last executing test programs: 2m11.713770411s ago: executing program 0 (id=3564): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x3e, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, [0x4]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 2m11.249153049s ago: executing program 0 (id=3567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async) close(r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m11.024789779s ago: executing program 0 (id=3569): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) clock_gettime(0x0, &(0x7f0000004bc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004a80)=[{{&(0x7f0000000600)=@qipcrtr, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/228, 0xe4}, {&(0x7f0000000800)=""/134, 0x86}], 0x3}, 0x3}, {{&(0x7f0000000900)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/6, 0x6}, {&(0x7f0000002500)=""/136, 0x88}, {&(0x7f00000025c0)=""/155, 0x9b}, {&(0x7f0000002680)=""/11, 0xb}, {&(0x7f00000026c0)=""/169, 0xa9}, {&(0x7f0000002780)=""/73, 0x49}, {&(0x7f0000002800)=""/69, 0x45}], 0x8}, 0xd}, {{&(0x7f0000002900)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002980)=""/86, 0x56}, {&(0x7f0000002a00)=""/232, 0xe8}, {&(0x7f0000002b00)=""/133, 0x85}, {&(0x7f0000002bc0)=""/91, 0x5b}], 0x4, &(0x7f0000002c80)=""/217, 0xd9}, 0xfffffffa}, {{&(0x7f0000002d80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002e00)=""/244, 0xf4}, {&(0x7f0000002f00)=""/233, 0xe9}, {&(0x7f0000003000)=""/241, 0xf1}, {&(0x7f0000003100)=""/33, 0x21}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/57, 0x39}], 0x6, &(0x7f0000004200)=""/247, 0xf7}, 0x3}, {{&(0x7f0000004300)=@ax25={{0x3, @rose}, [@bcast, @default, @rose, @netrom, @rose, @bcast, @netrom, @default]}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004380)=""/244, 0xf4}, {&(0x7f0000004480)=""/182, 0xb6}, {&(0x7f0000004540)=""/158, 0x9e}, {&(0x7f0000004600)=""/251, 0xfb}, {&(0x7f0000004700)=""/184, 0xb8}, {&(0x7f00000047c0)=""/170, 0xaa}, {&(0x7f0000004880)=""/6, 0x6}, {&(0x7f00000048c0)=""/24, 0x18}], 0x8, &(0x7f0000004980)=""/202, 0xca}, 0x200}], 0x5, 0x3, &(0x7f0000004c00)={r3, r4+10000000}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async, rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r7, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 64) r11 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x40, r10, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) (async, rerun: 32) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x40, @private1, 0x7}, 0x1) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fcdbdf251000000008000600ff0100000800080001200100440001800800030003000000140002006261740f000000736c6176655f31000008000100", @ANYRES32=r5, @ANYBLOB="0800030002000000140002006e657464657673696d3000000000000008000800070000000800080008000000080008000600000008000700ca000000"], 0x88}, 0x1, 0x0, 0x0, 0x4002}, 0x10) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40008c0) (async, rerun: 32) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000f8ff7010f8ffb90000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m10.905924504s ago: executing program 0 (id=3573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltfilter={0x2c, 0x2d, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x6, 0xfff3}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/54, 0x36, 0x1, &(0x7f0000000140)=""/126, 0x7e}, &(0x7f0000000200)=0x40) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x6, 0x0, 0xc4, 0x5, 0x0, @empty, @mcast2, 0x7800, 0x8000, 0x9, 0x1}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000002}, 0x4010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x28001) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000005c0), &(0x7f0000000600)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000640)={0x0, 0x99, "6594f6365dc281f400ad66198116a95294644c7c1fb84ab4416b97f54c4af8a4d7eacc2f37c5c928c99f29324091ffa08964943f0e767e634b7747eaea65dc6dbc6fa2c5305c630dedfc8e44daba4c737ffd6a3ba468257fde047677f1e3169bf1689406736e9c94896b49fd4228e5af888fbecd89cf661de0099dc16daca06507365aa1bda98e27b316ab190736cf1dd1a8ae7e00bdb5c53c"}, &(0x7f0000000700)=0xa1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000780)={r7, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0x4, @local, 0xe22}]}, &(0x7f00000007c0)=0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r4) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '^-.\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x200408d6) r12 = socket(0x23, 0x80000, 0x8000) recvmsg$unix(r12, &(0x7f0000000c80)={&(0x7f0000000b40), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/64, 0x40}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c}}], 0x20}, 0x40) sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000cc0)="7925c9fa523f2ab5a75a2c307421ee046e0b611305d00eadb623ebeed56e40f728a2e5a2b80ed84a41590656023ef97907e787d55ae9fe008016ceaacfd660b0ac1bf4570a28af660340c6ab38502499bc111c3fe5b850a00b7f338079adbc4de83adf163a31730cd6ef62085f2f4e6c1570fe38c4b16eb13ec461fc5fde714d0df6572a30fd6583d17b03f40b8a18bd0491edbcdbe282a8c02e4909ad2e4c7460679b3b4af32051f99a63b72112b389b00784413b58ac9f8c4294181c93fc1184c617f20a", 0xc5}, {&(0x7f0000000dc0)="eac62172a3269da59e14829080553c3f214dec244fafac996df1c87b50a5bc420d8083f10a2732b934d93dad11202d68aabd4f9e5cad4e7230491a921f3110c64523f4cbf38ec7b46447f66fd5a504b70cdded9b042a1a5edfc83da37cfae0fdddc9a1d94088ef03742a3e0733d48bdedc98a2c582b6e508a515e6d7361ece1c0da8fca05e44fb0456e9b91592372b4da8a07d53a709b8867778629a6fe7a9897776afa696d4a86181bdca30fca5c9bada52bbaf4329d6", 0xb7}, {&(0x7f0000000e80)="4390551a8e9c63678a8b317626f84b2da3bd58a300f7e363313d6f53b2c68cc758edc2c7ac97444b5babcd553f9b87476a08e52e017089cfb80106ed9ebff4a9bebf31894bf8b99eb80cadfce483c7e9c6b9f37fed942c9af7f13fecab31281f4bfceda9376612b309375a281eaba0a2c84dff0c15ea5cc75f6cbfe44eab7fa88ac5f293cc675f016c36fb082ade2f81967a19af68c13c9ebee4997b5b338875c78ff64f8a6aa3312a19e064811484fe69e7196c8bdf775c3588d486c8090dbf4274e94208e321d9d8", 0xc9}, {&(0x7f0000000f80)="0b4d81a274ff6aa75f92d90a1d57c32909752a20e40b54bcedd2a7d5d1f175960e2792d98b676b7e9460ad63658514d6ccd104675f823ed4ef0b14e0a9beed3ca3de50969e9e79531a0fb231115a619126d2143f85aee608090437aa0f6a8e93ed6fd8a9063da61268b81677ccd55989a328d5675ea43a583ad760ecd817305559b430f3e183719f3b89bd1a9b18eb1f4af1791f13f6b75803be0f308f027b58aaafc316dc27df7052f8945bbdb665", 0xaf}], 0x4, &(0x7f0000001080)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x8, [@private=0xa010100, @empty, @broadcast, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010100]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x2, [{0x6, 0xd, "0648e5338eacb790567ac8"}, {0x0, 0xc, "8dd5af9960fa4d40af06"}, {0x0, 0x12, "549417abb2a1707835310a223b979b34"}, {0x4, 0xf, "bd208fb9b05973f9b09570d51c"}, {0x7, 0xf, "614b7b722a4e3ca50d04d940fb"}, {0x7, 0x7, "a3b7a62c75"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0x7a, [@remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2, @local]}]}}}, @ip_ttl={{0x14}}], 0xd0}, 0x4000000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r12, 0x40309410, &(0x7f00000011c0)={0x9, 0x3, 0x1, 0x1, 0xb5f002443f8e1a89, [0x6, 0x0, 0x23b1ad26, 0x2]}) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000001200)={@loopback, 0x2e, r3}) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r11, r10, 0x1e, 0x0, @val=@netfilter={0xa, 0x0, 0x81}}, 0x20) ioctl$BTRFS_IOC_SUBVOL_CREATE(r11, 0x5000940e, &(0x7f0000001280)={{r13}, "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"}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r12) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000002440)={&(0x7f0000002280), 0xc, &(0x7f0000002400)={&(0x7f0000002300)={0xd8, r14, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x1) 2m10.71070684s ago: executing program 0 (id=3577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'nicvf0\x00', 0x0}) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r0, 0x6, 0x4, 0x80}) (rerun: 64) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000280)=0x62, 0x4) (async) sendto$packet(r4, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000977498dd4e78fbc5859d2a891996000200000004000000000000000000000000b0da831666224ddb96fbb33aebeb812da2f3394d455b1e5ea46788340e4848751286125479350fae7a4c198b57446e9603442be73c9ca4920635bb465c2000e695c318f4eb29b93841a30c2b15caee64366200f4a9d8c0438bfa1adf8bdbe69e7a8244e55437c7f8938059e69d7e00ef0fba860003e184e528111ca2abfb31f384cdc875c3b76eb19cd0b16acdc7d9dc17e35269c9a89b8d8b83"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x58, &(0x7f00000001c0)}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 2m10.386010463s ago: executing program 0 (id=3582): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 1m55.391934158s ago: executing program 32 (id=3582): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 1m46.479635454s ago: executing program 2 (id=3906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x3c}}, 0x90) r4 = socket(0x2000000015, 0x80005, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000004) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x114, 0x71, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x28, r5, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) 1m46.352593363s ago: executing program 2 (id=3909): r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socket$unix(0x1, 0x5, 0x0) 1m46.14544121s ago: executing program 2 (id=3912): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x3}, 0x4000000}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1m46.011519794s ago: executing program 2 (id=3915): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x100000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0xb3fa, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) pselect6(0x0, 0x0, &(0x7f0000000040)={0x2, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x3ff}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="20225638277a61bbe7f0a7b9ac1008de2edca02805ba62d7ec27cc2585b8ded74538ac418e98be132172337345ed143c5fd1f1c9c54b97ac281e3ec40c3563a967f7a8e4eb1c1ab5caae84f44645bbc363dcd450a7d6aefa79efb59a78565f470160a6ec7ce072d0d0e5d62f351ca8e009cc5041a177a2dfe7995ba770f120f24dbfeaf60c10604e2e6b2d4891daaeb85fcb607d385d2a020e3ae47a2ae396ca0aaa18b287a9d4e28460dfc4e7cc97a4f6be162502f452a9a6388b6c75afca32b210f5dafdb71f8b0a2db7630f033fd09ef49a1f039778aa869d55c54f7e41c8", 0xe0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={r4, r4, 0x4, 0x0, 0x0, 0x9, 0xfa, 0xc48, 0x1012, 0x0, 0x1, 0x3, 'syz0\x00'}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900001dc5cc05db00040000ba9555b0000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) accept4(r4, 0x0, &(0x7f0000000200), 0x800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) 1m45.105190939s ago: executing program 2 (id=3931): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="62202a3a2a206d1b"], 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000100)="2f183b4351", 0x5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000340)={r8}, &(0x7f0000000380)=0x8) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0xfffd, @broadcast}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg$inet(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000b80)="c2a3c46ccbcf61df72ec56c199a57daceb546abf92bba9c40f03327a140c73142dc2bc50ec43baf4e2acbc039642d07b81d4945fe08982af4f235b769cf2aeaf8440566c9ac4e08be84a9ee8962d47c37f", 0x51}, {&(0x7f0000000c00)="3512beac7d4bade2e7d3a185980a78bfbc4e52f2ce583806910bfd23ca333e141f5756eed577d0efa938b074e666345f76e719afc370c98d4db87f86ac6d24d3a79683d5214a99ad722d2c6fe4bf312d4fc35979c3d134056f8f556d8b4bb2", 0x5f}, {&(0x7f0000000c80)="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", 0x4d9}], 0x3}}], 0x1, 0x804) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x9, 0xfffd, 0x4}, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00008100ffff0a00000000000000aaaa81002f000800450000204000e000b405de14d2ad9c32f9cb062f90787f000001ac141441a0012801dd368b511c8c2d53eff70e8e091702396abd6f7ebc4dd566ba3fa1dc4f0f8b83633ab36023a278e28d404155a044f279bfef336c77f4db73ca0af220ccda80c7716184324f29207474faec37e77bc1ae4e0be3428968dd8dd6"], 0x36) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 1m44.875492033s ago: executing program 2 (id=3933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000000280), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/93, 0x5d}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/92, 0x5c}, {&(0x7f0000002e00)=""/98, 0x62}, {&(0x7f0000002e80)=""/109, 0x6d}, {&(0x7f0000002f00)=""/51, 0x33}], 0x8, &(0x7f0000002fc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x40000000) r5 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000380)={0x4, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e20, 0x3, 'nq\x00', 0x20, 0x7, 0x66}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x403}}], 0x18}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800480000340000000000069078ac1414bbac1414aa8907faac1414bb070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00080090780000"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(r5, &(0x7f0000001d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000003080)=ANY=[@ANYBLOB="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"/4716, @ANYRES32=r11, @ANYBLOB="0400038008002c0064010101000000"], 0x11bc}, 0x1, 0x0, 0x0, 0x20044040}, 0x2010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010001ffff1fffffffddbdf2500000000", @ANYRES32=r10, @ANYBLOB="820201000000000008001b00ff03000008000a00", @ANYRES32=r10, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m29.72258855s ago: executing program 33 (id=3933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000000280), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/93, 0x5d}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/92, 0x5c}, {&(0x7f0000002e00)=""/98, 0x62}, {&(0x7f0000002e80)=""/109, 0x6d}, {&(0x7f0000002f00)=""/51, 0x33}], 0x8, &(0x7f0000002fc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x40000000) r5 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000380)={0x4, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e20, 0x3, 'nq\x00', 0x20, 0x7, 0x66}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x403}}], 0x18}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800480000340000000000069078ac1414bbac1414aa8907faac1414bb070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00080090780000"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(r5, &(0x7f0000001d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000003080)=ANY=[@ANYBLOB="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"/4716, @ANYRES32=r11, @ANYBLOB="0400038008002c0064010101000000"], 0x11bc}, 0x1, 0x0, 0x0, 0x20044040}, 0x2010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010001ffff1fffffffddbdf2500000000", @ANYRES32=r10, @ANYBLOB="820201000000000008001b00ff03000008000a00", @ANYRES32=r10, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.20550943s ago: executing program 3 (id=5139): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x9, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) 992.071663ms ago: executing program 3 (id=5143): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x9, 0x1, 0xd00, 0x101, 0x2, 0x8ad1, 0x1, 0xf54c, 0xfffffffffffffffd, 0xbaa, 0x5, 0x5, 0x5, 0x6ac3]}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xbd}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 830.21815ms ago: executing program 3 (id=5146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 744.325292ms ago: executing program 3 (id=5149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "be2939100ac75caf67080984e9"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async, rerun: 64) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000500)) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r5 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000440)={'ipvs\x00'}, &(0x7f0000000480)=0x1e) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) (rerun: 32) 621.442496ms ago: executing program 3 (id=5152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000002100390d0000000000000000ac141400000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000004a37710538019ee8f6f0788890db8c709b853205062eab51c16935dee05e3f50a97a5fe07757e708b464771a269c9cd58bd6210221e805c8206f7f34eefe0613f85a586ca0b0033ed6df051756d1f40c40ffc50d9f502717030000000570902da9ab78af38696aa1658f363db4664e7135d277d63532ed8d858a00be26c70205a0bb013df8c3b67e99eaf35ea18499491ac79e927cc2e241d5ecedbde06870be09a5b1df9c8aec1e5ca4506331ba78e51ccc21e6cf8ff70d454f4bf48189fdca59c694a8a1d302579e2ba1e782518d0a6af13e88a0"], 0x50}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(r1) 547.867537ms ago: executing program 1 (id=5155): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00'], 0x50) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000e4ff00000000000000000600112b386d2d04010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000002a80)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbf198a084ce1c86dd62e6839300442fff0000"], 0x7e) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r9, 0x5}, &(0x7f0000001800)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={r9, 0xcc, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x295b, @private0, 0x6}, @in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, @in6={0xa, 0x4e23, 0x1, @loopback, 0x8001}, @in6={0xa, 0x4e21, 0x100, @private2, 0x4}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0x2, @empty, 0x2b}]}, &(0x7f0000000280)=0x10) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xbc3d}, 0x8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000740)=@framed={{}, [@alu={0x7, 0x0, 0x5, 0xb, 0x6, 0xfffffffffffffff8, 0xfffffffffffffff0}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={r8, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x3, 0x0, 0x6, 0xffff}, &(0x7f0000000500)=0x98) 424.862955ms ago: executing program 3 (id=5156): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xc, 0x2a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6ad}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x800}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffff7f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0xa2, &(0x7f0000000600)=""/162, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x0, 0x0, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x3, 0x1, 0x8, 0x8}, {0x5, 0x4, 0xa, 0xb}, {0x5, 0x5, 0x8, 0x2}, {0x1, 0x3, 0x2, 0x6}], 0x10, 0x3}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x478, 0x270, 0x478, 0x478, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x6, 0x8, 0x6}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @mcast2, @private0, @empty, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast1, 0x23, 0x29, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000980)={0xffffffffffffffff, 0x95a, 0xffffffffffffffff, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800)=r4, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) socket$inet6(0xa, 0x0, 0xe256e000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r7, 0xfffffffffffffffd, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r9, r8, 0x2f}, 0x20) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r10, 0x89ee, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0xfd, 0x4, 0x7, 0x7, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x68}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xd, 0x3, 0x1, 0x2, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x1, 0x2, 0xff2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0xa, 0x7}, {0x1, 0x2, 0xe, 0x5}], 0x10, 0x8}, 0x94) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) ppoll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 424.590822ms ago: executing program 4 (id=5157): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) 394.053592ms ago: executing program 1 (id=5158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) 379.363014ms ago: executing program 4 (id=5159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 245.443868ms ago: executing program 4 (id=5160): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) unshare(0x38000000) 243.13401ms ago: executing program 1 (id=5161): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)=',&+-&\x00', 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @multicast}) 201.59098ms ago: executing program 1 (id=5162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x40, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet6(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x40, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) (async) 158.832832ms ago: executing program 1 (id=5163): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc000000a84a6d591b9d0ac96257949eb3c7517a77d0da1ca71e2cd280a4ea1061dd0420381455c57f7220495da2a65ac9ac8d2301c3a9120e8db850d910063f78b048444e7470142b24f28616f232e37f80f2071c17dfc25c917a9b24ad9c48577bd59ff455a77f5719cd084674f6", @ANYRES16=r2, @ANYBLOB="040027bd7000ffdbdf2505000000b80005802c000280080002000028010008000300020000000800030008000000080003000700000008000100030000000700010069620000340002800800040030000000080001001b000000080003005900000008000300070000000800030000800000080003000600000007000100696200003c00028008000400070000000800030009000000080002000400000008000300960000000800010006000000080003000500000008000200070000000800010065746800"], 0xcc}, 0x1, 0x0, 0x0, 0x24048014}, 0x4008010) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000aa9cad557fea38ae1b4df4477862ef18b889ef0601df2326f9b2e67ad8dd2bd803a363280f03461ff4d9a8d35cb558797519509e3b0a5d61e092904ff0bb04afcd463d65a3ef0f0d2f62abde57e58e3dcabfb5181919cc8fd41e829367756e810615eb33d88b75af07", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf256c00000008000300", @ANYRES32=r8, @ANYBLOB="05001901040000000800a1000900000008009f0005000000080026006c09000005001801220000000800270003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x80) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(0x3) 69.822928ms ago: executing program 4 (id=5164): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 68.729737ms ago: executing program 4 (id=5165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000760000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 29.154511ms ago: executing program 1 (id=5166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x48}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x0, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x4, 0x5, {0x1, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x48, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x48}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x0, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x4, 0x5, {0x1, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008000) (async) 0s ago: executing program 4 (id=5167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r3}, 0x18) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) shutdown(r2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x56, 0x81, 0xa, 0x41, @private2, @local, @private1, [0xffffffff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], 0xb8f4757fc1e05f28, 0x180}}, @common=@hl={{0x28}, {0x1, 0x7}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @local, [], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {}, 0x62}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x6, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x40}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001910010000000044c4ef17001c000000000000000000000016457a2335c99f1fc08248e0e66261516ba1670edd4cb1b2d154cf09d214be6644cc8fa9c498c9b700df64f4a4e301c9af311d988e42ecd8137e22edc080098bd0a67230503d12c3e09cb4f8bed40e352dc8ad12e44829"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): .054974][T17242] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 286.062701][T17242] Memory cgroup stats for /syz4: [ 286.062843][T17242] cache 0 [ 286.070914][T17242] rss 0 [ 286.073722][T17242] rss_huge 0 [ 286.076982][T17242] shmem 0 [ 286.079937][T17242] mapped_file 0 [ 286.083418][T17242] dirty 0 [ 286.087362][T17242] writeback 0 [ 286.090719][T17242] workingset_refault_anon 7 [ 286.095292][T17242] workingset_refault_file 1 [ 286.099817][T17242] swap 200704 [ 286.103119][T17242] swapcached 253952 [ 286.107091][T17242] pgpgin 37720 [ 286.110507][T17242] pgpgout 37714 [ 286.113981][T17242] pgfault 84030 [ 286.117786][T17242] pgmajfault 4 [ 286.121189][T17242] inactive_anon 24576 [ 286.126025][T17242] active_anon 0 [ 286.133717][T17242] inactive_file 0 [ 286.146103][T17242] active_file 0 [ 286.150536][T17242] unevictable 0 [ 286.154046][T17242] hierarchical_memory_limit 314572800 [ 286.159593][T17242] hierarchical_memsw_limit 9223372036854771712 [ 286.166134][T17242] total_cache 0 [ 286.169639][T17242] total_rss 0 [ 286.172939][T17242] total_rss_huge 0 [ 286.177353][T17242] total_shmem 0 [ 286.180863][T17242] total_mapped_file 0 [ 286.185180][T17242] total_dirty 0 [ 286.188692][T17242] total_writeback 0 [ 286.192521][T17242] total_workingset_refault_anon 7 [ 286.198174][T17242] total_workingset_refault_file 1 [ 286.203251][T17242] total_swap 200704 [ 286.208159][T17242] total_swapcached 253952 [ 286.212546][T17242] total_pgpgin 37720 [ 286.216730][T17242] total_pgpgout 37714 [ 286.220756][T17242] total_pgfault 84031 [ 286.225458][T17242] total_pgmajfault 4 [ 286.229401][T17242] total_inactive_anon 24576 [ 286.233925][T17242] total_active_anon 0 [ 286.238192][T17242] total_inactive_file 0 [ 286.242395][T17242] total_active_file 0 [ 286.246690][T17242] total_unevictable 0 [ 286.250712][T17242] anon_cost 0 [ 286.254018][T17242] file_cost 0 [ 286.257992][T17242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3185,pid=17242,uid=0 [ 286.273170][T17242] Memory cgroup out of memory: Killed process 17242 (syz.4.3185) total-vm:110896kB, anon-rss:1244kB, file-rss:31180kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 286.343693][T17246] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3186'. [ 286.356674][T17251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3186'. [ 286.381728][T17184] lo speed is unknown, defaulting to 1000 [ 286.389254][ T7975] : left promiscuous mode [ 286.521449][ T7975] tipc: Disabling bearer [ 286.546867][ T7975] tipc: Left network mode [ 286.617290][T17296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3191'. [ 286.868138][T17302] openvswitch: netlink: IP tunnel dst address not specified [ 287.151163][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 287.325675][ T7975] batman_adv: batadv0: Removing interface: wlan0 [ 287.576129][T17347] netlink: 'syz.2.3202': attribute type 3 has an invalid length. [ 287.715243][T12046] Bluetooth: hci0: command tx timeout [ 288.060684][T17383] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3210'. [ 288.087029][T17184] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.119267][T17383] netlink: ct family unspecified [ 288.128113][T17184] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.139236][T17184] bridge_slave_0: entered allmulticast mode [ 288.148265][T17184] bridge_slave_0: entered promiscuous mode [ 288.155769][T17369] netlink: 'syz.0.3207': attribute type 3 has an invalid length. [ 288.178655][T17369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3207'. [ 288.188768][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 288.202330][T17184] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.218695][T17184] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.226171][T17184] bridge_slave_1: entered allmulticast mode [ 288.245488][T17184] bridge_slave_1: entered promiscuous mode [ 288.319173][T17184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.361660][T17184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.401744][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 288.472159][T17184] team0: Port device team_slave_0 added [ 288.502876][T17184] team0: Port device team_slave_1 added [ 288.632381][T17184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.659480][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.723840][T17184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.738437][T17184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.757315][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.796472][T17184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.820471][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 288.990959][T17184] hsr_slave_0: entered promiscuous mode [ 289.019379][T17184] hsr_slave_1: entered promiscuous mode [ 289.033716][T17184] debugfs: 'hsr0' already exists in 'hsr' [ 289.049410][T17184] Cannot create hsr debugfs directory [ 289.062461][T17437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.109270][T17439] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 289.180460][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 289.794523][T12046] Bluetooth: hci0: command tx timeout [ 289.812371][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 289.915005][T17482] openvswitch: netlink: Message has 4 unknown bytes. [ 289.931162][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.972703][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.999595][ T7975] batman_adv: batadv0: Removing interface: ipvlan2 [ 290.041151][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3237'. [ 290.072824][T17498] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3239'. [ 290.199094][T17503] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3239'. [ 290.208567][T17503] netlink: 'syz.0.3239': attribute type 2 has an invalid length. [ 290.221474][ T7975] team0 (unregistering): Port device team_slave_1 removed [ 290.236944][ T7975] team0 (unregistering): Port device team_slave_0 removed [ 290.757325][T17184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.793524][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 290.810556][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.823983][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 290.834466][T17184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.860618][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.889628][ T7975] IPVS: stop unused estimator thread 0... [ 290.905159][T17184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.978305][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.998815][T17184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.026081][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.073028][T17564] netlink: 'syz.4.3251': attribute type 11 has an invalid length. [ 291.248896][T17184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.347007][T17184] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.383432][T17588] veth0: Caught tx_queue_len zero misconfig [ 291.418104][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.425330][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.513891][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.521107][ T7970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.739355][T17597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3260'. [ 291.741500][T17596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3261'. [ 291.875366][T12046] Bluetooth: hci0: command tx timeout [ 291.882061][T17601] geneve2: entered promiscuous mode [ 291.917050][T17601] geneve2: entered allmulticast mode [ 291.933511][ T7974] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 291.953631][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3262'. [ 291.972232][ T7974] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.067748][T17608] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 292.120775][T17608] bond2: option packets_per_slave: allowed values 0 - 65535 [ 292.139191][T17624] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3266'. [ 292.155337][T17608] bond2 (unregistering): Released all slaves [ 292.176540][ T7974] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.225356][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 292.266304][T17629] netlink: 'syz.1.3267': attribute type 30 has an invalid length. [ 292.418353][T17638] dvmrp0: entered allmulticast mode [ 292.637737][ T30] audit: type=1804 audit(1782375945.268:6): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3272" name="/newroot/676/cgroup.controllers" dev="tmpfs" ino=3475 res=1 errno=0 [ 292.697505][ T30] audit: type=1800 audit(1782375945.268:7): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3272" name="cgroup.controllers" dev="tmpfs" ino=3475 res=0 errno=0 [ 292.912823][T17184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.062105][T17689] netlink: 'syz.0.3280': attribute type 1 has an invalid length. [ 293.099509][T17184] veth0_vlan: entered promiscuous mode [ 293.135419][T17184] veth1_vlan: entered promiscuous mode [ 293.218620][T17184] veth0_macvtap: entered promiscuous mode [ 293.281755][T17708] vlan2: entered allmulticast mode [ 293.301314][T17708] bond0: entered allmulticast mode [ 293.314645][T17708] bond_slave_0: entered allmulticast mode [ 293.331658][T17708] bond_slave_1: entered allmulticast mode [ 293.353783][T17184] veth1_macvtap: entered promiscuous mode [ 293.429696][T17184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.481224][T17184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.526938][ T7970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.558966][ T7970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.596636][ T7970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.638703][ T7970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.884008][ T7968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.920638][ T7968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.996767][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.030230][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.099101][T17753] macvtap1: entered promiscuous mode [ 294.132713][T17753] vlan0: entered promiscuous mode [ 294.145866][T17753] macvtap1: entered allmulticast mode [ 294.151812][T17753] vlan0: entered allmulticast mode [ 294.158141][T17753] veth0_vlan: entered allmulticast mode [ 294.292656][T17773] __nla_validate_parse: 10 callbacks suppressed [ 294.292678][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3299'. [ 294.318074][T17770] bond14: entered promiscuous mode [ 294.849977][T17811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 294.881002][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.890856][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.900610][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.913037][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.925853][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.112352][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'. [ 295.148940][T17828] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 295.366589][T17852] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3317'. [ 295.461749][T17859] openvswitch: netlink: IP tunnel dst address not specified [ 295.483098][T17859] netlink: 'syz.2.3318': attribute type 21 has an invalid length. [ 295.503344][T17859] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3318'. [ 295.562070][T17863] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 295.578481][T17863] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.588182][T17863] gretap1: entered promiscuous mode [ 295.593508][T17863] gretap1: entered allmulticast mode [ 295.600798][T17859] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3318'. [ 295.835745][T17867] team0: Device ipvlan2 failed to register rx_handler [ 296.053237][T17883] bond16 (unregistering): Released all slaves [ 296.120391][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'. [ 296.130314][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'. [ 296.164873][T17889] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3325'. [ 296.206840][T17889] netlink: 'syz.3.3325': attribute type 21 has an invalid length. [ 296.229665][T17889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3325'. [ 296.277819][T17812] lo speed is unknown, defaulting to 1000 [ 296.375933][T17901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.427162][T17901] netlink: 'syz.4.3329': attribute type 1 has an invalid length. [ 296.454350][T17901] netlink: 'syz.4.3329': attribute type 4 has an invalid length. [ 296.917160][T17941] tc_dump_action: action bad kind [ 296.955678][T17943] gretap4: entered promiscuous mode [ 296.972462][T17943] gretap4: entered allmulticast mode [ 296.994886][T12046] Bluetooth: hci2: command tx timeout [ 297.315896][T17973] netlink: 'syz.2.3345': attribute type 1 has an invalid length. [ 297.352753][T17812] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.365029][T17812] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.379791][T17812] bridge_slave_0: entered allmulticast mode [ 297.396683][T17812] bridge_slave_0: entered promiscuous mode [ 297.423214][T17973] 8021q: adding VLAN 0 to HW filter on device bond16 [ 297.431362][T17982] vlan0: entered promiscuous mode [ 297.451803][T17982] vlan0: entered allmulticast mode [ 297.464079][T17982] veth0_vlan: entered allmulticast mode [ 297.491488][T17812] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.503787][T17812] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.515203][T17812] bridge_slave_1: entered allmulticast mode [ 297.522626][T17812] bridge_slave_1: entered promiscuous mode [ 297.598016][T17812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.623679][T17812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.673624][T17812] team0: Port device team_slave_0 added [ 297.697148][T17812] team0: Port device team_slave_1 added [ 297.804708][T17812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.825039][T17812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.863418][T18007] netlink: 'syz.2.3354': attribute type 10 has an invalid length. [ 297.900619][T17812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.936119][T17812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.951840][T17812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.999247][T17812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.129136][T17812] hsr_slave_0: entered promiscuous mode [ 298.137372][T17812] hsr_slave_1: entered promiscuous mode [ 298.143560][T17812] debugfs: 'hsr0' already exists in 'hsr' [ 298.150584][T17812] Cannot create hsr debugfs directory [ 298.323303][T18042] netlink: 'syz.4.3360': attribute type 12 has an invalid length. [ 298.348959][T18040] netlink: 'syz.4.3360': attribute type 12 has an invalid length. [ 298.609823][T18062] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 298.655809][T18062] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 298.746656][T18076] netlink: 'syz.0.3369': attribute type 2 has an invalid length. [ 298.749108][T18077] netlink: 'syz.0.3369': attribute type 2 has an invalid length. [ 298.807428][T17812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.826272][T17812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.849615][T17812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.869093][T17812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.895557][T18088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.929777][T18088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.967187][T17812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.979325][T17812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.990371][T18094] xt_l2tp: v2 doesn't support IP mode [ 298.996967][T17812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.039406][T17812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.075028][T12046] Bluetooth: hci2: command tx timeout [ 299.255501][T18117] Cannot find add_set index 0 as target [ 299.297727][T17812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.319728][T18119] __nla_validate_parse: 17 callbacks suppressed [ 299.319745][T18119] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3378'. [ 299.351238][T18115] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3378'. [ 299.377726][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'. [ 299.434207][T18126] bridge1: port 1(veth3) entered blocking state [ 299.462154][T18126] bridge1: port 1(veth3) entered disabled state [ 299.491009][T18126] veth3: entered allmulticast mode [ 299.507341][T18126] veth3: entered promiscuous mode [ 299.521251][T17812] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.544977][T18129] bridge1: port 2(veth0_to_bond) entered blocking state [ 299.565075][T18129] bridge1: port 2(veth0_to_bond) entered disabled state [ 299.590452][T18129] veth0_to_bond: entered allmulticast mode [ 299.613185][T18129] veth0_to_bond: entered promiscuous mode [ 299.627566][T18129] bridge1: port 2(veth0_to_bond) entered blocking state [ 299.634680][T18129] bridge1: port 2(veth0_to_bond) entered forwarding state [ 299.673665][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.680842][ T7970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.732407][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.739620][ T7970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.816540][T18151] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3383'. [ 299.844045][T18151] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3383'. [ 299.980866][T18161] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20003 [ 300.080794][T18171] tipc: Trying to set illegal importance in message [ 300.208085][T18180] netlink: 'syz.3.3390': attribute type 3 has an invalid length. [ 300.225332][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3390'. [ 300.234790][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 300.339363][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3391'. [ 300.652802][T17812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.756550][T17812] veth0_vlan: entered promiscuous mode [ 300.774915][T18215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3396'. [ 300.779834][T17812] veth1_vlan: entered promiscuous mode [ 300.817711][T17812] veth0_macvtap: entered promiscuous mode [ 300.829306][T17812] veth1_macvtap: entered promiscuous mode [ 300.846305][T18218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.872051][T18220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'. [ 300.894568][T18218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.952105][T18215] erspan0: entered promiscuous mode [ 300.990119][T17812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.016772][T17812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.054954][ T7974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.092985][ T7974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.135507][ T7974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.155671][ T4937] Bluetooth: hci2: command tx timeout [ 301.171157][T18237] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 301.206252][ T7974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.408919][ T7974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.429783][ T7974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.500333][T18259] C: renamed from lo (while UP) [ 301.517877][T18259] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 301.561558][ T7968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.588219][ T7968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.057773][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.066469][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.073768][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.086503][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.101139][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.105074][T18298] netlink: 'syz.4.3417': attribute type 2 has an invalid length. [ 302.129581][T18298] netlink: 'syz.4.3417': attribute type 2 has an invalid length. [ 302.438106][T18327] macsec1: entered promiscuous mode [ 302.457656][T18327] bridge0: entered promiscuous mode [ 302.473596][T18327] macsec1: entered allmulticast mode [ 302.481113][T18327] bridge0: entered allmulticast mode [ 302.492991][T18327] bridge0: port 3(macsec1) entered blocking state [ 302.500272][T18327] bridge0: port 3(macsec1) entered disabled state [ 302.509709][T18327] bridge0: left allmulticast mode [ 302.529428][T10471] bridge0: left promiscuous mode [ 302.577422][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.618879][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 302.722310][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 302.750259][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 302.821525][T18354] netlink: 'syz.1.3429': attribute type 11 has an invalid length. [ 302.982335][T18362] netlink: 'syz.3.3434': attribute type 21 has an invalid length. [ 303.073775][T18300] lo speed is unknown, defaulting to 1000 [ 303.228253][T18365] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 303.248193][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 303.353483][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.373146][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 303.423756][T18368] gtp0: entered promiscuous mode [ 303.435129][T18368] gtp0: entered allmulticast mode [ 303.502829][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.516819][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 303.569047][T18388] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 303.692534][T18398] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 303.700620][T18398] netlink: 'syz.3.3445': attribute type 3 has an invalid length. [ 303.709523][T18398] NCSI netlink: No device for ifindex 813332851 [ 304.015195][ T48] dvmrp0: left allmulticast mode [ 304.020364][ T48] lo: left allmulticast mode [ 304.053740][T18427] netlink: 'syz.3.3454': attribute type 1 has an invalid length. [ 304.114055][ T48] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 304.160611][ T48] bond11 (unregistering): (slave geneve4): Releasing active interface [ 304.174102][ T48] bond9 (unregistering): (slave geneve2): Releasing active interface [ 304.194500][T12046] Bluetooth: hci3: command tx timeout [ 304.196883][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.267808][ T48] bond0 (unregistering): (slave bond5): Releasing backup interface [ 304.280635][ T48] bond5 (unregistering): left allmulticast mode [ 304.288652][ T48] bond0 (unregistering): Released all slaves [ 304.297756][ T48] bond1 (unregistering): Released all slaves [ 304.308456][ T48] bond2 (unregistering): Released all slaves [ 304.319546][ T48] bond3 (unregistering): (slave lo): Releasing backup interface [ 304.328826][ T48] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 304.340147][ T48] bond3 (unregistering): Released all slaves [ 304.353324][ T48] bond4 (unregistering): Released all slaves [ 304.368081][ T48] bond5 (unregistering): Released all slaves [ 304.380605][ T48] bond6 (unregistering): (slave bond7): Releasing backup interface [ 304.390758][ T48] bond6 (unregistering): Released all slaves [ 304.403025][ T48] bond7 (unregistering): Released all slaves [ 304.419685][ T48] bond8 (unregistering): Released all slaves [ 304.430229][ T48] bond9 (unregistering): Released all slaves [ 304.440947][ T48] bond10 (unregistering): Released all slaves [ 304.452448][ T48] bond11 (unregistering): Released all slaves [ 304.463097][ T48] bond12 (unregistering): Released all slaves [ 304.480768][ T48] bond13 (unregistering): Released all slaves [ 304.492531][ T48] bond14 (unregistering): Released all slaves [ 304.502869][ T48] bond15 (unregistering): Released all slaves [ 304.513719][ T48] bond16 (unregistering): Released all slaves [ 304.529255][T18427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 304.623728][T18300] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.639485][T18300] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.646853][T18300] bridge_slave_0: entered allmulticast mode [ 304.654128][T18300] bridge_slave_0: entered promiscuous mode [ 304.661810][T18300] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.669229][T18300] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.676712][T18300] bridge_slave_1: entered allmulticast mode [ 304.683531][T18300] bridge_slave_1: entered promiscuous mode [ 304.704083][T18300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.715398][T18300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.738214][T18300] team0: Port device team_slave_0 added [ 304.745835][T18300] team0: Port device team_slave_1 added [ 304.764269][T18300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.771756][T18300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.797831][T18300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.809655][T18300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.816764][T18300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.843099][T18300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.880344][T18300] hsr_slave_0: entered promiscuous mode [ 304.887399][T18300] hsr_slave_1: entered promiscuous mode [ 304.893524][T18300] debugfs: 'hsr0' already exists in 'hsr' [ 304.900289][T18300] Cannot create hsr debugfs directory [ 304.996684][T10471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.234626][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.314942][T12046] Bluetooth: hci2: command 0x0419 tx timeout [ 305.636441][T16820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.275505][ T5630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.277768][T12046] Bluetooth: hci3: command tx timeout [ 306.292099][T10471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.643377][T18402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.679968][T18300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.714040][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.730488][T18300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.763020][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.792139][T18300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.836200][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.859190][T18300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.906449][T18300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.106070][T18482] __nla_validate_parse: 18 callbacks suppressed [ 307.106090][T18482] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3462'. [ 307.127487][T18486] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3464'. [ 307.142672][T18485] batadv1: entered allmulticast mode [ 307.163066][T18478] tipc: Started in network mode [ 307.174975][T18478] tipc: Node identity ac14140f, cluster identity 4711 [ 307.190072][T18478] tipc: Enabled bearer , priority 10 [ 307.218779][T18300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.296895][T18300] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.316615][T18492] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 307.336698][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.343892][ T7964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.396560][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.403808][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.633876][T18508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3471'. [ 307.723375][T18513] syzkaller0: entered promiscuous mode [ 307.731905][T18513] syzkaller0: entered allmulticast mode [ 307.764810][T18513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3472'. [ 307.829651][T18518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3472'. [ 307.869948][T18529] netlink: 'syz.0.3475': attribute type 2 has an invalid length. [ 307.965142][ T7975] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.985985][ T7975] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.022332][ T7975] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.039885][ T7975] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.107876][T18541] pim6reg1: entered promiscuous mode [ 308.131415][T18541] pim6reg1: entered allmulticast mode [ 308.186272][T18550] sctp: [Deprecated]: syz.4.3480 (pid 18550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.186272][T18550] Use struct sctp_sack_info instead [ 308.227489][T18550] sctp: [Deprecated]: syz.4.3480 (pid 18550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.227489][T18550] Use struct sctp_sack_info instead [ 308.252070][T18559] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3481'. [ 308.292538][T18559] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3481'. [ 308.329806][T16820] tipc: Node number set to 2886997007 [ 308.358571][T12046] Bluetooth: hci3: command tx timeout [ 308.392569][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 308.603167][T18583] netlink: 'syz.1.3487': attribute type 11 has an invalid length. [ 308.635611][T18583] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3487'. [ 308.740669][T18300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.777047][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 308.804583][T18595] Cannot find add_set index 0 as target [ 308.850247][T18300] veth0_vlan: entered promiscuous mode [ 308.867088][T18300] veth1_vlan: entered promiscuous mode [ 308.929626][T18300] veth0_macvtap: entered promiscuous mode [ 308.968495][T18300] veth1_macvtap: entered promiscuous mode [ 309.020392][T18300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.054029][T18300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.101600][ T7970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.117998][ T7970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.140849][ T7970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.161735][ T7963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.336972][ T7970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.361985][T18619] tun0: tun_chr_ioctl cmd 1074025675 [ 309.375531][T18619] tun0: persist enabled [ 309.387292][ T7975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.400371][ T7975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.488610][ T7975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.510198][ T7975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.863988][T18654] bond0: option miimon: invalid value (18446744071829782528) [ 309.909688][T18654] bond0: option miimon: allowed values 0 - 2147483647 [ 310.435237][T12046] Bluetooth: hci3: command tx timeout [ 310.481580][T18697] netlink: 'syz.0.3517': attribute type 1 has an invalid length. [ 310.523361][T18697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.580517][T18697] bridge1: port 2(veth0_to_bond) entered disabled state [ 310.602734][T18697] veth0_to_bond: left allmulticast mode [ 310.616744][T18697] veth0_to_bond: left promiscuous mode [ 310.637120][T18697] bridge1: port 2(veth0_to_bond) entered disabled state [ 310.656629][T18697] bond1: (slave veth0_to_bond): making interface the new active one [ 310.671823][T18697] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 310.773351][T18713] xt_hashlimit: size too large, truncated to 1048576 [ 310.900026][T18705] macvlan2: entered promiscuous mode [ 310.941766][T18705] macvlan2: entered allmulticast mode [ 310.969953][T18705] bond1: entered promiscuous mode [ 310.985436][T18705] veth0_to_bond: entered promiscuous mode [ 310.998607][T18705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.018925][T18705] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 311.048121][T18705] bond1: left promiscuous mode [ 311.060195][T18705] veth0_to_bond: left promiscuous mode [ 311.122732][T18730] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 311.139986][T18729] vlan2: entered allmulticast mode [ 311.160223][T18729] bond0: entered allmulticast mode [ 311.171342][T18729] bond_slave_0: entered allmulticast mode [ 311.179168][T18729] bond_slave_1: entered allmulticast mode [ 311.379909][T18748] macvtap1: entered promiscuous mode [ 311.388802][T18748] team0: Device macvtap1 failed to register rx_handler [ 311.673582][T18776] Bluetooth: MGMT ver 1.23 [ 312.465578][T18811] __nla_validate_parse: 13 callbacks suppressed [ 312.465606][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 312.596182][T18818] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3553'. [ 313.100707][T18844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3563'. [ 313.116600][T18845] netlink: 'syz.4.3562': attribute type 1 has an invalid length. [ 313.127088][T18849] bridge_slave_1: left allmulticast mode [ 313.136368][T18845] netlink: 'syz.4.3562': attribute type 1 has an invalid length. [ 313.145486][T18849] bridge_slave_1: left promiscuous mode [ 313.153008][T18845] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3562'. [ 313.161972][T18849] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.212703][T18849] bridge_slave_0: left allmulticast mode [ 313.241465][T18849] bridge_slave_0: left promiscuous mode [ 313.269711][T18849] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.474531][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.763109][T18870] netlink: 'syz.4.3568': attribute type 9 has an invalid length. [ 314.183192][T18904] syzkaller0: entered promiscuous mode [ 314.207185][T18904] syzkaller0: entered allmulticast mode [ 314.422152][T18915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3581'. [ 314.854007][T18928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3587'. [ 315.048508][T18937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3591'. [ 315.059274][T18937] ipt_rpfilter: unknown options [ 315.069539][T18937] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3591'. [ 315.432225][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 315.458990][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 315.522527][T18955] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 315.572195][T18956] macvlan2: entered promiscuous mode [ 315.578707][T18956] macvlan2: entered allmulticast mode [ 315.586438][T18956] bond1: entered promiscuous mode [ 315.592225][T18956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.601401][T18956] bond1: left promiscuous mode [ 315.721912][T18964] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 315.730757][T18964] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 316.012708][T18979] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 316.070667][T18798] Set syz1 is full, maxelem 65536 reached [ 316.079457][T18982] netlink: 'syz.4.3605': attribute type 21 has an invalid length. [ 316.089678][T18982] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.098854][T18982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.106200][T18982] IPv6: NLM_F_CREATE should be set when creating new route [ 316.180659][T18984] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.188305][T18984] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.198089][T18987] netlink: 'syz.2.3606': attribute type 1 has an invalid length. [ 316.208294][T18987] netlink: 'syz.2.3606': attribute type 4 has an invalid length. [ 316.278455][T18990] Cannot find set identified by id 65534 to match [ 316.287442][T18991] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 316.290370][T18984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.307860][T18984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.385502][T18984] vlan2: left allmulticast mode [ 316.390550][T18984] bond0: left allmulticast mode [ 316.396321][T18984] bond_slave_0: left allmulticast mode [ 316.402055][T18984] bond_slave_1: left allmulticast mode [ 316.430980][ T7975] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.456535][ T7975] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.469887][ T7975] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.480389][ T7975] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.537369][T18995] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 316.565678][T18995] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 316.584225][T18995] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 316.620148][T18995] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 316.794156][T19010] bridge1: entered allmulticast mode [ 316.830210][T19010] bridge2: entered allmulticast mode [ 316.970969][T19020] syzkaller0: entered promiscuous mode [ 316.977642][T19020] syzkaller0: entered allmulticast mode [ 317.166579][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.298238][T19034] bond3 (unregistering): Released all slaves [ 317.317375][T19036] gre0: entered promiscuous mode [ 317.323632][T19036] gre0: entered allmulticast mode [ 317.333954][T19039] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 317.345233][T19039] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 317.454094][T19049] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 317.517903][T19052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.547225][T19054] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 317.585329][T19058] __nla_validate_parse: 8 callbacks suppressed [ 317.585351][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 317.606980][T19054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.623794][T19054] bond3: (slave geneve2): making interface the new active one [ 317.636163][T19054] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 317.672449][T19058] netlink: 'syz.2.3623': attribute type 12 has an invalid length. [ 317.965912][T19077] syzkaller1: entered promiscuous mode [ 317.977727][T19077] syzkaller1: entered allmulticast mode [ 317.990932][T19084] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3627'. [ 318.121687][T19092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3630'. [ 318.210197][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3632'. [ 318.356373][T19114] syzkaller0: entered promiscuous mode [ 318.362059][T19114] syzkaller0: entered allmulticast mode [ 321.108542][T19092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.261235][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3639'. [ 321.291174][T19133] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 321.310471][T19136] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2631261706/2631261707 [ 321.320921][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'. [ 321.322413][T19136] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2631261706/2631261707 [ 321.401735][T19141] netlink: 'syz.1.3643': attribute type 3 has an invalid length. [ 321.414982][T19141] syz_tun: entered allmulticast mode [ 321.425774][T19141] dvmrp8: entered allmulticast mode [ 321.432889][T19140] syz_tun: left allmulticast mode [ 321.473512][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 321.560500][T19151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3646'. [ 321.697497][T19161] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 321.707957][T19161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.756355][T19163] netlink: 412 bytes leftover after parsing attributes in process `syz.1.3650'. [ 321.769109][T19163] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 321.858329][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3652'. [ 321.903684][T19173] Bluetooth: MGMT ver 1.23 [ 322.222975][T19195] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 322.393050][ T809] IPVS: starting estimator thread 0... [ 322.505019][T19213] IPVS: using max 36 ests per chain, 86400 per kthread [ 322.631392][T19231] __nla_validate_parse: 1 callbacks suppressed [ 322.631412][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 323.109633][T19247] netlink: 'syz.4.3671': attribute type 19 has an invalid length. [ 323.407041][T19277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3676'. [ 323.437787][T19277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3676'. [ 323.459347][T19277] macsec0: entered promiscuous mode [ 323.865924][T19302] netlink: 'syz.3.3686': attribute type 11 has an invalid length. [ 323.893096][T19302] netlink: 'syz.3.3686': attribute type 11 has an invalid length. [ 323.914977][T19302] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3686'. [ 323.973755][T19302] syzkaller1: entered promiscuous mode [ 323.997553][T19302] syzkaller1: entered allmulticast mode [ 324.129407][T19314] netlink: 'syz.4.3691': attribute type 4 has an invalid length. [ 324.198825][T19319] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.226158][T19319] bridge_slave_0 (unregistering): left allmulticast mode [ 324.238570][T19319] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.647023][T19366] netlink: 'syz.2.3705': attribute type 1 has an invalid length. [ 324.668703][T19366] netlink: 'syz.2.3705': attribute type 1 has an invalid length. [ 324.691798][T19367] netlink: 'syz.2.3705': attribute type 1 has an invalid length. [ 324.692170][T19366] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3705'. [ 324.720416][T19367] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3705'. [ 324.929087][T19381] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3707'. [ 325.084195][T19395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3710'. [ 325.281183][T19413] gre0: left promiscuous mode [ 325.293462][T19413] gre0: left allmulticast mode [ 325.331849][T19413] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.392795][T19413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.406517][T19413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.492067][T19420] bond2: entered promiscuous mode [ 325.498386][T19420] bond2: entered allmulticast mode [ 325.503958][T19420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.514900][ T7964] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.524862][ T7975] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.535981][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3715'. [ 325.550434][ T7975] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.566646][ T7975] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.591084][T19440] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.3720'. [ 326.601151][T19440] netlink: Unknown conntrack attr (type=2304, max=9) [ 328.219015][T19405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.317250][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'. [ 328.372352][T19452] hsr_slave_1 (unregistering): left promiscuous mode [ 328.501303][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3727'. [ 328.785496][T19484] syzkaller0: entered promiscuous mode [ 328.791384][T19484] syzkaller0: entered allmulticast mode [ 328.797336][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3731'. [ 328.935857][T19495] Bluetooth: MGMT ver 1.23 [ 329.037844][T19501] syzkaller0: entered promiscuous mode [ 329.050572][T19501] syzkaller0: entered allmulticast mode [ 329.066638][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'. [ 329.096081][T19506] : entered promiscuous mode [ 329.211199][T19512] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 329.295420][T19512] bond1: entered promiscuous mode [ 329.322014][T19512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.345385][T19528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.352690][T19528] IPv6: NLM_F_CREATE should be set when creating new route [ 329.359983][T19528] IPv6: NLM_F_CREATE should be set when creating new route [ 329.419439][T19528] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3745'. [ 329.595068][T19546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.682820][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.691553][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.698902][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.707431][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.715204][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.729701][T19554] netlink: 'syz.3.3754': attribute type 1 has an invalid length. [ 329.744425][T19557] netlink: 'syz.1.3751': attribute type 29 has an invalid length. [ 329.778234][T19547] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 329.793584][T19547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3751'. [ 329.851937][T19565] bond1: (slave bridge2): making interface the new active one [ 329.860642][T19565] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 329.872323][T19557] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 329.893247][T19557] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3751'. [ 330.064128][T19580] netlink: 'syz.4.3758': attribute type 1 has an invalid length. [ 330.108691][T19582] netlink: 'syz.1.3759': attribute type 1 has an invalid length. [ 330.120769][T19580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.162453][T19580] vlan3: entered promiscuous mode [ 330.168883][T19580] bond4: entered promiscuous mode [ 330.174380][T19580] vlan3: entered allmulticast mode [ 330.179652][T19580] bond4: entered allmulticast mode [ 330.220243][T19580] bond4: (slave bridge4): making interface the new active one [ 330.241807][T19580] bridge4: entered promiscuous mode [ 330.252411][T19580] bridge4: entered allmulticast mode [ 330.261132][T19580] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 330.282216][T19597] syzkaller0: entered promiscuous mode [ 330.287979][T19597] syzkaller0: entered allmulticast mode [ 330.295667][T19596] sctp: [Deprecated]: syz.1.3762 (pid 19596) Use of int in maxseg socket option. [ 330.295667][T19596] Use struct sctp_assoc_value instead [ 330.318591][T19594] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3761'. [ 330.328589][T19594] syzkaller0: entered promiscuous mode [ 330.334177][T19594] syzkaller0: entered allmulticast mode [ 330.551809][T19619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3768'. [ 330.571534][T19621] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3769'. [ 330.725871][T19628] 8021q: VLANs not supported on ip6tnl0 [ 331.338263][T19674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.444094][T19678] syzkaller0: mtu greater than device maximum [ 331.467533][T19678] syzkaller0: mtu less than device minimum [ 331.521400][T19687] netlink: 'syz.4.3791': attribute type 1 has an invalid length. [ 331.794588][ T50] Bluetooth: hci1: command tx timeout [ 331.903846][T19711] netlink: 'syz.4.3798': attribute type 1 has an invalid length. [ 331.925211][T19711] netlink: 'syz.4.3798': attribute type 2 has an invalid length. [ 332.645419][T19756] gretap0: entered promiscuous mode [ 332.662336][T19756] gretap0: left promiscuous mode [ 332.959201][ T6684] block nbd1: NBD_DISCONNECT [ 332.972434][ T6684] block nbd1: Send disconnect failed -32 [ 332.988915][ T6684] block nbd1: shutting down sockets [ 333.327932][T19804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 333.335670][T19804] bridge0: port 3(bond5) entered blocking state [ 333.342236][T19804] bridge0: port 3(bond5) entered disabled state [ 333.348990][T19804] bond5: entered allmulticast mode [ 333.357168][T19804] bond5: entered promiscuous mode [ 333.363770][T19804] bridge0: port 3(bond5) entered blocking state [ 333.370218][T19804] bridge0: port 3(bond5) entered forwarding state [ 333.475575][ T13] bridge0: port 3(bond5) entered disabled state [ 333.616440][T19815] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 333.680859][T19818] __nla_validate_parse: 18 callbacks suppressed [ 333.680879][T19818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3829'. [ 333.702366][T19818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3829'. [ 333.776998][ T50] block nbd2: Receive control failed (result -32) [ 333.874674][ T50] Bluetooth: hci1: command tx timeout [ 334.230356][T19857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3836'. [ 334.399659][T19867] openvswitch: netlink: Message has 4 unknown bytes. [ 335.020225][T19902] bond1: left promiscuous mode [ 335.286497][T19917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3856'. [ 335.367388][T19926] validate_nla: 1 callbacks suppressed [ 335.367412][T19926] netlink: 'syz.4.3859': attribute type 4 has an invalid length. [ 335.382072][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 335.629232][T19939] netlink: 'syz.4.3862': attribute type 3 has an invalid length. [ 335.696761][T19946] nbd: must specify a size in bytes for the device [ 335.762449][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3862'. [ 335.828353][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 335.842630][T19946] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 335.954716][ T50] Bluetooth: hci1: command tx timeout [ 336.154066][T19966] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3870'. [ 336.188376][T19967] x_tables: duplicate entry at hook 2 [ 336.271818][T19970] sctp: [Deprecated]: syz.3.3871 (pid 19970) Use of int in max_burst socket option. [ 336.271818][T19970] Use struct sctp_assoc_value instead [ 336.577935][T19974] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3872'. [ 336.728845][T19985] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 336.777231][T19985] veth3: entered promiscuous mode [ 336.785891][T19985] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 336.796380][T19988] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3876'. [ 336.825203][T19988] syzkaller0: entered promiscuous mode [ 336.839526][T19988] syzkaller0: entered allmulticast mode [ 336.880205][T19988] netlink: 'syz.2.3876': attribute type 7 has an invalid length. [ 336.921598][T19997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.987296][T20002] dvmrp0: entered allmulticast mode [ 336.992496][T19997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.063614][T19997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.100134][T20010] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 337.123704][T20010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.170320][T20010] bond5: (slave gretap1): making interface the new active one [ 337.180103][T20010] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 337.194146][T20010] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 337.264233][T20021] netlink: 'syz.2.3884': attribute type 4 has an invalid length. [ 337.465716][T20037] syzkaller0: entered promiscuous mode [ 337.471353][T20037] syzkaller0: entered allmulticast mode [ 337.672963][T20044] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 337.769033][T20050] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 337.817217][T20050] bond6 (unregistering): Released all slaves [ 338.034595][ T50] Bluetooth: hci1: command tx timeout [ 338.480640][T20108] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 338.487738][ T10] IPVS: starting estimator thread 0... [ 338.508232][T20108] IPVS: sh: FWM 3 0x00000003 - no destination available [ 338.566756][T20108] tipc: Enabled bearer , priority 0 [ 338.585798][T20109] IPVS: using max 42 ests per chain, 100800 per kthread [ 338.599661][T20108] syzkaller0: entered promiscuous mode [ 338.615296][T20108] syzkaller0: entered allmulticast mode [ 338.628814][T20108] sch_tbf: peakrate 4294967291 is lower than or equals to rate 10983774448663939536 ! [ 338.664463][T20107] tipc: Resetting bearer [ 338.693954][T20107] tipc: Disabling bearer [ 338.712573][T20122] netlink: 'syz.2.3912': attribute type 6 has an invalid length. [ 338.722250][T20121] syzkaller0: entered promiscuous mode [ 338.729309][T20121] syzkaller0: entered allmulticast mode [ 338.905724][T20134] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 338.921879][T20135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 339.410562][T20159] __nla_validate_parse: 12 callbacks suppressed [ 339.410589][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3922'. [ 339.511825][T20169] dvmrp0: entered allmulticast mode [ 339.650894][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3928'. [ 339.710889][T20182] xt_HMARK: proto mask must be zero with L3 mode [ 339.741091][T20182] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.779162][T20182] bridge_slave_0 (unregistering): left allmulticast mode [ 339.786647][T20182] bridge_slave_0 (unregistering): left promiscuous mode [ 339.793810][T20182] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.948283][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 340.047135][T20203] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 340.101599][T20203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.176812][T20211] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3936'. [ 340.186131][T20211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3936'. [ 340.328597][T20218] syzkaller0: entered promiscuous mode [ 340.334215][T20218] syzkaller0: entered allmulticast mode [ 340.387727][T20220] netlink: 'syz.4.3940': attribute type 10 has an invalid length. [ 340.398438][T20220] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3940'. [ 340.462908][T20222] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3941'. [ 340.725659][T20227] syzkaller1: entered promiscuous mode [ 340.733311][T20227] syzkaller1: entered allmulticast mode [ 340.758011][T20236] syzkaller1: entered promiscuous mode [ 340.763671][T20236] syzkaller1: entered allmulticast mode [ 340.772486][T20236] syzkaller1: left promiscuous mode [ 340.777880][T20236] syzkaller1: left allmulticast mode [ 340.859591][T20239] netlink: 'syz.3.3945': attribute type 1 has an invalid length. [ 340.899693][T20244] veth1_to_bond: entered allmulticast mode [ 340.911983][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3946'. [ 340.932966][T20244] veth1_to_bond (unregistering): left allmulticast mode [ 340.946703][T20244] bond0: (slave bond_slave_1): Releasing backup interface [ 340.954998][T20244] bond_slave_1 (unregistering): left allmulticast mode [ 341.283038][T20273] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3955'. [ 341.374561][T20280] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 341.591697][T20293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3964'. [ 341.644062][T20295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.699859][T20297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.207139][T20335] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 342.217253][T20335] bond3 (unregistering): Released all slaves [ 342.294151][T20348] syzkaller1: entered promiscuous mode [ 342.312163][T20348] syzkaller1: entered allmulticast mode [ 342.433949][T20361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.900994][T20392] syzkaller0: entered promiscuous mode [ 342.906672][T20392] syzkaller0: entered allmulticast mode [ 342.915615][T20392] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 342.966126][T20394] : entered promiscuous mode [ 342.972875][T20394] netlink: 'syz.4.3995': attribute type 1 has an invalid length. [ 342.980840][T20394] netlink: 'syz.4.3995': attribute type 1 has an invalid length. [ 343.147595][T20409] netlink: 'syz.1.3999': attribute type 21 has an invalid length. [ 343.156616][T20409] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.559602][T20434] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 343.708793][T20452] netlink: 'syz.4.4012': attribute type 8 has an invalid length. [ 343.725790][T20452] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.055918][T20470] x_tables: duplicate underflow at hook 2 [ 344.324340][T20500] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 344.409967][T20504] netlink: 'syz.3.4027': attribute type 83 has an invalid length. [ 344.507536][T20513] __nla_validate_parse: 7 callbacks suppressed [ 344.507556][T20513] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.4030'. [ 344.625586][T20521] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.4033'. [ 344.635363][T20521] openvswitch: netlink: Flow key attr not present in new flow. [ 344.646771][T20524] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.4033'. [ 344.668873][T20524] openvswitch: netlink: Flow key attr not present in new flow. [ 344.809188][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4037'. [ 345.218370][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 345.230096][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 345.244178][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 345.507057][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4053'. [ 345.524911][T20583] pimreg: entered allmulticast mode [ 345.534760][T20585] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 345.634780][T12046] Bluetooth: hci1: command 0x0405 tx timeout [ 345.669150][T20594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4056'. [ 345.691530][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'. [ 345.767200][T20599] syzkaller0: entered promiscuous mode [ 345.772895][T20599] syzkaller0: entered allmulticast mode [ 345.786370][T20599] tipc: Enabled bearer , priority 0 [ 345.796105][T20599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.809701][T20599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.824747][T20600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.599469][T20598] tipc: Resetting bearer [ 346.612626][T20598] tipc: Disabling bearer [ 347.157865][T20657] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 347.166181][T20657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.183354][T20657] gretap1: left promiscuous mode [ 347.190022][T20657] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 347.392074][T20671] bridge3: entered promiscuous mode [ 347.405780][T20671] bridge3: entered allmulticast mode [ 347.691234][T20705] netlink: 'syz.1.4088': attribute type 21 has an invalid length. [ 348.322308][T20748] netlink: 'syz.3.4101': attribute type 1 has an invalid length. [ 348.499739][T20763] sctp: [Deprecated]: syz.4.4108 (pid 20763) Use of int in maxseg socket option. [ 348.499739][T20763] Use struct sctp_assoc_value instead [ 348.593806][T20767] tipc: Enabling of bearer rejected, failed to enable media [ 348.679343][T20771] netlink: 'syz.4.4111': attribute type 1 has an invalid length. [ 348.687454][T20771] netlink: 'syz.4.4111': attribute type 1 has an invalid length. [ 348.696377][T20772] netlink: 'syz.4.4111': attribute type 1 has an invalid length. [ 348.705197][T20772] netlink: 'syz.4.4111': attribute type 1 has an invalid length. [ 348.806455][T20776] team_slave_1: entered promiscuous mode [ 348.813298][T20776] netlink: 'syz.4.4112': attribute type 11 has an invalid length. [ 349.321727][T20807] team0: Failed to send options change via netlink (err -105) [ 349.340722][T20807] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 349.358925][T20807] team0: Port device team_slave_0 removed [ 349.430870][T20812] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 349.892520][T20832] __nla_validate_parse: 24 callbacks suppressed [ 349.892543][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4129'. [ 349.962410][T20840] netlink: 'syz.1.4132': attribute type 11 has an invalid length. [ 349.974678][T20840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4132'. [ 349.983888][T20841] netlink: 'syz.1.4132': attribute type 11 has an invalid length. [ 349.993424][T20841] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4132'. [ 350.061266][T20845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4133'. [ 350.070518][T20845] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4133'. [ 350.079979][T20845] netlink: 'syz.1.4133': attribute type 6 has an invalid length. [ 350.088924][T20845] netlink: 'syz.1.4133': attribute type 5 has an invalid length. [ 350.097333][T20845] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4133'. [ 350.251630][T20857] set match dimension is over the limit! [ 350.312871][T20863] x_tables: duplicate underflow at hook 2 [ 350.396570][T20867] pim6reg: entered allmulticast mode [ 351.162884][T20885] netlink: 'syz.3.4144': attribute type 17 has an invalid length. [ 351.171533][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4144'. [ 351.180716][T20885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4144'. [ 351.192828][T20885] erspan0: entered promiscuous mode [ 351.199459][T20885] erspan0: left promiscuous mode [ 353.430544][T20869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.558281][T20896] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 353.571047][T20896] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4148'. [ 353.614067][T20897] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 353.672906][T20902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4149'. [ 353.922951][T20928] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 353.941391][T20928] NCSI netlink: No device for ifindex 0 [ 354.173379][T20946] nbd: couldn't find a device at index 1 [ 354.396502][T20964] netlink: 'syz.4.4168': attribute type 1 has an invalid length. [ 354.405001][T20964] netlink: 'syz.4.4168': attribute type 2 has an invalid length. [ 354.652455][T20984] syzkaller0: entered promiscuous mode [ 354.659065][T20984] syzkaller0: entered allmulticast mode [ 354.877273][T20998] netlink: 'syz.1.4180': attribute type 29 has an invalid length. [ 354.886827][T20998] netlink: 'syz.1.4180': attribute type 29 has an invalid length. [ 354.896320][T20998] __nla_validate_parse: 7 callbacks suppressed [ 354.896340][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4180'. [ 355.192911][T12046] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.201114][T12046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.208653][T12046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.216565][T12046] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.225453][T12046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.373087][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.380961][T21021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.398721][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.408930][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.417425][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.425299][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.432896][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.441444][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.450660][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.459461][T21020] openvswitch: netlink: IP tunnel dst address not specified [ 355.550170][T21028] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 355.558901][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'. [ 355.569026][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4187'. [ 355.580244][T21028] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4187'. [ 355.648648][T21032] sctp: [Deprecated]: syz.4.4189 (pid 21032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.648648][T21032] Use struct sctp_sack_info instead [ 355.742204][T21036] gre0: Master is either lo or non-ether device [ 356.013164][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4194'. [ 356.026089][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4194'. [ 356.255523][T21055] netlink: 'syz.1.4196': attribute type 1 has an invalid length. [ 356.283128][T21055] bond6: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 356.301401][T21055] veth7: entered promiscuous mode [ 356.308691][T21055] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 356.697164][T21081] netlink: 'syz.3.4204': attribute type 12 has an invalid length. [ 356.707151][T21089] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4206'. [ 357.044141][T21112] syzkaller0: entered promiscuous mode [ 357.051813][T21112] syzkaller0: entered allmulticast mode [ 357.315392][T12046] Bluetooth: hci6: command tx timeout [ 357.468522][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'. [ 357.496061][T21129] xt_TPROXY: Can be used only with -p tcp or -p udp [ 357.798920][T21140] syz_tun: entered allmulticast mode [ 357.819964][T21142] syz_tun: left allmulticast mode [ 357.891401][T21147] netlink: 'syz.3.4225': attribute type 12 has an invalid length. [ 357.974643][T21152] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.999772][T21154] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4228'. [ 358.048932][T21157] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4229'. [ 358.286872][T21172] netlink: 'syz.1.4234': attribute type 10 has an invalid length. [ 358.571358][T21192] gre0: entered promiscuous mode [ 358.585624][T21192] gre0: entered allmulticast mode [ 358.950401][T21225] team0: Device ipvlan3 is already an upper device of the team interface [ 359.008919][T21227] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 359.017216][T21227] netlink: 'syz.1.4249': attribute type 2 has an invalid length. [ 359.025419][T21227] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 359.208700][T21245] IPVS: length: 239 != 24 [ 359.405737][T12046] Bluetooth: hci6: command tx timeout [ 359.599996][T21278] team0: Device ipvlan2 is already an upper device of the team interface [ 359.753286][T21293] netlink: 'syz.3.4270': attribute type 20 has an invalid length. [ 359.761361][T21293] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.927336][T21305] __nla_validate_parse: 6 callbacks suppressed [ 359.927355][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4272'. [ 360.139153][T21325] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 360.517155][T21335] netlink: 'syz.4.4280': attribute type 1 has an invalid length. [ 360.560334][T21336] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 360.588250][T21338] netlink: 'syz.4.4280': attribute type 1 has an invalid length. [ 360.617099][T21338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.075451][T21346] tun1: tun_chr_ioctl cmd 1074025675 [ 361.080892][T21346] tun1: persist enabled [ 361.336407][T21349] syzkaller0: entered promiscuous mode [ 361.342007][T21349] syzkaller0: entered allmulticast mode [ 361.441619][T21354] netlink: 'syz.1.4286': attribute type 4 has an invalid length. [ 361.457181][T21354] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4286'. [ 361.474861][ T50] Bluetooth: hci6: command tx timeout [ 361.592969][T21362] syzkaller0: entered promiscuous mode [ 361.598697][T21362] syzkaller0: entered allmulticast mode [ 361.728761][T21368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4290'. [ 361.982735][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4296'. [ 361.992290][T21386] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.4296'. [ 362.039317][T21389] netlink: 'syz.3.4298': attribute type 1 has an invalid length. [ 362.047244][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4298'. [ 362.058675][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4298'. [ 362.077502][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4297'. [ 362.091974][T21391] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4297'. [ 362.174172][T21396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4299'. [ 362.247175][T21398] syzkaller0: entered promiscuous mode [ 362.252823][T21398] syzkaller0: entered allmulticast mode [ 362.427479][T21400] bond7: option lp_interval: invalid value (0) [ 362.433830][T21400] bond7: option lp_interval: allowed values 1 - 2147483647 [ 362.446179][T21400] bond7 (unregistering): Released all slaves [ 362.468588][ T7967] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.478463][ T7967] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.488028][ T7967] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.497344][ T7967] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.607424][T21408] team0: Device ipvlan3 failed to register rx_handler [ 363.125451][T21457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.132768][T21457] IPv6: NLM_F_CREATE should be set when creating new route [ 363.140079][T21457] IPv6: NLM_F_CREATE should be set when creating new route [ 363.147389][T21457] IPv6: NLM_F_CREATE should be set when creating new route [ 363.161962][T21457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.251317][T21463] netlink: 'syz.4.4322': attribute type 75 has an invalid length. [ 363.318989][T21472] syzkaller0: entered promiscuous mode [ 363.330694][T21472] syzkaller0: entered allmulticast mode [ 363.490196][ T7967] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.502445][ T7967] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.522500][ T7967] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.542523][ T7967] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.557931][ T50] Bluetooth: hci6: command 0x0419 tx timeout [ 363.590869][T21494] netlink: 'syz.1.4330': attribute type 6 has an invalid length. [ 363.732052][T21504] net_ratelimit: 24 callbacks suppressed [ 363.732074][T21504] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 363.749699][T21504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.828163][T21511] lo: entered allmulticast mode [ 363.833725][T21511] tunl0: entered allmulticast mode [ 363.841734][T21511] gre0: entered allmulticast mode [ 363.864113][T21511] gretap0: entered allmulticast mode [ 363.877455][T21511] erspan0: entered allmulticast mode [ 363.887315][T21511] tipc: Resetting bearer [ 363.893091][T21511] tipc: Resetting bearer [ 363.899132][T21511] ip_vti0: entered allmulticast mode [ 363.909156][T21511] ip6_vti0: entered allmulticast mode [ 363.918546][T21511] sit0: entered allmulticast mode [ 363.927348][T21511] ip6tnl0: entered allmulticast mode [ 363.936350][T21511] ip6gre0: entered allmulticast mode [ 363.945518][T21511] bridge0: entered allmulticast mode [ 364.255728][T21529] openvswitch: netlink: Message has 1 unknown bytes. [ 364.267384][T21529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.523252][T21548] bond7: (slave ip6gretap1): making interface the new active one [ 364.532542][T21548] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 364.653751][T21554] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 364.749497][T21561] bond3: invalid ARP target 0.0.0.0 specified for addition [ 364.757990][T21561] bond3: option arp_ip_target: invalid value (0) [ 364.765830][T21561] bond3 (unregistering): Released all slaves [ 364.948968][T21571] sctp: [Deprecated]: syz.3.4356 (pid 21571) Use of int in max_burst socket option deprecated. [ 364.948968][T21571] Use struct sctp_assoc_value instead [ 365.635171][T12046] Bluetooth: hci6: command 0x0419 tx timeout [ 365.650578][T21582] bridge0: entered promiscuous mode [ 365.656655][T21582] bridge0: entered allmulticast mode [ 365.670475][T21584] __nla_validate_parse: 17 callbacks suppressed [ 365.670495][T21584] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4360'. [ 365.689157][T21584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4360'. [ 365.948365][T21600] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 366.046443][T21609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4368'. [ 366.080044][T21610] team0: Device xfrm0 is of different type [ 366.115081][T21614] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4370'. [ 366.180245][T21616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.268836][T21620] IPVS: set_ctl: invalid protocol: 137 172.20.20.52:20000 [ 366.339114][T21623] Cannot find add_set index 65532 as target [ 366.376604][T21627] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 366.385634][T21627] netlink: 'syz.3.4375': attribute type 7 has an invalid length. [ 366.393436][T21627] netlink: 'syz.3.4375': attribute type 8 has an invalid length. [ 366.409598][T21627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4375'. [ 366.548672][T21636] netlink: 'syz.4.4377': attribute type 2 has an invalid length. [ 366.791983][T21659] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 366.895592][T21659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.920780][T21662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4383'. [ 366.932911][T21667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4384'. [ 367.105728][T21677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4386'. [ 367.115057][T21680] bridge4: entered promiscuous mode [ 367.120595][T21680] bridge4: entered allmulticast mode [ 367.181369][T21687] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4388'. [ 367.462921][T21704] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4393'. [ 367.504625][ T30] audit: type=1800 audit(1782376020.138:8): pid=21706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4394" name="memory.events" dev="tmpfs" ino=1907 res=0 errno=0 [ 367.533299][ T30] audit: type=1804 audit(1782376020.158:9): pid=21706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4394" name="/newroot/371/memory.events" dev="tmpfs" ino=1907 res=1 errno=0 [ 367.667029][T21718] netlink: 'syz.4.4397': attribute type 1 has an invalid length. [ 367.689934][T21718] bond8: entered promiscuous mode [ 367.695488][T21718] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.717889][T21721] xt_bpf: check failed: parse error [ 368.245691][T21743] netlink: 'syz.3.4405': attribute type 1 has an invalid length. [ 368.419163][T21768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.309096][T21790] openvswitch: netlink: Flow actions attr not present in new flow. [ 369.780074][T21821] xt_nat: multiple ranges no longer supported [ 370.081816][T21848] pim6reg: left allmulticast mode [ 370.486801][T21879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.572346][T21887] netlink: 'syz.4.4453': attribute type 10 has an invalid length. [ 370.595274][T21887] dummy0: entered allmulticast mode [ 370.615205][T21887] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 370.912429][T21900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.033599][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.057537][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.078505][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.099951][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.120521][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.140489][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.166732][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.195964][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.252220][T21914] __nla_validate_parse: 8 callbacks suppressed [ 371.252242][T21914] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4462'. [ 371.270701][T21914] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4462'. [ 371.280226][T21914] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4462'. [ 371.289604][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4463'. [ 371.349520][T21921] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4465'. [ 371.375691][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4465'. [ 371.515172][T21935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 371.613623][T21945] syzkaller0: entered promiscuous mode [ 371.627912][T21945] syzkaller0: entered allmulticast mode [ 371.638313][ T30] audit: type=1107 audit(1782376024.268:10): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 371.918799][T21983] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4483'. [ 372.022537][T21984] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4483'. [ 372.063823][T21986] : entered promiscuous mode [ 372.076987][T21986] tipc: Enabling of bearer rejected, media not registered [ 372.150600][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'. [ 372.291812][T22006] macvlan2: entered promiscuous mode [ 372.297790][T22006] macvlan2: entered allmulticast mode [ 372.425608][T22013] x_tables: duplicate underflow at hook 2 [ 373.002757][T22044] x_tables: ip_tables: osf match: only valid for protocol 6 [ 373.504156][ T7968] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 376.390326][T22069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.399830][T22078] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 376.408939][T22078] __nla_validate_parse: 1 callbacks suppressed [ 376.408954][T22078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4505'. [ 376.425477][T22084] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 376.433349][T22084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4505'. [ 376.605801][T22107] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4509'. [ 376.672576][T22110] veth1_to_bond: entered allmulticast mode [ 376.684014][T22110] veth1_to_bond: entered promiscuous mode [ 376.691180][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 376.727492][T22110] veth1_to_bond (unregistering): left allmulticast mode [ 376.737657][T22110] veth1_to_bond (unregistering): left promiscuous mode [ 376.756630][T22110] bond0: (slave bond_slave_1): Releasing backup interface [ 376.936535][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4514'. [ 377.066732][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4515'. [ 377.714080][T22176] netlink: 83 bytes leftover after parsing attributes in process `syz.3.4529'. [ 377.728839][T22176] netlink: 83 bytes leftover after parsing attributes in process `syz.3.4529'. [ 377.953141][T22187] openvswitch: netlink: Flow key attr not present in new flow. [ 378.045814][T22191] can: request_module (can-proto-0) failed. [ 378.062273][T22191] batman_adv: batadv0: Adding interface: dummy0 [ 378.070647][T22191] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.098142][T22191] batman_adv: batadv0: Interface activated: dummy0 [ 378.111874][T22191] batadv0: mtu less than device minimum [ 378.120200][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.131350][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.142297][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.153347][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.164321][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.175328][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.186461][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.197388][T22191] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 378.215574][T22196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4535'. [ 378.225856][T22197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4535'. [ 378.307562][T22198] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 378.316229][T22198] bond9: option packets_per_slave: allowed values 0 - 65535 [ 378.327567][T22198] bond9 (unregistering): Released all slaves [ 378.480316][T22206] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 378.504035][T22206] bond8 (unregistering): Released all slaves [ 378.518721][T22213] netlink: 'syz.4.4539': attribute type 1 has an invalid length. [ 378.543176][T22213] bond9: entered promiscuous mode [ 378.549738][T22213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 378.562528][T22213] bond9: entered allmulticast mode [ 378.595692][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.683279][T22225] netlink: 'syz.3.4543': attribute type 1 has an invalid length. [ 378.717700][ T7967] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.743534][ T7967] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.800054][T22225] bond3: (slave bridge5): making interface the new active one [ 378.813220][T22225] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 378.822673][ T7967] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.831365][ T7967] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.943219][T22241] tipc: Enabled bearer , priority 10 [ 379.173377][T22264] bond10: option fail_over_mac: invalid value (16) [ 379.183885][T22264] bond10 (unregistering): Released all slaves [ 379.208441][T22271] netlink: 'syz.3.4556': attribute type 1 has an invalid length. [ 379.250846][T22271] bond4: entered promiscuous mode [ 379.258280][T22271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 379.287624][T22271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 379.299635][T22271] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 379.313485][T22271] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 379.327340][T22271] bond4: (slave ip6gre1): making interface the new active one [ 379.336646][T22271] ip6gre1: entered promiscuous mode [ 379.343575][T22271] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 379.422352][T22281] xt_TCPMSS: Only works on TCP SYN packets [ 379.482207][T22285] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 379.517228][T22285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.526180][T22283] syzkaller0: entered promiscuous mode [ 379.531862][T22283] syzkaller0: entered allmulticast mode [ 379.628318][T22294] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 379.896645][T22310] ip6gre2: entered allmulticast mode [ 380.291098][T22285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.381191][T22316] bond9: entered promiscuous mode [ 380.386529][T22316] bond9: entered allmulticast mode [ 380.392099][T22316] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.490482][T22325] netlink: 'syz.4.4572': attribute type 4 has an invalid length. [ 380.612474][T22334] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 380.620925][T22334] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 380.931614][T22363] tipc: Trying to set illegal importance in message [ 380.981827][T22368] lo: left allmulticast mode [ 380.986794][T22368] tunl0: left allmulticast mode [ 380.992030][T22368] gre0: left allmulticast mode [ 381.001553][T22368] gretap0: left allmulticast mode [ 381.007345][T22368] erspan0: left allmulticast mode [ 381.012590][T22368] ip_vti0: left allmulticast mode [ 381.019273][T22368] ip6_vti0: left allmulticast mode [ 381.025229][T22368] sit0: left allmulticast mode [ 381.030283][T22368] ip6tnl0: left allmulticast mode [ 381.037223][T22368] ip6gre0: left allmulticast mode [ 381.044145][T22368] bridge0: left allmulticast mode [ 381.051642][T22368] team_slave_1: left promiscuous mode [ 381.058726][T22368] vlan0: left promiscuous mode [ 381.063713][T22368] vlan0: left allmulticast mode [ 381.069075][T22368] veth0_vlan: left allmulticast mode [ 381.078888][T22368] vlan2: left allmulticast mode [ 381.083892][T22368] bond0: left allmulticast mode [ 381.089433][T22368] bond_slave_0: left allmulticast mode [ 381.095979][T22368] dummy0: left allmulticast mode [ 381.101194][T22368] gtp0: left promiscuous mode [ 381.107551][T22368] gtp0: left allmulticast mode [ 381.112768][T22368] bridge1: left allmulticast mode [ 381.118516][T22368] bridge2: left allmulticast mode [ 381.124834][T22368] vlan3: left promiscuous mode [ 381.129755][T22368] bond4: left promiscuous mode [ 381.135006][T22368] bridge4: left promiscuous mode [ 381.140328][T22368] vlan3: left allmulticast mode [ 381.146218][T22368] bond4: left allmulticast mode [ 381.151233][T22368] bridge4: left allmulticast mode [ 381.158506][T22368] bond8: left promiscuous mode [ 381.163931][T22368] bond9: left promiscuous mode [ 381.169184][T22368] bond9: left allmulticast mode [ 381.178158][ T7968] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.196579][ T7968] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.208364][ T7968] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.218249][ T7968] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.425721][T22389] veth9: entered promiscuous mode [ 381.433693][T22389] bond10: (slave veth9): Enslaving as a backup interface with a down link [ 381.447227][T22389] __nla_validate_parse: 14 callbacks suppressed [ 381.447246][T22389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4592'. [ 381.463980][T22389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 381.652395][T22407] x_tables: ip_tables: comment.0 match: invalid size 256 (kernel) != (user) 528 [ 381.780905][T22425] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4602'. [ 381.921270][T22435] TCP: TCP_TX_DELAY enabled [ 381.966933][T22439] validate_nla: 5 callbacks suppressed [ 381.966954][T22439] netlink: 'syz.3.4607': attribute type 62 has an invalid length. [ 382.029124][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4609'. [ 382.067436][T22444] netlink: 'syz.3.4609': attribute type 1 has an invalid length. [ 382.118443][T22450] netlink: 'syz.4.4611': attribute type 23 has an invalid length. [ 382.177628][T22454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4613'. [ 382.195437][T22454] ip6gretap0: entered promiscuous mode [ 382.205473][T22454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4613'. [ 382.317008][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4617'. [ 382.332040][T22470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4616'. [ 382.459333][T22482] syzkaller0: entered promiscuous mode [ 382.465328][T22482] syzkaller0: entered allmulticast mode [ 382.479662][T22485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4622'. [ 382.497582][T22483] nbd: must specify at least one socket [ 382.525801][T22485] bridge0: port 3(batadv1) entered blocking state [ 382.532429][T22485] bridge0: port 3(batadv1) entered disabled state [ 382.540290][T22485] batadv1: entered allmulticast mode [ 382.548518][T22485] batadv1: entered promiscuous mode [ 382.598759][T22489] 8021q: VLANs not supported on sit0 [ 382.672429][T22501] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4627'. [ 382.683239][T22501] netlink: 'syz.4.4627': attribute type 12 has an invalid length. [ 382.694522][T22501] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 382.740660][T22507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4628'. [ 382.829241][T22513] netlink: 'syz.1.4630': attribute type 3 has an invalid length. [ 383.025799][ T7967] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 383.035126][ T7967] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 384.432892][T22546] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 384.455026][T22546] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 384.516500][T12046] Bluetooth: hci6: command 0x0419 tx timeout [ 384.539893][T22546] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 384.563040][T22546] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 385.620258][T22496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.630240][T22505] netlink: 'syz.3.4624': attribute type 11 has an invalid length. [ 385.690708][T22574] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 385.793099][T22585] tipc: Resetting bearer [ 385.828148][T22589] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 386.004698][T22585] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.012248][T22585] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.300000][T22585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.313363][T22585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.389973][T22585] gretap1: left allmulticast mode [ 386.407751][T22585] bridge4: left promiscuous mode [ 386.412895][T22585] bridge4: left allmulticast mode [ 386.424207][T22585] bond4: left promiscuous mode [ 386.429666][T22585] ip6gre1: left promiscuous mode [ 386.438492][T22585] ip6gre2: left allmulticast mode [ 386.457107][ T7967] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.496235][ T7967] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.530006][ T7967] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.553446][ T7967] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.670216][T22609] __nla_validate_parse: 6 callbacks suppressed [ 386.670237][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4646'. [ 386.721553][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'. [ 386.732277][T22611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4647'. [ 386.758392][T22609] bridge6: entered promiscuous mode [ 386.766306][T22609] bridge6: entered allmulticast mode [ 386.778803][T22611] veth1_to_team: entered promiscuous mode [ 386.797313][T22611] gretap0: entered promiscuous mode [ 386.803317][T22611] debugfs: 'hsr1' already exists in 'hsr' [ 386.814395][T22611] Cannot create hsr debugfs directory [ 386.825852][T22611] hsr1: entered promiscuous mode [ 387.164025][T22644] IPVS: length: 117 != 24 [ 387.173094][T22641] IPVS: set_ctl: invalid protocol: 60 172.20.20.28:20004 [ 387.342280][T22654] sch_fq: defrate 0 ignored. [ 387.367334][T22659] sctp: [Deprecated]: syz.4.4658 (pid 22659) Use of int in maxseg socket option. [ 387.367334][T22659] Use struct sctp_assoc_value instead [ 387.498901][T22669] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 387.517738][T22669] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 387.544970][T22669] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 387.569486][T22669] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 387.848829][T22696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4667'. [ 390.110267][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.117756][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.126587][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.136059][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.143812][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 390.673706][T22679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.690526][T22704] netlink: 'syz.1.4669': attribute type 1 has an invalid length. [ 390.713787][T22704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4669'. [ 390.723448][T22704] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4669'. [ 390.732948][T22704] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4669'. [ 390.925888][ T4937] Bluetooth: hci5: command 0x0406 tx timeout [ 390.951082][T22736] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 391.108615][T22741] bridge7: entered promiscuous mode [ 391.114811][T22741] bridge7: entered allmulticast mode [ 391.123516][T22741] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4675'. [ 391.308496][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4678'. [ 392.003834][T22805] net_ratelimit: 14 callbacks suppressed [ 392.003854][T22805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.026367][T22805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.035658][T22805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 392.170726][T22813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4692'. [ 392.196412][ T4937] Bluetooth: hci7: command tx timeout [ 392.329013][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4696'. [ 392.373775][T22820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4696'. [ 392.383082][T22820] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.392894][T22820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4696'. [ 392.847276][T22833] netlink: 'syz.1.4701': attribute type 2 has an invalid length. [ 393.043533][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4703'. [ 393.428169][T22865] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4713'. [ 393.669338][T22886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4720'. [ 393.701708][T22888] netlink: 'syz.1.4719': attribute type 3 has an invalid length. [ 393.726870][T22888] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4719'. [ 393.791723][T22888] can: request_module (can-proto-0) failed. [ 393.819274][T22888] sctp: [Deprecated]: syz.1.4719 (pid 22888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.819274][T22888] Use struct sctp_sack_info instead [ 394.060145][T22908] syzkaller0: entered promiscuous mode [ 394.083720][T22908] syzkaller0: entered allmulticast mode [ 394.107838][T22913] netlink: 'syz.3.4727': attribute type 2 has an invalid length. [ 394.274479][ T4937] Bluetooth: hci7: command 0x041b tx timeout [ 394.352641][T22916] veth9: left promiscuous mode [ 394.363120][T22916] hsr1: left promiscuous mode [ 394.432967][T22928] can: request_module (can-proto-0) failed. [ 394.841183][T22951] ip6gretap0: left promiscuous mode [ 394.869928][T22951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.891561][T22951] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.910238][T22951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.952606][T22965] Cannot find add_set index 4 as target [ 394.971074][T22951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.982260][T22951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.997637][T22951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 395.014680][T22951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.031260][T22951] veth1_vlan: left promiscuous mode [ 395.044745][T22951] veth0_vlan: left promiscuous mode [ 395.055638][T22951] veth0_vlan: entered promiscuous mode [ 395.063519][T22951] veth1_vlan: entered promiscuous mode [ 395.077877][T22951] veth0_macvtap: left promiscuous mode [ 395.084689][T22951] veth0_macvtap: entered promiscuous mode [ 395.117096][T22951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.141590][T22951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.164100][T22951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.174099][T22951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.186518][T22951] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 395.209986][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.217208][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.230004][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.237184][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.280458][ T7967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.300027][T22972] : entered promiscuous mode [ 395.325102][ T7967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.335678][ T7967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.357407][T22970] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 395.378933][T22970] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 395.400118][ T7967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.493944][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4744'. [ 395.935430][T23016] netlink: 'syz.3.4755': attribute type 1 has an invalid length. [ 395.960820][T23016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 395.982893][T23016] bond7: (slave veth0_to_bond): making interface the new active one [ 395.995281][T23016] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 396.022320][T23016] bond7: entered promiscuous mode [ 396.039589][T23016] veth0_to_bond: entered promiscuous mode [ 396.047419][T23016] bond7: entered allmulticast mode [ 396.053064][T23016] veth0_to_bond: entered allmulticast mode [ 396.147396][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4756'. [ 396.174010][T23023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.355773][ T50] Bluetooth: hci7: command 0x041b tx timeout [ 396.377858][T23038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.003727][T23075] nbd: couldn't find device at index 2958377 [ 397.462728][T23098] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 397.471123][T23098] netlink: 'syz.3.4778': attribute type 2 has an invalid length. [ 397.622026][T23103] pim6reg527: entered allmulticast mode [ 397.790577][T23111] __nla_validate_parse: 6 callbacks suppressed [ 397.790602][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 398.330009][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4791'. [ 398.352093][T23142] syzkaller1: entered promiscuous mode [ 398.358116][T23142] syzkaller1: entered allmulticast mode [ 398.435493][ T50] Bluetooth: hci7: command 0x041b tx timeout [ 398.474531][T23147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4793'. [ 398.497038][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 398.506960][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 398.529961][T23151] IPv6: sit1: Disabled Multicast RS [ 398.564709][T23151] netlink: 'syz.3.4795': attribute type 11 has an invalid length. [ 398.659408][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4797'. [ 398.682838][T23158] netlink: 'syz.3.4799': attribute type 9 has an invalid length. [ 398.690761][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4797'. [ 398.707560][T23155] gretap0: entered promiscuous mode [ 398.715375][T23155] gretap0: left promiscuous mode [ 398.926899][T23167] netlink: 'syz.3.4801': attribute type 3 has an invalid length. [ 398.947534][T23167] netlink: 'syz.3.4801': attribute type 1 has an invalid length. [ 398.955732][T23167] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4801'. [ 398.968436][T23167] NCSI netlink: No device for ifindex 813332851 [ 398.995173][T23172] netlink: 'syz.1.4803': attribute type 1 has an invalid length. [ 399.018009][T23172] bond11: entered promiscuous mode [ 399.023595][T23172] 8021q: adding VLAN 0 to HW filter on device bond11 [ 399.124552][T23176] netlink: 'syz.3.4804': attribute type 2 has an invalid length. [ 399.147766][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4805'. [ 399.165132][T23177] bond11: (slave bridge6): making interface the new active one [ 399.181513][T23177] bridge6: entered promiscuous mode [ 399.204916][T23177] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 399.360052][T23188] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4806'. [ 399.531945][T23197] team1: entered promiscuous mode [ 399.537873][T23197] team1: entered allmulticast mode [ 399.640128][T23204] veth0_to_team: entered promiscuous mode [ 399.653517][T23204] veth0_to_team: left promiscuous mode [ 399.833886][T23218] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 399.844201][T23218] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 399.922503][T23227] netlink: 'syz.4.4822': attribute type 4 has an invalid length. [ 399.948758][T23228] netlink: 'syz.4.4822': attribute type 4 has an invalid length. [ 399.995619][T23227] netlink: 'syz.4.4822': attribute type 4 has an invalid length. [ 400.275996][T23247] netlink: 'syz.3.4827': attribute type 14 has an invalid length. [ 400.307339][ T7967] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.316990][T23247] netlink: 'syz.3.4827': attribute type 14 has an invalid length. [ 400.328086][ T7967] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.345502][T23254] IPVS: set_ctl: invalid protocol: 2 172.20.20.28:20003 [ 400.376080][ T7967] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.400687][ T7967] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.490278][T23261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input8 [ 400.514913][ T4937] Bluetooth: hci7: command 0x041b tx timeout [ 400.560702][T23258] syzkaller0: entered promiscuous mode [ 400.583745][T23258] syzkaller0: entered allmulticast mode [ 400.769848][T23275] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 401.081157][T23284] xt_hashlimit: size too large, truncated to 1048576 [ 401.095432][T23282] bond7: option mode: unable to set because the bond device has slaves [ 401.123332][T23282] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.138439][T23282] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 401.153692][T23283] 0ªX¹¦Dö»: renamed from gretap0 [ 401.165516][ T4937] Bluetooth: hci4: command 0x0406 tx timeout [ 401.191354][T23283] 0ªX¹¦Dö»: entered allmulticast mode [ 401.680233][T23315] vcan1: entered promiscuous mode [ 401.685796][T23315] vcan1: entered allmulticast mode [ 401.968731][T23333] syzkaller0: entered promiscuous mode [ 401.984359][T23333] syzkaller0: entered allmulticast mode [ 402.809235][T10473] IPVS: starting estimator thread 0... [ 402.887383][ T50] Bluetooth: hci6: link tx timeout [ 402.892991][ T50] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 402.934974][T23398] IPVS: using max 37 ests per chain, 88800 per kthread [ 403.638613][T23414] __nla_validate_parse: 13 callbacks suppressed [ 403.638636][T23414] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4868'. [ 403.821690][T23424] SET target dimension over the limit! [ 403.845813][T23423] validate_nla: 1 callbacks suppressed [ 403.845836][T23423] netlink: 'syz.4.4870': attribute type 1 has an invalid length. [ 403.949176][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 403.960865][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 403.977047][T23426] netlink: 212176 bytes leftover after parsing attributes in process `syz.3.4871'. [ 404.106185][T23431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4873'. [ 404.507264][T23446] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4877'. [ 404.679520][T23455] No such timeout policy "syz0" [ 404.695060][T23455] netlink: 'syz.1.4881': attribute type 21 has an invalid length. [ 404.707116][T23455] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4881'. [ 404.717835][T23455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4881'. [ 404.924680][ T50] Bluetooth: hci6: command 0x0419 tx timeout [ 405.093320][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4889'. [ 405.113628][T23478] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 405.344793][T23488] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.372936][T23488] bridge_slave_0 (unregistering): left allmulticast mode [ 405.388454][T23493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4894'. [ 405.388495][T23488] bridge_slave_0 (unregistering): left promiscuous mode [ 405.388662][T23488] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.430082][T23491] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.987947][T23528] tipc: Started in network mode [ 405.993002][T23528] tipc: Node identity ac14142f, cluster identity 4711 [ 406.000708][T23528] tipc: New replicast peer: 0.0.0.0 [ 406.014870][T23528] tipc: Enabled bearer , priority 10 [ 406.043017][T23530] netlink: 'syz.4.4904': attribute type 4 has an invalid length. [ 406.074469][T23530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.147796][T23535] openvswitch: netlink: Multiple metadata blocks provided [ 406.332108][T23545] syzkaller0: entered promiscuous mode [ 406.340531][T23545] syzkaller0: entered allmulticast mode [ 406.587769][T23563] bridge0: port 1(veth1_to_bridge) entered blocking state [ 406.597194][T23563] bridge0: port 1(veth1_to_bridge) entered disabled state [ 406.606045][T23563] veth1_to_bridge: entered allmulticast mode [ 406.615622][T23563] veth1_to_bridge: entered promiscuous mode [ 407.130291][T23601] syzkaller0: entered promiscuous mode [ 407.138338][T23601] syzkaller0: entered allmulticast mode [ 407.145879][ T5741] tipc: Node number set to 2886997039 [ 407.439498][T23618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.503941][T23618] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.619831][T23629] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 407.819519][T23638] IPv6: Can't replace route, no match found [ 409.081535][T23725] netlink: 'syz.1.4960': attribute type 18 has an invalid length. [ 409.089761][T23725] __nla_validate_parse: 17 callbacks suppressed [ 409.089779][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4960'. [ 409.110420][T23725] netlink: 'syz.1.4960': attribute type 18 has an invalid length. [ 409.125417][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4960'. [ 409.140400][T23725] netlink: 'syz.1.4960': attribute type 18 has an invalid length. [ 409.150072][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4960'. [ 409.181508][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4961'. [ 409.193121][T23728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4961'. [ 409.218226][T23728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4961'. [ 409.321527][T23733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4964'. [ 409.334089][T23730] netlink: 'syz.1.4962': attribute type 20 has an invalid length. [ 409.343239][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'. [ 409.355628][T23736] netlink: 'syz.3.4963': attribute type 1 has an invalid length. [ 409.383947][T23736] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 409.388993][T23741] netlink: 'syz.1.4962': attribute type 1 has an invalid length. [ 409.637529][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 409.649147][T23754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4969'. [ 409.661719][T23752] --map-set only usable from mangle table [ 410.262890][T23791] syzkaller0: entered promiscuous mode [ 410.273916][T23791] syzkaller0: entered allmulticast mode [ 410.475018][T23807] dvmrp0: left allmulticast mode [ 410.480681][T23807] dvmrp8: left allmulticast mode [ 411.103308][T23845] netlink: 'syz.4.4995': attribute type 5 has an invalid length. [ 411.869921][T23884] tipc: Enabled bearer , priority 0 [ 411.882002][T23884] openvswitch: netlink: IPv4 tun info is not correct [ 411.927350][T23887] netlink: 'syz.1.5011': attribute type 3 has an invalid length. [ 411.935729][T23888] netlink: 'syz.1.5011': attribute type 3 has an invalid length. [ 412.088624][T23896] tipc: Enabled bearer , priority 11 [ 412.362285][T23909] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.449733][T23911] netlink: 'syz.4.5019': attribute type 10 has an invalid length. [ 412.468588][T23911] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.478280][T23911] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.489101][ T5741] syz1: Port: 1 Link DOWN [ 412.806203][T23938] vlan2: entered allmulticast mode [ 412.818320][T23938] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 412.940931][T23949] syzkaller0: entered promiscuous mode [ 412.949889][T23949] syzkaller0: entered allmulticast mode [ 413.025287][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.033678][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.259072][T23967] syzkaller0: entered promiscuous mode [ 413.265522][T23967] syzkaller0: entered allmulticast mode [ 414.109305][T24028] __nla_validate_parse: 26 callbacks suppressed [ 414.109328][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5054'. [ 414.173625][T24025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5053'. [ 414.464203][T24050] bond8: option lp_interval: invalid value (0) [ 414.471323][T24050] bond8: option lp_interval: allowed values 1 - 2147483647 [ 414.480864][T24050] bond8 (unregistering): Released all slaves [ 414.490338][T24054] validate_nla: 2 callbacks suppressed [ 414.490355][T24054] netlink: 'syz.1.5057': attribute type 5 has an invalid length. [ 414.848082][T24068] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5063'. [ 414.949787][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5066'. [ 415.218293][T24043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.358059][T24085] netlink: 'syz.4.5070': attribute type 6 has an invalid length. [ 415.386796][T24087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5068'. [ 415.410763][T24083] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5069'. [ 415.437024][T24087] vlan0: entered promiscuous mode [ 415.493099][T24087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5068'. [ 415.591391][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.600408][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.608968][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.617743][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.626004][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.666712][T24096] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.685972][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5071'. [ 415.734017][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5071'. [ 415.775261][T24095] netlink: 'syz.4.5071': attribute type 10 has an invalid length. [ 415.902670][T24102] nbd: couldn't find a device at index 0 [ 417.714606][ T4937] Bluetooth: hci1: command tx timeout [ 419.805286][ T4937] Bluetooth: hci1: command tx timeout [ 421.634426][ T4937] Bluetooth: hci2: command 0x0419 tx timeout [ 421.874363][ T50] Bluetooth: hci1: command tx timeout [ 423.954438][ T50] Bluetooth: hci1: command tx timeout [ 426.754379][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 439.675363][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5079'. [ 439.710464][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5079'. [ 439.758399][ T7970] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.768128][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5079'. [ 439.793343][ T7970] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.815863][ T7970] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.833801][ T7970] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.024440][T24257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5085'. [ 440.036486][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.050475][T24257] netlink: 'syz.3.5085': attribute type 3 has an invalid length. [ 440.139309][T24255] rdma_op ffff8880353f49f0 conn xmit_rdma 0000000000000000 [ 440.253383][T24268] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 440.490625][T24289] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5092'. [ 440.792782][T24287] netlink: 'syz.3.5087': attribute type 21 has an invalid length. [ 441.009012][T24304] bond12 (unregistering): Released all slaves [ 441.113946][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5099'. [ 441.123063][T24309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5099'. [ 441.620290][T24339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5110'. [ 441.675483][T24341] syzkaller0: entered promiscuous mode [ 441.687887][T24341] syzkaller0: entered allmulticast mode [ 442.192222][T24349] netlink: 'syz.4.5113': attribute type 4 has an invalid length. [ 442.409703][T24359] x_tables: duplicate underflow at hook 1 [ 442.710853][T24370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.917504][T24383] netlink: 'syz.3.5125': attribute type 1 has an invalid length. [ 442.942148][T24383] bond8: entered promiscuous mode [ 442.948636][T24383] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.008696][T24383] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.022906][T24383] bond8: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 443.034396][T24383] bond8: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 443.047364][T24383] bond8: (slave ip6gre4): making interface the new active one [ 443.056374][T24383] ip6gre4: entered promiscuous mode [ 443.063554][T24383] bond8: (slave ip6gre4): Enslaving as an active interface with an up link [ 443.138130][T24388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5127'. [ 443.197550][T24392] ip6t_srh: unknown srh match flags 5F28 [ 443.643608][T24425] bond9: option lp_interval: invalid value (0) [ 443.652038][T24425] bond9: option lp_interval: allowed values 1 - 2147483647 [ 443.668884][T24425] bond9 (unregistering): Released all slaves [ 443.720312][T24431] syzkaller0: entered promiscuous mode [ 443.736233][T24431] syzkaller0: entered allmulticast mode [ 443.789110][T24435] netlink: 'syz.1.5142': attribute type 1 has an invalid length. [ 443.799505][T24435] nbd: error processing sock list [ 443.889080][T24439] netlink: 'syz.4.5144': attribute type 28 has an invalid length. [ 443.905689][T24439] netlink: 'syz.4.5144': attribute type 3 has an invalid length. [ 443.923133][T24439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5144'. [ 444.172362][T24460] netlink: 'syz.4.5151': attribute type 3 has an invalid length. [ 444.203511][T24462] erspan0: entered promiscuous mode [ 444.245932][T24465] erspan0: left promiscuous mode [ 444.699155][T24502] netlink: 'syz.4.5164': attribute type 21 has an invalid length. [ 444.821632][T24507] netlink: 'syz.1.5166': attribute type 3 has an invalid length. [ 444.831370][T24507] __nla_validate_parse: 1 callbacks suppressed [ 444.831466][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5166'. [ 444.844175][T24509] ip6t_srh: unknown srh match flags 5F28 [ 444.855440][ T48] unregister_netdevice: waiting for bond3 to become free. Usage count = 2 [ 444.934128][T24514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5168'. [ 446.434551][ T4937] Bluetooth: hci1: command 0x0405 tx timeout