last executing test programs: 2.785895842s ago: executing program 3 (id=3429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010f000000000000000067000000080001003c00000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000002200)=""/4138, 0x102a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000ac0)={{r4}, r9, 0x1a, @inherit={0x58, &(0x7f0000000a40)={0x1, 0x2, 0x7, 0x401, {0x4, 0x7, 0xa402, 0x8, 0x3}, [0x0, 0x81]}}, @name="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"}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRES16=r10, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r10, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, 'o'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40803}, 0x41) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000001ac0)="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") recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/107, 0x6b}], 0x6, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x2023) 2.677952425s ago: executing program 1 (id=3431): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r2) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xbe37fd1f96d8c8ee}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000500d32a3c99a8772efb0c0002"], 0x3c}}, 0x20000000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x62, '\x00', r6}, 0x94) 2.477239594s ago: executing program 1 (id=3435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x30, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 2.026113609s ago: executing program 1 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010a198506070fd1f1483e43b0d6100010000000000000000000000000a50000000060a0b040000080000000000020000002400048020000180070001006374000014000280080002400001000d08000140000000000900010073797a30000000000900020073797a32020000001400000011000100000000"], 0x78}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000680)="4ede", 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) bpf$MAP_CREATE(0xb00000000000014, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e338e8a43bdf220226ce3639cacbd1ec98daf578469f8f7091cb4ac25239d26e9942f51ec19e78a9408dcab3cbd81fda6"], 0x48) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000002c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) splice(r3, &(0x7f0000000400)=0x27, r2, 0x0, 0x800000000ff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) 1.912036105s ago: executing program 1 (id=3440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x80000003) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r6, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x48df}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="88c983186369b83587c400ae2341667abb7f08cf24ca1eb2fe9b8c9b940ed8a4acfbe41e4fe1fde3abdcea0cc0b8c880cf95c744c608b355e8829ed977d8a7c5d42e60a0151d92614fcc6784103fb6631c32ddaab9e62fe1147ac912b9fbacdd77c172c6403566da123d3ddd39245985068bf884358ed70a779ed3b40da4cb3b98b019824e8df919653cdbd49a8ea3a3e7dc64478a38a072858fef8deaf8da", 0x9f}, {&(0x7f0000000340)="d4af77834a1e460e3cb7b9baf9fb8db8406d58e991b7ffa674a0f2b0ce848bd73ddbf8126b8698d63efcbe7553941a5f7051bf4440fa9d3f8c944923047afcb2ad2d737421f2af036e9389449581d70b2bfe309c31002126e97a74de1835f5c2d70c67e9e24e774a7d88d190d84e989f1ceef4406957a25284228ea3f8d07a1c80febe3a414b032fce51446504b3b96f747c8afb9f9def2893fa7f2d23251cb75b3d8c2c9f76cb9e31cef2f61265649f96af9db59f7c9505b0f7396c45ec1d3e101db752b6e2a8a7266778d348d20c9e", 0xd0}, {&(0x7f0000000440)="c2e38c5efb2a582cedb7b31476817fc98fd19a1747557ac68faf9866608761dcf619b22fa5e7fd32b41cec96ce51c44872aba4f0b06ea6458d620fd2dbe51505ead7396f602adda385b8ec92ad506700ad280fef9dd7d1836b3d68647cf9e408e08f461032a7c08a1c4188facf8dda20ddd38910cb43748113fc4a47b71b06da2381d7933d89df72a5920ad59f1acfa0269cdfb89a319266888fe02ad6a841438b6a4ceb2d2a34d0887386a0da9801b54104448a0ad7910e85fc14c98673f416926af76e9cec", 0xc6}, {&(0x7f0000000540)="b6533e1b159f6c1a0a0f2e4169226e4c7732e40d81393ad5053a661a1720d85d959b2ee7b7f91855eb264196b4d339a0e6016b250e34e8d605b47d3442ba765177f5cef0bd104dc3a68f684907ea11f46e8649dcba48887de4b91cb521cc526e5584c7c6009d7f6f57697e962af83ce918391f74790bab7754bf1ebac327a2f26ad9d044a2264a6cc5e976ac3e6402fd0abf788b3185f5d8b79faec352e4754fa7d5187efe487201faf582eb07414f2dc029645e1618", 0xb6}, {&(0x7f0000000600)="591900582e6d5bfc161a1c6792892442c7e5cff442996ba120c3160d72b831dd9c852c3a2442350d1bb767b1a053af1102222a29e9aa241d8ee5112c5746f53ba184169f21b51300f8c777b4e66937", 0x4f}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="4c6dc88b2034b15d47b0e27e8e0aea0e195784bca21bb6770d2d7938b96cd97ed3c667ab23669067ac439dfc5d748d6910aaaf17737124374c08d34c8aed3ec737985057c7c873463ae891e0395fd92191a5d12b5d3dd5ce424c7ae2d96216fc8fd7211db2d38f67fe97bfde541c7a625aca6e6f5d70570002a1db578ef3", 0x7e}, {&(0x7f0000000800)="832202c7044c83415a85647a076316d731a9fe988d73e0936735a0fd2c8fbd616ded8b165fc03ffafbf0429379fa", 0x2e}, {&(0x7f0000000840)="07cf9087c9a9b0d4353d5f4b96f532c0c56325220fa439cb70c2ced5df7e84faceaf499026aa3b1394277bd9424bd45e6774af96d211d0bfff9973e6d780ef908c41730e3755b6ef96f9bebb7bd8790e3c0b39e0c6151177738afe0d8473974dc6f6f97c31c77863177407b34db2f4e94cc7560ebdd73a233aecf1eb49750300008cee58", 0x84}], 0x9, &(0x7f00000009c0)=[{0xe8, 0x11, 0x3, "98c1978fb31c5d342b927f29df4b4e38710cdac86c0db19c784971e5f41c6ed6474fca75632dac65c01f787d4231a893ff1e3955fd5db9b1a9007141f7e73d6d571f0e1c853b4d76879111a0cbbdf43b657af974ada12d7e52d4a4296cfb23b7311e1391a445d6d47daceb8d24755cb174a34b794a7ea01537b7bb6daad7dd081b91f55b83cd0d4ad3907e378363614e29c8a7f8441c695da1202f2edce5c81c0aaa34559e22cbc4fd10a9d167307563d2c66848f147cacafbae3a58a666f3cea5b598f6458a56cf72384a6ea473e3f77601a5"}], 0xe8}, 0x20000000) listen(r8, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.89466909s ago: executing program 4 (id=3441): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001300)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, &(0x7f00000004c0), &(0x7f00000001c0)=""/13}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)=ANY=[@ANYBLOB="785573e7000808450000b000c52aaeedd832f65a0000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51812e4451b57d037ad3c0450000000000bcfd56f1375461caaa2f19935e6996c7096ffead90ef47d62aeb03000000008000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544ab6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x34, 0x1, 0xf, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) accept4(r6, 0x0, 0x0, 0x80800) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000540)={&(0x7f0000000280)=""/180, 0xb4}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0008002f2ab45e701757c803ab4fbcbc266f8ba5e4194d09ac1c880c1bdd105e2d5c2dcb49a1e5866b42b05c4175214bf939e5af7f509c614ce3e991f278fb5f235628c72507d1cef699eab3495333d35a1ce846", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) socket$nl_generic(0x10, 0x3, 0x10) 1.802066491s ago: executing program 3 (id=3442): unshare(0x20000400) r0 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x400) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 1.425805882s ago: executing program 3 (id=3447): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x4c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r5, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) accept(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000240)=0x80) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="98c90425bb92b53d00"/21], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x7, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.424707628s ago: executing program 1 (id=3448): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) listen(r0, 0x9) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}]}, 0x3c}}, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) close(r5) 1.189928319s ago: executing program 1 (id=3451): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0x1}, 0xfd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x6cc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x6ac, 0x3, 0x0, 0x1, [{0x690, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x390, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "bd2d1c2ed34c80f9f8a03128dcecc90748915fb55eadbea3fa72b6b9492e4bcc7fa42832d046d4dbcbde7149579bd80d9596f848adf5727922532e3c76a3e5ccccdc1b42875670b3cc4359b1d0cbebeff05bbb8bac5bc19be0834be9c204cb7d3e5c49dd970d8961d25e38a8d2458f22e27c1930534beb9cb4e357ba487bb4cca1d8b3061798b4dd5e21275c17b43108d1c1e5cd17891c2fc91e5ebfbc95231fc400bf4a876cc22a0529e4415fcd8e225e44262a844f91776a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "8df96b047cd4f7c00e4e3276840da664c8362d54649bd6b3ccccfd20cdec664257ceb1c69b0415471eff8b616cdc2beab3cef9afce3971cbd3e62566c32d6c5849be77e5f2fa5951f462e7f906eaa570eb64f3b15f0b49e637ca5151acb5fd2921594e45c472d556fcca43c94715731d677363526663cbf95eca29e763f72942d74b8325ec679fa05ee36cd14c21d33637d19f767da5f5b2cb16bdd7018e2dc25c10db7fd9337952cb14d121530654dae872c82d4aa21bc61b3e95633e09ebecdb9d9bba0f"}, @NFTA_DATA_VALUE={0xee, 0x1, "79a6da43c35d8051f56bb212b405b8b8d0b4b5b7abcd487f8dfd1741f8d6cf1bb205b509f97aed86c5f30367e8919754738004ccd302283fb036f97229e9ec1ffc3f2d81f1365658b1d0df8e95945c23a20076644b4519cdd35c2de0a0c1731a26f7d7deee89eed17aeaad17e5cd0505d1e29be4ffd6d47691b7bdc27c0958188f9409fc98d2adcf062633d65823a63e8aa7667592e637e1d313b11f10f25140b0f50cacb2a2990a72a16509ac6cd26b9429ac0f9a3ec71f4faa1c89267af9fc34e4f021e209745f11b56fe731bd99ca7f0ac5cea8ed8be8a5c8717456f3488d1ed56af8a0ce59331bb1"}, @NFTA_DATA_VALUE={0x19, 0x1, "c67f772e17af3fd1306ee7a336801cb9aebcb82f34"}, @NFTA_DATA_VALUE={0x6d, 0x1, "b45a463b41bac60e474256c0e8f16ffde34fc559168815e4751bc41d1ff9bd120722679da269ed513536017abfa53f9c98afec285e62eefb5e40f3e23eca340eb604a9196ff79f50f613edd5f0a48f55dee390642a7b8e2f86789b627f8c25c7ebf769b86f4107f401"}, @NFTA_DATA_VALUE={0x5d, 0x1, "7b25fbc0193c85e722558c8f8c7a42316f87d708be5a97f604d729a3fde741258b9a2a4c300c2eabc03b9b7ca9c77eec0e131e2d1638637a6368350e88e8840938ce3f47c0145fdd93ee9659c076f06f4be0bd2aa03d3ae05a"}]}, @NFTA_SET_ELEM_USERDATA={0xea, 0x6, 0x1, 0x0, "7ab1339c9feaf3efafa93fa745f5431bfe8b52ef141ea5f0073dd92c8ca3948be3e7ea926916a29d29cdb2cc1ee413e2f19403b3593ad2249b66fe453b007c1a71788b6585c4e74b72b4072dd5e4def31b7399f1644f4f3d6fea0d8e345a28bc788bdcb67f7fd81d41dbe3d5ffd6b8d8143aff89b56e591d60edf3e2fa30aa835d32551fa2eb7ea0e8a4a9470daf98461cd548d6af1376b2a37862f4e39dfd1ec268bbf47ac77328ed4d1cf3cf997cc4e610880f6105c288fea32c1e8f841636404bce4d5c89fa838c7dd581ae3d2ac3955774c48e0ef8aa8a683f5f283a1604f526ed6935e3"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x70, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "4f47acc952c80404d49d78126bf0410ccc23970fba0b41e81966164e2a8d59c0c8a74fbbf3ba"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @xfrm={{0x9}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0xa8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x98, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x89, 0x3, "57a28d97d308afce31babef2743096ac618a6a164a3b9f88afbaf02a7b4133cd2ce9b4a2bbc1db27d40be65054e8015333b2e223389e852edf9cc460495eea271bd3b4653ea2543e2387fa3d2a717736af2f2a5792f28545fc1beee95a698446fb49770afdb95f688c358b3e990cc859b562819f6d2fabcc94d9e4b7cdf375ce67ea221aa4"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6f4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.17878407s ago: executing program 0 (id=3452): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0xb71, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.110312713s ago: executing program 2 (id=3453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}}, 0x0) 986.034691ms ago: executing program 0 (id=3454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8810) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1116], 0x45c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 984.957457ms ago: executing program 2 (id=3455): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f00000001c0)="56733a00a69d194eef8ff50f4c50ba68d67d7a30", 0x14}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000be00)=[{&(0x7f000000ac40)="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", 0x5dd}], 0x1}}], 0x6, 0x20000004) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r0, @ANYRES32=r6], 0x1c}}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r0, @ANYRES32=r6], 0x1c}}, 0x20) socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r8, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0xe}, {}, {0x16, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x4c}}, 0x24004000) 947.176603ms ago: executing program 4 (id=3456): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 894.351078ms ago: executing program 0 (id=3457): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0x1, 0x65, 0x3, 0x0, 0x84, 0xff, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, &(0x7f0000000100)=""/113, 0x71) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "9e7ebfa88862835cde30c358aaf098c7e1ee87137753eef060c1cd5211a8e402", "c589475fd77690345c01a9a3ffaaf16f705fbbc7869bbb9091fe763396f98729", "51ff447a4e8d8cb2c1c0178757996e6e85345a439e542b8aef2bc70e13bf59c3", "782e60c7205c3e21c435d365d6f774e4b4992782eabdb3bccea647bf80966e7d", "af5bd0b088bbadcc5136207bc21a0a599888645588aab9dd24931ac85aceb1ea", "5a997a5227ec3ccb373ffc23", 0xe, 0x10000, 0x80, 0xffff71e9, 0x1}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x14, 0xff, 0x6, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x3, 0x7, 0x33, 0x20, 0x0, @in={0x2, 0x4e24, @multicast2}}]}, 0x28}}, 0x4048040) 833.964509ms ago: executing program 4 (id=3458): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x48000, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 819.360513ms ago: executing program 4 (id=3459): syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) 753.848665ms ago: executing program 4 (id=3460): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r1, 0xb01}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x12c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x669cbd688380d0}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x841}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2, 0xffffffffffffffca}}) 666.742703ms ago: executing program 2 (id=3461): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 618.91813ms ago: executing program 4 (id=3462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfffffffd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00800000000061115900000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08a1450000240000000000119374a3389791fdcf7198cca66194de9a9078ac1414bbe00000014e210e22001090780201000079000000"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettfilter={0x54, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0x7}, {0x9, 0x5}, {0xf, 0xd}}, [{0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x3394}, {0x8, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r9, 0x0, 0x20000000002) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf253200000008000300", @ANYRES32=r5, @ANYBLOB="e6bbf4f24d37ebb129a7460e303e7d18b6af12e945da53caff2e111c52e616936064838301407bd2611a832e5ad6f8b2f82d99af4463fcffae930c99f297417cc8e07d6cbbbea4433a3d0000000000000000fe7d52b092f6e0197ae94bf5287b3bba8f4f1dc7c301ebd13c9e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004c010) socket$igmp6(0xa, 0x3, 0x2) 576.63846ms ago: executing program 3 (id=3463): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x5, 0x8) 470.231997ms ago: executing program 3 (id=3464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) sendto$packet(r2, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4}, 0x14) 431.574687ms ago: executing program 2 (id=3465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x6, 0x80000001, 0x74}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 375.040873ms ago: executing program 0 (id=3466): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) 250.016909ms ago: executing program 3 (id=3467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000000c0)=0x4, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$802154_raw(r1, &(0x7f00000009c0)={0x24, @none={0x0, 0xfffc}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffe0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 204.360344ms ago: executing program 2 (id=3468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x21}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 163.165058ms ago: executing program 0 (id=3469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000140), 0x4) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) (async) 61.901314ms ago: executing program 2 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={0x28, r3, 0x1, 0x70bd25, 0x25dfdb7b, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240000d5}, 0x8800) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, &(0x7f00000002c0)) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x49cf75490397e68e) recvmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="9bada09636adc1941b956950f9fd65f0fae12b3f0df6915a6dcbef63f9e198589df7365af253542db72cb98a7a3c2c7cc8d36613530ec8e5e623908ea1fe00000000000000a7f4857e7e86921b7a507e86cde9", @ANYRES64=0x0], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x4}, 0x48) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 0s ago: executing program 0 (id=3471): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r1, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/15, 0xf}, 0x10001}], 0x1, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) kernel console output (not intermixed with test programs): 229.358820][T12788] openvswitch: netlink: Key 6 has unexpected len 57 expected 2 [ 229.394378][T12781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 229.455054][T12789] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 229.516368][T12781] macvlan3: entered promiscuous mode [ 229.542061][T12781] macvlan3: entered allmulticast mode [ 229.548547][T12781] bond9: entered promiscuous mode [ 229.554350][T12781] veth0_to_bond: entered promiscuous mode [ 229.562871][T12781] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.575078][T12781] bond9: left promiscuous mode [ 229.583559][T12781] veth0_to_bond: left promiscuous mode [ 229.953319][T11880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.980695][T11880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.990090][ T8689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.003244][T12804] nbd1: detected capacity change from 0 to 63 [ 230.042097][ T5634] block nbd1: Receive control failed (result -32) [ 230.042754][ T5644] block nbd1: Receive control failed (result -32) [ 230.093289][ T5651] block nbd1: Dead connection, failed to find a fallback [ 230.110061][ T5651] block nbd1: shutting down sockets [ 230.120168][ T5651] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.133810][ T5651] Buffer I/O error on dev nbd1, logical block 0, async page read [ 230.153404][ T5651] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.173560][ T5651] Buffer I/O error on dev nbd1, logical block 1, async page read [ 230.202996][ T5651] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.227828][ T5651] Buffer I/O error on dev nbd1, logical block 2, async page read [ 230.248720][ T5651] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.260957][ T5651] Buffer I/O error on dev nbd1, logical block 3, async page read [ 230.292177][ T5651] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.310518][ T5651] Buffer I/O error on dev nbd1, logical block 0, async page read [ 230.323953][ T5651] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.336042][ T5651] Buffer I/O error on dev nbd1, logical block 1, async page read [ 230.338738][T12834] syzkaller0: entered promiscuous mode [ 230.345042][ T5651] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.362042][T12834] syzkaller0: entered allmulticast mode [ 230.364961][ T5651] Buffer I/O error on dev nbd1, logical block 2, async page read [ 230.380849][ T5651] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.425375][ T5651] Buffer I/O error on dev nbd1, logical block 3, async page read [ 230.434631][ T5651] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.455803][ T5651] Buffer I/O error on dev nbd1, logical block 0, async page read [ 230.481563][ T5651] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.507017][ T5651] Buffer I/O error on dev nbd1, logical block 1, async page read [ 230.526601][ T5651] ldm_validate_partition_table(): Disk read failed. [ 230.538554][ T5651] Dev nbd1: unable to read RDB block 0 [ 230.564864][ T5651] nbd1: unable to read partition table [ 230.614188][ T5651] ldm_validate_partition_table(): Disk read failed. [ 230.633762][ T5651] Dev nbd1: unable to read RDB block 0 [ 230.653184][ T5651] nbd1: unable to read partition table [ 230.695418][T12847] __nla_validate_parse: 17 callbacks suppressed [ 230.695437][T12847] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1967'. [ 230.882072][ T8689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.943208][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 230.962439][ T8689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.975569][T12863] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 230.985571][T12863] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 230.993644][T12863] netlink: 'syz.0.1969': attribute type 2 has an invalid length. [ 231.005871][T12863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1969'. [ 231.057124][T12852] bond7: option min_links: invalid value (18446744073709551614) [ 231.090649][T12852] bond7: option min_links: allowed values 0 - 2147483647 [ 231.107899][T12852] bond7 (unregistering): Released all slaves [ 231.224470][T12865] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 231.233692][T12866] tipc: Started in network mode [ 231.239079][T12866] tipc: Node identity 46ad2920af1c, cluster identity 4711 [ 231.247908][T12866] tipc: Enabled bearer , priority 0 [ 231.273162][T12856] tipc: Disabling bearer [ 231.632612][T12900] : entered promiscuous mode [ 232.828463][T12954] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1993'. [ 233.922047][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.412048][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'. [ 234.436506][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1995'. [ 234.577143][T12973] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 234.595826][T12973] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1999'. [ 234.645908][T12970] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 234.678418][T12970] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 234.794264][T11889] tipc: Subscription rejected, illegal request [ 234.995173][T12999] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 235.140605][T13002] bond5: (slave veth9): Enslaving as an active interface with a down link [ 235.154977][T12992] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 235.170014][T12992] netlink: 'syz.2.2005': attribute type 3 has an invalid length. [ 235.190586][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2005'. [ 235.199241][T13004] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 235.218537][T12999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.315762][T13004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.359813][T13009] bond6: (slave bridge12): making interface the new active one [ 235.375394][T13009] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 235.395843][T13014] netlink: 'syz.0.2007': attribute type 9 has an invalid length. [ 235.744685][T13031] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2014'. [ 236.174024][T13048] lo: entered allmulticast mode [ 236.189561][T13048] tunl0: entered allmulticast mode [ 236.197954][T13048] gre0: entered allmulticast mode [ 236.212175][T13048] gretap0: entered allmulticast mode [ 236.221373][T13048] erspan0: entered allmulticast mode [ 236.231609][T13048] ip_vti0: entered allmulticast mode [ 236.278397][T13048] ip6_vti0: entered allmulticast mode [ 236.293831][T13066] netlink: 'syz.3.2024': attribute type 21 has an invalid length. [ 236.303806][T13048] sit0: entered allmulticast mode [ 236.309092][T13066] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2024'. [ 236.318575][T13048] ip6tnl0: entered allmulticast mode [ 236.324921][T13048] ip6gre0: entered allmulticast mode [ 236.336550][T13048] syz_tun: entered allmulticast mode [ 236.360288][T13074] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2024'. [ 236.380060][T13048] bridge0: entered allmulticast mode [ 236.394714][T13048] bond0: entered allmulticast mode [ 236.403652][T13048] bond_slave_0: entered allmulticast mode [ 236.409794][T13048] bond_slave_1: entered allmulticast mode [ 236.430194][T13048] team0: entered allmulticast mode [ 236.450631][T13048] team_slave_0: entered allmulticast mode [ 236.456805][T13048] team_slave_1: entered allmulticast mode [ 236.463858][T13048] nlmon0: entered allmulticast mode [ 236.508057][T13050] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 236.545474][T13066] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2024'. [ 236.626205][T13085] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 239.093854][T13061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.113644][T13098] netlink: 'syz.0.2029': attribute type 2 has an invalid length. [ 239.131546][T13098] netlink: 'syz.0.2029': attribute type 2 has an invalid length. [ 239.140984][T13100] netlink: 'syz.0.2029': attribute type 2 has an invalid length. [ 239.320652][T13109] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2032'. [ 239.378050][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 239.416918][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 239.665879][T13116] bond1: (slave veth0_to_bond): Releasing active interface [ 239.858031][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 239.872330][T13138] validate_nla: 1 callbacks suppressed [ 239.872348][T13138] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 239.897111][T13140] netlink: 'syz.2.2042': attribute type 5 has an invalid length. [ 239.911498][T13138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2040'. [ 239.931295][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2042'. [ 239.968152][T13140] geneve2: entered promiscuous mode [ 239.981673][T13140] geneve2: entered allmulticast mode [ 240.188050][T11880] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 240.199155][T11880] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 240.210252][T11873] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 240.238171][T11873] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 240.626561][T13191] netlink: 'syz.1.2055': attribute type 75 has an invalid length. [ 240.741807][T13196] macsec0: entered promiscuous mode [ 240.773444][T13195] __nla_validate_parse: 1 callbacks suppressed [ 240.773460][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 240.788720][T13198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2059'. [ 240.850125][ T48] bond0: (slave bond_slave_0): interface is now down [ 240.870313][T13205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.890374][ T48] bond0: (slave bond_slave_1): interface is now down [ 240.926462][T13195] veth1_macvtap: left promiscuous mode [ 240.985876][T13195] macsec0 (unregistering): left promiscuous mode [ 241.260515][T13236] netlink: 'syz.0.2067': attribute type 9 has an invalid length. [ 241.385847][T13242] netlink: 'syz.4.2070': attribute type 16 has an invalid length. [ 241.396689][T13242] netlink: 'syz.4.2070': attribute type 17 has an invalid length. [ 241.413801][T13242] sit0: left promiscuous mode [ 241.455775][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.462967][T13242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.472880][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.480024][T13242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.490408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.525458][T13242] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 241.535190][T13242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.548577][T13242] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 241.557851][T13242] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 241.576659][T13253] netlink: 'syz.0.2071': attribute type 7 has an invalid length. [ 241.585247][T13253] netlink: 'syz.0.2071': attribute type 8 has an invalid length. [ 241.897538][T13264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.104614][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2080'. [ 242.124843][T13282] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 242.139127][T13282] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2080'. [ 242.163546][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 242.401359][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.482146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.609775][T13307] netlink: 'syz.2.2089': attribute type 1 has an invalid length. [ 242.722110][T13307] bond6: entered promiscuous mode [ 242.734913][T13307] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.870625][T13307] bond6: (slave bridge9): making interface the new active one [ 242.888220][T13307] bridge9: entered promiscuous mode [ 242.914547][T13307] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 243.125072][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 243.190753][T13348] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.297957][T13357] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'. [ 243.449481][T11876] bond0: (slave bond_slave_0): interface is now down [ 243.462859][ T30] audit: type=1804 audit(1781648216.690:8): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2106" name="/newroot/422/cgroup.controllers" dev="tmpfs" ino=2166 res=1 errno=0 [ 243.488717][T11876] bond0: (slave bond_slave_1): interface is now down [ 243.503848][ T30] audit: type=1800 audit(1781648216.710:9): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2106" name="cgroup.controllers" dev="tmpfs" ino=2166 res=0 errno=0 [ 243.531495][ T30] audit: type=1800 audit(1781648216.710:10): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2106" name="cgroup.controllers" dev="tmpfs" ino=2166 res=0 errno=0 [ 244.171638][T13367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.184910][T13381] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 244.395811][T13408] batadv0: entered allmulticast mode [ 244.653519][T13430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2121'. [ 244.679933][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 244.717984][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 244.856872][T13447] x_tables: duplicate underflow at hook 3 [ 244.906705][T13444] validate_nla: 3 callbacks suppressed [ 244.906726][T13444] netlink: 'syz.0.2123': attribute type 4 has an invalid length. [ 245.334545][T13468] netlink: 'syz.3.2131': attribute type 11 has an invalid length. [ 245.364169][T13477] netlink: 'syz.4.2134': attribute type 10 has an invalid length. [ 245.403811][T13477] dummy0: entered promiscuous mode [ 246.001484][T11873] bond0: (slave bond_slave_0): interface is now down [ 246.010337][T11873] bond0: (slave bond_slave_1): interface is now down [ 246.019640][T11873] bond0: now running without any active interface! [ 246.113300][T13504] __nla_validate_parse: 7 callbacks suppressed [ 246.113319][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 246.138941][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 246.197442][T13507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2144'. [ 246.245661][T13507] syzkaller0: entered promiscuous mode [ 246.273449][T13507] syzkaller0: entered allmulticast mode [ 246.475190][T13524] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2150'. [ 246.753224][T13530] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 246.763198][T13530] bond7: option packets_per_slave: allowed values 0 - 65535 [ 246.774564][T13530] bond7 (unregistering): Released all slaves [ 246.798205][T13554] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 246.807145][T13554] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.820032][T13534] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 246.878770][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 246.965909][T13537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.068940][T13568] syzkaller0: entered promiscuous mode [ 247.074772][T13568] syzkaller0: entered allmulticast mode [ 247.576837][T13580] : entered promiscuous mode [ 249.645324][T13533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.942207][T13594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2166'. [ 249.959207][T13597] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2167'. [ 249.994378][T13598] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2167'. [ 250.128478][T13604] tc action pedit 'at' offset 9 out of bounds [ 250.258220][T13615] openvswitch: netlink: IP tunnel dst address not specified [ 250.327121][T13612] bridge0: port 3(gretap0) entered disabled state [ 250.400472][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.408233][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.448907][T13612] team0: left promiscuous mode [ 250.455603][T13612] team_slave_1: left promiscuous mode [ 250.464633][T13612] H: left promiscuous mode [ 250.516109][T13612] hsr0: left allmulticast mode [ 250.524577][T13612] hsr_slave_0: left allmulticast mode [ 250.530141][T13612] hsr_slave_1: left allmulticast mode [ 250.578901][T13612] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 250.617899][T13612] gretap1: left promiscuous mode [ 250.623354][T13612] gretap1: left allmulticast mode [ 250.630249][T13612] ip6tnl1: left allmulticast mode [ 250.637106][T13612] bridge1: left promiscuous mode [ 250.643070][T13612] bridge1: left allmulticast mode [ 250.649162][T13612] bridge2: left promiscuous mode [ 250.654521][T13612] bridge2: left allmulticast mode [ 250.659846][T13612] team1: left promiscuous mode [ 250.665237][T13612] team1: left allmulticast mode [ 250.710748][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 250.728959][T13612] bridge3: left promiscuous mode [ 250.734861][T13612] bridge3: left allmulticast mode [ 250.747151][T13612] bridge6: left promiscuous mode [ 250.753047][T13612] bridge6: left allmulticast mode [ 250.759774][T13612] bridge7: left promiscuous mode [ 250.764917][T13612] bridge7: left allmulticast mode [ 250.773847][T13612] vlan3: left allmulticast mode [ 250.778819][T13612] bond0: left allmulticast mode [ 250.785865][T13612] bond_slave_0: left allmulticast mode [ 250.792226][T13612] bond_slave_1: left allmulticast mode [ 250.814780][T13612] geneve2: left promiscuous mode [ 250.820849][T13612] geneve2: left allmulticast mode [ 250.828900][T13612] bond6: left promiscuous mode [ 250.833865][T13612] bridge9: left promiscuous mode [ 250.886378][T11873] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.934940][T11873] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.960785][T11873] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 250.980432][T13640] openvswitch: netlink: Unknown key attributes 2 [ 250.995160][T11873] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.015214][T13639] netlink: 'syz.4.2178': attribute type 8 has an invalid length. [ 251.039403][T11873] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.063340][T11873] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.101541][T11880] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.116778][T11880] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.128336][T11880] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.146887][T11880] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.195865][T11880] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.225339][T11880] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.314375][T13658] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2184'. [ 251.344359][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 251.355476][T13660] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 251.380283][T13660] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.2185'. [ 251.471509][T13656] syzkaller0: entered promiscuous mode [ 251.481409][T13656] syzkaller0: entered allmulticast mode [ 251.617822][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2188'. [ 253.888315][T13712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.900272][T13716] sock: sock_set_timeout: `syz.3.2200' (pid 13716) tries to set negative timeout [ 254.136090][T13730] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2203'. [ 254.162571][T13730] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2203'. [ 254.590205][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 254.624000][T13747] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.793816][T13758] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 254.834955][T13771] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 254.896568][T13758] bond7 (unregistering): Released all slaves [ 255.058481][T13771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.087794][T13771] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 255.369660][T13800] ip6tnl2: entered allmulticast mode [ 255.396634][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 255.405779][T13800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2223'. [ 255.436355][T13802] erspan0: left promiscuous mode [ 255.446321][T13802] erspan0: left allmulticast mode [ 255.472224][T13802] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 255.516415][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 255.696492][T13821] x_tables: unsorted underflow at hook 1 [ 255.847271][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.430894][T13864] __nla_validate_parse: 4 callbacks suppressed [ 256.430916][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 256.597307][T13873] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2242'. [ 256.665610][T13882] bond0: entered promiscuous mode [ 256.670889][T13882] bond_slave_0: entered promiscuous mode [ 256.678586][T13882] bond_slave_1: entered promiscuous mode [ 256.688151][T13882] bond0: left promiscuous mode [ 256.693556][T13882] bond_slave_0: left promiscuous mode [ 256.710907][T13882] bond_slave_1: left promiscuous mode [ 256.729949][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 257.480807][T13921] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 257.548085][T13921] macvlan2: entered promiscuous mode [ 257.553730][T13921] macvlan2: entered allmulticast mode [ 257.560345][T13921] bond7: entered promiscuous mode [ 257.567334][T13921] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 257.588046][T13921] bond7: left promiscuous mode [ 257.630192][T13928] tipc: MTU too low for tipc bearer [ 258.149082][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2265'. [ 258.276711][T13962] netlink: 'syz.4.2268': attribute type 17 has an invalid length. [ 258.277063][T13965] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 258.309817][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2268'. [ 258.339371][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2268'. [ 258.503230][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2273'. [ 258.509869][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 259.037309][T14018] sctp: [Deprecated]: syz.1.2284 (pid 14018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.037309][T14018] Use struct sctp_sack_info instead [ 259.070860][T14018] sctp: [Deprecated]: syz.1.2284 (pid 14018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.070860][T14018] Use struct sctp_sack_info instead [ 259.662769][T14053] netlink: 'syz.2.2294': attribute type 2 has an invalid length. [ 259.701937][T14055] netlink: 'syz.2.2294': attribute type 2 has an invalid length. [ 259.733502][T14048] syzkaller0: entered promiscuous mode [ 259.749360][T14048] syzkaller0: entered allmulticast mode [ 260.068531][T14079] bridge21: entered promiscuous mode [ 260.075212][T14079] bridge21: entered allmulticast mode [ 260.233620][T14083] sctp: [Deprecated]: syz.0.2302 (pid 14083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.233620][T14083] Use struct sctp_sack_info instead [ 260.464517][T14093] veth3: entered allmulticast mode [ 260.555810][T14096] syzkaller0: entered promiscuous mode [ 260.573224][T14096] syzkaller0: entered allmulticast mode [ 260.663486][T14104] x_tables: duplicate underflow at hook 1 [ 260.963939][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 261.383090][T14144] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 261.588190][T14157] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 261.603879][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.621246][T14157] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2324'. [ 261.637287][T14163] netlink: 'syz.1.2326': attribute type 21 has an invalid length. [ 261.661336][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 261.673340][T14163] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2326'. [ 261.769498][T14167] netlink: 'syz.2.2329': attribute type 1 has an invalid length. [ 261.918662][T14167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.013803][T14181] bond7: (slave gretap4): making interface the new active one [ 262.036557][T14181] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 262.494805][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 262.615631][T14218] netlink: 'syz.3.2340': attribute type 7 has an invalid length. [ 262.760523][T14228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2346'. [ 262.954159][T14239] sctp: [Deprecated]: syz.0.2351 (pid 14239) Use of int in max_burst socket option deprecated. [ 262.954159][T14239] Use struct sctp_assoc_value instead [ 262.984980][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2350'. [ 263.178163][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.185603][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.254561][T14243] dummy0: left promiscuous mode [ 263.424375][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.458788][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.473301][T14254] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2355'. [ 263.643509][T14243] batman_adv: batadv0: Interface deactivated: wlan0 [ 263.673754][T14248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2352'. [ 263.764053][T14243] tipc: Resetting bearer [ 263.819836][T14243] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 263.842855][T14243] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 263.868007][T14243] vlan2: left promiscuous mode [ 263.879688][T14243] bridge0: left promiscuous mode [ 263.893923][T14243] bridge2: left promiscuous mode [ 263.909102][T14243] bridge2: left allmulticast mode [ 263.925098][T14243] bridge3: left promiscuous mode [ 263.944356][T14243] bridge3: left allmulticast mode [ 263.965988][T14243] vlan3: left allmulticast mode [ 263.981337][T14243] bridge5: left allmulticast mode [ 263.990298][T14243] bridge7: left promiscuous mode [ 263.997351][T14243] bridge7: left allmulticast mode [ 264.010134][T14243] bridge9: left promiscuous mode [ 264.016966][T14243] bridge9: left allmulticast mode [ 264.031963][T14243] bridge11: left promiscuous mode [ 264.043529][T14243] bridge11: left allmulticast mode [ 264.056336][T14243] bridge12: left promiscuous mode [ 264.067786][T14243] bridge12: left allmulticast mode [ 264.074983][T14243] bridge13: left promiscuous mode [ 264.085431][T14243] bridge13: left allmulticast mode [ 264.094724][T14243] bridge14: left promiscuous mode [ 264.107084][T14243] bridge14: left allmulticast mode [ 264.118188][T14243] bridge15: left promiscuous mode [ 264.127271][T14243] bridge15: left allmulticast mode [ 264.140832][T14243] bridge16: left promiscuous mode [ 264.152941][T14243] bridge16: left allmulticast mode [ 264.167695][T14243] gtp0: left promiscuous mode [ 264.180099][T14243] gtp0: left allmulticast mode [ 264.198073][T14243] team1: left promiscuous mode [ 264.210192][T14243] team1: left allmulticast mode [ 264.236603][T14243] bridge21: left promiscuous mode [ 264.251588][T14243] bridge21: left allmulticast mode [ 264.261771][ T29] lo speed is unknown, defaulting to 1000 [ 264.271468][ T29] syú2: Port: 1 Link DOWN [ 264.295220][T11881] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.310152][T11881] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.332581][T11881] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.351667][T11881] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.360857][T11881] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.370477][T11881] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.458352][T11881] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.489537][T11881] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.513689][T11881] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.539999][T11881] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.585349][T11881] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.622482][T11881] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 264.832694][T14296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2362'. [ 264.855912][T14296] nbd: couldn't find a device at index 0 [ 265.188008][T14319] netlink: 'syz.2.2368': attribute type 4 has an invalid length. [ 265.688478][T14339] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 265.719296][T14339] bond8 (unregistering): Released all slaves [ 265.830527][T14349] syzkaller1: entered promiscuous mode [ 265.866850][T14349] syzkaller1: entered allmulticast mode [ 265.993262][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2375'. [ 266.654717][T14398] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003 [ 266.918556][T14410] netlink: 'syz.1.2384': attribute type 16 has an invalid length. [ 266.934853][T14411] netlink: 'syz.3.2385': attribute type 21 has an invalid length. [ 266.957373][T14410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2384'. [ 266.975478][T14412] No such timeout policy "syz1" [ 266.989507][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 267.096518][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 267.114580][T14411] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 267.144892][T14411] bond11 (unregistering): Released all slaves [ 267.462615][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2390'. [ 267.554499][T14442] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2392'. [ 267.594716][T14444] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 267.623764][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 267.668453][T14444] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2393'. [ 267.745519][T14452] x_tables: duplicate underflow at hook 3 [ 267.775255][T14452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2395'. [ 267.831505][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'. [ 267.867781][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 267.911433][T14461] vlan0: entered promiscuous mode [ 267.938434][T14461] hsr0: entered promiscuous mode [ 267.950678][T14461] vlan0: entered allmulticast mode [ 267.958286][T14461] hsr0: entered allmulticast mode [ 267.968457][T14461] hsr_slave_0: entered allmulticast mode [ 267.983680][T14461] hsr_slave_1: entered allmulticast mode [ 268.012388][ T5641] block nbd2: Receive control failed (result -32) [ 268.064676][T14472] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 268.127774][T14477] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 268.953141][T14531] netlink: 'syz.3.2415': attribute type 8 has an invalid length. [ 269.085436][T14543] tap0: tun_chr_ioctl cmd 2148553947 [ 269.647323][T14585] netlink: 'syz.4.2427': attribute type 4 has an invalid length. [ 269.706532][T14585] .`: renamed from bond0 [ 269.749557][T14592] netlink: 'syz.2.2429': attribute type 4 has an invalid length. [ 270.444283][T14638] netlink: 'syz.0.2443': attribute type 39 has an invalid length. [ 270.473762][T14638] hsr_slave_0: left promiscuous mode [ 270.495406][T14638] hsr_slave_1: left promiscuous mode [ 270.549327][T14641] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 270.618460][T14641] bond8: entered promiscuous mode [ 270.629643][T14641] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.758918][T14641] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.807708][T14641] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 270.818449][T14641] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 270.835326][T14641] bond8: (slave vti0): making interface the new active one [ 270.843056][T14641] vti0: entered promiscuous mode [ 270.850892][T14641] bond8: (slave vti0): Enslaving as an active interface with an up link [ 270.895698][T14665] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 270.895952][T14664] veth1_macvtap: left promiscuous mode [ 271.011581][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.078934][T14671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.177796][T14687] syzkaller0: entered promiscuous mode [ 271.216159][T14687] syzkaller0: entered allmulticast mode [ 271.618095][T14717] netlink: 'syz.4.2461': attribute type 30 has an invalid length. [ 271.973281][T14735] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.237659][T14760] __nla_validate_parse: 25 callbacks suppressed [ 272.237679][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'. [ 272.605254][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 272.616088][T14791] netlink: 'syz.1.2477': attribute type 4 has an invalid length. [ 272.621802][T14774] 8021q: adding VLAN 0 to HW filter on device bond9 [ 272.686153][T14774] bond9 (unregistering): Released all slaves [ 272.719918][ T5295] veth1_macvtap: entered promiscuous mode [ 273.032032][T14813] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2483'. [ 273.110763][T14813] ip_vti0: entered promiscuous mode [ 273.347018][T14833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.368109][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'. [ 273.417369][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 273.452179][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 273.459087][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 273.587901][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 273.846529][T14859] netem: change failed [ 273.862767][T14873] netlink: 'syz.2.2500': attribute type 6 has an invalid length. [ 273.913792][T14873] netlink: 'syz.2.2500': attribute type 21 has an invalid length. [ 274.175983][T14892] netlink: 'syz.4.2504': attribute type 2 has an invalid length. [ 274.185904][T14892] netlink: 'syz.4.2504': attribute type 83 has an invalid length. [ 274.500407][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 274.511164][T14911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.524411][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 274.756683][T14921] ip_vti0: left promiscuous mode [ 274.823113][T14921] bridge0: port 3(gretap0) entered blocking state [ 274.829738][T14921] bridge0: port 3(gretap0) entered listening state [ 274.905037][T14921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.969585][T14921] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.030356][T14936] SET target dimension over the limit! [ 275.095250][T14921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.133185][T14921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.183914][T14921] veth1_vlan: left promiscuous mode [ 275.192807][T14921] ve: left promiscuous mode [ 275.207782][T14921] ve: entered promiscuous mode [ 275.220372][T14921] veth1_vlan: entered promiscuous mode [ 275.233955][T14921] veth1_macvtap: left promiscuous mode [ 275.242392][T14921] veth0_macvtap: left promiscuous mode [ 275.249525][T14921] veth0_macvtap: entered promiscuous mode [ 275.258740][T14921] veth1_macvtap: entered promiscuous mode [ 275.276245][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.287632][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.300680][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.316990][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.328001][T14921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.341598][T14921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.371738][T14921] 8021q: adding VLAN 0 to HW filter on device team1 [ 275.411975][T14921] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.420622][T14921] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 275.432012][T14921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.443754][T14921] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 275.452388][T14921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.467781][T14921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.482085][T14921] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.492036][T14921] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 275.510995][ T5638] team_slave_1: entered promiscuous mode [ 275.529347][ T5638] bridge1: entered promiscuous mode [ 275.542772][ T5638] bridge3: entered promiscuous mode [ 275.556662][ T5638] bridge6: entered promiscuous mode [ 275.568497][ T5638] bridge7: entered promiscuous mode [ 275.580342][T14935] macvlan2: entered promiscuous mode [ 275.586528][ T5641] Bluetooth: hci4: link tx timeout [ 275.594947][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.610794][ T5641] Bluetooth: hci4: link tx timeout [ 275.611344][T14935] macvlan2: entered allmulticast mode [ 275.616249][ T5641] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.657010][T11889] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.664372][T11889] bridge0: port 1(bridge_slave_0) entered listening state [ 275.675644][T11889] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.682985][T11889] bridge0: port 2(bridge_slave_1) entered listening state [ 275.742900][T14947] bridge13: entered promiscuous mode [ 275.748387][T14947] bridge13: entered allmulticast mode [ 275.757134][T14947] team0: Port device bridge13 added [ 275.767968][T11889] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 275.798417][T11889] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 275.833045][T11889] bond1: (slave veth3): making interface the new active one [ 275.850436][T11889] bond1: active interface up! [ 275.857281][T11880] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.874624][T11880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.885214][T11880] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 275.895319][T11880] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.904885][T11880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.915422][T11880] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 275.924607][T11880] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.935466][T11880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.945046][T11880] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 276.000630][T11880] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.031047][T11880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.041502][T11880] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 276.099027][T11876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.122248][T11876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.132219][ T8693] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.208228][ T1164] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 276.234950][ T1164] bond5: (slave veth9): making interface the new active one [ 276.253411][ T1164] bond5: active interface up! [ 276.263120][T14972] netlink: 'syz.3.2521': attribute type 11 has an invalid length. [ 276.315564][T11880] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 276.337696][T11880] bond4: (slave veth7): making interface the new active one [ 276.388420][T11880] bond4: active interface up! [ 276.460494][T14967] syz.0.2524 (14967) used greatest stack depth: 17944 bytes left [ 276.563388][T14989] bridge8: entered promiscuous mode [ 276.572475][ T5638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.576643][T14989] bridge8: entered allmulticast mode [ 276.618978][T14989] team0: Port device bridge8 added [ 276.771625][ T5638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.870376][T15010] bond9: option min_links: invalid value (18446744073709551614) [ 276.910912][T15010] bond9: option min_links: allowed values 0 - 2147483647 [ 276.943001][T15010] bond9 (unregistering): Released all slaves [ 277.194989][T15031] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 277.236088][T15031] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 277.536832][T15062] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.589409][T15064] __nla_validate_parse: 4 callbacks suppressed [ 277.589427][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2549'. [ 277.694371][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 278.161638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.170255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.178819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.187463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.462457][T15071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.390738][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2576'. [ 279.394714][T15160] bridge11: entered promiscuous mode [ 279.420570][T15160] bridge11: entered allmulticast mode [ 279.434722][T15160] team0: Port device bridge11 added [ 279.519829][T15163] netlink: 'syz.4.2576': attribute type 1 has an invalid length. [ 279.551720][T15163] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2576'. [ 279.553050][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'. [ 279.570403][T15163] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2576'. [ 279.584415][T15163] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2576'. [ 279.629304][T15163] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 279.754554][T15177] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2581'. [ 279.798755][T15185] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2583'. [ 279.878348][T15191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2585'. [ 280.002258][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.407622][T15225] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 280.432456][T15225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2592'. [ 280.467267][T15225] team0: entered allmulticast mode [ 280.498253][T15225] team_slave_1: entered allmulticast mode [ 280.596611][T15225] bridge1: entered allmulticast mode [ 280.662558][T15225] bridge3: entered allmulticast mode [ 280.678792][T15225] bridge6: entered allmulticast mode [ 280.685156][T15225] bridge7: entered allmulticast mode [ 280.691951][T15225] bridge0: port 4(team0) entered blocking state [ 280.698525][T15225] bridge0: port 4(team0) entered disabled state [ 280.707881][T15225] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 280.735586][T15236] xt_hashlimit: size too large, truncated to 1048576 [ 280.749596][T15243] netlink: 'syz.1.2598': attribute type 1 has an invalid length. [ 280.776902][T15240] netlink: 'syz.1.2598': attribute type 11 has an invalid length. [ 280.931065][T15249] netlink: zone id is out of range [ 280.976813][T15248] netlink: set zone limit has 4 unknown bytes [ 280.982483][T15249] netlink: zone id is out of range [ 281.027466][T15249] netlink: zone id is out of range [ 281.056570][T15249] netlink: zone id is out of range [ 281.088150][T15249] netlink: zone id is out of range [ 281.103718][T15249] netlink: zone id is out of range [ 281.114471][T15249] netlink: zone id is out of range [ 281.127063][T15249] netlink: zone id is out of range [ 281.600767][T15291] netlink: 'syz.4.2613': attribute type 1 has an invalid length. [ 281.635476][T15291] netlink: 'syz.4.2613': attribute type 7 has an invalid length. [ 281.653314][T15291] netlink: 'syz.4.2613': attribute type 8 has an invalid length. [ 281.672142][T15291] NCSI netlink: No device for ifindex 65584 [ 282.466549][T15343] : renamed from gretap0 [ 282.725115][T15348] batadv0 (unregistering): left promiscuous mode [ 283.319396][T15350] __nla_validate_parse: 11 callbacks suppressed [ 283.319408][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 283.440320][T15355] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2630'. [ 284.945950][T15313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.274859][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 285.362064][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2638'. [ 285.374243][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 285.477151][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 285.558949][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 285.734676][T15397] syzkaller0: entered promiscuous mode [ 285.749013][T15397] syzkaller0: entered allmulticast mode [ 285.835502][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2643'. [ 286.007208][T15412] syzkaller0: entered promiscuous mode [ 286.035716][T15412] syzkaller0: entered allmulticast mode [ 286.416391][T15433] xt_TCPMSS: Only works on TCP SYN packets [ 286.431899][T15433] netlink: 'syz.4.2648': attribute type 32 has an invalid length. [ 286.450453][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 286.610016][T15433] bond0: Setting coupled_control to off (0) [ 286.758317][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 287.024912][ T30] audit: type=1107 audit(1781648260.240:11): pid=15461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UܺÁßEÕâ‹.ðșؾŽL‹ª%ûj1à,À…5떗߇hS³¡~œÛs' [ 287.447232][T15483] netlink: 'syz.4.2662': attribute type 9 has an invalid length. [ 287.503909][ T30] audit: type=1800 audit(1781648260.730:12): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2664" name="memory.events" dev="tmpfs" ino=2688 res=0 errno=0 [ 287.561944][ T30] audit: type=1804 audit(1781648260.760:13): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2664" name="/newroot/524/memory.events" dev="tmpfs" ino=2688 res=1 errno=0 [ 287.842746][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.858937][T15510] veth0: entered promiscuous mode [ 287.870002][T15510] veth0: left promiscuous mode [ 288.125916][T15526] netlink: 'syz.4.2676': attribute type 1 has an invalid length. [ 288.181954][T15528] bond11: option all_slaves_active: invalid value (222) [ 288.206873][T15528] bond11 (unregistering): Released all slaves [ 288.226342][T15534] netlink: 'syz.3.2677': attribute type 11 has an invalid length. [ 288.413270][T15549] __nla_validate_parse: 8 callbacks suppressed [ 288.413292][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'. [ 288.468981][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'. [ 288.507145][T15551] xfrm1: entered promiscuous mode [ 288.513237][T15551] xfrm1: entered allmulticast mode [ 288.649946][T15566] netlink: 'syz.4.2688': attribute type 21 has an invalid length. [ 288.664882][T15566] netlink: 'syz.4.2688': attribute type 6 has an invalid length. [ 288.678397][T15566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2688'. [ 288.689371][T15573] syzkaller0: entered promiscuous mode [ 288.712181][T15573] syzkaller0: entered allmulticast mode [ 288.888912][T15588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2693'. [ 288.889286][T15591] xt_hashlimit: invalid interval [ 288.907554][T15591] net_ratelimit: 3 callbacks suppressed [ 288.907571][T15591] openvswitch: netlink: IP tunnel dst address not specified [ 289.059283][T15595] gtp1: entered allmulticast mode [ 289.067433][T15595] team0: Device gtp1 is of different type [ 289.093355][T15599] bridge0: entered promiscuous mode [ 289.098683][T15599] bridge0: entered allmulticast mode [ 289.107913][T15599] team0: Port device bridge0 added [ 289.344542][T15613] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2703'. [ 289.364091][T15613] syzkaller1: entered promiscuous mode [ 289.370164][T15613] syzkaller1: entered allmulticast mode [ 289.550861][T15627] IPVS: Unknown mcast interface: vcan0 [ 289.829970][T15642] vlan4: entered promiscuous mode [ 289.841714][T15642] gretap0: entered promiscuous mode [ 289.919730][T15653] syzkaller0: entered promiscuous mode [ 289.928605][T15653] syzkaller0: entered allmulticast mode [ 290.035818][T15659] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 290.043632][T15659] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.074485][T15665] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2718'. [ 290.087787][T15666] netlink: 'syz.4.2719': attribute type 1 has an invalid length. [ 290.129738][T15666] bond11: entered promiscuous mode [ 290.137637][T15666] 8021q: adding VLAN 0 to HW filter on device bond11 [ 290.145238][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2719'. [ 290.175020][T15668] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2719'. [ 290.408814][T15688] netlink: 4232 bytes leftover after parsing attributes in process `syz.4.2724'. [ 290.790354][T15711] netlink: 'syz.4.2730': attribute type 1 has an invalid length. [ 290.854849][T15711] 8021q: adding VLAN 0 to HW filter on device bond12 [ 290.890809][T15715] bond9: (slave veth0_to_bond): Releasing backup interface [ 290.944078][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2730'. [ 290.956909][T15715] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 291.858488][T15731] veth3: entered allmulticast mode [ 292.036856][T15748] vlan1: entered allmulticast mode [ 292.043695][T15748] : entered allmulticast mode [ 292.139086][T15746] syzkaller0: entered promiscuous mode [ 292.146354][T15746] syzkaller0: entered allmulticast mode [ 292.240908][T15765] netlink: 'syz.3.2748': attribute type 11 has an invalid length. [ 292.939583][T15868] nbd: must specify at least one socket [ 293.358411][T15902] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 293.496399][T15904] __nla_validate_parse: 8 callbacks suppressed [ 293.496418][T15904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2761'. [ 293.826725][T15915] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2763'. [ 293.865742][T15915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 293.878789][T15919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2765'. [ 294.158540][T15931] netlink: 'syz.1.2767': attribute type 12 has an invalid length. [ 294.180064][T15931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2767'. [ 294.338420][T15935] 8021q: adding VLAN 0 to HW filter on device bond11 [ 294.374114][T15935] bridge0: port 1(bond11) entered blocking state [ 294.392078][T15935] bridge0: port 1(bond11) entered disabled state [ 294.397054][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 294.409714][T15935] bond11: entered allmulticast mode [ 294.426992][T15935] bond11: entered promiscuous mode [ 294.459165][T15935] bridge0: port 1(bond11) entered blocking state [ 294.465617][T15935] bridge0: port 1(bond11) entered listening state [ 294.514797][T11888] bridge0: port 1(bond11) entered disabled state [ 294.573193][T15946] netlink: 'syz.2.2771': attribute type 1 has an invalid length. [ 294.597718][T15946] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2771'. [ 294.646971][T15946] netlink: 'syz.2.2771': attribute type 1 has an invalid length. [ 294.678517][T15917] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 294.696640][T15946] netlink: 'syz.2.2771': attribute type 8 has an invalid length. [ 294.718713][T15946] netlink: 582 bytes leftover after parsing attributes in process `syz.2.2771'. [ 294.739812][T15946] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2771'. [ 294.815118][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 294.887863][T15969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2779'. [ 294.966872][T15971] erspan0: entered promiscuous mode [ 295.144379][T15971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.616053][ T5640] block nbd4: NBD_DISCONNECT [ 295.766991][T16003] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 295.933110][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 296.649832][T16023] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 296.707003][T16023] bond7 (unregistering): Released all slaves [ 296.750530][T16040] netlink: 'syz.4.2799': attribute type 11 has an invalid length. [ 296.909140][T16040] 8021q: adding VLAN 0 to HW filter on device .` [ 296.918377][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.932873][T16040] batadv0: left promiscuous mode [ 296.945322][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.994695][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.009231][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.022026][T16040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.032978][T16040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.046572][T16051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.050795][T16040] veth1_vlan: left promiscuous mode [ 297.072378][T16040] veth0_vlan: left promiscuous mode [ 297.084564][T16040] veth0_vlan: entered promiscuous mode [ 297.098670][T16040] veth1_vlan: entered promiscuous mode [ 297.114752][T16040] veth1_macvtap: left promiscuous mode [ 297.122701][T16040] veth0_macvtap: left promiscuous mode [ 297.129413][T16040] veth0_macvtap: entered promiscuous mode [ 297.136463][T16040] veth1_macvtap: entered promiscuous mode [ 297.166617][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.184896][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.193286][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.202714][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.212498][T16040] batman_adv: batadv0: Interface activated: wlan0 [ 297.234325][T16040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.248961][T16040] batadv0: entered promiscuous mode [ 297.255196][T16040] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 297.263879][T16040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.278350][T16040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.291003][T16040] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 297.308852][ T5638] lo speed is unknown, defaulting to 1000 [ 297.326207][ T5638] syú2: Port: 1 Link ACTIVE [ 297.373599][T16041] batman_adv: batadv0: Interface deactivated: wlan0 [ 297.388446][T16041] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 297.398484][T16041] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 297.420253][T11876] bond12: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 297.452908][T11876] bond12: (slave veth0_to_bond): making interface the new active one [ 297.476961][T11876] bond12: active interface up! [ 297.507081][T11873] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.514640][T11873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.553801][T11873] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.561828][T11873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.627320][T11880] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.640183][T11880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.649891][T11880] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.733590][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.762645][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.790200][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.820352][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.864391][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.896373][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.912811][T16071] netlink: 'syz.4.2808': attribute type 11 has an invalid length. [ 297.922593][T16071] netlink: 'syz.4.2808': attribute type 5 has an invalid length. [ 297.933217][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.953299][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.963216][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.001807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.181442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.290579][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.318726][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.334114][ T5750] syzkaller1: tun_net_xmit 90 [ 298.344116][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.364593][T16111] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 298.391778][T16111] syzkaller1: Linktype set failed because interface is up [ 298.406599][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.434506][T11873] syzkaller1: tun_net_xmit 86 [ 298.449992][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.466243][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.479848][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.497905][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.514602][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.540771][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.566918][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.586209][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.606360][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.621330][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.639042][T16134] __nla_validate_parse: 20 callbacks suppressed [ 298.639063][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2823'. [ 298.661181][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.667835][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.681758][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.691330][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.706281][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.728457][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.748762][ T5750] syzkaller1: tun_net_xmit 90 [ 298.757229][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.804469][T16144] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 298.813348][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.834733][T16144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.837808][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.884454][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.887336][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 298.901738][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.912544][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 298.922599][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 298.942212][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'. [ 298.993682][T16147] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 299.014033][T16117] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 299.074359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.324317][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 299.333898][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 299.359658][T16176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2833'. [ 299.402832][T16174] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 299.495259][T16184] netlink: 'syz.1.2836': attribute type 3 has an invalid length. [ 299.720594][T16194] xt_bpf: check failed: parse error [ 299.787477][T16189] Bluetooth: hci2: Opcode 0x0c20 failed: -4 [ 299.787583][T16201] xt_bpf: check failed: parse error [ 299.899045][T16204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 299.929390][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2841'. [ 299.964991][T16206] netlink: 'syz.3.2841': attribute type 6 has an invalid length. [ 300.076711][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 300.100402][T16217] netlink: 'syz.3.2845': attribute type 1 has an invalid length. [ 300.114025][T16217] netlink: 'syz.3.2845': attribute type 3 has an invalid length. [ 300.125122][T16217] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2845'. [ 300.135984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.328084][T16233] sctp: [Deprecated]: syz.4.2848 (pid 16233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.328084][T16233] Use struct sctp_sack_info instead [ 300.366180][T16227] syzkaller0: entered promiscuous mode [ 300.376521][T16227] syzkaller0: entered allmulticast mode [ 300.625650][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880499d5800: rx timeout, send abort [ 300.634651][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880499d5800: 0x1f101: (3) A timeout occurred and this is the connection abort to close the session. [ 300.855043][T16274] SET target dimension over the limit! [ 301.023723][T16285] netlink: 'syz.0.2864': attribute type 1 has an invalid length. [ 301.069927][T16285] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.086437][T16285] bond3: (slave veth0_to_bond): Releasing backup interface [ 301.105533][T16285] bond9: (slave veth0_to_bond): making interface the new active one [ 301.115687][T16285] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 301.130037][T16288] syzkaller0: entered promiscuous mode [ 301.132265][ C1] net_ratelimit: 1 callbacks suppressed [ 301.132282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.147300][T16288] syzkaller0: entered allmulticast mode [ 301.166502][T16289] bond9: entered promiscuous mode [ 301.171850][T16289] veth0_to_bond: entered promiscuous mode [ 301.177918][T16289] bond9: entered allmulticast mode [ 301.183444][T16289] veth0_to_bond: entered allmulticast mode [ 301.217272][T16285] macvlan3: entered promiscuous mode [ 301.222964][T16285] macvlan3: entered allmulticast mode [ 301.230317][T16285] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 301.248236][T16285] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 301.681651][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 301.923811][T16338] ip6tnl0: Caught tx_queue_len zero misconfig [ 302.029856][T16340] macvtap0: entered allmulticast mode [ 302.055284][T16340] veth0_macvtap: entered allmulticast mode [ 302.072657][T16340] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 302.111459][T16343] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 303.202076][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.922634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.777411][T16330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.968106][T16384] __nla_validate_parse: 2 callbacks suppressed [ 304.968122][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'. [ 305.004239][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'. [ 305.035639][T16398] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 305.049416][T16388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2888'. [ 305.122906][ C0] bridge0: port 3(gretap0) entered learning state [ 305.182119][T16404] netlink: 'syz.1.2894': attribute type 16 has an invalid length. [ 305.191381][T16404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2894'. [ 305.213643][T16408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2893'. [ 305.246719][T16404] team0: Device gtp2 is up. Set it down before adding it as a team port [ 305.385156][T16420] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2897'. [ 305.394521][T16417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2896'. [ 305.513297][T16426] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 305.540602][T16427] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 305.763402][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 305.770709][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 305.894283][T16449] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2908'. [ 305.960936][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 306.188852][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.199639][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.210208][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.220865][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.251607][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.976934][T16457] xfrm0 speed is unknown, defaulting to 1000 [ 307.004049][T16509] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 307.012361][T16509] netlink: 'syz.2.2922': attribute type 11 has an invalid length. [ 307.020805][T16509] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2922'. [ 307.179264][T11873] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 307.358718][T16457] lo speed is unknown, defaulting to 1000 [ 307.865812][T16457] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.876615][T16457] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.892560][T16457] bridge_slave_0: entered allmulticast mode [ 307.910372][T16457] bridge_slave_0: entered promiscuous mode [ 307.926293][T16457] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.945624][T16457] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.957134][T16457] bridge_slave_1: entered allmulticast mode [ 307.975583][T16457] bridge_slave_1: entered promiscuous mode [ 308.028600][T16457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.041469][T16457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.082766][T16457] team0: Port device team_slave_0 added [ 308.091856][T16457] team0: Port device team_slave_1 added [ 308.128885][T16457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.136195][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.163451][T16457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.176524][T16457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.184012][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.210702][T16457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.271838][T16457] hsr_slave_0: entered promiscuous mode [ 308.278778][T16457] hsr_slave_1: entered promiscuous mode [ 308.285744][T16457] debugfs: 'hsr0' already exists in 'hsr' [ 308.292748][T16457] Cannot create hsr debugfs directory [ 308.323712][ T5641] Bluetooth: hci5: command tx timeout [ 308.475773][T16457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.594903][T16457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.663909][T16457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.725896][T16457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.992523][T16509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.018087][T16457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.109958][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.173208][T16457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.189655][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.199647][T16457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.231589][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.269196][T16457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.311833][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.347901][T16602] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 310.401921][ T5641] Bluetooth: hci5: command tx timeout [ 310.533520][T16457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.593545][T16457] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.629623][T16623] tipc: MTU too low for tipc bearer [ 310.640807][T16627] __nla_validate_parse: 4 callbacks suppressed [ 310.640826][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 310.643775][T11880] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.648668][T16621] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 310.656011][T11880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.656814][T16627] netlink: 'syz.0.2945': attribute type 30 has an invalid length. [ 310.704653][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.711873][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.723243][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 310.733771][T16632] netlink: 'syz.0.2945': attribute type 30 has an invalid length. [ 310.833571][T16636] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 310.847004][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 310.875722][T16634] netlink: 'syz.4.2946': attribute type 3 has an invalid length. [ 311.066343][T16651] netlink: 'syz.3.2949': attribute type 1 has an invalid length. [ 311.089798][T16651] netlink: 'syz.3.2949': attribute type 11 has an invalid length. [ 311.141034][T16651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2949'. [ 311.161771][T16654] IPVS: Error connecting to the multicast addr [ 311.204354][T16654] netlink: 'syz.4.2951': attribute type 4 has an invalid length. [ 311.212920][T16654] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2951'. [ 311.669693][T16685] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2958'. [ 311.677532][T16688] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2959'. [ 311.695449][T16689] netlink: 'syz.3.2957': attribute type 25 has an invalid length. [ 311.819316][T16694] ip6t_REJECT: ECHOREPLY is not supported [ 311.848541][T16457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.934008][T16702] netem: change failed [ 311.955454][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 312.088239][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2964'. [ 312.167083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.222856][T16713] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 312.333702][T16457] veth0_vlan: entered promiscuous mode [ 312.361010][T16457] veth1_vlan: entered promiscuous mode [ 312.410851][T16726] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 312.482303][ T5641] Bluetooth: hci5: command tx timeout [ 312.518205][T16726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2968'. [ 312.543888][T16734] bond10: (slave geneve2): making interface the new active one [ 312.556723][T16734] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 312.584114][T16457] veth0_macvtap: entered promiscuous mode [ 312.599489][ T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.628574][ T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.659762][T16726] 8021q: adding VLAN 0 to HW filter on device bond10 [ 312.685770][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 312.852832][T16457] veth1_macvtap: entered promiscuous mode [ 312.921050][T16457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.976851][T16457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.152090][T11880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.162093][T11880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.186317][T11880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.207754][T11880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.342156][T16766] veth1_to_hsr: mtu less than device minimum [ 313.397424][T11874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.425576][T11874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.508505][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.531014][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.539199][T16779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 313.603266][T16781] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 313.734051][T16789] SET target dimension over the limit! [ 313.971391][T16811] bridge10: entered promiscuous mode [ 313.994763][T16811] bridge10: entered allmulticast mode [ 314.499454][T16834] syzkaller0: entered promiscuous mode [ 314.529654][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.530691][T16834] syzkaller0: entered allmulticast mode [ 314.546194][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.560429][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.568504][ T5634] Bluetooth: hci5: command tx timeout [ 314.578159][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.589935][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.036277][T16858] syzkaller0: entered promiscuous mode [ 315.042569][T16858] syzkaller0: entered allmulticast mode [ 315.421017][T16831] xfrm0 speed is unknown, defaulting to 1000 [ 315.910473][T16898] Cannot find add_set index 0 as target [ 316.000075][T16831] lo speed is unknown, defaulting to 1000 [ 316.454005][T16929] __nla_validate_parse: 13 callbacks suppressed [ 316.454024][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 316.544658][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.552109][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.559374][T16831] bridge_slave_0: entered allmulticast mode [ 316.566921][T16831] bridge_slave_0: entered promiscuous mode [ 316.575557][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.583538][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.590802][T16831] bridge_slave_1: entered allmulticast mode [ 316.598555][T16831] bridge_slave_1: entered promiscuous mode [ 316.630530][T16831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.641876][ T5644] Bluetooth: hci1: command tx timeout [ 316.643849][T16831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.677977][T16831] team0: Port device team_slave_0 added [ 316.686178][T16831] team0: Port device team_slave_1 added [ 316.714534][T16831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.721976][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.748205][T16831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.760481][T16831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.767745][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.794615][T16831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.839865][T16831] hsr_slave_0: entered promiscuous mode [ 316.846371][T16831] hsr_slave_1: entered promiscuous mode [ 316.853094][T16831] debugfs: 'hsr0' already exists in 'hsr' [ 316.858845][T16831] Cannot create hsr debugfs directory [ 316.992962][T16831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.013745][T16831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.038985][T16831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.104040][T16937] validate_nla: 4 callbacks suppressed [ 317.104242][T16937] netlink: 'syz.1.3021': attribute type 4 has an invalid length. [ 317.150357][T16831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.162781][T16831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.175236][T16831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.265305][T16831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.282322][T16831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.286446][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.295605][T16831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.387131][T16831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.399244][T16831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.412394][T16831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 318.731422][ T5644] Bluetooth: hci1: command tx timeout [ 318.954143][T16902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.989218][T16831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.054590][T16831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.089662][T16831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.127875][T16831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.148495][T16831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.166527][T16831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.188952][T16831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.207337][T16831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.221033][T16942] netlink: 'syz.2.3023': attribute type 22 has an invalid length. [ 319.232199][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'. [ 319.264425][T16949] sctp: [Deprecated]: syz.2.3023 (pid 16949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.264425][T16949] Use struct sctp_sack_info instead [ 319.312020][T16949] sctp: [Deprecated]: syz.2.3023 (pid 16949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.312020][T16949] Use struct sctp_sack_info instead [ 319.397225][T16942] netlink: 'syz.2.3023': attribute type 32 has an invalid length. [ 319.406197][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 319.437645][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 319.507357][T16942] bond9: option coupled_control: invalid value (8) [ 319.555717][T16942] bond9 (unregistering): Released all slaves [ 319.622074][T16959] tls_set_device_offload_rx: netdev not found [ 319.705961][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 319.722673][T16975] veth1_to_bond: entered allmulticast mode [ 319.750085][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 319.772060][T16979] macvlan0: Caught tx_queue_len zero misconfig [ 319.809416][T16980] veth1_to_bond (unregistering): left allmulticast mode [ 319.846104][T16980] bond0: (slave bond_slave_1): Releasing backup interface [ 319.880313][T16980] bond_slave_1 (unregistering): left allmulticast mode [ 319.934536][T16986] ip6gre0: Master is either lo or non-ether device [ 319.943244][T16987] ip6gre0: Master is either lo or non-ether device [ 320.010007][T16831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.054261][T16831] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.080851][T11880] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.088050][T11880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.161923][T11888] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.169315][T11888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.191069][T16995] netlink: 'syz.2.3036': attribute type 1 has an invalid length. [ 320.245137][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 320.290073][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3038'. [ 320.493827][T17001] macvlan4: entered promiscuous mode [ 320.514095][T17001] macvlan4: entered allmulticast mode [ 320.622334][T17014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3040'. [ 320.802293][ T5644] Bluetooth: hci1: command tx timeout [ 321.674482][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3048'. [ 321.850266][T17055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3050'. [ 321.882612][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.032186][T16831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.210229][T17077] syz_tun: entered promiscuous mode [ 322.218099][T17077] syz_tun: entered allmulticast mode [ 322.347865][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 322.615521][T16831] veth0_vlan: entered promiscuous mode [ 322.649357][T16831] veth1_vlan: entered promiscuous mode [ 322.730304][T16831] veth0_macvtap: entered promiscuous mode [ 322.743613][T17101] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 322.756604][T16831] veth1_macvtap: entered promiscuous mode [ 322.810171][T16831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.850636][T16831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.881818][ T5644] Bluetooth: hci1: command tx timeout [ 322.904798][T17110] netlink: 'syz.2.3065': attribute type 4 has an invalid length. [ 322.915260][T11874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.938210][T11873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.970307][T11873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.998924][T11873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.018534][T17112] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 323.207833][T17119] netlink: 'syz.1.3069': attribute type 16 has an invalid length. [ 323.217907][T17119] netlink: 416 bytes leftover after parsing attributes in process `syz.1.3069'. [ 323.266652][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.266881][T17120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.291145][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.326517][T17122] syzkaller0: entered promiscuous mode [ 323.330149][T17124] netlink: 'syz.1.3072': attribute type 21 has an invalid length. [ 323.337150][T17122] syzkaller0: entered allmulticast mode [ 323.348492][T17124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3072'. [ 323.410037][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.442827][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.759919][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 323.789607][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'. [ 323.989193][T17158] SET target dimension over the limit! [ 324.092840][T17161] netlink: 'syz.1.3084': attribute type 1 has an invalid length. [ 324.277673][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.300104][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.313652][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.349184][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.362935][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.737458][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 324.761562][T17197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3093'. [ 324.860495][T17205] netlink: 'syz.3.3091': attribute type 8 has an invalid length. [ 325.128623][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3097'. [ 325.399351][T17168] xfrm0 speed is unknown, defaulting to 1000 [ 325.465905][T17237] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 325.486827][T17237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.634049][T17246] pim6reg: entered allmulticast mode [ 326.125174][T17168] lo speed is unknown, defaulting to 1000 [ 326.293505][T17270] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.403772][ T5641] Bluetooth: hci2: command tx timeout [ 326.853425][T17290] __nla_validate_parse: 2 callbacks suppressed [ 326.853443][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 327.015775][T17293] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.124108][T17305] nbd: couldn't find a device at index 1048580 [ 327.197551][T17168] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.206069][T17168] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.214182][T17168] bridge_slave_0: entered allmulticast mode [ 327.220185][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3116'. [ 327.222070][T17168] bridge_slave_0: entered promiscuous mode [ 327.242598][T17168] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.255780][T17168] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.264785][T17168] bridge_slave_1: entered allmulticast mode [ 327.273204][T17168] bridge_slave_1: entered promiscuous mode [ 327.313148][T17168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.327291][T17168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.433359][T17323] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3119'. [ 327.445770][T17168] team0: Port device team_slave_0 added [ 327.454457][T17168] team0: Port device team_slave_1 added [ 327.466486][T17326] xt_hashlimit: size too large, truncated to 1048576 [ 327.493614][T17327] blkio.reset_stats is deprecated [ 327.510256][T17168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.526170][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.573719][T17168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.608138][T17323] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3119'. [ 327.644488][T17168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.645111][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 327.662946][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.700186][T17168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.713547][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 327.994476][T17168] hsr_slave_0: entered promiscuous mode [ 328.014677][T17168] hsr_slave_1: entered promiscuous mode [ 328.029306][T17168] debugfs: 'hsr0' already exists in 'hsr' [ 328.051525][T17168] Cannot create hsr debugfs directory [ 328.207488][T17366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.348120][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 328.382774][T17370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 328.382817][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3131'. [ 328.420402][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 328.481628][ T5641] Bluetooth: hci2: command tx timeout [ 328.560603][T17168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.573617][T17168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.584520][T17168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 328.664339][T17168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.683475][T17168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.712694][T17168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 328.924963][T17168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.938511][T17168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.953111][T17168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.082642][T17168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.093348][T17168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.106485][T17168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.167685][ T8700] IPVS: starting estimator thread 0... [ 329.175403][T17405] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 329.229770][T17406] IPVS: sh: FWM 3 0x00000003 - no destination available [ 329.284858][T17407] IPVS: using max 33 ests per chain, 79200 per kthread [ 329.508423][T11880] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.529917][T11889] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.541630][T17168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.569809][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.588860][T11889] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.621478][T17168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.637119][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.647413][T11889] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.660945][T17168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.687422][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.715602][T17432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.793507][T17436] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 329.813232][T17432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.867002][T17168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.904837][T17168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.925360][T17433] ip_vti0: entered promiscuous mode [ 330.125043][T17464] : entered promiscuous mode [ 330.292208][T17168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.399382][T17168] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.433227][T11874] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.440463][T11874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.477000][T11874] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.484221][T11874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.522624][T17491] xt_CONNSECMARK: invalid mode: 0 [ 330.564810][ T5641] Bluetooth: hci2: command tx timeout [ 330.648639][T17493] bond0: (slave bond_slave_1): Releasing backup interface [ 331.054270][T17520] ipvlan2: entered promiscuous mode [ 331.287142][T17534] netlink: 'syz.3.3170': attribute type 27 has an invalid length. [ 331.310140][T17534] netlink: 'syz.3.3170': attribute type 10 has an invalid length. [ 331.324124][T17168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.354708][T17534] team0: Port device geneve1 added [ 331.385530][T17536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.440352][T17168] veth0_vlan: entered promiscuous mode [ 331.458382][T17168] veth1_vlan: entered promiscuous mode [ 331.518060][T17168] veth0_macvtap: entered promiscuous mode [ 331.537623][T17168] veth1_macvtap: entered promiscuous mode [ 331.578655][T17541] gretap0: entered promiscuous mode [ 331.580439][T17546] netlink: 'syz.0.3174': attribute type 1 has an invalid length. [ 331.592543][T17541] gretap0: left promiscuous mode [ 331.623117][T17546] 8021q: adding VLAN 0 to HW filter on device bond11 [ 331.665367][T17546] bond11: (slave veth5): Enslaving as a backup interface with a down link [ 331.695939][T17168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.721029][T17546] netlink: 'syz.0.3174': attribute type 10 has an invalid length. [ 331.734707][T17168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.791718][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029d1e400: rx timeout, send abort [ 331.803146][T11873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.819908][T11873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.839667][T11873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.861649][T11873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.034184][T11888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.057626][T11888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.103003][T11889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.112747][T17569] __nla_validate_parse: 14 callbacks suppressed [ 332.112763][T17569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3181'. [ 332.123539][T11889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.165031][T17569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3181'. [ 332.299981][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029d1e400: abort rx timeout. Force session deactivation [ 332.556484][T17591] netlink: 'syz.4.3186': attribute type 1 has an invalid length. [ 332.575457][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.585468][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.595001][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.595666][T17591] netlink: 'syz.4.3186': attribute type 2 has an invalid length. [ 332.612264][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.621888][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.643621][ T5644] Bluetooth: hci2: command tx timeout [ 333.008881][T17610] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 333.276893][T17610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.399627][T17625] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 333.606248][T17592] xfrm0 speed is unknown, defaulting to 1000 [ 333.623321][T17636] syz.4.3196 (17636) used obsolete PPPIOCDETACH ioctl [ 333.708089][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 333.756134][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 333.792801][T17639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3197'. [ 333.832800][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 333.895912][T17592] lo speed is unknown, defaulting to 1000 [ 333.922788][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.267145][T17592] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.275662][T17592] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.283597][T17592] bridge_slave_0: entered allmulticast mode [ 334.292521][T17592] bridge_slave_0: entered promiscuous mode [ 334.302872][T17592] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.310166][T17592] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.317999][T17592] bridge_slave_1: entered allmulticast mode [ 334.329943][T17592] bridge_slave_1: entered promiscuous mode [ 334.344673][T17668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3203'. [ 334.388832][T17592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.402512][T17592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.442145][T17592] team0: Port device team_slave_0 added [ 334.457653][T17592] team0: Port device team_slave_1 added [ 334.539240][T17592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.558085][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.589888][T17592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.615930][T17592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.624853][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.670803][T17680] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3207'. [ 334.679903][T17592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.721750][ T5641] Bluetooth: hci0: command tx timeout [ 334.818786][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 334.855020][T17592] hsr_slave_0: entered promiscuous mode [ 334.873848][T17592] hsr_slave_1: entered promiscuous mode [ 334.899378][T17592] debugfs: 'hsr0' already exists in 'hsr' [ 334.919796][T17592] Cannot create hsr debugfs directory [ 334.943197][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 335.131201][ T5641] block nbd3: Receive control failed (result -32) [ 335.157166][T17709] netlink: 'syz.4.3216': attribute type 1 has an invalid length. [ 335.201807][ C0] bridge0: port 3(gretap0) entered forwarding state [ 335.208567][ C0] bridge0: topology change detected, propagating [ 335.414768][T17592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.459360][T17592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.486978][T17592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.588239][T17727] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 335.828431][T17592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.842879][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.850747][ C0] bridge0: topology change detected, propagating [ 335.857319][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.864597][ C0] bridge0: topology change detected, propagating [ 335.877953][T17592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.893893][T17592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.090729][T17592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.134518][T17592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.163187][T17592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.178948][T17755] xt_TCPMSS: Only works on TCP SYN packets [ 336.238007][T17751] macsec1: entered promiscuous mode [ 336.256235][T17748] netlink: 'syz.3.3227': attribute type 10 has an invalid length. [ 336.360880][T17748] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.394171][T17748] .`: (slave team0): Enslaving as an active interface with an up link [ 336.676114][T17775] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 336.802582][ T5641] Bluetooth: hci0: command tx timeout [ 337.030001][T17592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.060796][T17592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.080335][T17592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.110212][T17592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.134902][T17592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.173631][T17592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.239172][T17592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.289530][T17592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.523350][T17832] sctp: [Deprecated]: syz.3.3248 (pid 17832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.523350][T17832] Use struct sctp_sack_info instead [ 337.528982][T17592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.639652][T17592] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.668424][T11876] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.675610][T11876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.717832][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.727826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.907096][T17845] Cannot find set identified by id 65534 to match [ 338.050134][T17852] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 338.076861][T17850] __nla_validate_parse: 12 callbacks suppressed [ 338.076881][T17850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3252'. [ 338.324161][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 338.337858][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3254'. [ 338.371810][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 338.412473][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3254'. [ 338.739158][T17592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.847712][T17592] veth0_vlan: entered promiscuous mode [ 338.882277][ T5641] Bluetooth: hci0: command tx timeout [ 338.910069][T17592] veth1_vlan: entered promiscuous mode [ 338.967019][T17592] veth0_macvtap: entered promiscuous mode [ 338.986014][T17592] veth1_macvtap: entered promiscuous mode [ 339.020045][T17592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.052926][T17592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.075782][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.096347][T17907] netlink: 'syz.2.3266': attribute type 49 has an invalid length. [ 339.116868][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.155889][T17913] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 339.164677][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.186039][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.429967][T11876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.448328][T11876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.505166][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.523042][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.548868][T17930] erspan0: entered promiscuous mode [ 339.556952][T17930] vlan2: entered promiscuous mode [ 339.563157][T17932] Bluetooth: MGMT ver 1.23 [ 339.708379][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'. [ 339.721692][T17937] netlink: 'syz.0.3184': attribute type 5 has an invalid length. [ 339.729586][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888051cdf400: rx timeout, send abort [ 339.738394][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888051cdf400: 0x1f101: (3) A timeout occurred and this is the connection abort to close the session. [ 339.753383][T17937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3184'. [ 339.976912][T17959] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 340.273441][T17972] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.317732][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.331994][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.343400][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.356126][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.367016][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.707748][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3286'. [ 340.780127][T17989] netlink: 'syz.4.3286': attribute type 4 has an invalid length. [ 340.788580][T17989] netlink: 'syz.4.3286': attribute type 1 has an invalid length. [ 340.798440][T17989] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3286'. [ 340.823609][T17973] xfrm0 speed is unknown, defaulting to 1000 [ 340.868980][T17990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3286'. [ 340.959091][T17973] lo speed is unknown, defaulting to 1000 [ 340.966256][ T5641] Bluetooth: hci0: command tx timeout [ 341.162742][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.169933][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.177525][T17973] bridge_slave_0: entered allmulticast mode [ 341.185103][T17973] bridge_slave_0: entered promiscuous mode [ 341.193437][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.200587][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.208574][T17973] bridge_slave_1: entered allmulticast mode [ 341.217031][T17973] bridge_slave_1: entered promiscuous mode [ 341.246763][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.258670][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.291048][T17973] team0: Port device team_slave_0 added [ 341.299128][T17973] team0: Port device team_slave_1 added [ 341.323966][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.330933][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.358080][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.376624][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.383839][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.411036][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.461834][T17973] hsr_slave_0: entered promiscuous mode [ 341.468728][T17973] hsr_slave_1: entered promiscuous mode [ 341.475095][T17973] debugfs: 'hsr0' already exists in 'hsr' [ 341.481610][T17973] Cannot create hsr debugfs directory [ 341.614512][T17973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.627077][T17973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.704561][T17973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.717900][T17973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.788072][T17973] .`: (slave netdevsim1): Releasing backup interface [ 341.795447][T17973] .`: (slave netdevsim1): the permanent HWaddr of slave - be:c6:c2:c9:88:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 341.815669][T17973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.826811][T17973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.899413][T17973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.909899][T17973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.483627][ T5641] Bluetooth: hci3: command tx timeout [ 342.686575][T17937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.729197][T17973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.798536][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.842164][T17973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.882993][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.914552][T17973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.958913][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.990990][T17973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.020995][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.112255][T18018] netlink: 'syz.0.3290': attribute type 1 has an invalid length. [ 343.123844][T18013] syzkaller0: entered promiscuous mode [ 343.132482][T18013] syzkaller0: entered allmulticast mode [ 343.430225][T18042] __nla_validate_parse: 1 callbacks suppressed [ 343.430244][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'. [ 344.571337][ T5641] Bluetooth: hci3: command tx timeout [ 345.309794][T18027] bond0: option mode: unable to set because the bond device has slaves [ 345.327357][T18035] veth0: entered promiscuous mode [ 345.377472][T18037] veth0: left promiscuous mode [ 345.569053][T18056] netlink: 4144 bytes leftover after parsing attributes in process `syz.1.3301'. [ 345.584301][T18056] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3301'. [ 345.586937][T17973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.647891][T17973] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.683378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.690619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.768390][T11880] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.775754][T11880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.157166][T18091] openvswitch: netlink: Message has -2 unknown bytes. [ 346.381606][T18104] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3311'. [ 346.625364][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.642833][ T5641] Bluetooth: hci3: command tx timeout [ 346.700400][T17973] veth0_vlan: entered promiscuous mode [ 346.738294][T17973] veth1_vlan: entered promiscuous mode [ 346.794602][T17973] veth0_macvtap: entered promiscuous mode [ 346.817414][T17973] veth1_macvtap: entered promiscuous mode [ 346.855351][T17973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.877509][T17973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.903674][T11876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.922960][T11876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.054357][T11876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.187061][T11873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.446185][T18127] netlink: 'syz.2.3320': attribute type 8 has an invalid length. [ 347.455078][T11889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.472194][T11889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.537326][T18127] netlink: 'syz.2.3320': attribute type 10 has an invalid length. [ 347.549485][T11880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.575132][T11880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.652752][T18127] team0: Port device dummy0 added [ 347.703495][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'. [ 348.232313][T18160] veth0: entered promiscuous mode [ 348.282447][T18160] can: request_module (can-proto-0) failed. [ 348.297517][T18159] veth0: left promiscuous mode [ 348.348338][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3330'. [ 348.428512][T18169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3331'. [ 348.487404][T18169] netlink: 'syz.0.3331': attribute type 1 has an invalid length. [ 348.501329][T18169] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3331'. [ 348.540026][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 348.547500][T18180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.568672][T18181] x_tables: duplicate underflow at hook 3 [ 348.722558][ T5641] Bluetooth: hci3: command tx timeout [ 348.837150][T18192] bond1: option resend_igmp: invalid value (32767) [ 348.852916][T18192] bond1: option resend_igmp: allowed values 0 - 255 [ 348.857496][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 348.875180][T18192] bond1 (unregistering): Released all slaves [ 348.942328][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 348.961800][T18189] macvtap0: entered allmulticast mode [ 348.967293][T18189] veth0_macvtap: entered allmulticast mode [ 349.003703][T18202] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 349.055655][T18202] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 349.064176][T18202] gretap1: entered promiscuous mode [ 349.069913][T18202] gretap1: entered allmulticast mode [ 349.310809][T18219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3347'. [ 349.345081][T18225] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3349'. [ 349.355664][T18225] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 349.376659][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 349.393508][T18225] netlink: 'syz.0.3349': attribute type 5 has an invalid length. [ 349.408903][T18225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3349'. [ 349.424526][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 349.433013][T18225] geneve2: entered promiscuous mode [ 349.438678][T18225] geneve2: entered allmulticast mode [ 349.475875][ T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 349.500132][ T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 349.529812][T18239] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3352'. [ 349.538151][ T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 349.574928][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 350.160330][T18293] netlink: 'syz.3.3367': attribute type 15 has an invalid length. [ 350.251891][T18300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.361957][T18305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.865609][T18339] netlink: 'syz.2.3379': attribute type 4 has an invalid length. [ 350.915700][T18342] pim6reg527: entered allmulticast mode [ 350.940709][T18342] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 351.157017][T18352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.174826][T18352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.223688][T18352] bond0 (unregistering): Released all slaves [ 352.620458][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053472800: rx timeout, send abort [ 352.629149][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888053472800: 0x1f101: (3) A timeout occurred and this is the connection abort to close the session. [ 352.926289][T18462] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 352.951213][T18462] netlink: 'syz.4.3412': attribute type 11 has an invalid length. [ 353.949245][T18521] openvswitch: netlink: EtherType 50a is less than min 600 [ 354.085943][T18525] bond1: entered promiscuous mode [ 354.105788][T18525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.154486][T18525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.163778][T18525] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 354.185090][T18525] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 354.304574][T18525] xt_hashlimit: size too large, truncated to 1048576 [ 354.617149][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888066cd1000: rx timeout, send abort [ 354.625874][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888066cd1000: 0x1f101: (3) A timeout occurred and this is the connection abort to close the session. [ 354.836257][T18556] bond2: option resend_igmp: invalid value (32767) [ 354.837206][T18561] netlink: 'syz.2.3443': attribute type 10 has an invalid length. [ 354.843263][T18556] bond2: option resend_igmp: allowed values 0 - 255 [ 354.891035][T18561] __nla_validate_parse: 16 callbacks suppressed [ 354.891052][T18561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3443'. [ 354.970765][T18570] Bluetooth: MGMT ver 1.23 [ 354.983718][T18556] bond2 (unregistering): Released all slaves [ 355.026720][T18561] team0: entered allmulticast mode [ 355.043126][T18561] team_slave_0: entered allmulticast mode [ 355.072344][T18561] team_slave_1: entered allmulticast mode [ 355.093270][T18574] netlink: 'syz.0.3446': attribute type 1 has an invalid length. [ 355.099182][T18561] dummy0: entered allmulticast mode [ 355.107673][T18574] netlink: 'syz.0.3446': attribute type 4 has an invalid length. [ 355.127671][T18561] bridge0: port 3(team0) entered blocking state [ 355.134425][T18574] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.3446'. [ 355.156663][T18561] bridge0: port 3(team0) entered disabled state [ 355.187094][T18561] team0: entered promiscuous mode [ 355.199080][T18561] team_slave_0: entered promiscuous mode [ 355.217583][T18561] team_slave_1: entered promiscuous mode [ 355.232556][T18561] dummy0: entered promiscuous mode [ 355.253154][T18561] bridge0: port 3(team0) entered blocking state [ 355.259538][T18561] bridge0: port 3(team0) entered forwarding state [ 355.286401][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3448'. [ 355.298384][T18581] SET target dimension over the limit! [ 355.332725][T18582] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3449'. [ 355.434910][T18579] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 355.785863][T18609] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 356.119304][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3462'. [ 356.218687][ T5641] block nbd4: Receive control failed (result -107) [ 356.222547][T18627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.430349][T18636] : entered promiscuous mode [ 356.439493][T18634] Unsupported ieee802154 address type: 0 [ 356.672999][T18643] [ 356.675366][T18643] ====================================================== [ 356.682503][T18643] WARNING: possible circular locking dependency detected [ 356.689552][T18643] syzkaller #0 Not tainted [ 356.693976][T18643] ------------------------------------------------------ [ 356.701005][T18643] syz.0.3471/18643 is trying to acquire lock: [ 356.707079][T18643] ffffffff8ea5f200 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 356.716781][T18643] [ 356.716781][T18643] but task is already holding lock: [ 356.724152][T18643] ffff8880324714e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2f10 [ 356.733802][T18643] [ 356.733802][T18643] which lock already depends on the new lock. [ 356.733802][T18643] [ 356.744288][T18643] [ 356.744288][T18643] the existing dependency chain (in reverse order) is: [ 356.753288][T18643] [ 356.753288][T18643] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 356.761011][T18643] lock_sock_nested+0x41/0x100 [ 356.766293][T18643] inet_shutdown+0x6a/0x390 [ 356.771432][T18643] nbd_mark_nsock_dead+0x2cb/0x550 [ 356.777169][T18643] recv_work+0x1cef/0x1e10 [ 356.782103][T18643] process_scheduled_works+0xa8e/0x14e0 [ 356.788188][T18643] worker_thread+0xa47/0xfb0 [ 356.793285][T18643] kthread+0x389/0x470 [ 356.797869][T18643] ret_from_fork+0x514/0xb70 [ 356.802995][T18643] ret_from_fork_asm+0x1a/0x30 [ 356.808285][T18643] [ 356.808285][T18643] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 356.815920][T18643] __mutex_lock+0x19d/0x1590 [ 356.821144][T18643] nbd_queue_rq+0x373/0x1150 [ 356.826261][T18643] blk_mq_dispatch_rq_list+0x499/0x1990 [ 356.832429][T18643] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 356.839299][T18643] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 356.845789][T18643] blk_mq_run_hw_queue+0x348/0x4f0 [ 356.851412][T18643] blk_mq_dispatch_list+0xd11/0xe10 [ 356.857119][T18643] blk_mq_flush_plug_list+0x45f/0x540 [ 356.863007][T18643] __blk_flush_plug+0x3ed/0x4d0 [ 356.868462][T18643] __submit_bio+0x465/0x560 [ 356.873486][T18643] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 356.879645][T18643] block_read_full_folio+0x599/0x830 [ 356.885500][T18643] filemap_read_folio+0x12c/0x3a0 [ 356.891046][T18643] do_read_cache_folio+0x354/0x590 [ 356.896675][T18643] read_part_sector+0xb6/0x2b0 [ 356.902058][T18643] adfspart_check_ICS+0xb1/0x960 [ 356.907505][T18643] bdev_disk_changed+0x82b/0x1780 [ 356.913038][T18643] blkdev_get_whole+0x372/0x510 [ 356.918465][T18643] bdev_open+0x324/0xd70 [ 356.923220][T18643] blkdev_open+0x461/0x600 [ 356.928150][T18643] do_dentry_open+0x816/0x1380 [ 356.933442][T18643] vfs_open+0x3b/0x340 [ 356.938046][T18643] path_openat+0x2e3b/0x3890 [ 356.943191][T18643] do_file_open+0x23e/0x4a0 [ 356.948214][T18643] do_sys_openat2+0x113/0x200 [ 356.953406][T18643] __x64_sys_openat+0x138/0x170 [ 356.958772][T18643] do_syscall_64+0x174/0x580 [ 356.963962][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.970389][T18643] [ 356.970389][T18643] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 356.977600][T18643] __mutex_lock+0x19d/0x1590 [ 356.982707][T18643] nbd_queue_rq+0xc1/0x1150 [ 356.987727][T18643] blk_mq_dispatch_rq_list+0x499/0x1990 [ 356.993782][T18643] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 357.000622][T18643] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 357.007202][T18643] blk_mq_run_hw_queue+0x348/0x4f0 [ 357.012825][T18643] blk_mq_dispatch_list+0xd11/0xe10 [ 357.018538][T18643] blk_mq_flush_plug_list+0x45f/0x540 [ 357.024418][T18643] __blk_flush_plug+0x3ed/0x4d0 [ 357.029778][T18643] __submit_bio+0x465/0x560 [ 357.034790][T18643] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 357.040928][T18643] block_read_full_folio+0x599/0x830 [ 357.046720][T18643] filemap_read_folio+0x12c/0x3a0 [ 357.052257][T18643] do_read_cache_folio+0x354/0x590 [ 357.057880][T18643] read_part_sector+0xb6/0x2b0 [ 357.063159][T18643] adfspart_check_ICS+0xb1/0x960 [ 357.068603][T18643] bdev_disk_changed+0x82b/0x1780 [ 357.074140][T18643] blkdev_get_whole+0x372/0x510 [ 357.079499][T18643] bdev_open+0x324/0xd70 [ 357.084247][T18643] blkdev_open+0x461/0x600 [ 357.089172][T18643] do_dentry_open+0x816/0x1380 [ 357.094443][T18643] vfs_open+0x3b/0x340 [ 357.099020][T18643] path_openat+0x2e3b/0x3890 [ 357.104118][T18643] do_file_open+0x23e/0x4a0 [ 357.109132][T18643] do_sys_openat2+0x113/0x200 [ 357.114329][T18643] __x64_sys_openat+0x138/0x170 [ 357.119700][T18643] do_syscall_64+0x174/0x580 [ 357.124796][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.131205][T18643] [ 357.131205][T18643] -> #4 (set->srcu){.+.+}-{0:0}: [ 357.138317][T18643] __synchronize_srcu+0xc9/0x2f0 [ 357.143798][T18643] elevator_switch+0x1e8/0x7b0 [ 357.149246][T18643] elevator_change+0x2fa/0x480 [ 357.154516][T18643] elevator_set_default+0x375/0x440 [ 357.160224][T18643] blk_register_queue+0x3f3/0x4e0 [ 357.165760][T18643] __add_disk+0x6cb/0xe30 [ 357.170608][T18643] add_disk_fwnode+0xfb/0x4b0 [ 357.175800][T18643] nbd_dev_add+0x733/0xb60 [ 357.180747][T18643] nbd_init+0x15f/0x1e0 [ 357.185553][T18643] do_one_initcall+0x250/0x870 [ 357.190826][T18643] do_initcall_level+0x10a/0x1a0 [ 357.196342][T18643] do_initcalls+0x59/0xa0 [ 357.201176][T18643] kernel_init_freeable+0x29d/0x3e0 [ 357.206880][T18643] kernel_init+0x1d/0x1d0 [ 357.211719][T18643] ret_from_fork+0x514/0xb70 [ 357.216816][T18643] ret_from_fork_asm+0x1a/0x30 [ 357.222094][T18643] [ 357.222094][T18643] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 357.229899][T18643] __mutex_lock+0x19d/0x1590 [ 357.234996][T18643] elevator_change+0x1af/0x480 [ 357.240269][T18643] elevator_set_none+0xb5/0x140 [ 357.245625][T18643] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 357.251941][T18643] nbd_start_device+0x189/0xb30 [ 357.257304][T18643] nbd_genl_connect+0x1597/0x1c10 [ 357.262841][T18643] genl_family_rcv_msg_doit+0x233/0x340 [ 357.268999][T18643] genl_rcv_msg+0x614/0x7a0 [ 357.274007][T18643] netlink_rcv_skb+0x226/0x4a0 [ 357.279293][T18643] genl_rcv+0x28/0x40 [ 357.283778][T18643] netlink_unicast+0x7bb/0x940 [ 357.289051][T18643] netlink_sendmsg+0x813/0xb40 [ 357.294325][T18643] ____sys_sendmsg+0x9b9/0xa20 [ 357.299665][T18643] ___sys_sendmsg+0x2a5/0x360 [ 357.304854][T18643] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.310303][T18643] do_syscall_64+0x174/0x580 [ 357.315399][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.321808][T18643] [ 357.321808][T18643] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 357.330408][T18643] blk_alloc_queue+0x544/0x690 [ 357.335680][T18643] __blk_mq_alloc_disk+0x194/0x390 [ 357.341300][T18643] nbd_dev_add+0x494/0xb60 [ 357.346227][T18643] nbd_init+0x15f/0x1e0 [ 357.350911][T18643] do_one_initcall+0x250/0x870 [ 357.356181][T18643] do_initcall_level+0x10a/0x1a0 [ 357.361629][T18643] do_initcalls+0x59/0xa0 [ 357.366529][T18643] kernel_init_freeable+0x29d/0x3e0 [ 357.372333][T18643] kernel_init+0x1d/0x1d0 [ 357.377183][T18643] ret_from_fork+0x514/0xb70 [ 357.382286][T18643] ret_from_fork_asm+0x1a/0x30 [ 357.387570][T18643] [ 357.387570][T18643] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 357.394782][T18643] fs_reclaim_acquire+0x71/0x100 [ 357.400278][T18643] prepare_alloc_pages+0x15b/0x650 [ 357.405901][T18643] __alloc_frozen_pages_noprof+0x12f/0x380 [ 357.412217][T18643] __alloc_pages_noprof+0x10/0x100 [ 357.417843][T18643] pcpu_populate_chunk+0x181/0xb30 [ 357.423747][T18643] pcpu_alloc_noprof+0xbca/0x1900 [ 357.429303][T18643] xt_percpu_counter_alloc+0x145/0x1e0 [ 357.435383][T18643] translate_table+0x129a/0x1f80 [ 357.440905][T18643] ipt_register_table+0x112/0x310 [ 357.446451][T18643] iptable_raw_table_init+0x54/0x80 [ 357.452165][T18643] xt_find_table_lock+0x311/0x400 [ 357.457700][T18643] xt_request_find_table_lock+0x26/0x100 [ 357.463844][T18643] do_ipt_get_ctl+0x719/0x1230 [ 357.469127][T18643] nf_getsockopt+0x26e/0x290 [ 357.474299][T18643] ip_getsockopt+0x19e/0x230 [ 357.479475][T18643] do_sock_getsockopt+0x51d/0x7e0 [ 357.485017][T18643] __x64_sys_getsockopt+0x1a4/0x240 [ 357.490727][T18643] do_syscall_64+0x174/0x580 [ 357.495822][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.502231][T18643] [ 357.502231][T18643] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 357.509950][T18643] __lock_acquire+0x1520/0x2cd0 [ 357.515326][T18643] lock_acquire+0x106/0x350 [ 357.520338][T18643] __mutex_lock+0x19d/0x1590 [ 357.525449][T18643] pcpu_alloc_noprof+0x231/0x1900 [ 357.530996][T18643] bpf_prog_alloc_no_stats+0x10b/0x4f0 [ 357.537001][T18643] bpf_prog_alloc+0x3c/0x1a0 [ 357.542108][T18643] __get_filter+0xf2/0x420 [ 357.547112][T18643] sk_reuseport_attach_filter+0x24/0x210 [ 357.553257][T18643] sk_setsockopt+0x1ee5/0x2f10 [ 357.558541][T18643] do_sock_setsockopt+0x11b/0x1b0 [ 357.564085][T18643] __x64_sys_setsockopt+0x13d/0x1b0 [ 357.569797][T18643] do_syscall_64+0x174/0x580 [ 357.574894][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.581300][T18643] [ 357.581300][T18643] other info that might help us debug this: [ 357.581300][T18643] [ 357.591510][T18643] Chain exists of: [ 357.591510][T18643] pcpu_alloc_mutex --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 357.591510][T18643] [ 357.604708][T18643] Possible unsafe locking scenario: [ 357.604708][T18643] [ 357.612139][T18643] CPU0 CPU1 [ 357.617484][T18643] ---- ---- [ 357.622838][T18643] lock(sk_lock-AF_INET6); [ 357.627336][T18643] lock(&nsock->tx_lock); [ 357.634345][T18643] lock(sk_lock-AF_INET6); [ 357.641357][T18643] lock(pcpu_alloc_mutex); [ 357.645846][T18643] [ 357.645846][T18643] *** DEADLOCK *** [ 357.645846][T18643] [ 357.654148][T18643] 1 lock held by syz.0.3471/18643: [ 357.659250][T18643] #0: ffff8880324714e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2f10 [ 357.669134][T18643] [ 357.669134][T18643] stack backtrace: [ 357.675046][T18643] CPU: 0 UID: 0 PID: 18643 Comm: syz.0.3471 Not tainted syzkaller #0 PREEMPT(full) [ 357.675080][T18643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.675101][T18643] Call Trace: [ 357.675109][T18643] [ 357.675123][T18643] dump_stack_lvl+0xe8/0x150 [ 357.675145][T18643] print_circular_bug+0x2e1/0x300 [ 357.675166][T18643] check_noncircular+0x12e/0x150 [ 357.675187][T18643] __lock_acquire+0x1520/0x2cd0 [ 357.675204][T18643] ? arch_stack_walk+0xfb/0x150 [ 357.675226][T18643] ? stack_trace_save+0xa9/0x100 [ 357.675246][T18643] ? __pfx_stack_trace_save+0x10/0x10 [ 357.675268][T18643] ? pcpu_alloc_noprof+0x231/0x1900 [ 357.675287][T18643] lock_acquire+0x106/0x350 [ 357.675301][T18643] ? pcpu_alloc_noprof+0x231/0x1900 [ 357.675327][T18643] __mutex_lock+0x19d/0x1590 [ 357.675343][T18643] ? pcpu_alloc_noprof+0x231/0x1900 [ 357.675364][T18643] ? trylock_stock+0xac/0x280 [ 357.675407][T18643] ? lock_acquire+0x106/0x350 [ 357.675421][T18643] ? trylock_stock+0xac/0x280 [ 357.675438][T18643] ? pcpu_alloc_noprof+0x231/0x1900 [ 357.675458][T18643] ? __pfx___mutex_lock+0x10/0x10 [ 357.675475][T18643] ? unlock_stock+0x12e/0x250 [ 357.675492][T18643] ? obj_cgroup_charge+0xa4/0x150 [ 357.675511][T18643] pcpu_alloc_noprof+0x231/0x1900 [ 357.675531][T18643] ? __kasan_kmalloc+0x93/0xb0 [ 357.675553][T18643] ? __kmalloc_cache_noprof+0x318/0x660 [ 357.675574][T18643] ? bpf_prog_alloc_no_stats+0xd8/0x4f0 [ 357.675596][T18643] ? __kmalloc_cache_noprof+0x157/0x660 [ 357.675617][T18643] bpf_prog_alloc_no_stats+0x10b/0x4f0 [ 357.675639][T18643] ? bpf_prog_alloc+0x2a/0x1a0 [ 357.675660][T18643] bpf_prog_alloc+0x3c/0x1a0 [ 357.675683][T18643] __get_filter+0xf2/0x420 [ 357.675702][T18643] sk_reuseport_attach_filter+0x24/0x210 [ 357.675720][T18643] sk_setsockopt+0x1ee5/0x2f10 [ 357.675743][T18643] ? __pfx_sk_setsockopt+0x10/0x10 [ 357.675764][T18643] ? aa_sk_perm+0x6d5/0x900 [ 357.675875][T18643] ? __fget_files+0x2a/0x420 [ 357.675899][T18643] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.675919][T18643] ? __fget_files+0x2a/0x420 [ 357.675935][T18643] ? aa_sock_opt_perm+0xff/0x1a0 [ 357.675982][T18643] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 357.676011][T18643] do_sock_setsockopt+0x11b/0x1b0 [ 357.676034][T18643] __x64_sys_setsockopt+0x13d/0x1b0 [ 357.676056][T18643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.676072][T18643] do_syscall_64+0x174/0x580 [ 357.676086][T18643] ? trace_irq_disable+0x3b/0x140 [ 357.676111][T18643] ? clear_bhb_loop+0x40/0x90 [ 357.676127][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.676143][T18643] RIP: 0033:0x7f9abbf9ce59 [ 357.676158][T18643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.676171][T18643] RSP: 002b:00007f9abce17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 357.676188][T18643] RAX: ffffffffffffffda RBX: 00007f9abc215fa0 RCX: 00007f9abbf9ce59 [ 357.676199][T18643] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000005 [ 357.676208][T18643] RBP: 00007f9abc032d6f R08: 0000000000000010 R09: 0000000000000000 [ 357.676218][T18643] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000000 [ 357.676228][T18643] R13: 00007f9abc216038 R14: 00007f9abc215fa0 R15: 00007ffdd1dc6e28 [ 357.676247][T18643] [ 358.006100][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880332d5000: rx timeout, send abort [ 358.017713][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880332d5000: 0x1f101: (3) A timeout occurred and this is the connection abort to close the session.