last executing test programs: 30.443851593s ago: executing program 4 (id=4159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x600) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0xff, 0x4) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0xffff, 0x9}, 0x1c) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 30.057670854s ago: executing program 4 (id=4163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x89}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 29.755653435s ago: executing program 4 (id=4166): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x5c3, @vifc_lcl_addr=@local, @empty}, 0x10) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 29.33775441s ago: executing program 4 (id=4171): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='batadv\x00', 0x220301, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x1]}, {0x10, 0x9636, 0x4, 0x3}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4de7b78626a4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6751007e8048"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0cd45ab7de13"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x801}, 0x4c8c0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff3f, &(0x7f0000000100)={&(0x7f00000003c0)=@ipv4_getnexthop={0x28, 0x6a, 0x201, 0x70bd29, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='batadv\x00', 0x220301, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x1]}, {0x10, 0x9636, 0x4, 0x3}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x800}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4de7b78626a4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6751007e8048"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0cd45ab7de13"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x801}, 0x4c8c0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffffff3f, &(0x7f0000000100)={&(0x7f00000003c0)=@ipv4_getnexthop={0x28, 0x6a, 0x201, 0x70bd29, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) 29.019962846s ago: executing program 4 (id=4176): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdff107f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048018}, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) 28.788919524s ago: executing program 4 (id=4179): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0xfffffffd}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}]}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xf}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f000000eb40)) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ac000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/43, 0x2b}, {&(0x7f0000001800)=""/206, 0xce}, {&(0x7f0000001900)=""/216, 0xd8}, {&(0x7f0000001a00)=""/54, 0x36}], 0x6, &(0x7f0000001ac0)=""/19, 0x13}, 0x10140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000dc36007788e33bfa0000000000f670000000000000246b96df57920fc67ff8be6c1af0e78c947941cca09dfa37ca2c4debc31107d14523df554d6dc559bbfce77d22588269741ce21320804a21f1756a283a2db262165296e061be3e94289cd516b64b990641e3cf1e40ee1c43503e3000d0a38739baf5163783df7d5a0044c635743372f8f91cc29eb8ed8b8d29f05142ae8767eb5283c453cad85acb45c8ae4920e070e8fbb78ffcf398de7afde196836b8da64e137742b7ad6593f47b873d90eb564fc66e7e83a878cc0c03e8121a74de294d"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa247}, 0x94) 27.859701627s ago: executing program 2 (id=4189): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xe, 0x69}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_REALM={0x34, 0xfa, "290e7e73af83d7ab14f39bd07c08de36449ee135e5b03725ce6b8ab7e4b0394f26378d95533d551d253aefd23084958f"}], @NL80211_ATTR_MAC={0xa, 0x6, @random="db0426c3a844"}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_BSS_SELECT={0x2c, 0xe3, 0x0, 0x1, {0x28, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xb}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0xc1}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x81}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40884) close(r0) getpeername$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000280)={0x10002018}) connect(r0, &(0x7f00000002c0)=@can, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000580)={0x0, "fc8b748895f8dd4d2599e499a1540f00"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001580)={r7, 0x1, 0x1, [0x7, 0x6, 0xaf48, 0x37f0, 0xffffffffffffff81], [0x6, 0x6, 0x8, 0x5, 0x10000, 0x5, 0x0, 0x4, 0x2, 0x5, 0x1, 0x451, 0x9, 0x5, 0x100000000, 0x4, 0xb, 0x4, 0x8, 0x9, 0x8, 0x9, 0x5, 0x0, 0x7, 0x6, 0x7, 0x2, 0xb72, 0xd, 0x7, 0xc6, 0x8, 0x5, 0x2, 0x1, 0xc3d, 0x6, 0x3, 0xf9, 0x1, 0x4, 0xfb6, 0x8000000000000000, 0x6, 0x7, 0x0, 0x1, 0x0, 0x8, 0x1, 0x6, 0x0, 0x0, 0x1, 0xffffffff, 0xc, 0x0, 0x5, 0x1, 0x2, 0x2, 0x0, 0x72, 0x7, 0x566a, 0x1, 0x3, 0x5, 0x9, 0x9, 0x0, 0x9, 0x1, 0x5, 0x8, 0x1fe1, 0x8, 0x0, 0x2, 0x9, 0xff, 0xfffffffffffffff7, 0x2, 0x6e, 0x2, 0xc, 0x6, 0x50, 0xde4, 0x1, 0x7, 0x0, 0x9, 0x4, 0x8000, 0x4, 0xfffffffffffffffe, 0x0, 0x80000000, 0x10, 0xfffffffffffffffb, 0x0, 0x2, 0x3, 0x10, 0x100000000, 0xc, 0x30979378, 0x5, 0x3, 0x80000001, 0xeb0b, 0x8, 0x6, 0xfffffffffffffffd, 0x7fff, 0x0, 0x3, 0x100000001, 0x10]}) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0)={r0}, 0x8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'team_slave_1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = epoll_create(0xfffffff8) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r6, &(0x7f0000001b40)={0xf0000011}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), r0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x58, r11, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1e3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001d00)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1c, 0x13, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfdf5, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffff}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xf3, 0xffffffffffffffe1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001e00)='GPL\x00', 0x7fffffff, 0x85, &(0x7f0000001e40)=""/133, 0x41100, 0x2, '\x00', r4, @fallback=0x1, r0, 0x8, &(0x7f0000001f00)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x2, &(0x7f0000001f40)=[r8, r0], &(0x7f0000001f80)=[{0x0, 0x5, 0x5, 0xa}, {0x4, 0x3, 0xd, 0xa}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002080)=r12, 0x4) sendmsg$nl_route(r0, &(0x7f0000002240)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002200)={&(0x7f0000002100)=@setneightbl={0xf8, 0x43, 0x1, 0x70bd2d, 0x25dfdbff, {0x7}, [@NDTA_PARMS={0x6c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x4}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x5}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x1}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x6}, @NDTPA_APP_PROBES={0x8, 0x9, 0x5}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x3}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x7}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0xf}, @NDTPA_LOCKTIME={0xc, 0xf, 0x2}]}, @NDTA_THRESH1={0x8, 0x2, 0x10000}, @NDTA_THRESH3={0x8, 0x4, 0x9}, @NDTA_THRESH3={0x8, 0x4, 0x4}, @NDTA_NAME={0xc, 0x1, 'nl80211\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_THRESH2={0x8, 0x3, 0x3}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x8}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0xac1}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0xffc}, @NDTPA_LOCKTIME={0xc, 0xf, 0x6}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x3ff}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40010) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r13, &(0x7f00000024c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002480)={&(0x7f00000022c0)={0x184, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "8a1b4c4f3f19f8397c9acd6d274cf6fd2c119ed13c99"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "32605df5187232008110561103e193d8d6baff77cef7df8fa95b0fcdf4cc84f1fce5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x60, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x45}, 0x4008001) 27.6785744s ago: executing program 2 (id=4192): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xa, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd, @loopback, @loopback}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe7700000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r2], 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500640600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) close(r4) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000200)={0x1}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 26.636097761s ago: executing program 2 (id=4201): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 26.253349576s ago: executing program 2 (id=4206): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x3e, 0x9, 0x70bd2a, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x40080d4) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x460, 0x0, 0x1, 0x9, 0x4, 0x6, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x1, @private2, 0x622}}, 0x81, 0xffffffff, 0x7, 0x3, 0x4}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000004c0)={r2, 0xd7}, &(0x7f0000000500)=0x8) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1ff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x20, 0x0) 26.098578984s ago: executing program 3 (id=4208): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rw\x00'}, 0x9) 25.854553466s ago: executing program 3 (id=4210): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18050000bea42e1a3e7e001a500000000000000000006f0ad1e08479135521870dac7bbeeaa73a7a5cd35f7f46e06d4ab0201c3d707639d0c846dbcc122a6f260e1d87c15ef8305fd481778b6982d37a54000d47c4ea6fb9a41befafe8da26c733a12c8c4ce3e3b7948bc4ade7f61825cff9fe602f5c3f1abe0c7530fb339f970e6125ef5e37e530cfb928ab8f1fa21352a3b3f477dd6709728d448ea8af8674b2ffd8f70b6e75ec3afbc31a22d5c9490c4d238a6b8ef7034bac796a4c93ba2c96abb8a2838731c8210bbed04b8cb08b48da506d831b7d22551342cae2f280f410abdbb27c6d0f5903b4453d27b03d3f"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 25.695510614s ago: executing program 3 (id=4211): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 25.510012271s ago: executing program 1 (id=4212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) 25.421626122s ago: executing program 3 (id=4214): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffcde, 0xffffffffffffffff}, 0x94) 25.421247083s ago: executing program 1 (id=4215): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 25.241044542s ago: executing program 2 (id=4217): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'caif0\x00', 0x4402}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000007f00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xcd3582ddb8af3b10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff45, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r9, 0x0, 0xdd, 0x0, &(0x7f0000000540)="7924a1ccd05afe3867e63cac860172124933c4fd256a99563130f8d2b727663444f60d2b934abf3a9ac656a2481ed2bf137ce0cfcae1afeeea195e3c7afa1e3550ce3c31503a0b1942b6e9e18d684139fad5ba91e926d564fdb1c9cc19ad4359e137340891986c783c22484b9b953f069d2bf9bb7a671c9cfdc8bf46753dc03de597cd6cb1e338bfbea7820fdd4dc1a72db6c9aa708b3a989fb36396101972be69eef695d4f3eb6810b5b7cfd79565de6ae95171f16ec8dcb541682cf5a5a46f67a938f0198552a03165aba55b93fb8c5b9eb1c61405fcb4cbb674ecf5", &(0x7f0000000640), 0xd, 0x0, 0x6a, 0x19, &(0x7f0000000680)="0e7fecbfe334b8041f866442ae4d7a28fc3970e692ccbaa4e20e7886f23255ac405fc12bcf20622521b395168e095054951b1dd0ef7aa95b25e146b9415be6c5682798c01eda0d1c36ee5d530381e150880e1a0c7d71cd88941515f5890f31e205e1894c2697c8c8ed1d", &(0x7f0000000700)="4ca632c4c2d24cf36ad741e79c7140ceca2e7663290abd5f35", 0x78f014d471af8feb, 0x0, 0x1d}, 0x50) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 25.177790273s ago: executing program 3 (id=4218): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18e6e74f01198a15d10000004000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x595}], 0x1}, 0x400c000) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 25.175754935s ago: executing program 1 (id=4219): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {0x2, 0xfff1}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24004000}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 25.03224208s ago: executing program 3 (id=4221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x108, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_ct={0xf0, 0x7, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x99, 0x6, "06b7f7561905f59ed9a87ba1b46d3853d2138f6db17ffb56b60e3140e459ef9ebbeaeb730597bfa4a8244966549167e7199fd489246e3ed8bdb31ebdbc1d69e1a4b153483d22761bd4c33094b249839ce69b2bead60b4ad7869362758fc506e2661f596526ca4ca7209a3ae2155eb34a7dd43550f64067a39dbcd5157238c13bb541c0543f45d8b64e476e12b9584db6a5dfae03e6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x108}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x101) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x33, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x18}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r5, 0xffffffffffffffff, 0x34, 0x2020, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x800000000000401, 0xb}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x108, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_ct={0xf0, 0x7, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x99, 0x6, "06b7f7561905f59ed9a87ba1b46d3853d2138f6db17ffb56b60e3140e459ef9ebbeaeb730597bfa4a8244966549167e7199fd489246e3ed8bdb31ebdbc1d69e1a4b153483d22761bd4c33094b249839ce69b2bead60b4ad7869362758fc506e2661f596526ca4ca7209a3ae2155eb34a7dd43550f64067a39dbcd5157238c13bb541c0543f45d8b64e476e12b9584db6a5dfae03e6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x108}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) (async) socket$inet(0xa, 0x801, 0x84) (async) listen(r3, 0x8) (async) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x101) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x33, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x18}, 0xc) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3}, 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r5, 0xffffffffffffffff, 0x34, 0x2020, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x800000000000401, 0xb}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) 24.768945869s ago: executing program 0 (id=4222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x20000004, 0xbb, &(0x7f0000000200)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r2, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xae8, 0x10}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r7, &(0x7f00000039c0)=[{&(0x7f0000001140)="8a3deb7cc711", 0x6}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000070000000000000007000000641b0c00040000001862000009000000e6ffffff710000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x43a4, 0xdf, &(0x7f0000000480)=""/223, 0x40f00, 0x40, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xf22, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r6, r8, r3, 0x1, r9, 0xffffffffffffffff, r10], &(0x7f0000000700)=[{0x0, 0x5, 0xa, 0x3}, {0x1, 0x5, 0x4, 0x3}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080001400000000108000240"], 0xdc}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001180)={{r2}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000880)={0x1, 0x5, 0x7ed, 0x6, {0x4, 0xff, 0xd, 0x5, 0x3}, [0x80, 0x5dd, 0x3, 0x5, 0x71]}}, @devid=r12}) sendto(r11, &(0x7f0000000040)="0d5df520fe9e9573006fec18ed835df79966b9030f4c44a1985796761d9bc9ca12ec5c65f199ded1e76175", 0x2b, 0x10, &(0x7f0000000080)=@hci, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000800)) 22.716357892s ago: executing program 0 (id=4223): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10000000000000000000000000000000000000040000000000000002"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async, rerun: 32) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendmsg$can_raw(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)=@canfd={{0x4, 0x0, 0x1}, 0x40, 0x1, 0x0, 0x0, "79ab41faf44574ea3a5aab6b333cecb6b398ac059746ef22886a760bbb638d7989f0b67c05a95ba4980741fcfa4d4f9533a8c7338f1c20743c61694df3e6737a"}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.685455029s ago: executing program 2 (id=4224): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r1, &(0x7f0000000180)='\"', 0x1, 0x11, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 16.403035123s ago: executing program 0 (id=4225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 13.085752559s ago: executing program 32 (id=4179): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0xfffffffd}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}]}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xf}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f000000eb40)) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ac000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/43, 0x2b}, {&(0x7f0000001800)=""/206, 0xce}, {&(0x7f0000001900)=""/216, 0xd8}, {&(0x7f0000001a00)=""/54, 0x36}], 0x6, &(0x7f0000001ac0)=""/19, 0x13}, 0x10140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000dc36007788e33bfa0000000000f670000000000000246b96df57920fc67ff8be6c1af0e78c947941cca09dfa37ca2c4debc31107d14523df554d6dc559bbfce77d22588269741ce21320804a21f1756a283a2db262165296e061be3e94289cd516b64b990641e3cf1e40ee1c43503e3000d0a38739baf5163783df7d5a0044c635743372f8f91cc29eb8ed8b8d29f05142ae8767eb5283c453cad85acb45c8ae4920e070e8fbb78ffcf398de7afde196836b8da64e137742b7ad6593f47b873d90eb564fc66e7e83a878cc0c03e8121a74de294d"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa247}, 0x94) 13.035402931s ago: executing program 1 (id=4227): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0xfeffff, 0xc0, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) socket(0x22, 0x80000, 0x968) (async) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 12.286301993s ago: executing program 0 (id=4228): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x4, 0xb, 0x5, 0x7}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x506b, 0x50}}}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xef}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_MESH_SETUP={0x38, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xa}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x80}}, 0x4040080) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xac880000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xac880000) 11.687730193s ago: executing program 1 (id=4229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0xffffffffffffffb0, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000600)=0x3, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) listen(r2, 0x7) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) (async, rerun: 32) listen(r3, 0x2) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 8.909230021s ago: executing program 33 (id=4221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x108, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_ct={0xf0, 0x7, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x99, 0x6, "06b7f7561905f59ed9a87ba1b46d3853d2138f6db17ffb56b60e3140e459ef9ebbeaeb730597bfa4a8244966549167e7199fd489246e3ed8bdb31ebdbc1d69e1a4b153483d22761bd4c33094b249839ce69b2bead60b4ad7869362758fc506e2661f596526ca4ca7209a3ae2155eb34a7dd43550f64067a39dbcd5157238c13bb541c0543f45d8b64e476e12b9584db6a5dfae03e6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x108}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x101) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x33, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x18}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r5, 0xffffffffffffffff, 0x34, 0x2020, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x800000000000401, 0xb}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x108, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_ct={0xf0, 0x7, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x99, 0x6, "06b7f7561905f59ed9a87ba1b46d3853d2138f6db17ffb56b60e3140e459ef9ebbeaeb730597bfa4a8244966549167e7199fd489246e3ed8bdb31ebdbc1d69e1a4b153483d22761bd4c33094b249839ce69b2bead60b4ad7869362758fc506e2661f596526ca4ca7209a3ae2155eb34a7dd43550f64067a39dbcd5157238c13bb541c0543f45d8b64e476e12b9584db6a5dfae03e6"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x108}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) (async) socket$inet(0xa, 0x801, 0x84) (async) listen(r3, 0x8) (async) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x101) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x33, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x18}, 0xc) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3}, 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r5, 0xffffffffffffffff, 0x34, 0x2020, 0x0, @void, @void, @value=r6, @void, r4}, 0x20) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x800000000000401, 0xb}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) 6.623862462s ago: executing program 0 (id=4231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) 5.801693167s ago: executing program 1 (id=4232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6(0xa, 0x5, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xc230, 0x1, 0x3, 0x4, 0x9, 0x1}, &(0x7f00000003c0)=0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}]}, 0x40}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000020c0), 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0x1b, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x63}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f00000010c0)=""/4096, 0x41000, 0x8, '\x00', r6, @fallback=0x11, r8, 0x8, &(0x7f0000002100)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x1, &(0x7f0000002140)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000002180)=[{0x2, 0x5, 0x7, 0xc}], 0x10, 0x1}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r11, 0x5, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r11, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000440)={r12, @in={{0x2, 0x4e21, @multicast1}}, 0xff, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 2.601723577s ago: executing program 34 (id=4224): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r1, &(0x7f0000000180)='\"', 0x1, 0x11, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 0s ago: executing program 0 (id=4234): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004084}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) (async) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x18}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) kernel console output (not intermixed with test programs): rface: batadv_slave_1 [ 325.235915][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.263535][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.555549][T16456] hsr_slave_0: entered promiscuous mode [ 325.572331][T16456] hsr_slave_1: entered promiscuous mode [ 325.584466][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 325.599638][T16456] Cannot create hsr debugfs directory [ 325.692229][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.804953][T16616] netlink: 'syz.3.2912': attribute type 3 has an invalid length. [ 325.836852][T16616] netlink: 'syz.3.2912': attribute type 2 has an invalid length. [ 325.892706][T16619] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 326.031087][T16625] netlink: 'syz.0.2915': attribute type 1 has an invalid length. [ 326.204372][T16625] bond10: entered promiscuous mode [ 326.248281][T16625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.423389][T16456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.451224][T16456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.519630][T16625] syzkaller1: entered promiscuous mode [ 326.535383][T16625] syzkaller1: entered allmulticast mode [ 326.625419][T16633] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.638476][ T5612] Bluetooth: hci5: command tx timeout [ 326.654954][T16633] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 326.670135][T16633] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 326.684248][T16633] bond10: (slave ip6gre1): making interface the new active one [ 326.692192][T16633] ip6gre1: entered promiscuous mode [ 326.699462][T16633] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 326.780425][T16456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.792523][T16456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.881612][T16456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.902149][T16456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.958565][T16654] syzkaller0: entered promiscuous mode [ 326.988392][T16654] syzkaller0: entered allmulticast mode [ 327.034063][T16456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.064215][T16456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.152579][T16666] __nla_validate_parse: 8 callbacks suppressed [ 327.152596][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 327.161364][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 327.180288][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 327.754056][T16456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.769492][T16456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.799009][T16456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.844470][T16456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.866198][T16456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.904608][T16456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.908054][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.936439][T16702] lo: entered promiscuous mode [ 327.959233][T16702] netlink: 'syz.0.2935': attribute type 2 has an invalid length. [ 327.986521][T16702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.019498][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'. [ 328.033887][T16456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.049666][T16456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.251378][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2939'. [ 328.278076][T16721] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2939'. [ 328.566435][T16736] netlink: 'syz.3.2941': attribute type 6 has an invalid length. [ 328.574957][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.589225][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.622072][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.629308][ T7231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.683243][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.690458][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.715187][ T5612] Bluetooth: hci5: command tx timeout [ 329.114938][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 329.163164][T16763] macvlan0: left promiscuous mode [ 329.183054][T16766] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 329.252315][T16763] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 329.298918][T16763] netlink: 'syz.0.2947': attribute type 2 has an invalid length. [ 329.775147][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2955'. [ 329.851581][T16801] netlink: 'syz.0.2956': attribute type 17 has an invalid length. [ 329.865152][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 329.878168][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2956'. [ 329.897878][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.902934][T16806] netlink: 'syz.0.2956': attribute type 3 has an invalid length. [ 329.949397][T16813] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 330.094732][T16456] veth0_vlan: entered promiscuous mode [ 330.131298][T16456] veth1_vlan: entered promiscuous mode [ 330.168314][T16825] Cannot find set identified by id 65534 to match [ 330.185717][T16456] veth0_macvtap: entered promiscuous mode [ 330.202670][T16456] veth1_macvtap: entered promiscuous mode [ 330.238424][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.274868][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.358456][ T7233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.372380][ T7233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.391137][T16833] netlink: 'syz.3.2962': attribute type 2 has an invalid length. [ 330.441068][ T7233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.535694][ T7233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.544959][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.547866][ T7233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.630417][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.641806][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.789060][ T5612] Bluetooth: hci5: command tx timeout [ 339.762706][ T4978] udevd[4978]: worker [8959] /devices/virtual/block/nbd0 is taking a long time [ 340.070181][ T11] block nbd0: Possible stuck request ffff888026dae000: control (read@0,1024B). Runtime 60 seconds [ 340.080894][ T11] block nbd0: Possible stuck request ffff888026dae1c0: control (read@1024,3072B). Runtime 60 seconds [ 353.215206][T16847] 8021q: VLANs not supported on ip6tnl0 [ 353.224634][T16847] __nla_validate_parse: 3 callbacks suppressed [ 353.224649][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2966'. [ 353.262526][T16853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2968'. [ 353.559989][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.576893][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.592139][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.593782][T16865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2971'. [ 353.613024][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.626475][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.084613][T16892] netlink: 'syz.3.2976': attribute type 2 has an invalid length. [ 354.101279][T16892] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2976'. [ 354.142134][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 354.196054][T16900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 354.511124][ T7231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.547134][ T7231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.560863][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 354.606664][T16911] netlink: 'syz.3.2980': attribute type 2 has an invalid length. [ 354.621913][T16911] netlink: 'syz.3.2980': attribute type 2 has an invalid length. [ 354.880922][ T7231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.922545][ T7231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.068412][T16870] lo speed is unknown, defaulting to 1000 [ 355.247645][ T7231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.272308][ T7231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.343458][T16923] tipc: Enabling of bearer rejected, failed to enable media [ 355.427179][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 355.511637][ T7231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.547755][ T7231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.591443][T16934] netlink: 'syz.1.2986': attribute type 1 has an invalid length. [ 355.652234][T16934] netlink: 'syz.1.2986': attribute type 2 has an invalid length. [ 355.668522][ T5631] Bluetooth: hci3: command tx timeout [ 356.384481][T16951] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2991'. [ 356.429288][ T7231] bridge_slave_1: left promiscuous mode [ 356.467488][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.536584][ T7231] bridge_slave_0: left allmulticast mode [ 356.582240][ T7231] bridge_slave_0: left promiscuous mode [ 356.629592][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.708195][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.805804][ T7231] pimreg: left allmulticast mode [ 356.944993][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 357.755479][ T5631] Bluetooth: hci3: command tx timeout [ 357.856950][ T7231] bond2 (unregistering): (slave gretap1): Releasing active interface [ 357.948917][ T7231] bond3 (unregistering): (slave ipip1): Releasing backup interface [ 357.984304][ T7231] ipip1 (unregistering): left promiscuous mode [ 357.991618][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 357.998053][ T7242] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.034763][ T7231] bond4 (unregistering): (slave geneve2): Releasing active interface [ 358.189474][ T7231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.204102][ T7231] bond_slave_0: left allmulticast mode [ 358.223355][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.232701][ T7231] bond_slave_1: left allmulticast mode [ 358.241292][ T7231] bond0 (unregistering): Released all slaves [ 358.254856][ T7231] bond1 (unregistering): Released all slaves [ 358.276084][ T7231] bond2 (unregistering): Released all slaves [ 358.306457][ T7231] bond3 (unregistering): Released all slaves [ 358.334814][ T7231] bond4 (unregistering): Released all slaves [ 358.361797][ T7231] bond5 (unregistering): Released all slaves [ 358.382060][ T7231] bond6 (unregistering): Released all slaves [ 358.414082][ T7231] bond7 (unregistering): Released all slaves [ 358.464114][T16960] macvtap0: entered promiscuous mode [ 358.480878][T16960] macvtap0: entered allmulticast mode [ 358.494659][T16960] veth1_vlan: entered allmulticast mode [ 358.536029][T16970] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 358.596112][T16970] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 358.610782][T16970] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 358.679326][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 358.757320][ T7231] : left promiscuous mode [ 358.910935][T17019] __nla_validate_parse: 1 callbacks suppressed [ 358.910952][T17019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3003'. [ 358.987333][T17024] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 359.049938][ T7231] tipc: Disabling bearer [ 359.080214][ T7231] tipc: Left network mode [ 359.399803][T17024] bond9: entered promiscuous mode [ 359.420821][T17024] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.674748][T17037] tunl0: entered promiscuous mode [ 359.696958][T17037] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 359.732744][T17037] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3006'. [ 359.831240][ T5631] Bluetooth: hci3: command tx timeout [ 360.658284][T17082] lo speed is unknown, defaulting to 1000 [ 361.081206][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 361.233253][ T7231] batman_adv: batadv0: Removing interface: wlan0 [ 361.429092][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 361.439963][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 361.467044][T17119] netlink: 'syz.1.3023': attribute type 23 has an invalid length. [ 361.480850][T17118] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 361.491100][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.508166][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.527583][T16870] bridge_slave_0: entered allmulticast mode [ 361.548915][T16870] bridge_slave_0: entered promiscuous mode [ 361.625827][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.660259][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.688114][T16870] bridge_slave_1: entered allmulticast mode [ 361.710417][T16870] bridge_slave_1: entered promiscuous mode [ 361.793007][T17123] netlink: 'syz.2.3025': attribute type 23 has an invalid length. [ 361.879951][T16870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.910578][ T5631] Bluetooth: hci3: command tx timeout [ 362.031583][T16870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.085960][T17140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3029'. [ 362.367197][T16870] team0: Port device team_slave_0 added [ 362.411145][T16870] team0: Port device team_slave_1 added [ 362.427157][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 362.550550][T17154] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 362.599963][T17154] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3032'. [ 362.628941][T16870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.644923][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.741089][T16870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.801329][T16870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.828398][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.889600][T16870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.230062][T17180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 363.604333][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 363.824020][T17184] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3038'. [ 363.871557][T17189] openvswitch: netlink: IP tunnel TTL not specified. [ 363.925301][T16870] hsr_slave_0: entered promiscuous mode [ 363.985012][T16870] hsr_slave_1: entered promiscuous mode [ 364.033325][T16870] debugfs: 'hsr0' already exists in 'hsr' [ 364.073033][T16870] Cannot create hsr debugfs directory [ 364.267884][T17201] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 364.419788][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3043'. [ 364.482653][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 364.640273][T17189] syzkaller0: entered promiscuous mode [ 364.657896][T17189] syzkaller0: entered allmulticast mode [ 364.728739][ T7231] hsr_slave_0: left promiscuous mode [ 364.734950][ T7231] hsr_slave_1: left promiscuous mode [ 364.743960][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.752066][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.762008][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.769798][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.801783][ T7231] veth1_macvtap: left promiscuous mode [ 364.808382][ T7231] veth0_macvtap: left promiscuous mode [ 364.814159][ T7231] veth1_vlan: left promiscuous mode [ 364.820211][ T7231] veth0_vlan: left promiscuous mode [ 365.275575][ T7231] team0 (unregistering): Port device team_slave_1 removed [ 365.295924][ T7231] team0 (unregistering): Port device team_slave_0 removed [ 365.478877][ T7231] team0 (unregistering): Port device dummy0 removed [ 365.564019][ T7233] smbdirect: ib_dev[syz0] removed [ 365.868556][T17218] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3044'. [ 365.889798][T17219] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 366.090153][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 368.910756][ T5722] lo speed is unknown, defaulting to 1000 [ 368.924048][ T5722] infiniband syz0: ib_query_port failed (-19) [ 369.343942][T17230] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.3047'. [ 369.533269][T17235] syzkaller0: entered promiscuous mode [ 369.587422][T17235] syzkaller0: entered allmulticast mode [ 369.885381][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'. [ 370.007323][ T7231] IPVS: stop unused estimator thread 0... [ 370.158733][ T11] block nbd0: Possible stuck request ffff888026dae000: control (read@0,1024B). Runtime 90 seconds [ 370.174271][ T11] block nbd0: Possible stuck request ffff888026dae1c0: control (read@1024,3072B). Runtime 90 seconds [ 370.306765][T17271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3054'. [ 370.362091][T17249] macvtap0: entered promiscuous mode [ 370.367646][T17249] vlan0: entered promiscuous mode [ 370.405081][T17249] macvtap0: entered allmulticast mode [ 370.441665][T17249] vlan0: entered allmulticast mode [ 370.464169][T17249] v: entered allmulticast mode [ 370.691547][T17265] tipc: Enabling of bearer rejected, media not registered [ 370.706823][T17271] veth0_macvtap: left promiscuous mode [ 370.899897][T17282] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 372.492868][T17360] Cannot find add_set index 0 as target [ 372.870538][T17368] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 373.186607][T16870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.276433][T16870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.324022][T16870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.376364][T16870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.407256][T16870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.461626][T16870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.511721][T16870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.578260][T16870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.662970][T17399] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3082'. [ 373.926830][T17403] sctp: [Deprecated]: syz.1.3083 (pid 17403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.926830][T17403] Use struct sctp_sack_info instead [ 373.963605][T17407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 373.975659][T17403] sctp: [Deprecated]: syz.1.3083 (pid 17403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.975659][T17403] Use struct sctp_sack_info instead [ 374.014765][T17403] sctp: [Deprecated]: syz.1.3083 (pid 17403) Use of int in maxseg socket option. [ 374.014765][T17403] Use struct sctp_assoc_value instead [ 374.033883][T17391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.071358][T17391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.291156][T17406] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 374.333170][T17406] batman_adv: batadv0: Adding interface: wlan0 [ 374.374612][T17406] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.437380][T17406] batman_adv: batadv0: Interface activated: wlan0 [ 374.529763][T17391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.638968][T17391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.805539][T17443] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3091'. [ 374.881214][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3092'. [ 375.201836][T17459] netlink: 'syz.1.3093': attribute type 2 has an invalid length. [ 375.290556][T17391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.312243][T17459] netlink: 'syz.1.3093': attribute type 11 has an invalid length. [ 375.358198][T17391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.400969][T17459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3093'. [ 375.430847][T17468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3095'. [ 375.834496][T17478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.877457][T17479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3096'. [ 375.895741][T17482] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 375.982375][T17391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.019539][T17391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.038885][T17488] IPVS: length: 123 != 24 [ 376.114774][T16870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.203777][T16870] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.275067][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.282291][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.344952][T17497] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 376.476026][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.483219][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.629544][ T3318] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.659899][ T3318] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.877403][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 376.898659][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.917761][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.045207][ T7242] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.082629][ T7242] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.169230][ T7233] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.207282][ T7233] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.234336][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 377.265318][T17530] netlink: 'syz.2.3106': attribute type 30 has an invalid length. [ 377.311360][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3106'. [ 377.831159][T17556] ip6tnl0: Caught tx_queue_len zero misconfig [ 377.872279][T17556] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3111'. [ 378.473658][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.484196][T17575] netlink: 'syz.2.3116': attribute type 58 has an invalid length. [ 378.587870][T17575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3116'. [ 379.282165][T16870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.590093][T16870] veth0_vlan: entered promiscuous mode [ 380.646941][T16870] veth1_vlan: entered promiscuous mode [ 380.783061][T16870] veth0_macvtap: entered promiscuous mode [ 380.821835][T16870] veth1_macvtap: entered promiscuous mode [ 380.864157][T17643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3130'. [ 380.900319][T16870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.955088][T16870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.089862][ T3370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.129908][ T3370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.162272][ T3370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.183622][T17655] openvswitch: netlink: Missing key (keys=40, expected=100) [ 381.208747][T17651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3132'. [ 381.302041][T17655] netlink: 'syz.1.3133': attribute type 12 has an invalid length. [ 381.323888][T17655] netlink: 'syz.1.3133': attribute type 29 has an invalid length. [ 381.348749][T17655] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3133'. [ 381.467243][T17665] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 381.503750][ T7231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.540394][ T3370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.573948][ T3370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.686236][T17665] 8021q: adding VLAN 0 to HW filter on device bond10 [ 381.740345][T17671] xfrm1: entered allmulticast mode [ 381.922915][ T7231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.946609][ T7231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.256174][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 382.280643][T17672] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 382.575547][T17700] Bluetooth: MGMT ver 1.23 [ 382.688390][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3146'. [ 382.894973][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 382.927267][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.942130][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.950675][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.962657][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.975110][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.480717][T17727] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 383.488358][T17727] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 383.697406][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 384.068404][T17740] bond1: (slave vlan2): making interface the new active one [ 384.104004][T17740] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 384.357572][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 384.409472][T17754] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 384.638660][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 384.648262][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 385.028191][ T5612] Bluetooth: hci1: command tx timeout [ 385.901604][T17827] netlink: 'syz.4.3173': attribute type 5 has an invalid length. [ 386.339054][T17836] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3176'. [ 386.375201][T17837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3175'. [ 386.710045][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 386.744007][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.763944][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.794427][T17708] bridge_slave_0: entered allmulticast mode [ 386.816328][T17708] bridge_slave_0: entered promiscuous mode [ 386.847043][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.876273][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.908442][T17708] bridge_slave_1: entered allmulticast mode [ 386.951571][T17866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3182'. [ 386.972182][T17708] bridge_slave_1: entered promiscuous mode [ 387.108278][ T5612] Bluetooth: hci1: command tx timeout [ 387.118880][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.152396][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.311872][T17708] team0: Port device team_slave_0 added [ 387.357629][T17708] team0: Port device team_slave_1 added [ 387.525631][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3187'. [ 387.535086][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.552684][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.628650][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.657601][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'. [ 387.675848][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.699232][T17892] block nbd0: reconnected socket [ 387.710076][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.767177][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.792146][ T5612] block nbd0: Receive control failed (result -32) [ 388.123515][ T3370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.151055][ T3370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 388.178213][ T3370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.225412][ T3370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 388.420170][T17898] ipvlan0: entered allmulticast mode [ 388.432376][T17909] netlink: 'syz.1.3193': attribute type 1 has an invalid length. [ 388.446100][T17898] virt_wifi0: entered allmulticast mode [ 388.477057][T17898] batman_adv: batadv0: Adding interface: ipvlan0 [ 388.514485][T17898] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.579714][T17898] batman_adv: batadv0: Interface activated: ipvlan0 [ 388.701547][T17708] hsr_slave_0: entered promiscuous mode [ 388.739594][T17708] hsr_slave_1: entered promiscuous mode [ 388.755642][T17708] debugfs: 'hsr0' already exists in 'hsr' [ 388.765812][T17708] Cannot create hsr debugfs directory [ 388.840591][ T3370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.858577][ T3370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 388.872394][ T3370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.883853][ T3370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.035638][T17922] syz_tun: entered promiscuous mode [ 389.166484][T17936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3200'. [ 389.199336][ T5612] Bluetooth: hci1: command tx timeout [ 389.233198][ T3370] bond0: (slave netdevsim1): Releasing backup interface [ 389.264229][ T3370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.279364][ T3370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 389.290149][ T3370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.300185][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 389.301002][ T3370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.354373][T17939] bond12: option xmit_hash_policy: invalid value (64) [ 389.365539][T17939] bond12 (unregistering): Released all slaves [ 389.418753][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'. [ 389.432948][T17935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3200'. [ 389.642017][ T3370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.661612][ T3370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 389.674996][ T3370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.686249][ T3370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.699043][T17948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.923954][T17954] netlink: 'syz.3.3205': attribute type 11 has an invalid length. [ 390.184028][T17973] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 390.307737][T17959] team0 (unregistering): Port device team_slave_0 removed [ 390.334431][T17959] team0 (unregistering): Port device team_slave_1 removed [ 390.666731][ T3370] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 390.690370][ T3370] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 390.712344][ T3370] bridge0: port 3(wlan1) entered disabled state [ 390.734538][ T3370] bridge_slave_1: left allmulticast mode [ 390.749378][ T3370] bridge_slave_1: left promiscuous mode [ 390.765953][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.792579][ T3370] bridge_slave_0: left allmulticast mode [ 390.814966][ T3370] bridge_slave_0: left promiscuous mode [ 390.841807][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.960440][ T3370] dvmrp8: left allmulticast mode [ 390.971652][ T3370] batman_adv: batadv0: Interface deactivated: gretap2 [ 391.280947][ T5612] Bluetooth: hci1: command tx timeout [ 391.394297][ T3370] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 391.403064][ T3370] ip6gre1 (unregistering): left promiscuous mode [ 391.555054][ T3370] batman_adv: batadv0: Removing interface: gretap2 [ 391.581412][ T3370] bond7 (unregistering): (slave gretap3): Releasing active interface [ 391.650544][ T3370] bond6 (unregistering): (slave geneve4): Releasing active interface [ 391.762027][ T3370] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 391.819931][ T3370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.832143][ T3370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.846844][ T3370] bond0 (unregistering): Released all slaves [ 391.860610][ T3370] bond1 (unregistering): Released all slaves [ 391.880659][ T3370] bond2 (unregistering): Released all slaves [ 391.912057][ T3370] bond3 (unregistering): Released all slaves [ 391.936012][ T3370] bond4 (unregistering): Released all slaves [ 391.956072][ T3370] bond5 (unregistering): Released all slaves [ 391.975858][ T3370] bond6 (unregistering): Released all slaves [ 392.011070][ T3370] bond7 (unregistering): Released all slaves [ 392.033643][ T3370] bond8 (unregistering): Released all slaves [ 392.053527][ T3370] bond9 (unregistering): Released all slaves [ 392.080567][ T3370] bond10 (unregistering): Released all slaves [ 392.447450][T18004] __nla_validate_parse: 3 callbacks suppressed [ 392.447467][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 392.699655][ T3370] tipc: Disabling bearer [ 392.714265][ T3370] tipc: Disabling bearer [ 392.725848][ T3370] tipc: Left network mode [ 392.767194][ T3370] IPVS: stopping master sync thread 14007 ... [ 392.925733][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 393.102119][T18037] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 393.200997][T17998] batman_adv: batadv0: Interface deactivated: wlan0 [ 393.926603][T18060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3228'. [ 394.483142][ T3370] batman_adv: batadv0: Removing interface: wlan0 [ 394.650599][T17708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.705380][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.733471][T17708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.786232][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.817406][T18081] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3233'. [ 394.845533][T18091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3234'. [ 394.913610][T17708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.990746][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.035610][T17708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.118787][T17708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.425375][T18131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.467306][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.500307][T18132] vlan1: entered allmulticast mode [ 395.505540][T18132] veth1_virt_wifi: entered allmulticast mode [ 395.559498][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.612570][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.619762][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.724692][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.731894][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.795597][T18146] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 395.823640][ T36] IPVS: starting estimator thread 0... [ 395.833796][T18142] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.928751][T18149] IPVS: using max 31 ests per chain, 74400 per kthread [ 395.954973][T18151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3247'. [ 395.979063][T18151] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3247'. [ 396.175303][T18159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3249'. [ 396.280534][T18159] syzkaller1: entered promiscuous mode [ 396.303771][T18159] syzkaller1: entered allmulticast mode [ 396.437057][T18165] 0ªî{X¹¦: left allmulticast mode [ 396.501042][T18165] sit0: left promiscuous mode [ 396.638105][T18165] bridge0: left promiscuous mode [ 396.701734][T18165] .`: left allmulticast mode [ 396.756309][T18165] bond_slave_0: left allmulticast mode [ 396.801622][T18165] bond_slave_1: left allmulticast mode [ 397.009307][T18165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.094962][T18165] ip6gre2: left allmulticast mode [ 397.113112][T18165] bond1: left promiscuous mode [ 397.147488][T18165] geneve3: left promiscuous mode [ 397.177915][T18165] bond6: left promiscuous mode [ 397.222278][T18165] bond9: left promiscuous mode [ 397.236551][T18165] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 397.257936][T18165] ipvlan0: left allmulticast mode [ 397.270491][T18165] virt_wifi0: left allmulticast mode [ 397.279357][T18165] vlan1: left allmulticast mode [ 397.289538][T18165] veth1_virt_wifi: left allmulticast mode [ 397.442427][ T7231] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.495427][ T7231] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.544532][ T7231] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.594910][ T7231] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.749207][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'. [ 397.764033][T18217] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3257'. [ 397.962467][ T7233] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.017257][ T7233] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.034704][T18227] netlink: 'syz.3.3258': attribute type 1 has an invalid length. [ 398.068450][ T7233] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.125462][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 398.126659][ T7233] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.440761][T18230] netlink: 'syz.4.3260': attribute type 2 has an invalid length. [ 398.587622][ T3370] hsr_slave_0: left promiscuous mode [ 398.620514][ T3370] hsr_slave_1: left promiscuous mode [ 398.650542][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.704427][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.753215][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.799566][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.959603][ T3370] vlan0: left allmulticast mode [ 398.972039][ T3370] v: left allmulticast mode [ 398.981932][ T3370] vlan0: left promiscuous mode [ 399.001727][ T3370] veth1_macvtap: left promiscuous mode [ 399.016430][ T3370] veth1_vlan: left promiscuous mode [ 399.034773][ T3370] v: left promiscuous mode [ 399.142389][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3263'. [ 399.749518][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3265'. [ 399.787761][T18281] block nbd2: Unsupported socket: should be TCP or UNIX. [ 400.236401][ T11] block nbd0: Possible stuck request ffff888026dae000: control (read@0,1024B). Runtime 120 seconds [ 400.253390][ T11] block nbd0: Possible stuck request ffff888026dae1c0: control (read@1024,3072B). Runtime 120 seconds [ 400.265453][ T11] block nbd0: Dead connection, failed to find a fallback [ 400.830803][ T36] smc: removing ib device syz2 [ 401.043530][ T3370] team0 (unregistering): Port device team_slave_1 removed [ 401.246760][ T5723] syz2: Port: 1 Link DOWN [ 401.422323][ T36] smbdirect: ib_dev[syz2] removed [ 401.583218][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.655931][T18311] netlink: 'syz.2.3269': attribute type 12 has an invalid length. [ 401.712632][T18311] netlink: 'syz.2.3269': attribute type 29 has an invalid length. [ 401.867753][T18311] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3269'. [ 402.120836][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 402.334956][T17708] veth0_vlan: entered promiscuous mode [ 402.415753][T17708] veth1_vlan: entered promiscuous mode [ 402.607109][T17708] veth0_macvtap: entered promiscuous mode [ 402.692155][T17708] veth1_macvtap: entered promiscuous mode [ 402.804622][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.842846][T18344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3272'. [ 402.859762][T18354] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3275'. [ 402.951248][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 402.963945][T18344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 403.060907][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.070591][T18351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.158093][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.328113][ T7242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.589611][ T7242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.805636][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.813697][ T7237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.860985][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.026469][ T7233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.071744][ T7233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.084064][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 405.079373][T18390] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 405.938739][ T3370] IPVS: stop unused estimator thread 0... [ 406.103971][T18435] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.346508][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.365392][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.378777][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.407086][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.422023][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.326042][T18530] xt_bpf: check failed: parse error [ 408.550871][ T5612] Bluetooth: hci0: command tx timeout [ 408.688991][T18538] bond12: option fail_over_mac: invalid value (16) [ 408.722913][T18538] bond12 (unregistering): Released all slaves [ 409.663506][T18447] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.683138][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.699584][T18447] bridge_slave_0: entered allmulticast mode [ 409.712479][T18447] bridge_slave_0: entered promiscuous mode [ 409.722812][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.732773][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.741236][T18447] bridge_slave_1: entered allmulticast mode [ 409.752621][T18447] bridge_slave_1: entered promiscuous mode [ 409.798910][T18447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.813537][T18447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.860049][T18447] team0: Port device team_slave_0 added [ 409.869482][T18447] team0: Port device team_slave_1 added [ 409.904197][T18447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.921431][T18447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.952028][T18447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.964958][T18447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.972486][T18447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.998811][T18447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.062151][T18447] hsr_slave_0: entered promiscuous mode [ 410.072697][T18447] hsr_slave_1: entered promiscuous mode [ 410.203074][T18477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.629746][ T5612] Bluetooth: hci0: command tx timeout [ 410.659683][T18447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.671571][T18447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.804292][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3312'. [ 411.506343][T18447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.529072][T18447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.686894][T18614] tipc: Started in network mode [ 411.696688][T18614] tipc: Node identity 2003, cluster identity 4711 [ 411.718373][T18614] tipc: Node number set to 8195 [ 411.749060][T18605] netlink: 'syz.0.3319': attribute type 6 has an invalid length. [ 411.914043][T18447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.969978][T18447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.085319][T18617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 412.324865][T18447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.368157][T18447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.685796][T18642] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 412.708846][ T5612] Bluetooth: hci0: command tx timeout [ 413.407482][T18447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.428458][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.490550][T18447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.542069][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.563053][T18447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.594088][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.642068][T18662] ipvlan2: entered allmulticast mode [ 413.664210][T18662] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 413.693382][T18662] batman_adv: batadv0: Adding interface: ipvlan2 [ 413.722454][T18662] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.757500][T18662] batman_adv: batadv0: Interface activated: ipvlan2 [ 413.770803][T18447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.785836][T18447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.829102][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3334'. [ 414.306819][T18694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3337'. [ 414.307894][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.371217][T18694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3337'. [ 414.418252][ T3318] bridge_slave_1: left allmulticast mode [ 414.446054][ T3318] bridge_slave_1: left promiscuous mode [ 414.485328][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.541602][ T3318] bridge_slave_0: left allmulticast mode [ 414.557499][ T3318] bridge_slave_0: left promiscuous mode [ 414.577387][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.617498][ T3318] dvmrp0: left allmulticast mode [ 414.623440][ T3318] dvmrp8: left allmulticast mode [ 414.636191][T18711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3340'. [ 414.787969][ T5612] Bluetooth: hci0: command tx timeout [ 415.112188][ T3318] bond4 (unregistering): (slave gretap0): Releasing active interface [ 415.144580][ T3318] bond8 (unregistering): (slave gretap3): Releasing active interface [ 415.331738][ T3318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.345833][ T3318] bond0 (unregistering): Released all slaves [ 415.370804][ T3318] bond1 (unregistering): Released all slaves [ 415.391059][ T3318] bond2 (unregistering): Released all slaves [ 415.413780][ T3318] bond3 (unregistering): Released all slaves [ 415.438777][ T3318] bond4 (unregistering): Released all slaves [ 415.463142][ T3318] bond5 (unregistering): Released all slaves [ 415.484300][ T3318] bond6 (unregistering): Released all slaves [ 415.518443][ T3318] bond7 (unregistering): Released all slaves [ 415.543184][ T3318] bond8 (unregistering): Released all slaves [ 415.563847][ T3318] bond9 (unregistering): Released all slaves [ 415.597171][ T3318] bond10 (unregistering): Released all slaves [ 415.625893][ T3318] bond11 (unregistering): Released all slaves [ 415.844284][ T3318] tipc: Disabling bearer [ 415.858555][ T3318] tipc: Left network mode [ 416.261682][T18447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.604928][T18741] bond12: option min_links: invalid value (18446744073709551614) [ 416.623012][T18741] bond12: option min_links: allowed values 0 - 2147483647 [ 416.700263][T18741] bond12 (unregistering): Released all slaves [ 416.986457][T18447] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.059902][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3353'. [ 417.184732][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.191946][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.417569][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.424781][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.562249][T18780] Bluetooth: MGMT ver 1.23 [ 417.632440][T18780] netlink: 'syz.4.3356': attribute type 3 has an invalid length. [ 417.648649][T18778] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3355'. [ 417.710791][ T3318] hsr_slave_0: left promiscuous mode [ 417.751903][ T3318] hsr_slave_1: left promiscuous mode [ 417.883963][ T3318] veth1_vlan: left allmulticast mode [ 417.909936][ T3318] veth1_vlan: left promiscuous mode [ 417.931638][ T3318] veth0_vlan: left promiscuous mode [ 417.993641][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'. [ 418.238160][T18808] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 418.949891][ T3318] team0 (unregistering): Port device team_slave_1 removed [ 418.971265][ T3318] team0 (unregistering): Port device team_slave_0 removed [ 419.496497][T18824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3364'. [ 419.693062][T18828] syzkaller0: entered promiscuous mode [ 419.714982][T18828] syzkaller0: entered allmulticast mode [ 419.793813][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 419.875958][ T3318] IPVS: stop unused estimator thread 0... [ 420.211079][T18854] sctp: [Deprecated]: syz.3.3370 (pid 18854) Use of int in max_burst socket option deprecated. [ 420.211079][T18854] Use struct sctp_assoc_value instead [ 420.241807][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 420.288905][T18862] Bluetooth: MGMT ver 1.23 [ 420.958621][T18447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.131829][T18893] netlink: 'syz.0.3381': attribute type 11 has an invalid length. [ 421.144092][T18893] netlink: 'syz.0.3381': attribute type 11 has an invalid length. [ 421.162352][T18893] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3381'. [ 421.176517][T18447] veth0_vlan: entered promiscuous mode [ 421.302974][T18447] veth1_vlan: entered promiscuous mode [ 421.354702][T18896] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.445183][T18899] netlink: 'syz.0.3384': attribute type 10 has an invalid length. [ 421.478491][T18899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3384'. [ 421.496317][T18447] veth0_macvtap: entered promiscuous mode [ 421.526533][T18899] team0: entered allmulticast mode [ 421.564569][T18899] team_slave_0: entered allmulticast mode [ 421.594551][T18899] team_slave_1: entered allmulticast mode [ 421.624667][T18899] bridge0: port 3(team0) entered blocking state [ 421.662528][T18899] bridge0: port 3(team0) entered disabled state [ 421.731021][T18899] team0: entered promiscuous mode [ 421.744978][T18899] team_slave_0: entered promiscuous mode [ 421.751949][T18899] team_slave_1: entered promiscuous mode [ 421.763706][T18899] bridge0: port 3(team0) entered blocking state [ 421.770143][T18899] bridge0: port 3(team0) entered forwarding state [ 421.801215][T18447] veth1_macvtap: entered promiscuous mode [ 421.933764][T18447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.987506][T18447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.039140][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.064148][T18920] syzkaller0: entered promiscuous mode [ 422.076169][T18920] syzkaller0: entered allmulticast mode [ 422.152503][T18920] tipc: Started in network mode [ 422.176155][T18920] tipc: Node identity 3ed28092638e, cluster identity 4711 [ 422.199047][T18920] tipc: Enabled bearer , priority 0 [ 422.207582][T18925] Bluetooth: hci0: unsupported parameter 5135 [ 422.258721][ T7242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.290728][T18925] Bluetooth: hci0: unsupported parameter 8192 [ 422.309159][ T3318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.319757][T18925] Bluetooth: hci0: unsupported parameter 5135 [ 422.359715][T18925] Bluetooth: hci0: unsupported parameter 8192 [ 422.368341][ T145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.382593][T18938] SET target dimension over the limit! [ 422.404945][T18919] tipc: Resetting bearer [ 422.531563][T18919] tipc: Disabling bearer [ 422.581590][ T7237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.600069][ T7237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.718130][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.766543][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.865108][T18949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3401'. [ 422.920118][T18949] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3401'. [ 422.981596][T18949] netlink: 'syz.4.3401': attribute type 6 has an invalid length. [ 423.006299][T18949] netlink: 'syz.4.3401': attribute type 5 has an invalid length. [ 423.056491][T18959] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3290'. [ 423.066926][T18949] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3401'. [ 423.101027][T18950] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 423.123900][T18959] syzkaller1: entered promiscuous mode [ 423.149232][T18959] syzkaller1: entered allmulticast mode [ 423.289487][T18967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3404'. [ 423.305790][T18965] ipvlan2: entered allmulticast mode [ 423.312567][T18965] virt_wifi0: entered allmulticast mode [ 423.337868][T18965] batman_adv: batadv0: Adding interface: ipvlan2 [ 423.349054][T18965] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.380353][T18965] batman_adv: batadv0: Interface activated: ipvlan2 [ 423.438876][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'. [ 423.471105][T18976] vlan0: entered promiscuous mode [ 423.751366][T18982] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.004653][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.016632][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.025946][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.039163][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.051195][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.152317][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'. [ 424.187059][T18996] xt_HMARK: spi-set and port-set can't be combined [ 424.212003][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3412'. [ 424.757237][ T5629] syz_tun (unregistering): left allmulticast mode [ 424.795282][ T5629] syz_tun (unregistering): left promiscuous mode [ 424.826140][ T5629] bridge0: port 3(syz_tun) entered disabled state [ 424.892905][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3418'. [ 425.667374][T19019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.776203][T19043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3423'. [ 426.148612][ T5612] Bluetooth: hci2: command tx timeout [ 426.681305][T19077] xt_policy: too many policy elements [ 427.016648][T18987] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.042405][T18987] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.064568][T18987] bridge_slave_0: entered allmulticast mode [ 427.086104][T18987] bridge_slave_0: entered promiscuous mode [ 427.115110][T18987] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.136524][T18987] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.157957][T18987] bridge_slave_1: entered allmulticast mode [ 427.182977][T18987] bridge_slave_1: entered promiscuous mode [ 427.265875][T18987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.305117][T18987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.438237][T18987] team0: Port device team_slave_0 added [ 427.469298][T18987] team0: Port device team_slave_1 added [ 427.531862][T18987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.554131][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.622969][T18987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.636737][T18987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.645306][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.697870][T18987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.909773][T18987] hsr_slave_0: entered promiscuous mode [ 427.945672][T18987] hsr_slave_1: entered promiscuous mode [ 427.984743][T18987] debugfs: 'hsr0' already exists in 'hsr' [ 428.021785][T18987] Cannot create hsr debugfs directory [ 428.238252][ T5612] Bluetooth: hci2: command tx timeout [ 428.346320][T19127] netlink: 'syz.0.3445': attribute type 7 has an invalid length. [ 428.464268][T19127] netlink: 'syz.0.3445': attribute type 8 has an invalid length. [ 429.190108][T19152] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 429.213115][T19152] openvswitch: netlink: Message has 8 unknown bytes. [ 429.238088][T19152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.446876][T19152] syzkaller0: entered promiscuous mode [ 429.453736][T19152] syzkaller0: entered allmulticast mode [ 430.310406][ T5612] Bluetooth: hci2: command tx timeout [ 430.623808][T19182] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3461'. [ 431.899311][T19142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.918234][T19159] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 431.950960][T19159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3451'. [ 431.980722][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3451'. [ 432.007046][T19183] netlink: 'syz.0.3460': attribute type 23 has an invalid length. [ 432.401646][ T5612] Bluetooth: hci2: command tx timeout [ 432.951872][T18987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.969048][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.021840][T18987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.057029][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.101652][T18987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.141487][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.166116][T18987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.196756][T18987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.486986][T19219] syzkaller1: entered promiscuous mode [ 433.504469][T19219] syzkaller1: entered allmulticast mode [ 433.762570][T19228] netlink: 'syz.1.3468': attribute type 1 has an invalid length. [ 434.201648][T19241] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 434.293256][T19233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.342212][T19233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.452350][T19241] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 434.602017][ T7237] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.666695][T18987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.727903][ T7242] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.907975][ T3318] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.922060][T18987] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.096663][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.103906][ T7237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.190928][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.198136][ T7242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.215738][T19273] netlink: 'syz.1.3482': attribute type 10 has an invalid length. [ 435.298250][T19273] team0: Port device vlan0 added [ 435.380205][ T3318] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.141141][T19318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3492'. [ 437.006077][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 437.096865][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 437.127721][T19349] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3496'. [ 437.161118][T19349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3496'. [ 437.722701][T18987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.899462][T18987] veth0_vlan: entered promiscuous mode [ 437.965892][T18987] veth1_vlan: entered promiscuous mode [ 438.072152][T18987] veth0_macvtap: entered promiscuous mode [ 438.107250][T19386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'. [ 438.125677][T18987] veth1_macvtap: entered promiscuous mode [ 438.180817][T18987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.220743][T18987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.279240][ T7242] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.558157][ T7231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.600085][ T7242] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.640404][ T7242] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.816823][ T7237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.893173][ T7237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.936856][T19399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3510'. [ 439.193829][T19399] sit1: entered promiscuous mode [ 439.222503][T19399] sit1: entered allmulticast mode [ 439.256799][ T7237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.311990][ T7237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.767507][T19413] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3517'. [ 439.922024][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.211454][T19437] bridge2: entered promiscuous mode [ 440.238173][T19437] bridge2: entered allmulticast mode [ 440.289899][T19445] xt_hashlimit: size too large, truncated to 1048576 [ 440.566489][T19458] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 440.594182][T19458] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.3527'. [ 440.623569][T19462] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 441.318698][T19491] ip_tables: iptables: counters copy to user failed while replacing table [ 441.780072][T19513] ip_tables: iptables: counters copy to user failed while replacing table [ 441.893869][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 441.976341][T19518] Cannot find del_set index 0 as target [ 442.000338][T19521] IPVS: Unknown mcast interface: nr0 [ 442.240957][ T57] IPVS: starting estimator thread 0... [ 442.249123][T19530] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 442.273992][T19530] netlink: 'syz.1.3548': attribute type 83 has an invalid length. [ 442.347806][T19533] IPVS: using max 29 ests per chain, 69600 per kthread [ 443.102051][T19563] Bluetooth: hci0: unsupported parameter 5135 [ 443.135562][T19563] Bluetooth: hci0: unsupported parameter 8192 [ 443.166553][T19563] Bluetooth: hci0: unsupported parameter 5135 [ 443.209105][T19563] Bluetooth: hci0: unsupported parameter 8192 [ 443.270043][T19563] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3557'. [ 443.302189][T19569] netlink: 'syz.1.3559': attribute type 1 has an invalid length. [ 443.358809][T19569] bond1: entered promiscuous mode [ 443.364350][T19569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.412988][T19574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.424553][T19574] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 443.443276][T19574] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 443.457165][T19574] bond1: (slave xfrm1): making interface the new active one [ 443.465417][T19574] xfrm1: entered promiscuous mode [ 443.472862][T19574] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 443.497167][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 444.282029][T19610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3567'. [ 444.508587][ T30] audit: type=1800 audit(1787835438.272:16): pid=19615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3568" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=331 res=0 errno=0 [ 444.985353][T19634] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 445.051604][T19634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.106852][T19641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3572'. [ 445.163441][T19647] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3576'. [ 445.240599][ T7237] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x66 [ 445.280057][T19651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3575'. [ 445.633080][T19659] sctp: [Deprecated]: syz.0.3579 (pid 19659) Use of int in maxseg socket option. [ 445.633080][T19659] Use struct sctp_assoc_value instead [ 445.845477][T19668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3581'. [ 446.284719][T19684] netlink: 'syz.3.3585': attribute type 10 has an invalid length. [ 446.293091][T19684] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 446.306737][T19684] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 446.518062][T19688] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3586'. [ 447.114695][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 447.896386][T19640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.594894][T19717] netlink: 'syz.4.3597': attribute type 9 has an invalid length. [ 448.640935][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3597'. [ 448.681847][T19724] IPVS: length: 156 != 8 [ 448.739533][T19728] bridge0: port 4(syz_tun) entered blocking state [ 448.751169][T19727] xt_hashlimit: size too large, truncated to 1048576 [ 448.767594][T19728] bridge0: port 4(syz_tun) entered disabled state [ 448.793659][T19728] syz_tun: entered allmulticast mode [ 448.873441][T19728] syz_tun: entered promiscuous mode [ 448.928855][T19728] bridge0: port 4(syz_tun) entered blocking state [ 448.935489][T19728] bridge0: port 4(syz_tun) entered forwarding state [ 448.946745][T19729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3599'. [ 448.975383][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 449.005439][T19734] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 449.008095][T19723] netlink: 'syz.1.3599': attribute type 83 has an invalid length. [ 449.085817][T19737] ip6gre1: entered promiscuous mode [ 449.110593][T19740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3602'. [ 449.414384][T19748] sctp: [Deprecated]: syz.4.3603 (pid 19748) Use of int in maxseg socket option. [ 449.414384][T19748] Use struct sctp_assoc_value instead [ 449.857103][T19781] bond1: option mode: unable to set because the bond device has slaves [ 449.963028][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 450.031369][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 450.093947][T19794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3615'. [ 450.106469][T19793] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3615'. [ 450.361522][T19803] bond1: option lp_interval: invalid value (0) [ 450.385369][T19806] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 450.406593][T19803] bond1: option lp_interval: allowed values 1 - 2147483647 [ 450.473229][T19807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3618'. [ 450.881815][T19803] bond1 (unregistering): Released all slaves [ 451.016347][T19806] IPVS: Unknown mcast interface: nr0 [ 451.203942][T19810] bond1: option all_slaves_active: invalid value (222) [ 451.276472][T19810] bond1 (unregistering): Released all slaves [ 451.399263][ T36] bond1: (slave vlan2): link status definitely down, disabling slave [ 451.430540][ T36] bond1: now running without any active interface! [ 451.540824][T19817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.585137][T19817] bridge0: port 3(bond1) entered blocking state [ 451.598852][T19817] bridge0: port 3(bond1) entered disabled state [ 451.605364][T19817] bond1: entered allmulticast mode [ 451.614423][T19817] bond1: entered promiscuous mode [ 451.620454][T19817] bridge0: port 3(bond1) entered blocking state [ 451.626852][T19817] bridge0: port 3(bond1) entered forwarding state [ 451.645011][ T57] bridge0: port 3(bond1) entered disabled state [ 451.773523][T19840] netlink: 113 bytes leftover after parsing attributes in process `syz.3.3626'. [ 452.218052][T19859] netlink: Setting conntrack mark requires 'commit' flag. [ 452.251753][T19859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.260717][T19863] xt_hashlimit: size too large, truncated to 1048576 [ 452.337081][T19868] openvswitch: netlink: Flow key attr not present in new flow. [ 452.378413][T19870] –: renamed from vxcan1 (while UP) [ 452.524158][T19877] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 452.845797][T19883] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 452.863021][T19884] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 452.878675][T19879] syzkaller1: entered promiscuous mode [ 452.893578][T19879] syzkaller1: entered allmulticast mode [ 453.490745][T19906] xt_hashlimit: size too large, truncated to 1048576 [ 453.574187][T19909] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.590456][T19910] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 453.635265][T19909] bridge_slave_0 (unregistering): left allmulticast mode [ 453.685538][T19909] bridge_slave_0 (unregistering): left promiscuous mode [ 453.743703][T19909] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.861582][T19924] __nla_validate_parse: 5 callbacks suppressed [ 453.861600][T19924] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3652'. [ 455.005752][T19961] ip6gre1: entered allmulticast mode [ 455.021506][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 455.037335][ T7231] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.134742][T19971] ªªªªª»: renamed from bond_slave_0 (while UP) [ 455.166962][T19973] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 455.189068][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.208837][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.241048][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.260733][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.483650][T19987] veth0_to_bridge: entered promiscuous mode [ 455.535209][T19989] netlink: 'syz.3.3671': attribute type 1 has an invalid length. [ 455.682280][T19998] netlink: 'syz.4.3673': attribute type 11 has an invalid length. [ 455.776279][T19996] openvswitch: netlink: ct_state flags ffffffff unsupported [ 455.809102][T19988] veth0_to_bridge: left promiscuous mode [ 456.017173][T20003] Bluetooth: hci0: unsupported parameter 5161 [ 456.061135][T20003] Bluetooth: hci0: unsupported parameter 8192 [ 456.101292][T20003] Bluetooth: hci0: unsupported parameter 5161 [ 456.142155][T20003] Bluetooth: hci0: unsupported parameter 8192 [ 456.194836][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'. [ 456.652534][T20020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3679'. [ 456.841827][T20034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3681'. [ 456.919139][T20028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 457.331588][T20055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3687'. [ 457.534290][T20068] netlink: 'syz.1.3692': attribute type 1 has an invalid length. [ 457.782810][T20072] bond2: (slave gretap1): making interface the new active one [ 457.797319][T20072] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 458.678740][T20089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.947848][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.024605][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 459.044160][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3708'. [ 459.077640][T20132] netlink: 'syz.4.3708': attribute type 15 has an invalid length. [ 459.120249][T20138] netlink: 'syz.0.3707': attribute type 32 has an invalid length. [ 459.153838][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 459.185773][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 459.219219][T20138] bond1: option coupled_control: invalid value (192) [ 459.226024][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3708'. [ 459.238449][T20132] netlink: 'syz.4.3708': attribute type 15 has an invalid length. [ 459.252010][T20138] bond1 (unregistering): Released all slaves [ 459.495221][T20150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3714'. [ 459.597920][ T7231] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 459.651669][ T7231] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 459.703494][ T7231] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 459.772919][ T7231] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 460.139736][T20152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.218811][T20168] bridge0: port 3(syz_tun) entered blocking state [ 460.265128][T20168] bridge0: port 3(syz_tun) entered disabled state [ 460.289785][T20168] syz_tun: entered allmulticast mode [ 460.320766][T20170] xt_hashlimit: size too large, truncated to 1048576 [ 460.410089][T20168] syz_tun: entered promiscuous mode [ 460.458440][T20168] bridge0: port 3(syz_tun) entered blocking state [ 460.465016][T20168] bridge0: port 3(syz_tun) entered forwarding state [ 460.544305][T20190] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 460.671836][T20190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3726'. [ 460.810518][T20192] xt_hashlimit: size too large, truncated to 1048576 [ 461.090763][T20204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.341904][ T7231] IPVS: starting estimator thread 0... [ 461.369369][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3733'. [ 461.443556][T20216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3733'. [ 461.458647][T20217] IPVS: using max 28 ests per chain, 67200 per kthread [ 461.482455][T20216] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3733'. [ 461.648932][T20221] can: request_module (can-proto-0) failed. [ 461.821937][ T30] audit: type=1107 audit(1787835455.582:17): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 461.924422][T20241] xt_cgroup: invalid path, errno=-2 [ 462.673226][T20282] netlink: 'syz.4.3752': attribute type 2 has an invalid length. [ 462.703559][T20276] syzkaller0: entered promiscuous mode [ 462.737653][T20276] syzkaller0: entered allmulticast mode [ 463.235226][T20308] batadv_slave_0: entered promiscuous mode [ 463.298729][T20311] netlink: 'syz.0.3760': attribute type 2 has an invalid length. [ 463.319858][T20312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.377592][T20312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.555068][T20325] netlink: 'syz.4.3762': attribute type 22 has an invalid length. [ 463.643331][T20328] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 463.651516][T20325] netlink: 'syz.4.3762': attribute type 22 has an invalid length. [ 463.671932][T20328] gretap1: entered promiscuous mode [ 463.693769][T20328] gretap1: entered allmulticast mode [ 464.182512][T20353] __nla_validate_parse: 13 callbacks suppressed [ 464.182529][T20353] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3772'. [ 464.202863][T20353] 0·: renamed from hsr0 (while UP) [ 464.213806][T20353] 0·: entered allmulticast mode [ 464.235925][T20353] hsr_slave_0: entered allmulticast mode [ 464.274102][T20353] hsr_slave_1: entered allmulticast mode [ 464.295913][T20357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3775'. [ 464.315521][T20353] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 464.474057][T20363] lo: Caught tx_queue_len zero misconfig [ 464.540566][T20368] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 464.706793][T20375] netlink: 'syz.0.3780': attribute type 21 has an invalid length. [ 464.728168][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 464.842768][ T7231] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.917287][ T7231] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.006053][ T7231] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.084893][ T7231] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.162408][T20397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3786'. [ 465.416779][T20408] gretap0: entered promiscuous mode [ 465.453885][T20408] vlan2: entered promiscuous mode [ 465.490653][T20418] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3792'. [ 465.584282][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3794'. [ 465.647159][T20418] netlink: 'syz.3.3792': attribute type 64 has an invalid length. [ 465.912378][T20441] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 466.398240][T20456] vlan2: entered promiscuous mode [ 466.403529][T20456] geneve1: entered promiscuous mode [ 466.409357][T20456] vlan2: entered allmulticast mode [ 466.414683][T20456] geneve1: entered allmulticast mode [ 467.427833][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.449984][T20418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.472934][T20459] netlink: 'syz.2.3801': attribute type 12 has an invalid length. [ 468.745077][T20465] sctp: [Deprecated]: syz.3.3803 (pid 20465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.745077][T20465] Use struct sctp_sack_info instead [ 468.798458][T20471] macvlan0: entered promiscuous mode [ 468.973942][T20474] can: request_module (can-proto-0) failed. [ 469.254021][T20492] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 469.281858][T20480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.396780][T20500] syzkaller0: entered promiscuous mode [ 469.436350][T20500] syzkaller0: entered allmulticast mode [ 469.816381][T20512] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3812'. [ 470.070313][T20516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3814'. [ 470.299007][T20534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3814'. [ 470.329211][T20526] No such timeout policy "syz0" [ 470.620457][T20520] netlink: 'syz.0.3817': attribute type 3 has an invalid length. [ 470.758125][T20549] batadv0: entered promiscuous mode [ 470.773426][T20549] macsec1: entered promiscuous mode [ 470.796476][T20549] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 470.819706][T20549] batadv0: left promiscuous mode [ 472.547981][T20528] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 472.986303][T20532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.000189][T20518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.294145][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 473.372156][T20574] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3828'. [ 473.450249][T20576] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3828'. [ 473.512373][T20582] syzkaller0: entered promiscuous mode [ 473.557856][T20582] syzkaller0: entered allmulticast mode [ 473.708662][T20594] netlink: 'syz.1.3833': attribute type 1 has an invalid length. [ 473.748147][T20594] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3833'. [ 473.925096][T20600] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 474.021693][T20609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 474.083990][T20609] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3837'. [ 474.153015][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3841'. [ 474.586569][T20639] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 474.971395][T20659] __nla_validate_parse: 1 callbacks suppressed [ 474.971414][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3849'. [ 475.223946][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 475.326309][T20661] syzkaller0: entered promiscuous mode [ 475.372130][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 475.395678][T20661] syzkaller0: entered allmulticast mode [ 476.123394][T20687] netlink: 'syz.2.3857': attribute type 1 has an invalid length. [ 476.331614][T20697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3856'. [ 477.072662][T20735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3869'. [ 477.114975][T20720] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 477.139132][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3870'. [ 477.243961][T20742] dvmrp1: entered allmulticast mode [ 477.309778][T20736] Cannot find add_set index 65532 as target [ 477.464665][T20742] macvtap1: entered promiscuous mode [ 477.483103][T20742] dummy0: entered promiscuous mode [ 477.594755][ T5742] dummy0: left promiscuous mode [ 477.829095][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 477.995143][T20760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3874'. [ 478.083926][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 478.094359][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 478.765397][T20800] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 478.797073][T20800] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3886'. [ 479.043639][T20809] netlink: 'syz.4.3887': attribute type 1 has an invalid length. [ 479.117295][T20809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.193259][T20812] can: request_module (can-proto-0) failed. [ 479.215626][T20810] bond3: (slave gretap1): making interface the new active one [ 479.240090][T20810] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 479.329131][T20821] bridge1: entered promiscuous mode [ 479.334755][T20821] bridge1: entered allmulticast mode [ 479.355004][T20815] syzkaller0: entered promiscuous mode [ 479.371237][T20815] syzkaller0: entered allmulticast mode [ 479.395532][T20817] syzkaller0: entered promiscuous mode [ 479.410170][T20817] syzkaller0: entered allmulticast mode [ 479.560323][T20817] geneve3: entered allmulticast mode [ 479.919760][T20836] wg2: Caught tx_queue_len zero misconfig [ 480.520205][T20866] openvswitch: netlink: Flow key attr not present in new flow. [ 480.638694][T20871] __nla_validate_parse: 3 callbacks suppressed [ 480.638714][T20871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3907'. [ 480.741237][T20871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3907'. [ 481.104025][T20882] syzkaller1: entered promiscuous mode [ 481.124825][T20882] syzkaller1: entered allmulticast mode [ 481.156972][T20896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.272804][T20902] x_tables: duplicate underflow at hook 1 [ 481.544406][T20908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3917'. [ 481.630289][ T5631] Bluetooth: hci2: link tx timeout [ 481.639662][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.654705][ T5631] Bluetooth: hci2: link tx timeout [ 481.659974][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.672506][ T5631] Bluetooth: hci2: link tx timeout [ 481.677873][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.685580][ T5631] Bluetooth: hci2: link tx timeout [ 481.693416][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.701374][ T5631] Bluetooth: hci2: link tx timeout [ 481.704812][T20910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3918'. [ 481.706563][ T5631] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.807082][T20925] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3922'. [ 482.135920][T20933] Bluetooth: hci0: unsupported parameter 5135 [ 482.185887][T20933] Bluetooth: hci0: unsupported parameter 8192 [ 482.221974][T20933] Bluetooth: hci0: unsupported parameter 5135 [ 482.278260][T20933] Bluetooth: hci0: unsupported parameter 8192 [ 482.787822][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 482.926579][T20974] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 483.113251][T20978] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 483.216436][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3941'. [ 483.563424][T20996] atomic_op ffff8880579229e0 conn xmit_atomic 0000000000000000 [ 483.663081][T21007] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 483.708701][T21007] bond3 (unregistering): Released all slaves [ 483.714999][T21013] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3947'. [ 483.749646][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 483.763520][T21013] bond1: option mode: unable to set because the bond device has slaves [ 483.999198][T21022] sctp: [Deprecated]: syz.4.3950 (pid 21022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.999198][T21022] Use struct sctp_sack_info instead [ 484.036058][T21024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3948'. [ 484.124615][T21024] lo: entered promiscuous mode [ 484.136477][T21024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.423734][T21043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3954'. [ 484.465141][T21043] ip6gre1: entered promiscuous mode [ 484.475956][T21043] ip6gre1: entered allmulticast mode [ 484.519060][T21043] netlink: 'syz.0.3954': attribute type 6 has an invalid length. [ 484.539623][T21043] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3954'. [ 484.589611][T21049] netlink: 'syz.4.3956': attribute type 1 has an invalid length. [ 484.969662][T21049] bond4: entered promiscuous mode [ 485.000974][T21049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.530999][T21066] netlink: Failed to add  helper -22 [ 485.555740][T21066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.746260][T21069] ?: renamed from bond0 [ 486.011891][T21084] __nla_validate_parse: 1 callbacks suppressed [ 486.011921][T21084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3965'. [ 486.117520][T21090] bridge0: port 3(syz_tun) entered disabled state [ 486.124210][T21090] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.131827][T21090] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.194254][T20988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.339927][T21092] gre0: Caught tx_queue_len zero misconfig [ 487.393769][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3982'. [ 487.531512][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'. [ 487.686968][T21152] team0 (unregistering): Port device team_slave_0 removed [ 487.772553][T21152] team0 (unregistering): Port device team_slave_1 removed [ 487.885765][T21179] netlink: 'syz.3.3985': attribute type 12 has an invalid length. [ 488.102524][T21191] xt_hashlimit: size too large, truncated to 1048576 [ 488.157501][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3990'. [ 488.179607][T21195] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 488.405979][T21198] netlink: 'syz.2.3991': attribute type 5 has an invalid length. [ 488.416019][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 488.515075][T21172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.761306][T21207] xt_hl: Unknown TTL match mode: 255 [ 489.293645][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 489.308428][T21232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 489.367434][T21234] netlink: 'syz.2.4000': attribute type 1 has an invalid length. [ 489.414193][T21232] netlink: 'syz.2.4000': attribute type 1 has an invalid length. [ 489.425883][T21234] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 489.441521][T21231] netlink: 'syz.2.4000': attribute type 1 has an invalid length. [ 489.462569][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 489.484682][T21231] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 489.528473][T21232] netlink: 'syz.2.4000': attribute type 2 has an invalid length. [ 489.796766][T21247] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4003'. [ 489.813381][T21253] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4005'. [ 490.410052][T21281] batadv_slave_0: Caught tx_queue_len zero misconfig [ 491.117479][T21304] IPVS: length: 4096 != 8 [ 491.190190][T21312] __nla_validate_parse: 6 callbacks suppressed [ 491.190208][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'. [ 491.320019][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4025'. [ 491.406569][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 491.772943][T21338] netlink: 'syz.0.4030': attribute type 16 has an invalid length. [ 491.814121][T21338] netlink: 'syz.0.4030': attribute type 17 has an invalid length. [ 491.892332][T21347] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4030'. [ 491.937716][T21347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4030'. [ 491.960150][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 491.974737][T21338] 0·: left allmulticast mode [ 492.002752][T21338] hsr_slave_0: left allmulticast mode [ 492.008815][T21338] hsr_slave_1: left allmulticast mode [ 492.055772][T21338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.065333][T21338] gretap1: left promiscuous mode [ 492.081613][T21338] gretap1: left allmulticast mode [ 492.135545][T21338] ip6gre1: left promiscuous mode [ 492.144417][T21338] ip6gre1: left allmulticast mode [ 492.553287][T21371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4036'. [ 492.555704][T21351] syzkaller0: entered promiscuous mode [ 492.616133][T21351] syzkaller0: entered allmulticast mode [ 495.287802][T21359] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4034'. [ 495.580232][T21403] netlink: 'syz.2.4041': attribute type 2 has an invalid length. [ 495.801951][T21403] : entered promiscuous mode [ 496.119353][T21422] netlink: 'syz.2.4048': attribute type 1 has an invalid length. [ 496.336127][T21429] netlink: 'syz.2.4048': attribute type 11 has an invalid length. [ 496.414950][T21429] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4048'. [ 496.443610][T21422] bridge2: entered promiscuous mode [ 496.536143][T21422] bond4: (slave bridge2): making interface the new active one [ 496.574224][T21422] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 496.829990][T21442] syzkaller0: entered promiscuous mode [ 496.882247][T21442] syzkaller0: entered allmulticast mode [ 496.959563][T21440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4043'. [ 497.276850][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'. [ 497.402109][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4055'. [ 500.304466][T21480] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 500.383304][T21480] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4055'. [ 500.493863][T21516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4058'. [ 500.526382][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 500.542540][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 500.556654][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4055'. [ 500.596196][T21492] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4055'. [ 501.353667][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623846][T21604] __nla_validate_parse: 1 callbacks suppressed [ 501.623864][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4065'. [ 501.756273][T21616] tipc: Enabling of bearer rejected, failed to enable media [ 501.845832][T21604] netlink: 'syz.3.4065': attribute type 8 has an invalid length. [ 501.874995][T21621] bridge0: port 5(veth1_to_bridge) entered blocking state [ 501.943003][T21621] bridge0: port 5(veth1_to_bridge) entered disabled state [ 501.961384][T21621] veth1_to_bridge: entered allmulticast mode [ 501.990989][T21621] veth1_to_bridge: entered promiscuous mode [ 501.997275][T21621] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.073419][T21621] bridge0: port 5(veth1_to_bridge) entered blocking state [ 502.080723][T21621] bridge0: port 5(veth1_to_bridge) entered forwarding state [ 502.833374][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4071'. [ 502.965871][T21689] can: request_module (can-proto-4) failed. [ 503.517056][T21711] netlink: 'syz.3.4076': attribute type 2 has an invalid length. [ 503.565637][T21711] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4076'. [ 503.965739][T21735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4081'. [ 504.331110][T21744] netlink: ct family unspecified [ 504.354387][T21744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.438421][T21744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4085'. [ 505.012007][T21776] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 505.102061][T21769] gre1: entered promiscuous mode [ 505.135399][T21769] gre1: entered allmulticast mode [ 505.446153][T21780] veth1_to_bond: Caught tx_queue_len zero misconfig [ 505.803038][T21798] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4100'. [ 505.816387][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'. [ 505.860877][T21797] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4100'. [ 505.986030][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 506.952114][T21841] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 506.993595][T21843] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4112'. [ 507.274202][T21857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4116'. [ 507.309687][T21863] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 507.439777][T21871] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4120'. [ 507.464720][T21871] xt_policy: neither incoming nor outgoing policy selected [ 507.509710][T21871] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 507.581024][T21873] tap0: tun_chr_ioctl cmd 2148553947 [ 507.728836][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 507.793811][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 507.927170][T21885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.164372][T21897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4130'. [ 508.303668][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 508.553077][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 508.642594][T21913] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 508.925567][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4141'. [ 509.046373][T21939] openvswitch: netlink: IPv4 tun info is not correct [ 509.232464][T21946] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4144'. [ 509.290030][T21954] xt_hashlimit: size too large, truncated to 1048576 [ 509.783041][T21971] FAULT_INJECTION: forcing a failure. [ 509.783041][T21971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 509.844879][T21971] CPU: 0 UID: 0 PID: 21971 Comm: syz.0.4149 Not tainted syzkaller #0 PREEMPT(full) [ 509.844906][T21971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.844925][T21971] Call Trace: [ 509.844933][T21971] [ 509.844946][T21971] dump_stack_lvl+0xe8/0x150 [ 509.844986][T21971] should_fail_ex+0x410/0x560 [ 509.845020][T21971] _copy_to_user+0x31/0xb0 [ 509.845042][T21971] simple_read_from_buffer+0xe1/0x170 [ 509.845074][T21971] proc_fail_nth_read+0x1bb/0x230 [ 509.845106][T21971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.845139][T21971] ? rw_verify_area+0x24a/0x4c0 [ 509.845168][T21971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.845196][T21971] vfs_read+0x213/0xa80 [ 509.845229][T21971] ? __pfx___mutex_lock+0x10/0x10 [ 509.845255][T21971] ? __pfx_vfs_read+0x10/0x10 [ 509.845283][T21971] ? __fget_files+0x2a/0x420 [ 509.845313][T21971] ? __fget_files+0x3a2/0x420 [ 509.845338][T21971] ? __fget_files+0x2a/0x420 [ 509.845372][T21971] ksys_read+0x150/0x270 [ 509.845401][T21971] ? __pfx_ksys_read+0x10/0x10 [ 509.845441][T21971] do_syscall_64+0x166/0x520 [ 509.845464][T21971] ? trace_irq_disable+0x3b/0x140 [ 509.845488][T21971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.845507][T21971] ? clear_bhb_loop+0x70/0xc0 [ 509.845531][T21971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.845553][T21971] RIP: 0033:0x7f3518d5e90e [ 509.845570][T21971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.845587][T21971] RSP: 002b:00007f3519b9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.845607][T21971] RAX: ffffffffffffffda RBX: 00007f3519b9e6c0 RCX: 00007f3518d5e90e [ 509.845621][T21971] RDX: 000000000000000f RSI: 00007f3519b9e0a0 RDI: 0000000000000006 [ 509.845634][T21971] RBP: 00007f3519b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 509.845646][T21971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.845657][T21971] R13: 00007f3519026038 R14: 00007f3519025fa0 R15: 00007fff35549128 [ 509.845689][T21971] [ 510.463336][T21984] macvlan2: entered promiscuous mode [ 510.558521][T21984] macvlan2: entered allmulticast mode [ 510.578826][T21984] ?: (slave macvlan2): Error -98 calling set_mac_address [ 510.614539][T21987] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 511.247787][T22010] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 511.251751][T22009] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 511.492391][T22028] openvswitch: netlink: Flow actions attr not present in new flow. [ 511.531578][T22028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4162'. [ 511.634918][T22033] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 511.754917][T22033] netlink: 'syz.1.4164': attribute type 1 has an invalid length. [ 512.140390][T22048] __nla_validate_parse: 2 callbacks suppressed [ 512.140407][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'. [ 512.198628][T22051] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4169'. [ 512.287071][T22051] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4169'. [ 512.505448][T22068] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4175'. [ 512.812936][T22079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.844236][T22075] netlink: 'syz.1.4178': attribute type 5 has an invalid length. [ 512.904510][ T7235] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 513.529814][T22106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4187'. [ 513.735335][T22084] infiniband syz2: set active [ 513.773344][T22084] infiniband syz2: added veth0_vlan [ 513.819661][T22084] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 513.836740][T22084] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 513.854717][T22084] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 513.894958][T22121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'. [ 513.902010][T22084] RDS/IB: syz2: added [ 513.912191][T22084] smc: adding ib device syz2 with port count 1 [ 513.919554][T22084] smc: ib device syz2 port 1 has no pnetid [ 513.980421][T22121] netlink: 'syz.1.4191': attribute type 5 has an invalid length. [ 514.008212][T22121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4191'. [ 514.109285][T22121] geneve2: entered promiscuous mode [ 514.125310][T22121] geneve2: entered allmulticast mode [ 514.147815][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.161437][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 514.206522][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 514.259367][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 514.295529][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 514.466250][T22136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4196'. [ 514.944628][T22153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4202'. [ 515.447245][ T7235] IPVS: starting estimator thread 0... [ 515.455413][T22172] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 515.569565][T22174] IPVS: using max 31 ests per chain, 74400 per kthread [ 516.531849][T22206] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4220'. [ 517.038573][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 518.013898][T22214] syz.3.4221: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 519.530567][T22214] CPU: 1 UID: 0 PID: 22214 Comm: syz.3.4221 Not tainted syzkaller #0 PREEMPT(full) [ 519.530595][T22214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.530606][T22214] Call Trace: [ 519.530614][T22214] [ 519.530623][T22214] dump_stack_lvl+0xe8/0x150 [ 519.530654][T22214] warn_alloc+0x24c/0x270 [ 519.530684][T22214] ? __pfx_warn_alloc+0x10/0x10 [ 519.530704][T22214] ? xskq_create+0x56/0x220 [ 519.530725][T22214] ? xsk_setsockopt+0x52a/0x960 [ 519.530743][T22214] ? do_syscall_64+0x166/0x520 [ 519.530773][T22214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.530808][T22214] __vmalloc_node_range_noprof+0x12c/0x1730 [ 519.530860][T22214] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 519.530884][T22214] ? __kmalloc_cache_noprof+0x331/0x660 [ 519.530907][T22214] ? __kmalloc_cache_noprof+0x152/0x660 [ 519.530929][T22214] ? xskq_create+0x56/0x220 [ 519.530954][T22214] xskq_create+0x148/0x220 [ 519.530975][T22214] ? xsk_init_queue+0x8a/0xe0 [ 519.530997][T22214] xsk_init_queue+0x8a/0xe0 [ 519.531020][T22214] xsk_setsockopt+0x52a/0x960 [ 519.531039][T22214] ? __fget_files+0x2a/0x420 [ 519.531066][T22214] ? __pfx_xsk_setsockopt+0x10/0x10 [ 519.531085][T22214] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.531128][T22214] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 519.531146][T22214] ? __pfx_xsk_setsockopt+0x10/0x10 [ 519.531167][T22214] do_sock_setsockopt+0x17c/0x1b0 [ 519.531201][T22214] __x64_sys_setsockopt+0x13d/0x1b0 [ 519.531234][T22214] do_syscall_64+0x166/0x520 [ 519.531255][T22214] ? trace_irq_disable+0x3b/0x140 [ 519.531279][T22214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.531298][T22214] ? clear_bhb_loop+0x70/0xc0 [ 519.531323][T22214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.531341][T22214] RIP: 0033:0x7f974eb9e0d9 [ 519.531360][T22214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.531376][T22214] RSP: 002b:00007f974fb11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 519.531397][T22214] RAX: ffffffffffffffda RBX: 00007f974ee26090 RCX: 00007f974eb9e0d9 [ 519.531411][T22214] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 519.531422][T22214] RBP: 00007f974ec35024 R08: 0000000000000004 R09: 0000000000000000 [ 519.531435][T22214] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.531447][T22214] R13: 00007f974ee26128 R14: 00007f974ee26090 R15: 00007ffef8c49838 [ 519.531479][T22214] [ 519.531682][T22214] Mem-Info: [ 522.787751][ T4978] udevd[4978]: worker [8959] /devices/virtual/block/nbd0 timeout; kill it [ 522.995822][ T4978] udevd[4978]: seq 17084 '/devices/virtual/block/nbd0' killed [ 524.025891][T22214] active_anon:6381 inactive_anon:0 isolated_anon:0 [ 524.025891][T22214] active_file:0 inactive_file:43404 isolated_file:0 [ 524.025891][T22214] unevictable:0 dirty:48 writeback:0 [ 524.025891][T22214] slab_reclaimable:11361 slab_unreclaimable:117478 [ 524.025891][T22214] mapped:29657 shmem:533 pagetables:1351 [ 524.025891][T22214] sec_pagetables:0 bounce:0 [ 524.025891][T22214] kernel_misc_reclaimable:0 [ 524.025891][T22214] free:1303331 free_pcp:10169 free_cma:0 [ 524.374025][T22214] Node 0 active_anon:25524kB inactive_anon:0kB active_file:0kB inactive_file:173412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118628kB dirty:192kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14364kB pagetables:5288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 525.044490][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 525.421339][T22214] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 526.318460][T22214] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 526.450961][T22219] netlink: 'syz.2.4224': attribute type 4 has an invalid length. [ 526.495568][T22220] netlink: 'syz.2.4224': attribute type 4 has an invalid length. [ 526.577673][T22222] netlink: 'syz.2.4224': attribute type 4 has an invalid length. [ 526.654618][T22214] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 526.661044][T22214] Node 0 DMA32 free:1257000kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25564kB inactive_anon:0kB active_file:0kB inactive_file:173416kB unevictable:0kB writepending:196kB zspages:0kB present:3129332kB managed:2547792kB mlocked:0kB bounce:0kB free_pcp:45440kB local_pcp:21104kB free_cma:0kB [ 528.157187][T22214] lowmem_reserve[]: 0 0 0 0 0 [ 528.186511][T22214] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:252kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.522142][T22214] lowmem_reserve[]: 0 0 0 0 0 [ 528.572383][T22214] Node 1 Normal free:3934620kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.650276][T21758] dummy0: left allmulticast mode [ 528.657319][T21758] dummy0: left promiscuous mode [ 529.017690][T22214] lowmem_reserve[]: 0 0 0 0 0 [ 529.026257][T22214] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 529.057686][T22214] Node 0 DMA32: 639*4kB (ME) 234*8kB (UME) 54*16kB (ME) 191*32kB (UME) 58*64kB (UME) 34*128kB (UME) 8*256kB (UM) 13*512kB (UM) 5*1024kB (UME) 1*2048kB (M) 295*4096kB (UM) = 1243660kB [ 529.145880][T21758] bridge0: port 3(dummy0) entered disabled state [ 529.312493][T22214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.435021][T22214] Node 1 Normal: 1*4kB (U) 1*8kB (M) 5*16kB (UM) 6*32kB (UM) 10*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (UM) = 3934620kB [ 529.645650][T22214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.755541][T22214] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 530.339605][T21758] bridge_slave_1: left promiscuous mode [ 530.364164][T22214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.861193][T21758] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.288007][T22214] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.926578][T22214] 43937 total pagecache pages [ 532.073710][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.088961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.089425][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.103917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.123388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.136277][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.138533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.158488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.165464][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.173834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.192661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.207829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.223003][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.246289][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.269733][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.303818][T22214] 0 pages in swap cache [ 532.407038][T22214] Free swap = 124996kB [ 532.587776][T22214] Total swap = 124996kB [ 533.240533][T22214] 2097051 pages RAM [ 533.804997][T22214] 0 pages HighMem/MovableOnly [ 534.577284][ T5631] Bluetooth: hci4: command tx timeout [ 535.168013][T22214] 428425 pages reserved [ 535.172436][T22214] 0 pages cma reserved [ 535.240690][T21758] pim6reg: left allmulticast mode [ 535.520976][T21758] vcan0: left allmulticast mode [ 535.728779][T21758] pim6reg527: left allmulticast mode [ 536.628058][ T5631] Bluetooth: hci4: command tx timeout [ 537.078771][ C0] net_ratelimit: 1509 callbacks suppressed [ 537.078792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.101788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.116923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.132040][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.147143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.162326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.177470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.192588][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.209858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.225893][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.708120][ T5631] Bluetooth: hci4: command tx timeout [ 540.788090][ T5631] Bluetooth: hci4: command tx timeout [ 541.158935][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.174009][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.182964][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 541.203676][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 541.288129][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.670570][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 542.091724][ C0] net_ratelimit: 1093 callbacks suppressed [ 542.091744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.114817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.131374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.147878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.164384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.181118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.197605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.214059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.230472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.246848][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.752859][ T5612] Bluetooth: hci6: command tx timeout [ 544.871729][ T31] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 545.155130][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 545.577854][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.009579][ T5612] Bluetooth: hci6: command tx timeout [ 546.184714][ T31] task:kworker/0:0H state:D stack:25960 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 547.097719][ C0] net_ratelimit: 1888 callbacks suppressed [ 547.097740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 547.116869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.132537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 547.145783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.161264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 547.174405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.189853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 547.203452][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.219463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 547.232589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.408552][ T31] Workqueue: kblockd blk_mq_requeue_work [ 547.877918][ T31] Call Trace: [ 548.030736][ T31] [ 548.070223][ T5612] Bluetooth: hci6: command tx timeout [ 548.317090][ T31] __schedule+0x17d4/0x5630 [ 548.876634][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.158508][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.163835][ T31] ? __pfx___schedule+0x10/0x10 [ 550.088304][ T31] ? schedule+0x90/0x2b0 [ 550.092827][ T31] schedule+0x164/0x2b0 [ 550.257809][ T5612] Bluetooth: hci6: command tx timeout [ 550.698402][ T31] schedule_timeout+0x152/0x2c0 [ 550.703533][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 551.607956][ T31] ? __pfx_process_timeout+0x10/0x10 [ 552.049814][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 552.055898][ T31] ? prepare_to_wait_event+0x436/0x480 [ 552.111480][ C0] net_ratelimit: 1920 callbacks suppressed [ 552.111497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 552.130708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.146819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 552.160187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.177073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 552.190450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.206596][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 552.219985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.236088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:be:ac:3a:48:e8, vlan:0) [ 552.249449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.698049][ T31] nbd_queue_rq+0x889/0x1150 [ 552.702942][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 553.347838][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 553.354239][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 553.767720][ T31] ? sbitmap_get+0x229/0x390 [ 554.108248][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 554.427455][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 554.747356][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580