bearer [ 436.436387][ T12] tipc: Disabling bearer [ 436.461272][ T12] tipc: Left network mode [ 437.091645][ T12] veth1_to_team: left promiscuous mode [ 437.098901][ T12] team0: left promiscuous mode [ 437.125983][ T12] hsr_slave_0: left promiscuous mode [ 437.138192][ T12] hsr_slave_1: left promiscuous mode [ 437.144325][ T12] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 437.151325][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 437.165334][ T12] veth1_macvtap: left promiscuous mode [ 437.171656][ T12] veth1_vlan: left promiscuous mode [ 437.252341][ T12] pim6reg (unregistering): left allmulticast mode [ 437.624448][ T12] smc: removing net device team0 with user defined pnetid SYZ2 [ 437.682813][ T1127] smbdirect: ib_dev[syś2] removed [ 437.921824][ T12] IPVS: stop unused estimator thread 0... [ 440.121017][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.100677][T18459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3389'. [ 446.190866][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.221597][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.232190][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.241451][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.253807][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.669938][T16068] IPVS: starting estimator thread 0... [ 446.732815][T18482] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.3392'. [ 446.758642][T18479] IPVS: using max 31 ests per chain, 74400 per kthread [ 446.801503][T18482] IPVS: sh: FWM 3 0x00000003 - no destination available [ 447.457269][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 447.996771][T18537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3404'. [ 448.023809][T18465] ipvlan0 speed is unknown, defaulting to 1000 [ 448.363486][ T5636] Bluetooth: hci1: command tx timeout [ 448.622911][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'. [ 448.808082][T18565] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 448.848166][T18565] netlink: 'syz.2.3409': attribute type 2 has an invalid length. [ 448.876020][T18565] netlink: 'syz.2.3409': attribute type 2 has an invalid length. [ 449.048147][ T7823] pimreg: left allmulticast mode [ 450.057932][ T7823] bond0 (unregistering): Released all slaves [ 450.069914][ T7823] bond1 (unregistering): Released all slaves [ 450.096525][ T7823] bond2 (unregistering): Released all slaves [ 450.127732][ T7823] bond3 (unregistering): Released all slaves [ 450.176108][ T7823] bond4 (unregistering): Released all slaves [ 450.193740][ T7823] bond5 (unregistering): Released all slaves [ 450.212466][ T7823] bond6 (unregistering): Released all slaves [ 450.231115][ T7823] bond7 (unregistering): Released all slaves [ 450.266843][ T7823] bond8 (unregistering): Released all slaves [ 450.282863][T18591] netlink: 'syz.4.3416': attribute type 12 has an invalid length. [ 450.293655][ T7823] bond9 (unregistering): Released all slaves [ 450.308971][ T7823] bond10 (unregistering): Released all slaves [ 450.330926][ T7823] bond11 (unregistering): Released all slaves [ 450.352735][ T7823] bond12 (unregistering): Released all slaves [ 450.402808][T18587] tipc: Started in network mode [ 450.418501][T18587] tipc: Node identity fa5103ff6f57, cluster identity 4711 [ 450.435488][T18587] tipc: Enabled bearer , priority 11 [ 450.449722][ T5636] Bluetooth: hci1: command tx timeout [ 450.587025][ T7823] : left promiscuous mode [ 450.754723][T18597] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 451.217607][ T7823] tipc: Disabling bearer [ 451.270352][ T7823] tipc: Left network mode [ 451.274849][T18605] tipc: Failed to obtain node identity [ 451.293622][T18605] tipc: Enabling of bearer rejected, failed to enable media [ 451.553716][ T29] tipc: Node number set to 2500199423 [ 451.582925][ T7823] IPVS: stopping backup sync thread 13699 ... [ 451.613796][T18624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3426'. [ 451.786890][T18626] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 451.827960][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3427'. [ 451.861556][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3427'. [ 451.881156][T18624] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 451.926596][T18624] bond2 (unregistering): Released all slaves [ 452.143943][T18646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3431'. [ 452.202835][T18646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3431'. [ 452.366169][ T134] smc: removing ib device syz2 [ 452.527200][ T5636] Bluetooth: hci1: command tx timeout [ 452.635701][ T808] ================================================================== [ 452.643848][ T808] BUG: KASAN: use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 452.652559][ T808] Read of size 8 at addr ffff88807a0142f0 by task kworker/0:2/808 [ 452.660490][ T808] [ 452.662942][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 452.662971][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.662985][ T808] Workqueue: events smc_ib_port_event_work [ 452.663027][ T808] Call Trace: [ 452.663035][ T808] [ 452.663043][ T808] dump_stack_lvl+0xe8/0x150 [ 452.663069][ T808] print_address_description+0x55/0x1e0 [ 452.663090][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 452.663112][ T808] print_report+0x58/0x70 [ 452.663131][ T808] kasan_report+0x117/0x150 [ 452.663162][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 452.663188][ T808] __ethtool_get_link_ksettings+0x5e/0x170 [ 452.663211][ T808] ib_get_eth_speed+0x180/0x7f0 [ 452.663239][ T808] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 452.663270][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 452.663304][ T808] rxe_query_port+0x93/0x3d0 [ 452.663332][ T808] ib_query_port+0x170/0x830 [ 452.663361][ T808] smc_ib_port_event_work+0x15a/0x940 [ 452.663394][ T808] ? process_scheduled_works+0xa70/0x1860 [ 452.663414][ T808] ? process_scheduled_works+0xa70/0x1860 [ 452.663436][ T808] process_scheduled_works+0xb5d/0x1860 [ 452.663474][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 452.663498][ T808] ? assign_work+0x3d5/0x5e0 [ 452.663520][ T808] worker_thread+0xa53/0xfc0 [ 452.663556][ T808] kthread+0x389/0x470 [ 452.663580][ T808] ? __pfx_worker_thread+0x10/0x10 [ 452.663600][ T808] ? __pfx_kthread+0x10/0x10 [ 452.663626][ T808] ret_from_fork+0x514/0xb70 [ 452.663649][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 452.663670][ T808] ? __switch_to+0xc79/0x1410 [ 452.663700][ T808] ? __pfx_kthread+0x10/0x10 [ 452.663726][ T808] ret_from_fork_asm+0x1a/0x30 [ 452.663768][ T808] [ 452.663775][ T808] [ 452.838816][ T808] The buggy address belongs to the physical page: [ 452.845241][ T808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a014400 pfn:0x7a014 [ 452.855317][ T808] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 452.862435][ T808] raw: 00fff00000000000 ffffea0001479c08 ffffea0000abfa08 0000000000000000 [ 452.871117][ T808] raw: ffff88807a014400 0000000000000000 00000000ffffffff 0000000000000000 [ 452.879695][ T808] page dumped because: kasan: bad access detected [ 452.886121][ T808] page_owner tracks the page as freed [ 452.891833][ T808] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 5638, tgid 5638 (syz-executor), ts 94881769544, free_ts 452602710099 [ 452.914068][ T808] post_alloc_hook+0x22d/0x280 [ 452.918935][ T808] get_page_from_freelist+0x24ba/0x2540 [ 452.924489][ T808] __alloc_frozen_pages_noprof+0x18d/0x380 [ 452.930389][ T808] alloc_pages_mpol+0x235/0x490 [ 452.935345][ T808] ___kmalloc_large_node+0x4e/0x120 [ 452.940562][ T808] __kmalloc_large_node_noprof+0x18/0x90 [ 452.946216][ T808] __kvmalloc_node_noprof+0x7b/0x8a0 [ 452.951600][ T808] alloc_netdev_mqs+0xa8/0x1210 [ 452.956457][ T808] ieee80211_if_add+0x4cc/0x13d0 [ 452.961399][ T808] ieee80211_register_hw+0x3ebc/0x4a70 [ 452.966908][ T808] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 452.972647][ T808] hwsim_new_radio_nl+0xf6a/0x1c00 [ 452.977853][ T808] genl_family_rcv_msg_doit+0x22a/0x330 [ 452.983489][ T808] genl_rcv_msg+0x61c/0x7a0 [ 452.987992][ T808] netlink_rcv_skb+0x232/0x4b0 [ 452.992759][ T808] genl_rcv+0x28/0x40 [ 452.996746][ T808] page last free pid 7823 tgid 7823 stack trace: [ 453.003067][ T808] __free_frozen_pages+0xbc7/0xd30 [ 453.008186][ T808] device_release+0xc4/0x1f0 [ 453.012785][ T808] kobject_put+0x228/0x560 [ 453.017205][ T808] netdev_run_todo+0xc75/0xde0 [ 453.021976][ T808] ieee80211_unregister_hw+0x128/0x2c0 [ 453.027522][ T808] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 453.033083][ T808] hwsim_exit_net+0xede/0xfa0 [ 453.037965][ T808] ops_undo_list+0x49f/0x940 [ 453.042560][ T808] cleanup_net+0x56b/0x800 [ 453.047009][ T808] process_scheduled_works+0xb5d/0x1860 [ 453.052821][ T808] worker_thread+0xa53/0xfc0 [ 453.057500][ T808] kthread+0x389/0x470 [ 453.061592][ T808] ret_from_fork+0x514/0xb70 [ 453.066184][ T808] ret_from_fork_asm+0x1a/0x30 [ 453.071039][ T808] [ 453.073365][ T808] Memory state around the buggy address: [ 453.079079][ T808] ffff88807a014180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 453.087149][ T808] ffff88807a014200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 453.095214][ T808] >ffff88807a014280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 453.103283][ T808] ^ [ 453.111033][ T808] ffff88807a014300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 453.119098][ T808] ffff88807a014380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 453.127242][ T808] ================================================================== [ 453.214696][ T808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.221962][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 453.231365][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.241452][ T808] Workqueue: events smc_ib_port_event_work [ 453.247316][ T808] Call Trace: [ 453.250641][ T808] [ 453.253854][ T808] vpanic+0x56c/0xa60 [ 453.257858][ T808] ? __pfx_vpanic+0x10/0x10 [ 453.262381][ T808] ? __pfx___schedule+0x10/0x10 [ 453.267246][ T808] panic+0xc5/0xd0 [ 453.270977][ T808] ? __pfx_panic+0x10/0x10 [ 453.275405][ T808] ? preempt_schedule_common+0x82/0xd0 [ 453.280881][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 453.286867][ T808] check_panic_on_warn+0x89/0xb0 [ 453.291820][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 453.297891][ T808] end_report+0x73/0x170 [ 453.302231][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 453.308300][ T808] kasan_report+0x128/0x150 [ 453.313286][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 453.319276][ T808] __ethtool_get_link_ksettings+0x5e/0x170 [ 453.325112][ T808] ib_get_eth_speed+0x180/0x7f0 [ 453.330059][ T808] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 453.335445][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 453.340745][ T808] rxe_query_port+0x93/0x3d0 [ 453.345433][ T808] ib_query_port+0x170/0x830 [ 453.350204][ T808] smc_ib_port_event_work+0x15a/0x940 [ 453.355586][ T808] ? process_scheduled_works+0xa70/0x1860 [ 453.362303][ T808] ? process_scheduled_works+0xa70/0x1860 [ 453.368673][ T808] process_scheduled_works+0xb5d/0x1860 [ 453.376106][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 453.382288][ T808] ? assign_work+0x3d5/0x5e0 [ 453.386896][ T808] worker_thread+0xa53/0xfc0 [ 453.391513][ T808] kthread+0x389/0x470 [ 453.395619][ T808] ? __pfx_worker_thread+0x10/0x10 [ 453.400764][ T808] ? __pfx_kthread+0x10/0x10 [ 453.405388][ T808] ret_from_fork+0x514/0xb70 [ 453.410178][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 453.415324][ T808] ? __switch_to+0xc79/0x1410 [ 453.420012][ T808] ? __pfx_kthread+0x10/0x10 [ 453.424616][ T808] ret_from_fork_asm+0x1a/0x30 [ 453.429420][ T808] [ 453.433021][ T808] Kernel Offset: disabled [ 453.437347][ T808] Rebooting in 86400 seconds..