last executing test programs: 3.319474574s ago: executing program 4 (id=15600): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) (rerun: 32) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) (async) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="107d73e7a28165d8161b019e47f8bc0768913b78e8303355176b27e338b9a14445af1d75aed778b978c25b1104027e2bc2e66caf614837cdf0751afaa90b59d1de0d02b3cbadbc7ec8722a421ae07630c93ba9933a036d9af7abe8348818b8a83cb2972330cc1b4f438e874aeda1241c518235ade0d1aa", 0x77) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200844}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4014}, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={0x0, 0x7fffffff, 0x1, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000a00)={r4, 0x80, 0x0, [0x4, 0x2, 0x8, 0x8, 0x5], [0x101, 0x3, 0x0, 0x80000000, 0x9, 0xc6, 0x7, 0x10001, 0x7, 0x8, 0xabe5, 0x419, 0x1, 0x400, 0x80, 0x8, 0x4, 0xfffffffffffffff7, 0x5, 0x7, 0x2, 0x400, 0x52c, 0x7, 0x7fffffffffffffff, 0x19e1, 0x3c, 0x800, 0xffffffffffffffff, 0x6, 0x7, 0x1d1, 0x4, 0x8, 0x7, 0x101, 0x6, 0x2, 0x5a, 0x4, 0x9, 0x0, 0x2, 0x0, 0x2, 0x4, 0x3, 0x2, 0x5, 0x6, 0x5, 0x6, 0xe1, 0xffff, 0x1, 0x10001, 0x7, 0x7, 0x0, 0xe6ad, 0x1000, 0x6, 0x1, 0x7, 0xfffffffffffffffa, 0xffffffffffff05dd, 0xd, 0x282, 0xffffffffffffff80, 0x7, 0x772, 0x2, 0x1, 0x5, 0x0, 0x100000000, 0x8000000000000001, 0x9, 0x1dc7, 0x8a, 0x0, 0x81, 0x2044c7bc, 0x8, 0xb, 0xbdc20000000, 0x0, 0x7, 0x4, 0x1, 0x0, 0x4, 0x9, 0xe, 0x587b, 0x5, 0x0, 0x4, 0x5e7286b3, 0x100000000, 0x0, 0x7, 0x129ec00, 0x1, 0x3, 0x93, 0xc, 0x7, 0x81, 0x5, 0x7, 0x8000000000000001, 0x1, 0x2, 0xd450, 0x80000001, 0x101, 0x0, 0xfffffffffffffff7, 0x71]}) 3.060426357s ago: executing program 4 (id=15604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, @in6={0xa, 0x4e24, 0x3, @private0, 0x7}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f00000001c0)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) 3.060060762s ago: executing program 1 (id=15605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) recvmmsg$unix(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = socket$isdn(0x22, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000080)=0x4) 2.907915646s ago: executing program 1 (id=15607): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) r6 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffe0, 0x7}, {0xffff, 0xb}}}, 0x24}}, 0x24048000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffe0, 0x7}, {0xffff, 0xb}}}, 0x24}}, 0x24048000) 2.795321545s ago: executing program 4 (id=15609): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) close(r0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000040)="5da231f7aa56ad5331e770f3f22cbe703f1d7a4eea67808cd6b0bce2a543d9b692222f4c4617ac69d8c3caec060724b6c168621cdc99df0cd5608932c4ab2b7c154ebe1bf6") close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x2c, @rand_addr=0x64010102, 0x4e22, 0x0, 'rr\x00', 0x1b, 0x2d, 0x46}, {@multicast2, 0x4e23, 0x3, 0xf1d, 0x4, 0x827}}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x17c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000000, 0x26}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_FRAME={0x13e, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="817b4233a204", {0x1, 0x2}, @value=@ver_80211n={0x0, 0xc, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xffff, @default, 0xd21d, @void, @void, @void, @val={0x4, 0x6, {0x3, 0xb, 0x5, 0x1}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa, 0xd}}, [{0xdd, 0x90, "396664e62c6a9b123a8637165e2712e73cc882b87e2cc72798ab540e352eca7770e8740a6d0cd03f7bb3b7d58d7b6fae9b35527e4de9c80b48c43688a664dda0f833cd916a5fee18d33808956f97db639752bada0fab959d66f562c297c90ac8c112265223cb4ed26866cf19cc5fc83b6f6a563e0764897b3d6914537704c6545c69d28117cc86065aa3675516ec28d8"}, {0xdd, 0x69, "3c77880e8c99b045da508195304c7dc935d492992753c01005e9be0b4ac2373f1f70185c07b1dedbd18700e5d53eedcf59cabf2f4f866dd1f341ca9e892a208f95b0c2ab501c5179f7161729be27980cb34913e23f7c08ac020606ea7ee2a43831fbb81a3c326f6630"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x86b}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000380)=0x5, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000003c0)=0x9, 0x4) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000400)="4e8be257bcbe60701855da43d7fe99453ecd3c6a170f601afdab470e244ae7be42e6f65ea29acabbfc646f07d1f2e2d7943d6c0f6d9973c8eaf8e526d159365e8cdf636f46a078dfb64fd5ccca5759d6aed53ea0a80a149e222637b4fdbd346613d6b70128a54e56822fe8dc0c84d76aeb329d57a83ad9a7641fe10dab") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000480)=@full={0xb, @remote, @netrom, 0x0, [@null, @default, @null, @rose, @netrom, @netrom]}, &(0x7f00000004c0)=0x40, 0x80000) connect$rose(r4, &(0x7f0000000500)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xff9241882369df6d}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_IE={0x23, 0x2a, [@mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x7c}, 0xfe, 0x40, @device_a, 0x0, 0x3, 0x8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x3c, 0x9}}]}, @NL80211_ATTR_IE={0x16, 0x2a, [@supported_rates={0x1, 0x7, [{0x16}, {0x2, 0x1}, {0x12}, {0x24}, {0x8}, {0x2, 0x1}, {0x4e, 0x1}]}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0x6, 0x62}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x80) bind$inet6(r5, &(0x7f00000008c0)={0xa, 0x4e23, 0x2, @remote, 0x80}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) r8 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000940)={{0x3, @null}, [@default, @null, @default, @bcast, @bcast, @bcast, @bcast, @rose]}, &(0x7f00000009c0)=0x48, 0x800) bind$ax25(r8, &(0x7f0000000a00)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001000)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0x4d0, r7, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x5, 0x5, 0x5, 0x8000, 0x7b, 0x9]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x3, 0xc84, 0x1, 0x4]}, @NL80211_ATTR_FRAME={0x48f, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {0x7ffd}, @device_b, @broadcast, @initial, {0xe, 0x1}}, 0x1800, 0x1d, @default, @val={0x1, 0x5, [{0x6c}, {0x30}, {0x6}, {0x30}, {0x6, 0x1}]}, @void, [{0xdd, 0x7c, "54da5194259615acec7f149d99e92a60fcb3879ae6299f2793f60cfe515ccbae14d2e46d990671fad5add31ad2357b0a9d2ad2f285b12b5cf9173880bfd17a71e321423acbff472a5f020649bec1e8ead55ca2b89e51253326947c853752d243124c7cb272b57122e9cf5e45720db09ad96a98e87e9723d93e72ded4"}, {0xdd, 0x9f, "218231d479abc1d8a1cd5d39b6b8eae5c3b3c8880ea053c038c3f220374c62ab31d230dedf08cc4f1659b51f28d37fd75a86bf072e4877d9a185ca7252b054c8fa233d3218d5de3b2fba4b1eb7ac765368c34786638e57eada8a897f47ba8f6687a77de4b1794cbdb1f5e2c94390d597fe1ab61080333b6e3927e7c9c54497ff7e3140635b1a817c5d5d1f569148bc4fd3ca21ba018798783e69579a5b64e3"}, {0xdd, 0x7a, "0385da2d46616cd6c8ad30c8e46dd2e4771e53995d29ea754c303463e7cdf9df917ac843d96c37f0b4a33b370ff2bb535210613ec9e1c8f5e19943d2aaa08961c4d9f22cb2791f18bfc2d01aa3e7314d928f6e178b86657fb372211401edea025a00fd4ce74e8ec457b65ad88894a5f28d3d93e816b4e28eb667"}, {0xdd, 0x2a, "042c29cd0bb462942e7de4e2a7bab70acc1fa751271a0408c52316ee7a5a4a95f81b439f7caeca5031ef"}, {0xdd, 0x38, "c0f06a10f046ba7b379e85b4299dc6d8ca91732633057af55c6e9297eae84517b18489d55104247c8799590f98bd39afde83b8fc452776a2"}, {0xdd, 0x73, "09e5f39dc71fc37bfd667e9574c0de75deabf109cfb286cf988e5cda155a5ef5e2fbd2b570b967e3bd3212b2987a4d46962ba8b2337f3f10babdb2a02bd8326624af8b64472617414781abd153f2563c53aab1760bda43119d4796a5e636f85475cd48097f332dfc0b9d3de85fbf1bcbda0c16"}, {0xdd, 0xef, "2ce552fc0432ff287489855b1352ce4456900b8b15d54c85ae784448a6fcd8752c52fa77c634c708932f4014e594002693e4d5d989cc86aa0687c754116068de0d894ddf6c23039ad0762baff37433ec68fa30d186dc87fb45ed2970619b7c5c878d8b93221a3426f976278286d77c91b47736dafc8e8996b02ecb5bdc097d641430bba782e2048454e96f684edd61835d5a1282042fa5eb336c698faf65f077748c7620a3b0ad499e19a599f610c17b29d9375bd5e33da3b248cf6d8451fc2a48ce6b65aff66311c70bf88b0d71f6c455d60fd574c3205e13a09f4c9755298bbe17bf78c10e2c6e74d29ab0c90708"}, {0xdd, 0xfd, "e5686950a66dce7093df24e265e317d1ec2ba0c2c38c067d37b1d5c35587f89ab83674228599859e74fba84387312b248aeb1d8f9d8f5f1baf34fc4a3810851e0e4dcad79606d174f736f57fd8d2d0336e379e62beb25c7fa7e014d3318282f5bb9b71fb911b2556dbaa63659648ee55e5332b86dad4e3947ceec818f654e41b327e205fae1c3cad59b538eea8787cb9a360a80743eb2adfabb03e83c4346ee04f62f9aafd098d1a0d8556c838ab185576562281dd6f3b655b27366926e0e1847dbcdb1ee84ccf5243425fcfda52ef4f0d3dd6cb40ab364a33b8b29b0381b41e206f892b7efc6bd6a4b5c5bd50797c511b364c177eb3261d8593ea5e75"}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001040)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000001080)=r9) socket$xdp(0x2c, 0x3, 0x0) 2.47509751s ago: executing program 1 (id=15613): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'sit0\x00', r1, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r2, 0xd7735000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x2e, &(0x7f0000000000)="c23d9d55a3cd1f19c1a6f8bae6dbc52f2ea9a07c364cb1480cadb51b9e93535d1017dea90d8782f9b5a2a1f178e6", 0xb5, 0x0, &(0x7f0000000080)="417853d4360d3cdf461539d19173441fe1add6265ba0d8f8d8428e262c097ec583ebfb1c2a0124f9b334a126bdb2e3dc913a30fd1b07306d9500dbaaa98b2de398926dbbefa78bc6305febe3cf5c218772cce39a30d52f8fc076030941f0a237bdc1b669ad47fbda391a48dcc27a2a2e32bb684c08611bf9d9082a6fe15e174d8e45b7d688a646ec0aa6907a2b1a7d96c679e4ca4f1716bc4fc70fdc560a7bf008e66fb631b205397c6e604684127b72684266dc39"}) 2.45069553s ago: executing program 4 (id=15614): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20008802}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0) (rerun: 32) 2.332456157s ago: executing program 2 (id=15616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000080)="dbddbe7f71abc979fc1f28ad53251d716768b4a30974233fb8f7ef8dbffb812a4d4626a3d5f0114d650af0154d84cb97a533526f6d597a6d2d1a5bf755cd413e601721b1d82f5bd969b8d9de03a69a46b7a17aa25e0557d2e8d62a43757016af8d20f15f780586ec5cb54e20c8de152b5b1f02b981b06abba1c967d5213703c87da4698b49fe5b6aa25292f0f8a5370c7ecb76183116a445cf8476ffc73df6ad3b5f51f9d5", &(0x7f0000000200), &(0x7f0000000240)="498d176c2bc82b411e40169c88fa79d2f1d71c77dd0ca522e00f2e643d2e09dab8b78c1dc76d6b6f", &(0x7f0000000280)="66f9da41dead5c58d1c80ec21b4645fd661309c43358519420a93837d307b5192015ff4761bd2c344d10cb70b191da41dc91b02498d8b5610d55d84261619fa370e61c2efc40b054c8c49daeaac010f13eb679277bb4fbdf1d3d790f937f6e64d69802aec5e2a11b4c1d44127f3e2455489a1fd211429bb350b71c5d51575944919d7784f7d4df70d320e6e96cc422665204a32727782c", 0x7, r0}, 0x38) 2.308311356s ago: executing program 0 (id=15618): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) sendmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) unshare(0x400) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.258719237s ago: executing program 4 (id=15619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'sit0\x00', 0x0}) (async) pipe(&(0x7f0000001c80)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x15, 0x3, 0x2, 0x9, 0x10, 0x1, 0x4e5c5044, '\x00', r2, r3, 0x3, 0x2, 0x5}, 0x50) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x80811501, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x812}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000006c0)=""/4096, 0x1000, 0x0, &(0x7f00000004c0)=""/113, 0x71}}, 0x10) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001780)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000001740)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)=r0}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0x1, 0xffffffffffffffff}, 0x4) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0xfff, 0x2, 0x6, 0x400c0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)=r0}, 0x20) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@generic={&(0x7f0000001a80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x32, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9b8, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @generic={0xe, 0x2, 0x1, 0x3, 0xfffffffb}, @jmp={0x5, 0x0, 0x4, 0x7, 0x6, 0xfffffffffffffffc, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x88d0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x75, &(0x7f0000000300)=""/117, 0x40f00, 0x10, '\x00', r9, @fallback=0x30, r10, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x5, 0x8, 0x8}, 0x10, r11, r0, 0x3, &(0x7f0000001b00)=[r12, r13, r14, 0x1, r15, 0xffffffffffffffff, r16, r17, r18, r19], &(0x7f0000001b40)=[{0x3, 0x2, 0x1}, {0x1, 0x4, 0x3, 0x9}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x1}, 0x94) 2.172210516s ago: executing program 1 (id=15620): syz_emit_ethernet(0xce, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x2a, 0x4, 0x3, 0x0, 0xc0, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x17, 0xd7, [@private=0xa010100, @multicast2, @empty, @multicast2, @empty]}, @timestamp_addr={0x44, 0x34, 0xbd, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff5}, {@broadcast, 0x5}, {@multicast1, 0xfffffffc}, {@multicast2, 0x7}, {@private=0xa010102, 0x1}, {@local, 0x10}]}, @ssrr={0x89, 0x17, 0xce, [@loopback, @private=0xa010100, @empty, @multicast1, @loopback]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x0, 0xb, "54fa0e556edee0cc45"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xce, 0x0, 0xa, [0x380, 0x8, 0x80000001, 0x1, 0x9a3, 0x8]}]}}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3ff}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003000), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000008c0)={&(0x7f0000000540), 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x298, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @loopback, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xdd09, @local, 0xfffffffc}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdb}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x8, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x40100000}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1db}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000007098555c269f38b1e75606cab64900010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400010000000000000000000000000000000001"], 0x38}}, 0x0) clock_gettime(0x0, &(0x7f0000002f80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f0000000900)=@ll, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000000a40)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/137, 0x89}], 0x3, &(0x7f0000000bc0)=""/233, 0xe9}, 0x2}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/102, 0x66}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/209, 0xd1}, {&(0x7f0000002e40)=""/45, 0x2d}], 0x5}, 0x2}], 0x2, 0x10102, &(0x7f0000002fc0)={r6, r7+60000000}) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r9 = accept$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000000c0)=0x6e) sendmsg$netlink(r0, &(0x7f0000000440)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000200)={0x158, 0x633a, 0x400, 0x70bd25, 0x25dfdbfd, "", [@generic="e9f4a9dd85845969767bc28fa79f1fdc803b0b8365644919b71b25bfbc6d0b7435246d42b0e259b44cfd65cb1eb6c1f15db8f66c20a0a0a8898eed93617042d711bb71f49e6621b6d33ffd415214b276a4bdc48e6f573a19aacaa8148392801d7551b2c793eead76acf7db8e42b8299c268d80c4133e3224a9a5d74111993ecd", @generic="1c9244a71e5106598d9d2096871ff802060ebaa3bda62c5c7d70ab078c651199c199cabe934d0a5ca2452ae5c468005c187b1fd53961c47ef32581c75ab838dfab5a982bc0b3d530b16705d171bc8e5656a33d508ce903730dde32b59c106d5793409fd9e95b6281dbeb335689d4c76cedcda279b41a63afc85429ef7a91d9b2c690d2dd0c0d95dc30eabe81daf09a3fa03c822c5e282c3259019823fcf16970d2e7", @generic="ce83fbe543987775dd7e37e0d8f3a8a133dddf8a598611678a4861ce3495f1c86c11e8949119"]}, 0x158}, {&(0x7f0000000040)={0x24, 0x16, 0x10, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x29, 0x0, 0x0, @fd=r4}, @typed={0xb, 0x130, 0x0, 0x0, @binary="783ea460fdb5ff"}]}, 0x24}], 0x2, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [r5, r8, r9]}}], 0x20, 0x24000000}, 0x8804) 2.171571998s ago: executing program 2 (id=15621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000040)={0x9, 0xffff, 0x3}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r2], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000100)={r6, 0xa11c}, 0x8) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x4c, 0x1d, 0x493fb50e026355de, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x20, 0x82}, [@NDA_LLADDR={0xa}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_PROBES={0x8, 0x4, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040810}, 0x4001) 2.166998073s ago: executing program 3 (id=15622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 32) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.13836305s ago: executing program 0 (id=15623): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x5, &(0x7f0000000000), 0x4) (async) setsockopt$rose(r4, 0x104, 0x5, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4000001) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2.050185352s ago: executing program 2 (id=15624): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000900)={r0, 0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x1, 0xe, 0xc, 0x8, 0x800, 0x0, 0x1, 'syz1\x00'}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001114010000000000000000f907004b0000000000"], 0x18}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x1e, 0x4, 0x0) sendto$inet(r4, 0x0, 0x0, 0x8080, &(0x7f0000002940)={0x2, 0x4e23, @local}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x24040084) (async) socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r8 = socket(0xa, 0x3, 0x3b) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c001e6e1bab06ed839880bcb7669cd1cc0cb87d27c61c06355f8d020b28af6e5f352b5e3128ba51199090d9d756552b9e34a663bad8b9c436bd44c92f88226fdb025136b798e7", @ANYRES16=r12, @ANYBLOB="05002abd7000fddbdf250100000008000100", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000014000192edbc7ffba5023aec9ddeb61d"], 0x14}}, 0x0) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.215799456s ago: executing program 1 (id=15625): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x40000000015, 0x800, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a504000000500010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a2c0000000008000a40fffffffc0c000980080001400000000108000840000000011400000011000100000000c67eedb0000100000aa882b9df9092df7fd0b074c58051aa7b7619293611de12772de6d23cdd659ca474776c963893c225422664a21dc3e63e01f9dffc5161a9b60843b40d01278e0afe1669a2be51f5aaae78c5e92d1ded10b019f189fbf6acd5938134b15fcbffceffe061ab363163ed1264da5bbbad22b9e4ae1c03dde7ac7cd88b736cda8e7414a36ca1c781ccd665f993d7e3addc3d54ac3f0b99391226b8880166f29211d0b6934e6c"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a4aa256293431000000000900010073797a31000000001400038010000080030000000000000012ad0000140000001100010000000000000000000300000ae46c21881a931941c3c965e89c2ef4ff66b241a10425eb73a583c940dcd15c42a8c78e58df46e925ebb0f9fa44b10640c6f59ac495185a79859340a4b23292e87e622c70736ed4287e044b0dc999de84fada00eed06a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a4aa256293431000000000900010073797a31000000001400038010000080030000000000000012ad0000140000001100010000000000000000000300000ae46c21881a931941c3c965e89c2ef4ff66b241a10425eb73a583c940dcd15c42a8c78e58df46e925ebb0f9fa44b10640c6f59ac495185a79859340a4b23292e87e622c70736ed4287e044b0dc999de84fada00eed06a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) 1.189884452s ago: executing program 1 (id=15626): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r1, 0x0, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x2a, 0x2, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$can_bcm(r2, &(0x7f0000000380)={0x1d, r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r8, 0x7, 0x104, 0xfffffffe}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r8, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x68}}, 0x0) sendto$packet(r5, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1.019253089s ago: executing program 4 (id=15627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xbd78, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r2 = accept$ax25(r1, &(0x7f0000000300)={{0x3, @bcast}, [@bcast, @rose, @bcast, @rose, @remote, @netrom, @default]}, &(0x7f00000002c0)=0xffffffffffffff9f) connect$ax25(r2, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000180)="000002b7c70281", 0x7}], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c0000003e417b9d180bb12d8b65cb5257a074a8a21bf275c35f8367781a4ff112c9e6c773be008f659a5a31eab36379848546c81bf40a0d936c9a1571ab50b0126e942a0e23541c28d67db542f72a70573a2a70deecb7428fd37ad2bde792a4c2a06870a755024f44ada6de23ce78b76bab64c6a93c163fc8fd00f3a2abd8db3d4f4296f5e8b4a8726c2022af", @ANYRES16=r6, @ANYBLOB="000826bd7000fedbdf252800000006003600f90c00000a00060008021100000000000a000600ffffffffffff00000a00060050505050505000000a00060050505050505000003d002a00dd0ca390e319deffa895643e9cf86512ffffffffffff080211000000ffffffffffff7e15e40507ffffffffffff0600000000800000fdffffff000000"], 0x8c}}, 0x884) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0xc0189436, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xdce2}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xe99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) 911.363498ms ago: executing program 3 (id=15628): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) listen(r1, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r6 = gettid() (async) r7 = getgid() (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) (async, rerun: 64) r11 = gettid() (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r16 = syz_open_procfs$namespace(r13, &(0x7f0000001780)='ns/ipc\x00') (async) r17 = getpid() sendmmsg$unix(r12, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r17, r14}}}, @rights={{0x18, 0x1, 0x1, [r16, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r22 = syz_open_procfs$namespace(r19, &(0x7f0000001780)='ns/ipc\x00') r23 = getpid() sendmmsg$unix(r18, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r19, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r19, 0x0, r21}}}, @cred={{0x1c, 0x1, 0x2, {r23, r20}}}, @rights={{0x18, 0x1, 0x1, [r22, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) r24 = gettid() syz_open_procfs$namespace(r24, &(0x7f00000006c0)='ns/time_for_children\x00') (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000015c0)=0x0) sendmmsg$unix(r4, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0), 0x0, 0x800}}, {{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000240)="96d24e179daa14e1aea1c08c8f047d8225967606ba65f253e86b0b65759068172b8d4b988269a4ec29bd91bf1cab27f77fbed88189c1495aacf2c43982632b5a069910fdd49fe071a3a3b6e0c663bd67f2b5b2c6be9337db64d9bbe2b9cc80c4dcd157df9d96b7a0818afedf09374048a92291cb96e2268d0dd86c094d07bd0b72a4dd99343bb0f7b3d15e02924ab87a34129e60bc9e6a7799df4701dd", 0x9d}, {&(0x7f0000000300)="1a3786ae0b074386b56e560b6b31af708d80041111fb93dd0f61edc99c781fcfcee40a14280acc341de32fd001c7d815779e763bcb846af224860c00a3cedaafc06699721544a9adb6432e87afeafe172b7d38e0b38e0cf0d5f50e049244aed050c7a2d3cc36d64dcb62400f612a1ad8a3710cb24754554c7d0fd4626d145cceb10a21823116cfd8836b", 0x8a}, {&(0x7f0000000580)="6b6c6a7b346e57506f5176de2ae01f927dca62bea2e83b2179d04cb0f1cf22d75248e47be1b082a7f8cfb29425bcbdd10773186ab099a188506bdaa9db8a49cb435b8e773b5efdea838d0c7bfd06d3797bff1f53acec3fad327610570ae8a3025caacea1a4d2f4952536bb443a60bcdd5243ae4753e8d523b4fb2bdfd72602770eac179ae87f8be0b76e014437b7b506abc1030f4b34a5a917662b0956f8cfef188afcb0130aa7da805bd4d53e4349783f70e1d6065f35f58272b53a917da9e420ffef02f877bb3a69a870566e81d2e2d23308443a966714ad8647efc12f61f800e7372003ab320b72998d4d34b89e874221d4bd42f4f6499f597174b673267ae26daaa5d4f10143b687611a9b4e6528ab652764e8e91da4f32c6a63d38c35672093929ab94f70eee272e24c0989d8e786f0deb7caf84e2cbbd97e5354b14bc14e8999afe1b753077ba45445b540ffda335a861cc3d4e1668f70b6ca0dbc237fa0727edd2c2d7500f68d23031b436a072db6b167b2a1a7947697da5ffb1a261f9aba3564fa1aa7685b8f5f059ab9e0cff7d389e8f1c71c219758f08b4317c0ec46f36b26a116ca87cfa47303756045d7ad24fda18dad3ee28a770ea63440d69331baa4f474661cd35ffa0c9581935a64d9aa1a2689a683c37df05edfac79ec039142c189484ba862a88b96a8dd8accd917d0b51c2b17d43dd7a6b7707c04ba655f579872347ec07bb4927ef881b717f455912e113e470746ed633da54823fe5026c291a59dc89cacb0e4025f72d81e7a16f1e45a3c8d1ba7c5303e448c18ea02025f934fc37c40a28208578e27b61f5f1e1d3ba4d064e869d75328bf51b40b6b469ed6bb8a1a2450b8064ee1aa2d4fa049023121c6684feed1423d14d33e1bbd4f1231921835499f63282bff1bb8ec2e93b325e6fd9ca2f8d435393a8fe485232a864ac547eeb2a0aea4d3ed9217903ceb65471812e0c3fdfee0fb7dec1962a1817bc6a1748242641945bc4806f01e29d6e002f8dc4989d0ce8ad9e3bb840a6910f04502a614863a317f349596618097c595510cbdeef4c0c8d394eda0ad7ae4641480c926d2f15498ac7cf5b4c57dfad6412d9ed2697342ee69cc0f752a9b37f444942788f98170ef5dbaab261a05d0832f07cb3b04dc4a32f7d4c38fd3d01e614d12e7066f988d41527d73fd2a9f2d23d61dd643bac6e0fcf47d0e024e3101cdc9c20f95d1a79ff1396dc40eb6dcb7d16d02bea4a8bf187d2269226de0947034dc9deb7036563261b48f469dab25a1ad2dc9fb8b66610579e27c7fb0667a3bb72c62079e51a31e9c297bef7a8fbeb97db1a30e9928554110656ee1a9b59631ae6a43744687e1b98a21e417c15720905832e378431c16b9fcf3a5b7632d10b8e40c45fc1284b2e5602e8f749d9b53023c9ad936cac3361e93210b78ac564ec68b31bbf2238776c4643cd70a4de684270861b60e7665b57bcca753b0368b59afb47a36a204ee3dd23cfafe4ea3d08e75e20e6a1dce0bbcff604d3c6725121e971244b85017e46785d5c8a0b14d5bace8ee17693dffdaac7034f9c3fa77b790ff84bc49515404367a727aecfec519438693fbda01569c1794022edeb6e80c06037a62129f86415470fd7f82dbfb8c5aaa611936d9788bde1b63a0f91b5f88ae2701407c8d78cb09e40dd070a336cfc69858f3d0336b86bb7b72c5e8cca386fb0458546c2d29be790d475f46180ef956e033e08b0adc9576b3fcc836b755dc146fa389c4fbad8cbc7ae227f3c0704f5ba46c0af24398b57c871a9a681f5823be7e89875f20257c63e4c2670e9d8f3d92392cd349cdd3e68574a560b9c323af8806a2ce032b90b9c9cec188ef5aa154b42f90b67313eb8ebf0c5c16ddb9d2ae399f66271110325546ee7f95e3d2c9a6aae42c6450753e0ca430586ab5415fc74011fc6fe1900ff02e451cb0ee77c0f4b16641b25b1bbbc74624e33f8a6229615037cb272362fbd80d06f2bcda04d0eddd8a32812e4ea4638b8767d24311aecbabbcf874003c4910191f6ee113f646ffb5d1fe1f16c0483eab05d88ade72f268d193611b0266041325acb4e089f683803ecc725a1211d6e8d6f62fb181b4f8a3698abcd1cbfb4132c8d8678c0fd3637b7ec19c6d8550610f91355d5ea7a427ea8a13d0cf1191953cd419b09689e3ae17dc3c302c95f8497abd744a3148b853256e41a470478f55b5a00f968a777a1b4340e03885474747a772c6c2663f5287b10d993bd5b385979e74203aec8b7b5526b075393f5edbd46874d90f8a0d9029176c3615e75673fdb4d1096c2f740327e3ef4973b37d57f5c46cfbec7061250219a466e17854600af89a831ee28d2d32b8d633463545f16eb7d76e532e230017ef85f0ceead146330be8614f0884916d5bb49ad462b2ff16f6804d1831db8aaed7ff3a8e47706bc47eb91d7fc489a48c35ef658f3c1d59031ca828db939671038983b82f85fa99532a58d476b18c7d40534ecaa3f2ab43871f4e2b7860a86f5c11a27f0219fafe1b6bf39f06cd02de73ed83e306a1027d1750b746de98632d6aaa1c34909d5abeb7c28705d3914a57b1a905a2222f7a2325cb689dd8cc42cd572fb2e36afd80f4d3042254eeb527b0a2e3557aa32e194b3a14268fbba30be39e14a53afd99608357374d37401e289dcdbc5099095fb52a5a8229766a25f398b3afe9911776de0e10bf932e83dbca027ab748341c548b40eeca04f69afc9c60db6c583c5b57467847b4a656043701eda6c1d3b1541f601052d73c41cc0549e359ad6cb009b5f2c2f0453b9dfe07a99b7f603d41ede9632c320ba29c5c0926b205dd6cba8db39e183111229ae5b597675fe113b53a5dd39ffddfb1c0a6b9c33a48ec10463fa42ff454a03fbc0c8c57ee6e12e3a09e19da433dc670cc29e540f4464581e5ff080806903dfd6c27678fe6ada9768e8fa3ae31a78eb8b7b6554642fb1a33c173ed2bbc56eda3cf2ae8a0a548d5f14f50f04de20465397fb395594e9a2df62649b4bfae880e2dd6254587bafb7a50d6679291aafd15ab976889d67cc23bfef40a50ef0bdffb92c000e2a00edbf39022175fbd26b583855595c32e52b48750840acfd923df62ea3fe22577f1868ce1917cb9331be0bb8eb5e112c72b0413f7e999ab925dc424e1a871400970c648f6df64870de7875d40270d5f2dabb423c61fb941496e25cd8ec17fe937596bdc10b3f0d3a50dd0098076c909b5af57e4d1e2a00ca306abe64001c82a4b3096fc86e4a8f1a446ead5ed58eee71705c66e4c71e80f849fc2f6e4f090b289cd2935aa10211c620b223866d8ffbed993703062a5138a3c015cff622f6843d2879649e5d7b41e31b2dba5191c30d257fdb6eb55f4694bee694df804404db574cd3c1e11fcc84b31d7ff40550b6f8972f16417afe173c251496c851b7f29b2e08725c8dd2024847415d747996a8c42aff73e8ed7fa209754912ad8d8730abc73d1350902f3b3231b143705f2a6e2ee0815052cc6de2bdc3d8b522ef2ced30aaf94e754ac01494fd5ede0ee9a4bce65d9bc20b0da0e5643951ea61a8bc302d861a763fd58e273458238382ac429bd1b4913c5c3196b0a374becc1765f84adcaf65b712a952601001cf6dee7270c07110ea5dd03ad8f9a9bb3958b2572eb5f9783966503af395b4c3cb7aa659340fab7658faa96f038c4c034941d45d34b8d9726387584e69c03e72939e00ebf09e82c7e1b73a690247be41285531b6225a887c1c60f998cf40d438e2b2fbec42e258eaaba12bd041005d052c115fcac7c73ff70209bdaa53f8421f3f8d7253cd2d56ff5dba2598a500d5040cb037b17c3522de8f8cd30dd27ea6e7a58f764578b09630a0efe2c2f4ba872d2a32364db17eb69a8049056022e71bd873aa0fec65a58aa8672cfe649b651385ab5e872ae9b2d6e74b4b0b0d2f16d13694ba12c6f2087312a152fb38262b24d68619b2369a74e340dd09fa75595253e522ba74f2b419774f5fa6e68132fd2945ee11ac08f994d1082d4edd3e31217a7823af2cc4d804b8d4338ba2b23697ba5ba61843926122a3111d06cba49e00b69ce049d9dbc9c5543477d1d466786a8a6eed41f210f8834345c1418f98b39161f2afd5a4173500dbf8c87345c0b740492e3502113ae55e0af5bd3f0bdce262d68dc75fa7bd5ac3b4c92e150fd80b9cac1234ff73954a515a7f78c2587313f6e3f031c701c974795a92b9ee323254772d9d7c850fca4a4417d31472c0f28f897da4ad1e478704ba15e5b0c1b403775f0c206f3c0bc7eef0d3832ab3bad066e3bc64e31fd82dc3bdedd66b34387abf289c1a593237aa07addfa025f1f31a73585ce629f678dca4b95574a13fd6686807262c9a5599a1eff4b4709dd4f1b6a5d7ea8823ecfb50c5dfe26cda384c8e23955acc529557e905058ad34a736130e97aefedef38b4862e32e7445d6938526541756558f7afd2269674b9fb8a7b26d6887c59dcdbb472e179a42d93a17c68925d4cab5b523cd2dd3e89156f28be49667c1404a8db5b554a80c463f056ae1f692e661fcf9bbcdc7624461850765379983a1f3fa045db7433dd193c26a32b5acac2381c45637d24240ce57703a386f17338a01040786142ac932eb38430431202ec8e99c5fce91f5e34a117ef6e7c17fbc97e3badd19fd8e535f0314d405c5fe14be7c9151ac14452f69c6d634e321ae9560041a9cf87b05a9dee709018b4f7d4fa85872850443a5b5b53d5bda69ff94f73df99d6aa320f576a9d1b9d9c399d2bb95d85d6bb17e513acc72db7d5357b94f4dbef86756c49f178183c3645ab875c1e416607917f5efb1183b45e47ee81b4b926a82fddfa63eb9de5d450d21bbe240fde6a6b88d4be07c281c17c70dfbd8a0cd5604a781704e78602cc9111dae4d120c7ca1cec7dcc77fda1e16abc0b4c101fbb4669997776a1ca68bdea24eccbe422a8fc81a256d3f77722ea8db63beeec3cc4d7e1e97aa2350ff5bdea49744e41bc56d52261b34690b798dbe2901d3574d96a55f96dba33e3030ddf2cef3677b497dba33b1176ea2a4fa568f395c36056c53c199016e445cdbd99465ba570968216f38cc6a989c1f46260f2f3611b4471429f22a56fe748e4613104a761aa17585b943ed5d26220f03afdb7df486ca070d82e30a5bed8dba2f1733251e05ff4a4311f3521ce1f63f7c1284e3e29602eefb8f47b6c707e1408408624e424b04698eae5c0fdc98fea68a00e83a95298b1860e87f25766d9aa8dfa2f6c09c8ff0342d4d9380592611c0a72595d3ff242c45fb10eb702d172ac0f6f31ff5aa31e608d9575144e196bae1d16845438655bc354507c85d84625485d9ba4b68c0a1ede4c38d8103a2ecc47e0be1554d69892daca65b0ffb07dc6fdd7651b893290af7653eaf939f1a64a3068292b5e558068deb1c3d78be90695aac7437bdc0c2ef09e328ee1818d0d4b0842b3249cf9e2a6f3cf322733f527fc36652315f53336732e310fec552f8e7f457d957920731379a5d0c687421075bb5756e06c4b083ba84dfc68a1335b67033bd23f6ed680940b394ab472b8f4a97e79f1d641b866f321351975301cdba0bad97f6c2633db841e0fba6874bc6b3fc8d754f5cbac1fe2efb47ae3946ead6f4bfd475517e7314f3483f82ec45fad61ec529422ae8fa2eb899ed2a127065872207dbd831390473934c329b43da4f2488d573c02eae53654137fc332cad80ebcf42d0aef6d11376bb798db11a912984123a3cde38ab676b18d63fb8", 0x1000}, {&(0x7f00000003c0)="c3e4a3efb795686353ddccf961f2162c3691cec0ad0e70573424c4cf16ac0692e4fea8d21ea3e0992480deccaf756d37af7bf700838611ee66e30e8a0160759a5a87e9cedfe0f0885406be807ab55e5c2e9c262587b64a61fb99b3e3dac69c263875fd5970c595fe0db9bff133882315a3fbcc0e96b85ca8bf12a8d503e3139628e7b72ec62c9351982379287b8a7d58cb2e99f3ab070cd95759b665b5ea75a9edd50c90242bd9af47c93509c99244a1d863afeeeba8779d79133d8b51753e61dccc5d423bc60dca9030a7957c71c8386c69638be33b807b4f77fcdae0f7", 0xde}], 0x4, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}, @rights={{0x34, 0x1, 0x1, [r4, r3, r3, r2, r1, r5, r0, r0, r4]}}, @rights={{0x30, 0x1, 0x1, [r4, r5, r1, r8, r3, r1, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r9, r0, r5, r2, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r21}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25}}}, @cred={{0x1c}}], 0x110, 0x4040}}], 0x2, 0x800) close(r3) 910.211334ms ago: executing program 2 (id=15629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000013c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001380)={&(0x7f0000000e40)={0x20, r3, 0x101, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x8800) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 909.791961ms ago: executing program 0 (id=15630): syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000c40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x8, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@routing={0x87, 0x0, 0x0, 0x5}]}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000b400000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x2c, 0x18, 0x400, 0x0, 0x0, {0x2, 0x34, 0x0, 0x1, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}}, 0x40080) 768.399509ms ago: executing program 0 (id=15632): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000040)) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d80000dfdc84e0054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x8040) 758.436407ms ago: executing program 3 (id=15633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000200)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x81, 0x0, 0x0, 0x0, 0x7f5, &(0x7f0000000140)='veth1_to_team\x00', 0x100000000, 0x8, 0x1157}) close(r0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x7, @loopback, 0x9}}}, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x3}, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="07000000528c44ee04000000", @ANYRES32=r0, @ANYBLOB="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"/384, @ANYRES64=0x0], 0x20) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000002c0)) socket$phonet(0x23, 0x2, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000300), 0x4) 599.975747ms ago: executing program 2 (id=15634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) 598.936905ms ago: executing program 0 (id=15635): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14001a001000010000000000000000070000000a14000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14001a001000010000000000000000070000000a14000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x8, 0x4a, 0x1, 0x8001}, {0xa000, 0x4, 0x2, 0xee}, {0xff59, 0xf2, 0x4, 0x5}]}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x4004000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) 557.483107ms ago: executing program 3 (id=15636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x39}, "000000000000bdbd", "e8ffff00002d776813cc94ce8d00", '\x00', "ba0200"}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 410.920974ms ago: executing program 2 (id=15637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xd9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r7, {0x0, 0xf0}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 327.940999ms ago: executing program 3 (id=15638): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8915, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @remote}}}, {{}, 0x0, @in=@local}}, &(0x7f0000000380)=0xfdd1) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000380)=0xfdd1) r8 = getgid() socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={r4, r7, r8}, 0xc) (async) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={r4, r7, r8}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 127.152601ms ago: executing program 0 (id=15639): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 0s ago: executing program 3 (id=15640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) listen(r1, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 0 [ 1130.502213][T22062] syzkaller0: entered promiscuous mode [ 1130.512782][T22062] syzkaller0: entered allmulticast mode [ 1130.544420][T22062] tipc: Resetting bearer [ 1130.677047][T22061] tipc: Resetting bearer [ 1130.814001][T22091] netlink: 'syz.0.13429': attribute type 1 has an invalid length. [ 1131.055880][T22101] ipt_ECN: cannot use operation on non-tcp rule [ 1132.466147][T22061] tipc: Disabling bearer [ 1133.177438][T22154] can: request_module (can-proto-5) failed. [ 1133.408863][T22174] netlink: 'syz.2.13455': attribute type 1 has an invalid length. [ 1133.444580][T22174] bond3: entered promiscuous mode [ 1133.450030][T22174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1133.498678][T22174] bond3: (slave bridge3): making interface the new active one [ 1133.523411][T22174] bridge3: entered promiscuous mode [ 1133.533627][T22181] __nla_validate_parse: 15 callbacks suppressed [ 1133.533644][T22181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13457'. [ 1133.550693][T22174] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1133.582193][T22180] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1133.598833][T22174] macvlan2: entered promiscuous mode [ 1133.606670][T22174] macvlan2: entered allmulticast mode [ 1133.613685][T22174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1133.690629][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13460'. [ 1133.836640][T22196] xt_hashlimit: size too large, truncated to 1048576 [ 1133.882027][T22207] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1133.882663][T22205] netlink: 'syz.3.13464': attribute type 13 has an invalid length. [ 1133.923204][T22205] macvtap0: entered allmulticast mode [ 1133.944961][T22205] macvtap0: refused to change device tx_queue_len [ 1134.025636][T22214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13466'. [ 1134.056724][T22215] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13466'. [ 1134.108478][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13467'. [ 1134.706856][T22247] netlink: 6 bytes leftover after parsing attributes in process `syz.3.13474'. [ 1134.732826][T22247] netlink: 'syz.3.13474': attribute type 2 has an invalid length. [ 1134.889202][T22257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1134.902374][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1134.916421][T22257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1134.929208][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1135.212519][T22286] netlink: 'syz.2.13484': attribute type 1 has an invalid length. [ 1135.296534][T22290] netlink: 'syz.4.13486': attribute type 11 has an invalid length. [ 1135.486735][T22302] vxcan1: entered promiscuous mode [ 1135.501361][T22302] vxcan1: entered allmulticast mode [ 1135.660865][T22315] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1135.877224][T22331] netlink: 'syz.0.13500': attribute type 10 has an invalid length. [ 1135.930064][T22331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.937866][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.977069][T22331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.984295][T22331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.991798][T22331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.999031][T22331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.057445][T22331] `: (slave bridge0): Enslaving as an active interface with an up link [ 1136.298154][T22364] macvtap1: entered promiscuous mode [ 1136.311189][T22364] macvtap1: entered allmulticast mode [ 1136.316755][T22364] veth1_vlan: entered allmulticast mode [ 1136.377418][T22372] netlink: 'syz.4.13508': attribute type 12 has an invalid length. [ 1136.383307][T22371] netlink: 'syz.3.13510': attribute type 10 has an invalid length. [ 1136.397835][T22367] macvtap2: entered promiscuous mode [ 1136.403251][T22367] macvtap2: entered allmulticast mode [ 1136.422872][T22371] bridge_slave_1: left allmulticast mode [ 1136.430469][T22371] bridge_slave_1: left promiscuous mode [ 1136.438098][T22371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.459830][T22379] netlink: 'syz.2.13511': attribute type 1 has an invalid length. [ 1136.468944][T22371] bridge_slave_1: entered allmulticast mode [ 1136.476045][T22371] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1136.506240][T22372] bond1: option primary_reselect: invalid value (255) [ 1136.515473][T22372] bond1 (unregistering): Released all slaves [ 1136.546139][T22379] netlink: 'syz.2.13511': attribute type 1 has an invalid length. [ 1136.647712][T22387] mac80211_hwsim hwsim113 wlan0: entered promiscuous mode [ 1136.879671][T22413] netlink: 'syz.0.13520': attribute type 12 has an invalid length. [ 1137.047589][T22421] netlink: 'syz.4.13524': attribute type 7 has an invalid length. [ 1137.349763][T22438] netlink: 'syz.4.13527': attribute type 1 has an invalid length. [ 1137.359379][T22445] xt_recent: Unsupported userspace flags (000000b1) [ 1137.570706][T22461] syzkaller0: entered promiscuous mode [ 1137.576389][T22461] syzkaller0: entered allmulticast mode [ 1138.275687][T22522] tipc: Failed to remove unknown binding: 66,0,0/1837604700:3516504351/3516504352 [ 1138.366619][T22519] tipc: Failed to remove unknown binding: 66,0,0/1837604700:3516504351/3516504352 [ 1138.380337][T22526] bond1: (slave 5gQ[): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1138.469924][T13925] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1138.475923][T22526] bond1: (slave 5gQ[): Enslaving as an active interface with an up link [ 1138.539928][T22526] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1138.963097][T22573] __nla_validate_parse: 14 callbacks suppressed [ 1138.963116][T22573] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.13564'. [ 1139.065868][T22577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13566'. [ 1139.148050][T22584] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13569'. [ 1139.177080][T22585] bond4: entered promiscuous mode [ 1139.182517][T22585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1139.189742][T22584] netlink: Conntrack attr has 3 unknown bytes [ 1139.239509][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13571'. [ 1139.547835][T22620] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13577'. [ 1139.548461][T22621] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13577'. [ 1139.625308][T22627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13576'. [ 1139.660429][T22609] veth1_vlan (unregistering): left allmulticast mode [ 1139.883047][T22620] gretap0: entered promiscuous mode [ 1140.000515][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13584'. [ 1140.111836][T22656] IPv6: NLM_F_CREATE should be specified when creating new route [ 1140.162300][T22656] netlink: 252 bytes leftover after parsing attributes in process `syz.4.13587'. [ 1140.249405][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13590'. [ 1140.300499][T22675] 8021q: VLANs not supported on wg2 [ 1141.427413][T22753] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 1141.470897][T22758] validate_nla: 1 callbacks suppressed [ 1141.470915][T22758] netlink: 'syz.4.13616': attribute type 10 has an invalid length. [ 1141.674941][T22765] bond4: Unable to set up delay as MII monitoring is disabled [ 1141.686462][T22765] bond4 (unregistering): Released all slaves [ 1142.192015][T22804] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1142.231618][T22804] team1: entered promiscuous mode [ 1142.237792][T22804] team1: entered allmulticast mode [ 1142.272532][T22807] syzkaller0: entered promiscuous mode [ 1142.278281][T22807] syzkaller0: entered allmulticast mode [ 1142.290204][T22807] netlink: Conntrack attr has 4 unknown bytes [ 1142.392257][T22812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.433895][T22813] C: renamed from lo (while UP) [ 1142.440962][T22813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1142.559095][T22817] openvswitch: netlink: Flow actions attr not present in new flow. [ 1142.602021][T22821] tc_dump_action: action bad kind [ 1142.814864][T22835] ip6_vti0 speed is unknown, defaulting to 1000 [ 1143.057616][T22835] lo speed is unknown, defaulting to 1000 [ 1143.249847][T22863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.731243][T22886] netlink: 'syz.1.13660': attribute type 17 has an invalid length. [ 1143.788916][T22886] gretap0: entered promiscuous mode [ 1143.796083][T22886] gretap0: left promiscuous mode [ 1143.923251][T22898] netlink: 'syz.1.13664': attribute type 4 has an invalid length. [ 1144.025606][T22910] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1144.044392][T22910] dvmrp6: entered allmulticast mode [ 1144.297899][T22931] __nla_validate_parse: 19 callbacks suppressed [ 1144.297917][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13673'. [ 1144.336661][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13673'. [ 1144.447443][T14395] bond0: (slave bond_slave_0): interface is now down [ 1144.474426][T14395] bond0: (slave bond_slave_1): interface is now down [ 1144.481562][T14395] bond0: (slave bridge_slave_1): interface is now down [ 1144.513418][T14395] bond0: now running without any active interface! [ 1144.694594][T22953] xt_CT: No such helper "pptp" [ 1144.717455][T22965] block nbd1: NBD_DISCONNECT [ 1144.722092][T22965] block nbd1: Send disconnect failed -32 [ 1144.748708][T22965] block nbd1: shutting down sockets [ 1144.925964][T22977] netlink: 'syz.2.13691': attribute type 1 has an invalid length. [ 1144.943852][T22977] netlink: 228 bytes leftover after parsing attributes in process `syz.2.13691'. [ 1144.981526][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13690'. [ 1145.005679][T22985] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1145.035630][T22985] netlink: 'syz.0.13692': attribute type 3 has an invalid length. [ 1145.043486][T22985] netlink: 244 bytes leftover after parsing attributes in process `syz.0.13692'. [ 1145.163152][T22994] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1145.321060][T23003] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1145.497831][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13699'. [ 1145.538238][T23012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1145.626522][T23017] ip6_vti0 speed is unknown, defaulting to 1000 [ 1145.805956][T23017] lo speed is unknown, defaulting to 1000 [ 1145.899958][T23030] netlink: 'syz.4.13705': attribute type 4 has an invalid length. [ 1145.902209][T23034] openvswitch: netlink: Flow actions attr not present in new flow. [ 1145.929781][T23030] netlink: 'syz.4.13705': attribute type 1 has an invalid length. [ 1145.939912][T23030] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13705'. [ 1146.239564][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13711'. [ 1146.260061][T23048] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1146.593279][T23070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13713'. [ 1146.652278][T23079] netlink: 'syz.0.13715': attribute type 1 has an invalid length. [ 1146.661359][T23079] netlink: 244 bytes leftover after parsing attributes in process `syz.0.13715'. [ 1146.823349][T23090] netlink: 'syz.1.13720': attribute type 15 has an invalid length. [ 1146.904473][T23094] ipt_ECN: cannot use operation on non-tcp rule [ 1146.975455][T23099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1147.067783][T23108] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1147.347570][T23131] bridge_slave_0: left allmulticast mode [ 1147.354591][T23131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.386809][T23131] bridge_slave_1: left allmulticast mode [ 1147.392917][T23131] bridge_slave_1: left promiscuous mode [ 1147.408363][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.444686][T23131] team0: Port device team_slave_1 removed [ 1147.468450][T23131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1147.881960][T23155] netlink: 'syz.4.13740': attribute type 4 has an invalid length. [ 1148.448817][T23192] syzkaller0: entered promiscuous mode [ 1148.455010][T23192] syzkaller0: entered allmulticast mode [ 1148.575158][T27397] Bluetooth: hci1: command 0x041b tx timeout [ 1148.778118][T23213] netlink: 'syz.2.13754': attribute type 5 has an invalid length. [ 1149.117282][T23244] syzkaller0: entered promiscuous mode [ 1149.122920][T23244] syzkaller0: entered allmulticast mode [ 1149.210384][T23251] syzkaller1: entered promiscuous mode [ 1149.222740][T23251] syzkaller1: entered allmulticast mode [ 1149.288998][T23257] ip6t_REJECT: ECHOREPLY is not supported [ 1149.491001][T23270] netlink: 'syz.3.13774': attribute type 10 has an invalid length. [ 1149.502803][T23270] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1149.518644][T23270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1149.697097][T23283] netlink: 'syz.0.13779': attribute type 12 has an invalid length. [ 1149.726216][T23283] __nla_validate_parse: 12 callbacks suppressed [ 1149.726235][T23283] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.13779'. [ 1149.832317][T23285] netlink: 'syz.3.13781': attribute type 83 has an invalid length. [ 1149.841960][T23293] netlink: 'syz.0.13779': attribute type 12 has an invalid length. [ 1149.848493][T23292] pim6reg1: entered promiscuous mode [ 1149.855755][T23292] pim6reg1: entered allmulticast mode [ 1149.878511][T23293] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.13779'. [ 1150.085479][T23316] sctp: [Deprecated]: syz.0.13789 (pid 23316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1150.085479][T23316] Use struct sctp_sack_info instead [ 1150.119929][T23309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13787'. [ 1150.228887][T23326] netlink: 'syz.0.13791': attribute type 17 has an invalid length. [ 1150.252273][T23326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13791'. [ 1150.272612][T23326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13791'. [ 1150.368085][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13794'. [ 1150.421782][T23341] tipc: Enabled bearer , priority 0 [ 1150.456824][T23341] syzkaller0: entered allmulticast mode [ 1150.535649][T23341] tipc: Resetting bearer [ 1150.588692][T23354] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13801'. [ 1150.602994][T23340] tipc: Disabling bearer [ 1150.613724][T23357] netlink: 'syz.4.13798': attribute type 21 has an invalid length. [ 1150.858065][T23369] bond6: entered promiscuous mode [ 1150.883914][T23369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1150.983269][T23379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13805'. [ 1150.989727][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13810'. [ 1151.031436][T23379] bond6: entered allmulticast mode [ 1151.110940][T23396] bond6: (slave bridge3): making interface the new active one [ 1151.125272][T23396] bridge3: entered promiscuous mode [ 1151.130880][T23396] bridge3: entered allmulticast mode [ 1151.142427][T23396] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 1151.240020][T23404] netlink: 596 bytes leftover after parsing attributes in process `syz.1.13814'. [ 1151.411410][T23410] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1151.430514][T23410] bond5: (slave lo): Enslaving as an active interface with an up link [ 1151.439644][T23410] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1151.457426][T27318] lo speed is unknown, defaulting to 1000 [ 1151.463358][T17596] lo speed is unknown, defaulting to 1000 [ 1151.469465][T17596] syz0: Port: 1 Link ACTIVE [ 1151.480123][T23410] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1151.652143][T17282] lec:lec_start_xmit: lec0:No lecd attached [ 1151.821831][T27318] IPVS: starting estimator thread 0... [ 1151.924324][T23443] IPVS: using max 31 ests per chain, 74400 per kthread [ 1151.954623][T23450] validate_nla: 5 callbacks suppressed [ 1151.954641][T23450] netlink: 'syz.0.13829': attribute type 23 has an invalid length. [ 1152.217273][T23475] netlink: 'syz.1.13834': attribute type 1 has an invalid length. [ 1152.250854][T23476] syz_tun: left allmulticast mode [ 1152.268636][T23476] syz_tun: left promiscuous mode [ 1152.284006][T23476] bridge0: port 2(syz_tun) entered disabled state [ 1152.310717][T23476] bridge_slave_0: left allmulticast mode [ 1152.346378][T23476] bridge_slave_0: left promiscuous mode [ 1152.363365][T23476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.387315][T23489] netlink: 'syz.3.13841': attribute type 1 has an invalid length. [ 1152.403420][T23489] netlink: 'syz.3.13841': attribute type 2 has an invalid length. [ 1152.418673][T23489] netlink: 'syz.3.13841': attribute type 1 has an invalid length. [ 1152.965363][T23520] IPv6: sit2: Disabled Multicast RS [ 1152.971649][T23520] sit2: entered allmulticast mode [ 1153.244528][T23539] netlink: 'syz.3.13858': attribute type 23 has an invalid length. [ 1153.326198][T23547] syz_tun: entered allmulticast mode [ 1153.463419][T23547] syz_tun: left allmulticast mode [ 1153.482350][T23562] netlink: 'syz.1.13862': attribute type 1 has an invalid length. [ 1153.490894][T23562] netlink: 'syz.1.13862': attribute type 2 has an invalid length. [ 1153.522000][T23562] netlink: 'syz.1.13862': attribute type 1 has an invalid length. [ 1153.638457][T23570] netlink: 'syz.4.13866': attribute type 2 has an invalid length. [ 1153.758220][T23574] netem: change failed [ 1153.998928][T23602] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1154.021936][T23602] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1154.032517][T23602] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1154.282416][T23631] netlink: 'syz.1.13884': attribute type 11 has an invalid length. [ 1154.958609][T23660] __nla_validate_parse: 20 callbacks suppressed [ 1154.958627][T23660] netlink: 512 bytes leftover after parsing attributes in process `syz.1.13892'. [ 1155.150602][T23681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13901'. [ 1155.185742][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13901'. [ 1155.222008][T23681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13901'. [ 1155.287476][T23693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13903'. [ 1155.422240][T23706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13909'. [ 1155.441696][T23707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13909'. [ 1155.755185][T23728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13914'. [ 1155.835912][T23725] netlink: 212176 bytes leftover after parsing attributes in process `syz.3.13912'. [ 1155.860549][T23742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13913'. [ 1155.922853][T23730] tap0: tun_chr_ioctl cmd 1074025676 [ 1155.928790][T23730] tap0: owner set to 0 [ 1156.088472][T23751] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1156.129795][T23751] syzkaller0: entered promiscuous mode [ 1156.147770][T23751] syzkaller0: entered allmulticast mode [ 1156.446253][T23776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1156.503577][T23776] team0: Device macvlan2 is already an upper device of the team interface [ 1156.613026][T23771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.638871][T23780] gretap2: entered promiscuous mode [ 1156.663672][T23780] bond8: (slave gretap2): making interface the new active one [ 1156.673848][T23780] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1156.709680][T23793] team0 (unregistering): Port device team_slave_0 removed [ 1156.733161][T23793] team0 (unregistering): Port device team_slave_1 removed [ 1156.745120][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1156.745149][ C1] lec:lec_tx_timeout: lec0 [ 1156.778367][T23785] macvlan2: entered promiscuous mode [ 1156.783796][T23785] macvlan2: entered allmulticast mode [ 1156.791896][T23785] bond8: entered promiscuous mode [ 1156.798826][T23785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1156.807298][T23785] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1156.825001][T23785] bond8: left promiscuous mode [ 1156.841621][T23771] bond4 (unregistering): Released all slaves [ 1157.076043][T23814] siw: device registration error -23 [ 1157.239366][T23826] veth0: entered promiscuous mode [ 1157.255470][T23826] veth0 (unregistering): left promiscuous mode [ 1157.305428][T27397] block nbd1: Receive control failed (result -32) [ 1157.637223][T23847] validate_nla: 4 callbacks suppressed [ 1157.637242][T23847] netlink: 'syz.4.13946': attribute type 1 has an invalid length. [ 1157.674480][T23850] netlink: 'syz.3.13948': attribute type 5 has an invalid length. [ 1158.002463][T23873] netlink: 'syz.3.13953': attribute type 28 has an invalid length. [ 1158.004962][T23874] netlink: 'syz.3.13953': attribute type 28 has an invalid length. [ 1158.012241][T23873] netlink: 'syz.3.13953': attribute type 3 has an invalid length. [ 1158.019274][T23874] netlink: 'syz.3.13953': attribute type 3 has an invalid length. [ 1158.815061][T27397] Bluetooth: hci4: command 0x040f tx timeout [ 1160.722708][T23853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1160.897699][T23911] __nla_validate_parse: 12 callbacks suppressed [ 1160.897718][T23911] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13964'. [ 1160.914746][T23910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13962'. [ 1160.936357][T23905] netlink: 'syz.2.13961': attribute type 7 has an invalid length. [ 1161.030216][T23927] "syz.0.13967" (23927) uses obsolete ecb(arc4) skcipher [ 1161.038005][T23924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1161.038048][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1161.038072][T23924] netlink: 'syz.3.13965': attribute type 15 has an invalid length. [ 1161.074978][T15612] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1161.089708][T23924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1161.111563][T23927] netlink: 'syz.0.13967': attribute type 3 has an invalid length. [ 1161.119677][T23932] netlink: 'syz.2.13968': attribute type 21 has an invalid length. [ 1161.136320][T23932] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13968'. [ 1161.155791][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1161.166784][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13968'. [ 1161.187977][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13968'. [ 1161.213549][T23938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13971'. [ 1161.220468][T14395] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1161.233778][T14395] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1161.246485][T14395] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1161.260659][T23932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1161.354540][T23932] team0: Device veth0_macvtap failed to register rx_handler [ 1161.702507][T23966] xt_cgroup: xt_cgroup: no path or classid specified [ 1161.818459][T23973] netlink: Conntrack attr has 4 unknown bytes [ 1162.120528][T23990] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1162.204297][T23994] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1162.580356][T24022] ip6_vti0 speed is unknown, defaulting to 1000 [ 1162.698634][T24031] validate_nla: 5 callbacks suppressed [ 1162.698654][T24031] netlink: 'syz.0.13998': attribute type 4 has an invalid length. [ 1162.906161][T14651] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.916028][T14651] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.937627][T14651] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.965087][T14397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.969028][T14651] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.973065][T14397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.271427][T24022] lo speed is unknown, defaulting to 1000 [ 1163.297482][T24054] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1163.663188][T24098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1163.845897][T24105] syzkaller0: entered promiscuous mode [ 1163.851571][T24105] syzkaller0: entered allmulticast mode [ 1163.937613][T27397] Bluetooth: hci3: command 0x0419 tx timeout [ 1164.177409][T24113] mac80211_hwsim hwsim123 wlan0: entered promiscuous mode [ 1164.412686][T24147] syz_tun: entered allmulticast mode [ 1164.438065][T24150] tipc: Cannot configure node identity twice [ 1164.449318][T24145] syz_tun: left allmulticast mode [ 1164.530312][T24154] syzkaller0: entered promiscuous mode [ 1164.536105][T24154] syzkaller0: entered allmulticast mode [ 1164.764805][T24175] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1164.808400][T24166] ip6_vti0 speed is unknown, defaulting to 1000 [ 1164.879206][T24178] tipc: Enabling of bearer rejected, failed to enable media [ 1164.920846][T24180] syzkaller0: entered promiscuous mode [ 1164.934191][T24180] syzkaller0: entered allmulticast mode [ 1165.179837][T24166] lo speed is unknown, defaulting to 1000 [ 1165.286975][T24205] syzkaller0: entered promiscuous mode [ 1165.292549][T24205] syzkaller0: entered allmulticast mode [ 1167.919986][T24186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1168.102536][T24226] __nla_validate_parse: 24 callbacks suppressed [ 1168.102556][T24226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.115908][T24229] netlink: 'syz.1.14053': attribute type 13 has an invalid length. [ 1168.160114][T24226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.169719][T24226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.223114][T24229] veth0_macvtap: left promiscuous mode [ 1168.248193][T24229] macvtap0: entered allmulticast mode [ 1168.285230][T24229] macvtap0: refused to change device tx_queue_len [ 1168.306863][T24226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.324998][T24226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.344498][T24226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.364823][T24226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14049'. [ 1168.383971][T24247] netlink: 'syz.3.14057': attribute type 1 has an invalid length. [ 1168.413934][T24247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14057'. [ 1168.576283][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14064'. [ 1168.602420][T24261] chnl_net:caif_netlink_parms(): no params data found [ 1168.613189][T24269] netlink: 'syz.1.14061': attribute type 1 has an invalid length. [ 1168.635042][T24269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1168.656497][T24271] vlan3: entered promiscuous mode [ 1168.661584][T24271] bridge0: entered promiscuous mode [ 1168.707839][T24265] syzkaller0: entered promiscuous mode [ 1168.713353][T24265] syzkaller0: entered allmulticast mode [ 1169.086599][T24309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14075'. [ 1169.161019][T24313] 0: renamed from hsr_slave_1 [ 1169.182442][T24313] 0: entered allmulticast mode [ 1169.204916][T24313] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1169.282409][T24326] block nbd11: Unsupported socket: should be TCP or UNIX. [ 1169.282647][T24314] ip6_vti0 speed is unknown, defaulting to 1000 [ 1169.535309][T24314] lo speed is unknown, defaulting to 1000 [ 1169.610189][T24335] netlink: 'syz.0.14082': attribute type 6 has an invalid length. [ 1169.689870][T24343] Cannot find add_set index 65532 as target [ 1169.972081][T24364] netlink: 'syz.3.14088': attribute type 21 has an invalid length. [ 1170.016166][T24367] vlan3: entered allmulticast mode [ 1170.021328][T24367] gretap0: entered allmulticast mode [ 1170.028294][T24367] bridge0: port 1(vlan3) entered blocking state [ 1170.035299][T24367] bridge0: port 1(vlan3) entered disabled state [ 1170.042308][T24371] netlink: 'syz.1.14091': attribute type 13 has an invalid length. [ 1170.046874][T24367] vlan3: entered promiscuous mode [ 1170.148768][T24371] macvtap0: refused to change device tx_queue_len [ 1170.369374][T24384] netlink: 'syz.2.14092': attribute type 2 has an invalid length. [ 1170.835770][T24415] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1171.169148][T24452] netlink: 'syz.2.14108': attribute type 4 has an invalid length. [ 1171.290189][T24461] ip6_vti0 speed is unknown, defaulting to 1000 [ 1171.558579][T24476] netlink: 'syz.3.14119': attribute type 25 has an invalid length. [ 1171.652475][T24461] lo speed is unknown, defaulting to 1000 [ 1172.037312][T24512] syzkaller0: entered promiscuous mode [ 1172.042825][T24512] syzkaller0: entered allmulticast mode [ 1172.469085][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c56b800: rx timeout, send abort [ 1172.477678][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c56b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1172.499173][T24538] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1173.062649][T24565] ip6_vti0 speed is unknown, defaulting to 1000 [ 1173.129734][T24574] xfrm1: entered allmulticast mode [ 1173.159772][T24579] veth0: entered promiscuous mode [ 1173.187928][T24579] __nla_validate_parse: 18 callbacks suppressed [ 1173.187948][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14149'. [ 1173.426102][T24589] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14152'. [ 1173.449063][T24590] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14151'. [ 1173.629469][T24565] lo speed is unknown, defaulting to 1000 [ 1174.010414][T24625] syzkaller0: entered promiscuous mode [ 1174.028548][T24625] syzkaller0: entered allmulticast mode [ 1174.050953][T24632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14161'. [ 1174.182004][T24625] can: request_module (can-proto-3) failed. [ 1174.438502][T24649] openvswitch: netlink: Key type 220 is out of range max 32 [ 1174.731438][T24677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14171'. [ 1174.761319][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14171'. [ 1174.826788][T24685] netlink: 83 bytes leftover after parsing attributes in process `syz.4.14173'. [ 1174.853476][T24684] ip6tnl0: entered promiscuous mode [ 1174.868154][T24684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14174'. [ 1174.880197][T24684] netlink: 167420 bytes leftover after parsing attributes in process `syz.3.14174'. [ 1175.022309][T24698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14181'. [ 1175.755415][T24759] netlink: 'syz.1.14197': attribute type 3 has an invalid length. [ 1175.763269][T24759] netlink: 'syz.1.14197': attribute type 3 has an invalid length. [ 1175.838581][T24758] netlink: 'syz.1.14197': attribute type 3 has an invalid length. [ 1175.846803][T24758] netlink: 'syz.1.14197': attribute type 3 has an invalid length. [ 1175.926485][T24767] macvtap1: entered allmulticast mode [ 1175.944806][T24767] veth0_macvtap: entered allmulticast mode [ 1176.209576][T24776] ip6_vti0 speed is unknown, defaulting to 1000 [ 1176.289028][T24796] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1176.311142][T24796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1176.344852][T14395] nci: nci_ntf_packet: unknown ntf opcode 0x41c [ 1176.362629][T24788] syzkaller0: entered promiscuous mode [ 1176.368926][T24788] syzkaller0: entered allmulticast mode [ 1176.472754][T24776] lo speed is unknown, defaulting to 1000 [ 1176.531953][T24806] tc_dump_action: action bad kind [ 1176.663334][T24812] openvswitch: netlink: Actions may not be safe on all matching packets [ 1177.045597][T24789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.224542][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.235469][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1179.209135][T24790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.304709][T27397] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.492762][T24833] erspan0: entered allmulticast mode [ 1179.660806][T24854] __nla_validate_parse: 9 callbacks suppressed [ 1179.660824][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14227'. [ 1179.693888][T24854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.708975][T24854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.742273][T24849] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1179.760077][T24854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.777668][T24854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.873099][T24873] openvswitch: netlink: IP tunnel dst address not specified [ 1179.893855][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14230'. [ 1179.917978][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14230'. [ 1179.942790][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14230'. [ 1180.082304][T24882] netlink: 'syz.4.14233': attribute type 1 has an invalid length. [ 1180.158980][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14233'. [ 1180.168224][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14233'. [ 1180.202201][T24886] bond5: option fail_over_mac: invalid value (16) [ 1180.247242][T24886] bond5 (unregistering): Released all slaves [ 1180.381904][T24882] bond1: entered promiscuous mode [ 1180.387570][T24882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1180.400525][T24893] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1180.482547][T24897] bond1: (slave bridge0): making interface the new active one [ 1180.508255][T24897] bridge0: entered promiscuous mode [ 1180.516027][T24897] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1180.638645][T24914] netlink: 'syz.3.14239': attribute type 1 has an invalid length. [ 1180.700483][T24914] bond6: entered promiscuous mode [ 1180.706173][T24914] bond6: entered allmulticast mode [ 1180.711758][T24914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1180.735248][T24914] erspan1: entered allmulticast mode [ 1180.744667][T24914] bond6: (slave erspan1): making interface the new active one [ 1180.752289][T24914] erspan1: entered promiscuous mode [ 1180.758934][T24914] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 1180.798741][T24922] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14240'. [ 1180.867449][T24922] 0: renamed from hsr_slave_1 (while UP) [ 1180.901428][T24922] 0: entered allmulticast mode [ 1180.915371][T24922] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1180.947217][T24928] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14242'. [ 1181.078030][T24935] netlink: 'syz.1.14245': attribute type 1 has an invalid length. [ 1181.105466][T24935] netlink: 228 bytes leftover after parsing attributes in process `syz.1.14245'. [ 1181.112704][T24937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14246'. [ 1181.483302][T24960] pim6reg: entered allmulticast mode [ 1181.868348][T24981] tipc: Enabled bearer , priority 0 [ 1181.955390][T24981] syzkaller0: entered promiscuous mode [ 1181.961805][T24981] syzkaller0: entered allmulticast mode [ 1181.968322][T24993] netlink: 'syz.0.14263': attribute type 10 has an invalid length. [ 1181.968910][T24981] tipc: Resetting bearer [ 1181.984793][T24991] : renamed from vxcan1 (while UP) [ 1182.020758][T24980] tipc: Resetting bearer [ 1182.739106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1182.747157][ C1] lec:lec_tx_timeout: lec0 [ 1183.719161][T24980] tipc: Disabling bearer [ 1183.733506][T25005] tipc: Enabling of bearer rejected, failed to enable media [ 1183.868722][T25011] netlink: 'syz.4.14269': attribute type 33 has an invalid length. [ 1184.072943][T25029] netlink: 'syz.2.14276': attribute type 3 has an invalid length. [ 1184.125159][T25033] syzkaller0: entered promiscuous mode [ 1184.130700][T25033] syzkaller0: entered allmulticast mode [ 1184.138576][T25033] tipc: Started in network mode [ 1184.143463][T25033] tipc: Node identity 6266b79fd03, cluster identity 4711 [ 1184.183379][T25033] tipc: Enabled bearer , priority 0 [ 1184.221509][T25030] tipc: Resetting bearer [ 1184.239132][T25042] netlink: 'syz.0.14281': attribute type 1 has an invalid length. [ 1184.268332][T25030] tipc: Disabling bearer [ 1184.378460][T25054] team0: Device ip6gre1 is of different type [ 1184.461651][T25064] xt_hashlimit: max too large, truncated to 1048576 [ 1184.696762][T25073] __nla_validate_parse: 7 callbacks suppressed [ 1184.696781][T25073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14287'. [ 1184.737183][T25077] netlink: 'syz.3.14290': attribute type 2 has an invalid length. [ 1184.758274][T25073] syzkaller1: entered promiscuous mode [ 1184.765740][T25073] syzkaller1: entered allmulticast mode [ 1184.781697][T25077] : entered promiscuous mode [ 1184.949118][T25089] pim6reg1: entered promiscuous mode [ 1184.964948][T25089] pim6reg1: entered allmulticast mode [ 1185.053557][T25092] delete_channel: no stack [ 1185.409720][T25129] netlink: 'syz.0.14306': attribute type 1 has an invalid length. [ 1185.422956][T25132] netlink: 'syz.3.14307': attribute type 1 has an invalid length. [ 1185.513051][T25132] bond7: entered promiscuous mode [ 1185.548051][T25132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1185.572167][T25132] netlink: 'syz.3.14307': attribute type 1 has an invalid length. [ 1185.595907][T25132] netlink: 'syz.3.14307': attribute type 1 has an invalid length. [ 1186.156440][T25182] validate_nla: 30 callbacks suppressed [ 1186.156460][T25182] netlink: 'syz.3.14323': attribute type 27 has an invalid length. [ 1186.190247][T25182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14323'. [ 1186.234656][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14324'. [ 1186.319208][T25192] IPv6: NLM_F_CREATE should be specified when creating new route [ 1186.328907][T25192] pim6reg1: entered promiscuous mode [ 1186.334788][T25192] pim6reg1: entered allmulticast mode [ 1186.413559][T25200] netlink: 'syz.4.14330': attribute type 1 has an invalid length. [ 1186.537035][T25209] veth0: entered promiscuous mode [ 1186.543072][T25210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14334'. [ 1186.553786][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14334'. [ 1186.777048][T25228] netlink: 300 bytes leftover after parsing attributes in process `syz.2.14337'. [ 1186.800623][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14338'. [ 1186.896749][T25231] vlan4: entered allmulticast mode [ 1186.902042][T25231] bridge4: entered allmulticast mode [ 1186.927522][T25230] bridge4: port 1(veth1) entered blocking state [ 1186.933887][T25230] bridge4: port 1(veth1) entered disabled state [ 1186.936150][T25240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.942506][T25230] veth1: entered allmulticast mode [ 1186.984423][T25230] veth1: entered promiscuous mode [ 1187.081984][T25237] syzkaller0: entered promiscuous mode [ 1187.089124][T25237] syzkaller0: entered allmulticast mode [ 1187.103397][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14344'. [ 1187.122297][T25245] : entered promiscuous mode [ 1187.167354][T25245] netlink: 'syz.1.14344': attribute type 178 has an invalid length. [ 1187.168087][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14346'. [ 1187.973111][T25263] netlink: 'syz.1.14348': attribute type 1 has an invalid length. [ 1189.086363][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14346'. [ 1189.549127][T25297] x_tables: duplicate underflow at hook 2 [ 1189.653332][T25306] netlink: 'syz.0.14361': attribute type 1 has an invalid length. [ 1189.718222][T25310] netlink: 'syz.2.14363': attribute type 9 has an invalid length. [ 1189.817629][T25314] __nla_validate_parse: 6 callbacks suppressed [ 1189.817648][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1189.986835][T25314] bond2: entered promiscuous mode [ 1189.997082][T25314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1190.035751][T25319] netlink: 'syz.3.14367': attribute type 11 has an invalid length. [ 1190.123282][T25328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14370'. [ 1190.215884][T25331] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1190.255234][T25335] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1190.294875][T25335] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20002 [ 1190.386301][T25350] netlink: 'syz.2.14377': attribute type 7 has an invalid length. [ 1190.422859][T25345] Cannot find set identified by id 65534 to match [ 1190.710183][T25366] syzkaller0: entered promiscuous mode [ 1190.716208][T25366] syzkaller0: entered allmulticast mode [ 1191.110887][T25374] Bluetooth: MGMT ver 1.23 [ 1191.221725][T25386] sock: sock_timestamping_bind_phc: sock not bind to device [ 1191.230657][T25389] openvswitch: netlink: Flow actions attr not present in new flow. [ 1191.241399][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14386'. [ 1191.260498][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14386'. [ 1191.701923][T25421] xt_CT: No such helper "pptp" [ 1192.288765][T25481] netlink: 204 bytes leftover after parsing attributes in process `syz.0.14411'. [ 1192.302781][T25463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14406'. [ 1192.312917][T25482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14406'. [ 1192.332222][T25482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14406'. [ 1192.345212][T25463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14406'. [ 1192.354824][T25477] netlink: 'syz.4.14408': attribute type 1 has an invalid length. [ 1192.363114][T25477] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14408'. [ 1192.381496][T25463] erspan0: entered promiscuous mode [ 1192.389032][T25477] netlink: 'syz.4.14408': attribute type 1 has an invalid length. [ 1192.400997][T25477] netlink: 'syz.4.14408': attribute type 8 has an invalid length. [ 1192.409038][T25463] erspan0: left promiscuous mode [ 1192.456314][T25482] erspan0: entered promiscuous mode [ 1192.475849][T25482] erspan0: left promiscuous mode [ 1193.179459][T25547] netlink: 'syz.4.14430': attribute type 29 has an invalid length. [ 1193.232050][T25550] netlink: 'syz.2.14432': attribute type 1 has an invalid length. [ 1193.240548][T25547] netlink: 'syz.4.14430': attribute type 29 has an invalid length. [ 1193.249323][T25552] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1193.297565][T25550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1193.379047][T25558] bond5: (slave geneve2): making interface the new active one [ 1193.387958][T25558] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1193.401428][T15612] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1193.453644][T15612] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1193.515539][T15612] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1193.559225][T15612] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1193.882670][T25606] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1193.958178][T25610] Cannot find set identified by id 27767 to match [ 1194.100750][T25616] Cannot find set identified by id 65534 to match [ 1194.869300][T25661] __nla_validate_parse: 13 callbacks suppressed [ 1194.869317][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14458'. [ 1194.913270][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14458'. [ 1195.402510][T25709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14470'. [ 1195.420897][T25710] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1195.429726][T25709] netlink: 'syz.0.14470': attribute type 62 has an invalid length. [ 1195.461284][T25710] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14472'. [ 1195.481747][T25710] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14472'. [ 1195.502139][T25710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14472'. [ 1195.565184][T25716] vcan1: entered promiscuous mode [ 1195.570226][T25716] vcan1: entered allmulticast mode [ 1198.033103][T25674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1198.202385][T25738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14481'. [ 1198.286306][T25745] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14479'. [ 1198.509232][T25757] bond4: option lp_interval: invalid value (0) [ 1198.518228][T25757] bond4: option lp_interval: allowed values 1 - 2147483647 [ 1198.536971][T25757] bond4 (unregistering): Released all slaves [ 1198.565122][T25764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14487'. [ 1198.597301][T25766] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14489'. [ 1198.653012][T25766] netlink: 'syz.4.14489': attribute type 1 has an invalid length. [ 1199.355588][T25796] netlink: 'syz.2.14498': attribute type 17 has an invalid length. [ 1199.408642][T25802] netlink: 'syz.2.14498': attribute type 17 has an invalid length. [ 1199.645229][T25813] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1199.909278][T25836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.925150][T25832] __nla_validate_parse: 9 callbacks suppressed [ 1199.925167][T25832] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.14507'. [ 1199.951447][T25832] netlink: Conntrack attr has 4 unknown bytes [ 1199.977316][T25840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14511'. [ 1199.986972][T25840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14511'. [ 1200.008243][T25838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14510'. [ 1200.042351][T25842] netlink: 'syz.0.14512': attribute type 4 has an invalid length. [ 1200.053889][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14511'. [ 1200.078445][T25844] sctp: [Deprecated]: syz.1.14513 (pid 25844) Use of int in maxseg socket option. [ 1200.078445][T25844] Use struct sctp_assoc_value instead [ 1200.208474][T25851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14516'. [ 1200.311055][T25861] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14519'. [ 1200.351567][T25856] syzkaller0: entered promiscuous mode [ 1200.365650][T25856] syzkaller0: entered allmulticast mode [ 1200.398071][T25872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14521'. [ 1200.420585][T25872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14521'. [ 1200.699309][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14529'. [ 1201.051876][T25915] ip6_vti0 speed is unknown, defaulting to 1000 [ 1201.450501][T25915] lo speed is unknown, defaulting to 1000 [ 1201.709692][T25946] erspan0: entered allmulticast mode [ 1202.063792][T25972] netlink: 'syz.4.14548': attribute type 30 has an invalid length. [ 1202.101886][T25971] netlink: 'syz.4.14548': attribute type 30 has an invalid length. [ 1202.196783][T25972] bond3: option arp_missed_max: invalid value (0) [ 1202.203383][T25972] bond3: option arp_missed_max: allowed values 1 - 255 [ 1202.217336][T25972] bond3 (unregistering): Released all slaves [ 1202.299439][T25971] bond3: option arp_missed_max: invalid value (0) [ 1202.306502][T25971] bond3: option arp_missed_max: allowed values 1 - 255 [ 1202.323389][T25971] bond3 (unregistering): Released all slaves [ 1203.874661][T26088] syzkaller0: entered promiscuous mode [ 1203.880289][T26088] syzkaller0: entered allmulticast mode [ 1204.039986][T26095] ip6_vti0 speed is unknown, defaulting to 1000 [ 1204.249222][T26095] lo speed is unknown, defaulting to 1000 [ 1204.325638][T26103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1205.842170][T26023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1206.058208][T26119] __nla_validate_parse: 16 callbacks suppressed [ 1206.058224][T26119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14587'. [ 1206.129302][T26134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1206.136586][T26134] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.143826][T26134] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.151102][T26134] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.165485][T26134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1206.295700][T26146] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1206.319525][T26146] dvmrp6: entered allmulticast mode [ 1206.351783][T26151] netlink: 'syz.4.14596': attribute type 10 has an invalid length. [ 1206.412810][T26153] netlink: 'syz.2.14599': attribute type 12 has an invalid length. [ 1206.421643][T26153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14599'. [ 1206.569660][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14602'. [ 1206.584660][T26164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1206.675467][T26165] netlink: 'syz.4.14600': attribute type 13 has an invalid length. [ 1206.796777][T26177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14605'. [ 1206.925270][T26183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1207.179417][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14614'. [ 1207.259654][T26198] bond8: Invalid ad_actor_system MAC address. [ 1207.266518][T26198] bond8: option ad_actor_system: invalid value (1) [ 1207.276925][T26198] bond8 (unregistering): Released all slaves [ 1207.308834][T26202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14615'. [ 1207.349443][T26206] syzkaller0: entered promiscuous mode [ 1207.358480][T26206] syzkaller0: entered allmulticast mode [ 1207.815947][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14623'. [ 1207.876824][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14623'. [ 1207.893805][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14626'. [ 1207.918370][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14623'. [ 1207.928884][T26249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.084361][T26261] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20000 [ 1208.362495][T26270] can: request_module (can-proto-4) failed. [ 1208.376524][T26275] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1208.675916][T26297] netlink: 'syz.2.14637': attribute type 1 has an invalid length. [ 1208.694426][T26297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.068255][T26320] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1209.619984][T26350] can: request_module (can-proto-3) failed. [ 1209.795091][T26359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.875008][T31789] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1209.883780][T31789] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1209.908629][T31789] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1209.961181][T31789] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1210.265550][T26392] bond8: entered allmulticast mode [ 1210.317055][T26393] bond9: entered allmulticast mode [ 1210.333103][T26392] bridge5: entered promiscuous mode [ 1210.339090][T26392] bridge5: entered allmulticast mode [ 1210.400000][T26396] s5: renamed from vlan1 (while UP) [ 1210.737708][T26418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1210.762306][T26418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1210.962557][T26418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1211.009463][T26418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1211.206652][T26418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1211.227111][T26418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1211.365368][T26418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1211.381210][T26418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1211.383105][T26472] __nla_validate_parse: 32 callbacks suppressed [ 1211.383120][T26472] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.14692'. [ 1211.523126][T26483] netlink: 'syz.1.14693': attribute type 1 has an invalid length. [ 1211.536638][T26474] sctp: [Deprecated]: syz.0.14691 (pid 26474) Use of int in maxseg socket option. [ 1211.536638][T26474] Use struct sctp_assoc_value instead [ 1211.592298][T26483] netlink: 244 bytes leftover after parsing attributes in process `syz.1.14693'. [ 1211.661723][T14395] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.674325][T14395] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1211.706804][T26491] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14696'. [ 1211.758489][T14395] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.770809][T14395] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1211.801854][T26496] tipc: Enabling of bearer rejected, failed to enable media [ 1211.810521][T14395] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.825032][T26489] ip6_vti0 speed is unknown, defaulting to 1000 [ 1211.844259][T14395] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1211.911877][T14394] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.923605][T14394] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1212.086880][T26508] netlink: 120 bytes leftover after parsing attributes in process `syz.3.14701'. [ 1212.197962][T26512] netlink: 'syz.4.14703': attribute type 10 has an invalid length. [ 1212.206328][T26514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14704'. [ 1212.220827][T26514] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14704'. [ 1212.233797][T26489] lo speed is unknown, defaulting to 1000 [ 1212.258634][T26517] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.14705'. [ 1212.454620][T26527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14706'. [ 1212.463908][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14706'. [ 1212.537149][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14707'. [ 1213.231269][T26567] bond10: entered promiscuous mode [ 1213.255429][T26567] bond10: entered allmulticast mode [ 1213.261164][T26567] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1213.309753][T26568] macvlan2: entered promiscuous mode [ 1213.354710][T26568] macvlan2: entered allmulticast mode [ 1213.363382][T26568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1213.679680][T26618] x_tables: duplicate underflow at hook 1 [ 1213.888378][T26635] geneve4: entered promiscuous mode [ 1213.925653][T26633] ip6_vti0 speed is unknown, defaulting to 1000 [ 1214.001579][T26644] netlink: 'syz.3.14741': attribute type 18 has an invalid length. [ 1214.178486][T26637] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1214.201661][T26633] lo speed is unknown, defaulting to 1000 [ 1214.441173][T26653] netlink: 'syz.0.14743': attribute type 1 has an invalid length. [ 1214.515366][T26653] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1214.597524][T26655] bond11: (slave veth11): Enslaving as an active interface with a down link [ 1214.611693][T26653] bond11: (slave veth0_to_bond): making interface the new active one [ 1214.621371][T26653] veth0_to_bond: entered promiscuous mode [ 1214.628081][T26653] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1214.657450][T26656] bond11: (slave veth13): Enslaving as an active interface with a down link [ 1214.666813][T26656] netlink: 'syz.0.14743': attribute type 1 has an invalid length. [ 1214.675124][T26656] netlink: 'syz.0.14743': attribute type 2 has an invalid length. [ 1215.091168][T26671] syzkaller0: entered promiscuous mode [ 1215.096863][T26671] syzkaller0: entered allmulticast mode [ 1216.073354][T17282] lec:lec_start_xmit: lec0:No lecd attached [ 1216.632198][T26611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.811295][T26683] IPv6: sit2: Disabled Multicast RS [ 1216.833460][T26687] netlink: 'syz.2.14756': attribute type 1 has an invalid length. [ 1216.937091][T26687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1216.999338][T26693] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1217.021848][T26697] __nla_validate_parse: 12 callbacks suppressed [ 1217.021866][T26697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14757'. [ 1217.028831][T26691] ip6_vti0 speed is unknown, defaulting to 1000 [ 1217.077222][T26697] batadv1: entered allmulticast mode [ 1217.098076][T26687] bond6: entered promiscuous mode [ 1217.103200][T26687] bond6: entered allmulticast mode [ 1217.415907][T26691] lo speed is unknown, defaulting to 1000 [ 1217.693828][T26740] syzkaller1: entered promiscuous mode [ 1217.700773][T26740] syzkaller1: entered allmulticast mode [ 1217.709087][T26740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14769'. [ 1217.735275][T26740] netlink: 'syz.0.14769': attribute type 1 has an invalid length. [ 1217.754835][T26740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14769'. [ 1217.871583][T26749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14773'. [ 1218.053366][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14778'. [ 1218.128701][T26765] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14779'. [ 1218.202463][T26765] tipc: Cannot configure node identity twice [ 1218.209961][T26770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14780'. [ 1218.241203][T26777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14782'. [ 1218.248067][T26775] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.14781'. [ 1218.408108][T26785] netlink: 'syz.2.14784': attribute type 2 has an invalid length. [ 1218.553556][T26790] syzkaller0: entered promiscuous mode [ 1218.559199][T26790] syzkaller0: entered allmulticast mode [ 1219.998726][T26862] bridge5: entered promiscuous mode [ 1220.006937][T26862] bridge5: entered allmulticast mode [ 1220.022327][T26862] team0: Port device bridge5 added [ 1220.055354][T26868] bridge0: port 2(team0) entered blocking state [ 1220.063239][T26868] bridge0: port 2(team0) entered disabled state [ 1220.082588][T26868] team0: entered allmulticast mode [ 1220.107963][T26868] team0: entered promiscuous mode [ 1220.704860][T26897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14808'. [ 1221.024653][T26916] netlink: 'syz.0.14817': attribute type 83 has an invalid length. [ 1221.147272][T26926] tipc: Enabled bearer , priority 0 [ 1221.206244][T26926] syzkaller0: entered promiscuous mode [ 1221.212532][T26926] syzkaller0: entered allmulticast mode [ 1221.221300][T26926] tipc: Resetting bearer [ 1221.566853][T26924] tipc: Resetting bearer [ 1221.780250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5700 ms [ 1221.788374][ C1] lec:lec_tx_timeout: lec0 [ 1223.378056][T26924] tipc: Disabling bearer [ 1223.387620][T26960] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1223.468999][T27318] tipc: Node number set to 2992027551 [ 1223.480551][T26972] "syz.0.14834" (26972) uses obsolete ecb(arc4) skcipher [ 1223.633365][T26987] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14837'. [ 1223.667258][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14836'. [ 1223.743951][T26998] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14839'. [ 1224.211918][T27018] netlink: 'syz.0.14844': attribute type 2 has an invalid length. [ 1224.263398][T14394] nci: nci_rx_work: unknown MT 0x7 [ 1224.279380][T27027] xt_CT: No such helper "pptp" [ 1224.321134][T27029] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.14844'. [ 1224.553603][T27052] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14853'. [ 1224.637078][T27047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1224.758287][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14859'. [ 1224.778497][T27067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14859'. [ 1224.801140][T27067] netlink: 'syz.0.14859': attribute type 2 has an invalid length. [ 1224.922783][T27072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14861'. [ 1224.932420][T27072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14861'. [ 1224.943787][T27072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14861'. [ 1225.006357][T27020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.096346][T27076] veth15: entered allmulticast mode [ 1225.315392][T27086] can: request_module (can-proto-3) failed. [ 1225.332200][T27088] can: request_module (can-proto-3) failed. [ 1225.517040][T27106] openvswitch: netlink: Message has 50 unknown bytes. [ 1225.743901][T27121] syzkaller0: entered promiscuous mode [ 1225.749698][T27121] syzkaller0: entered allmulticast mode [ 1225.805241][T14394] veth0_to_bond: left promiscuous mode [ 1227.168876][T27022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1227.785271][T27155] ip6_vti0 speed is unknown, defaulting to 1000 [ 1227.836811][T27165] openvswitch: netlink: Multiple metadata blocks provided [ 1227.981096][T27172] netlink: 'syz.1.14890': attribute type 1 has an invalid length. [ 1228.133402][T27155] lo speed is unknown, defaulting to 1000 [ 1228.412495][T27199] sctp: [Deprecated]: syz.3.14898 (pid 27199) Use of int in max_burst socket option deprecated. [ 1228.412495][T27199] Use struct sctp_assoc_value instead [ 1228.588916][T27207] syzkaller0: entered promiscuous mode [ 1228.599848][T27210] netlink: 'syz.1.14901': attribute type 11 has an invalid length. [ 1228.628215][T27207] syzkaller0: entered allmulticast mode [ 1228.916612][T27223] Set syz1 is full, maxelem 0 reached [ 1228.963969][T27225] __nla_validate_parse: 8 callbacks suppressed [ 1228.971744][T27225] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.14910'. [ 1229.064030][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14911'. [ 1229.129501][T27237] netlink: 'syz.0.14908': attribute type 1 has an invalid length. [ 1229.169984][T27237] netlink: 'syz.0.14908': attribute type 2 has an invalid length. [ 1229.196349][T27237] netlink: 'syz.0.14908': attribute type 1 has an invalid length. [ 1229.224285][T27237] netlink: 'syz.0.14908': attribute type 3 has an invalid length. [ 1229.259576][T27237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14908'. [ 1229.319904][T27231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.334868][T27231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.496106][T27253] netlink: 'syz.2.14915': attribute type 21 has an invalid length. [ 1229.540336][T27231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.551582][T27231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.599397][T27253] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1229.623370][T27253] bond7 (unregistering): Released all slaves [ 1229.641450][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14918'. [ 1229.691781][T27231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.711785][T27231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.737849][T27258] ip6_vti0 speed is unknown, defaulting to 1000 [ 1229.789210][T27231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.816944][T27231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.849830][T27271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.891119][T27270] gtp1: entered promiscuous mode [ 1230.039156][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14923'. [ 1230.098553][T27258] lo speed is unknown, defaulting to 1000 [ 1230.124619][T27279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14922'. [ 1230.126994][T14651] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.143180][T14651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.182130][T14651] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.191697][T14651] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.267972][T14651] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.286255][T14651] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.295070][T14651] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.303257][T14651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.327752][T27284] netlink: 288 bytes leftover after parsing attributes in process `syz.2.14924'. [ 1230.421177][T27294] netlink: 'syz.4.14926': attribute type 33 has an invalid length. [ 1230.444792][T27294] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14926'. [ 1230.521080][T27301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14928'. [ 1230.565719][T27306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14930'. [ 1230.618593][T27306] geneve3: entered promiscuous mode [ 1230.743348][T27307] bond12: entered promiscuous mode [ 1230.763224][T27307] bond12: entered allmulticast mode [ 1230.792057][T27307] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1230.996398][T27332] netlink: 'syz.1.14934': attribute type 16 has an invalid length. [ 1231.026045][T27332] netlink: 'syz.1.14934': attribute type 17 has an invalid length. [ 1231.855160][T15595] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.881408][T15595] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.896183][T15595] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.916796][T15595] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.964703][T15595] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.973095][T15595] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.003535][T27366] netlink: 'syz.0.14944': attribute type 9 has an invalid length. [ 1232.024776][T15595] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.033433][T15595] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.199411][T27381] netlink: 'syz.0.14948': attribute type 29 has an invalid length. [ 1232.368774][T27396] IPv6: NLM_F_CREATE should be specified when creating new route [ 1232.369856][T27391] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1232.418132][T27393] veth0_to_hsr: entered promiscuous mode [ 1232.423797][T27393] veth0_to_hsr: entered allmulticast mode [ 1232.438781][T27400] xt_ecn: cannot match TCP bits for non-tcp packets [ 1232.468632][T27403] netlink: 'syz.4.14955': attribute type 1 has an invalid length. [ 1232.496394][T27403] netlink: 'syz.4.14955': attribute type 1 has an invalid length. [ 1232.508366][T27403] netlink: 'syz.4.14955': attribute type 1 has an invalid length. [ 1233.092203][T27450] openvswitch: netlink: IP tunnel dst address not specified [ 1234.050201][T27520] __nla_validate_parse: 9 callbacks suppressed [ 1234.050220][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14990'. [ 1234.098682][T27520] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14990'. [ 1234.745013][T27585] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15006'. [ 1234.757242][T27582] x_tables: duplicate underflow at hook 2 [ 1234.797946][T27576] IPVS: Scheduler module ip_vs_sip not found [ 1234.871713][T27594] dvmrp6: left allmulticast mode [ 1235.282437][T27621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15022'. [ 1235.356544][T27628] bond0: (slave gre0): Error: Device type is different from other slaves [ 1235.454720][T27632] validate_nla: 10 callbacks suppressed [ 1235.454739][T27632] netlink: 'syz.3.15027': attribute type 2 has an invalid length. [ 1235.472903][T27632] netlink: 'syz.3.15027': attribute type 4 has an invalid length. [ 1235.524014][T27636] netlink: 80 bytes leftover after parsing attributes in process `syz.4.15029'. [ 1235.552369][T27638] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 1235.935888][T27664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15035'. [ 1235.942755][T27663] tipc: Failed to remove unknown binding: 66,0,0/2886997007:847409873/847409874 [ 1235.976350][T27663] tipc: Failed to remove unknown binding: 66,0,0/2886997007:847409873/847409874 [ 1236.062576][T27666] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1236.064624][T27669] netlink: 'syz.4.15040': attribute type 10 has an invalid length. [ 1236.179752][T27675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15041'. [ 1236.183635][T27677] x_tables: duplicate underflow at hook 1 [ 1236.339766][T27682] wg2: entered promiscuous mode [ 1236.345550][T27682] wg2: entered allmulticast mode [ 1236.460046][T27689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15046'. [ 1238.656821][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.670006][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1243.776796][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 1243.784847][ C1] lec:lec_tx_timeout: lec0 [ 1260.771686][T27706] openvswitch: netlink: Flow key attr not present in new flow. [ 1260.785895][T27708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15052'. [ 1260.798079][T27708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15052'. [ 1260.913657][T27720] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15055'. [ 1260.993663][T27728] netlink: 'syz.3.15058': attribute type 10 has an invalid length. [ 1261.032779][T27728] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1261.216038][T27741] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.15061'. [ 1261.243929][T27743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15062'. [ 1261.387395][T27758] netlink: 'syz.4.15067': attribute type 1 has an invalid length. [ 1261.414262][T27764] tipc: Enabling of bearer rejected, failed to enable media [ 1261.431046][T27766] netlink: 'syz.3.15069': attribute type 1 has an invalid length. [ 1261.440165][T27766] netlink: 232 bytes leftover after parsing attributes in process `syz.3.15069'. [ 1261.453253][T27758] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1261.730768][T27789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15073'. [ 1261.784245][T27789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15073'. [ 1262.112145][ T29] audit: type=1800 audit(1771291240.397:18): pid=27813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15082" name="memory.events" dev="tmpfs" ino=2690 res=0 errno=0 [ 1262.142550][T27807] netlink: 'syz.3.15080': attribute type 16 has an invalid length. [ 1262.166044][T27807] netlink: 'syz.3.15080': attribute type 17 has an invalid length. [ 1262.178297][T27807] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1262.290142][T27829] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1262.484198][T27833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15089'. [ 1262.733581][T27397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1262.749676][T27397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1262.758944][T27397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1262.779270][T27397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1262.795119][T27397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1262.967485][T27848] ip6_vti0 speed is unknown, defaulting to 1000 [ 1263.489296][T27896] netlink: 'syz.0.15106': attribute type 33 has an invalid length. [ 1263.613867][T31789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.626058][T31789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.628160][T27908] netlink: 'syz.3.15107': attribute type 3 has an invalid length. [ 1263.643125][T31789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1263.660074][T27908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15107'. [ 1263.680706][T27910] netlink: 'syz.1.15109': attribute type 10 has an invalid length. [ 1263.699921][T27896] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1263.714333][T27896] bond13 (unregistering): Released all slaves [ 1263.746265][T27910] bridge0: entered promiscuous mode [ 1263.752177][T27910] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1263.850319][T31789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.864788][T31789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.876580][T31789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1263.896377][T27848] lo speed is unknown, defaulting to 1000 [ 1263.969985][T31789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.980424][T31789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.990821][T31789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1264.075545][T31789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.118568][T31789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.159242][T31789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1264.411212][T27940] syzkaller0: entered promiscuous mode [ 1264.417436][T27940] syzkaller0: entered allmulticast mode [ 1264.426703][T27848] chnl_net:caif_netlink_parms(): no params data found [ 1264.510845][T27945] xt_TCPMSS: Only works on TCP SYN packets [ 1264.810471][T27955] netlink: 'syz.3.15123': attribute type 7 has an invalid length. [ 1264.827237][T31789] team0: left allmulticast mode [ 1264.832290][T31789] team0: left promiscuous mode [ 1264.838633][T31789] bridge0: port 2(team0) entered disabled state [ 1264.911976][T27397] Bluetooth: hci0: command tx timeout [ 1265.068348][T31789] vlan3: left promiscuous mode [ 1265.073595][T31789] bridge0: port 1(vlan3) entered disabled state [ 1265.329689][T31789] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 1265.369618][T31789] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1265.459499][T31789] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1265.468243][T31789] bridge3 (unregistering): left promiscuous mode [ 1265.608661][T31789] team0: Port device bridge5 removed [ 1265.659543][T31789] bond1 (unregistering): Released all slaves [ 1265.672304][T31789] bond2 (unregistering): Released all slaves [ 1265.686187][T31789] bond0 (unregistering): Released all slaves [ 1265.703090][T31789] bond3 (unregistering): Released all slaves [ 1265.725136][T31789] bond4 (unregistering): Released all slaves [ 1265.738485][T31789] bond5 (unregistering): Released all slaves [ 1265.751831][T31789] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1265.762587][T31789] bond6 (unregistering): Released all slaves [ 1265.777727][T31789] bond7 (unregistering): Released all slaves [ 1265.804939][T27848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.812094][T27848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.846550][T27848] bridge_slave_0: entered allmulticast mode [ 1265.857052][T27848] bridge_slave_0: entered promiscuous mode [ 1265.868877][T27848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.878229][T27848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.897193][T27848] bridge_slave_1: entered allmulticast mode [ 1265.908453][T27848] bridge_slave_1: entered promiscuous mode [ 1265.985513][T27983] __nla_validate_parse: 7 callbacks suppressed [ 1265.985530][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15130'. [ 1266.002657][T31789] tipc: Left network mode [ 1266.040941][T27848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.083248][T27983] bond1: (slave bridge0): Releasing backup interface [ 1266.091891][T27983] bridge0 (unregistering): left promiscuous mode [ 1266.182112][T27848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.406746][T27996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15134'. [ 1266.443558][T27848] team0: Port device team_slave_0 added [ 1266.458214][T27995] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.15134'. [ 1266.469589][T27848] team0: Port device team_slave_1 added [ 1266.625727][T28016] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1266.794807][T27848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1266.812067][T27848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.912992][T27848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1266.946980][T27848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.960827][T27848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.988740][T27397] Bluetooth: hci0: command tx timeout [ 1266.996879][T27848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.361249][T27848] hsr_slave_0: entered promiscuous mode [ 1267.387877][T28069] netlink: 'syz.1.15148': attribute type 1 has an invalid length. [ 1267.396785][T27848] hsr_slave_1: entered promiscuous mode [ 1267.414483][T28069] netlink: 'syz.1.15148': attribute type 7 has an invalid length. [ 1267.432018][T28069] netlink: 'syz.1.15148': attribute type 8 has an invalid length. [ 1267.432112][T27848] debugfs: 'hsr0' already exists in 'hsr' [ 1267.451926][T28069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15148'. [ 1267.485314][T27848] Cannot create hsr debugfs directory [ 1267.789949][T28087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.818374][T31789] hsr_slave_0: left promiscuous mode [ 1267.835296][T31789] hsr_slave_1: left promiscuous mode [ 1267.855403][T31789] veth0_macvtap: left allmulticast mode [ 1267.879467][T31789] veth1_vlan: left promiscuous mode [ 1267.896099][T31789] veth0_vlan: left promiscuous mode [ 1268.242880][T28114] netlink: 'syz.4.15158': attribute type 1 has an invalid length. [ 1268.252934][T28113] netlink: 'syz.0.15161': attribute type 1 has an invalid length. [ 1268.266356][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15161'. [ 1268.531470][T28083] veth0_macvtap: left allmulticast mode [ 1268.788458][T28114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1268.830425][T15612] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.840273][T15612] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1268.850241][T15612] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.858940][T15612] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1268.939496][T15612] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1268.958863][T15612] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1268.973075][T15612] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1269.001287][T28140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15164'. [ 1269.025294][T15612] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1269.065759][T27397] Bluetooth: hci0: command tx timeout [ 1269.089528][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15164'. [ 1269.615811][T28169] netlink: 'syz.1.15170': attribute type 1 has an invalid length. [ 1269.707206][T28175] tc_dump_action: action bad kind [ 1269.736698][T28170] bond4: entered promiscuous mode [ 1269.741764][T28170] bond4: entered allmulticast mode [ 1269.802081][T28170] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1269.950134][T28191] netlink: 'syz.3.15172': attribute type 2 has an invalid length. [ 1270.039649][T27848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1270.083558][T27848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1270.102618][T27848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1270.133180][T27848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1270.329881][T27848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.426273][T27848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.435136][T28219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15179'. [ 1270.463018][T14651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.470211][T14651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.516473][T28223] netlink: 207992 bytes leftover after parsing attributes in process `syz.1.15180'. [ 1270.556203][T14651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.563367][T14651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.663779][T27848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.714236][T28234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15182'. [ 1270.747400][T28239] x_tables: duplicate underflow at hook 2 [ 1271.127736][T28262] __nla_validate_parse: 6 callbacks suppressed [ 1271.127756][T28262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15188'. [ 1271.146152][T27397] Bluetooth: hci0: command tx timeout [ 1271.311145][T27848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.522234][T27848] veth0_vlan: entered promiscuous mode [ 1271.603550][T27848] veth1_vlan: entered promiscuous mode [ 1271.701308][T27848] veth0_macvtap: entered promiscuous mode [ 1271.752453][T27848] veth1_macvtap: entered promiscuous mode [ 1271.848260][T27848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.902000][T27848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.963993][T14395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.012388][T28312] netlink: 212392 bytes leftover after parsing attributes in process `syz.3.15195'. [ 1272.017067][T14395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.059954][T14395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.121618][T14395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.495120][T28331] netlink: 404 bytes leftover after parsing attributes in process `syz.4.15201'. [ 1272.510544][T14395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.533590][T14395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.722194][T14651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.743721][T14651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.008247][T28361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15208'. [ 1273.195343][T28366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1273.466279][T28392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.740809][T28392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.862387][T28425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15219'. [ 1273.971702][T28392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.982408][T28436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1274.186693][T28392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.292511][T28444] tipc: Enabling of bearer rejected, already enabled [ 1274.307004][T28443] netlink: 165 bytes leftover after parsing attributes in process `syz.1.15225'. [ 1274.463237][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1274.486404][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1274.510164][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1274.530450][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1274.545267][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1274.557872][T14395] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.648638][T14395] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.716321][T31789] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.754819][T28451] ip6_vti0 speed is unknown, defaulting to 1000 [ 1274.758304][T28458] netlink: 'syz.3.15230': attribute type 1 has an invalid length. [ 1274.772131][T28459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15230'. [ 1274.827338][T28458] bond10: entered promiscuous mode [ 1274.832922][T28458] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1274.841692][T28459] bond10: entered allmulticast mode [ 1274.847738][T31789] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.006654][T28474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15234'. [ 1275.152399][T28481] veth0_to_bond: entered allmulticast mode [ 1275.225202][T28451] lo speed is unknown, defaulting to 1000 [ 1275.237058][T28486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15237'. [ 1275.258546][T28486] : entered promiscuous mode [ 1275.338684][T28489] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15238'. [ 1275.423290][ T29] audit: type=1800 audit(1771291253.717:19): pid=28497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15240" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2898 res=0 errno=0 [ 1275.569084][T28451] chnl_net:caif_netlink_parms(): no params data found [ 1275.811774][T28451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.819207][T28451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.826889][T28451] bridge_slave_0: entered allmulticast mode [ 1275.835071][T28451] bridge_slave_0: entered promiscuous mode [ 1275.846587][T28451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.855063][T28451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.863373][T28451] bridge_slave_1: entered allmulticast mode [ 1275.872678][T28451] bridge_slave_1: entered promiscuous mode [ 1275.911925][T28451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.928732][T28451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.007860][T28451] team0: Port device team_slave_0 added [ 1276.029941][T28451] team0: Port device team_slave_1 added [ 1276.167104][T28451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.176618][T28451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.206520][T28451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.218010][T28549] __nla_validate_parse: 4 callbacks suppressed [ 1276.218027][T28549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15253'. [ 1276.267469][T28451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.277984][T28451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.307304][T28451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.330490][T28551] syzkaller0: entered promiscuous mode [ 1276.341420][T28551] syzkaller0: entered allmulticast mode [ 1276.559556][T28451] hsr_slave_0: entered promiscuous mode [ 1276.569583][T28451] hsr_slave_1: entered promiscuous mode [ 1276.577320][T28451] debugfs: 'hsr0' already exists in 'hsr' [ 1276.594131][T28451] Cannot create hsr debugfs directory [ 1276.657638][T27397] Bluetooth: hci4: command tx timeout [ 1276.677672][T28574] netlink: 'syz.1.15263': attribute type 1 has an invalid length. [ 1276.685789][T28574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15263'. [ 1277.031839][T28451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.150873][T28451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.277659][T28451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.337780][T28611] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15273'. [ 1277.392245][T28451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.467469][T28617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15276'. [ 1277.478963][T28617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15276'. [ 1277.497579][T28617] gretap1: entered promiscuous mode [ 1277.503161][T28617] gretap1: entered allmulticast mode [ 1277.717980][T28451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1277.750312][T28451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1277.789676][T28451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1277.822703][T28451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1277.988055][T28451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.023384][T28451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.050163][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.057366][T15589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.076367][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.083482][T15589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.153327][T28664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15286'. [ 1278.155323][T28662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15284'. [ 1278.176474][T28451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1278.287496][T28669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.347100][T28664] netlink: 84 bytes leftover after parsing attributes in process `syz.3.15286'. [ 1278.357798][T28664] netlink: 84 bytes leftover after parsing attributes in process `syz.3.15286'. [ 1278.393081][T28673] netlink: 'syz.4.15288': attribute type 1 has an invalid length. [ 1278.470719][T28673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1278.551753][T28684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15290'. [ 1278.581622][T28684] netlink: 'syz.3.15290': attribute type 1 has an invalid length. [ 1278.589684][T28684] netlink: 'syz.3.15290': attribute type 3 has an invalid length. [ 1278.611863][T28684] openvswitch: netlink: Flow actions attr not present in new flow. [ 1278.616451][T28451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.736001][T27397] Bluetooth: hci4: command tx timeout [ 1278.776747][T28689] syzkaller0: entered promiscuous mode [ 1278.782382][T28689] syzkaller0: entered allmulticast mode [ 1278.804869][T28451] veth0_vlan: entered promiscuous mode [ 1278.819708][T28451] veth1_vlan: entered promiscuous mode [ 1278.908493][T28451] veth0_macvtap: entered promiscuous mode [ 1278.958074][T28451] veth1_macvtap: entered promiscuous mode [ 1279.002514][T28451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.062083][T28451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.127560][T15612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.152667][T15612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.169875][T15612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.237699][T15612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.323909][T28715] xt_hashlimit: overflow, rate too high: 0 [ 1279.400536][T15612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.422763][T15612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.479084][T31789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.490594][T31789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.959283][T17282] lec:lec_start_xmit: lec0:No lecd attached [ 1280.078026][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1280.090495][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1280.100300][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1280.110059][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1280.122513][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1280.362477][T28756] ip6_vti0 speed is unknown, defaulting to 1000 [ 1280.413437][T28769] Bluetooth: MGMT ver 1.23 [ 1280.816558][ T5824] Bluetooth: hci4: command tx timeout [ 1280.830629][T28796] netlink: 'syz.1.15321': attribute type 19 has an invalid length. [ 1280.978106][T28772] ip6_vti0 speed is unknown, defaulting to 1000 [ 1281.093115][T28756] lo speed is unknown, defaulting to 1000 [ 1281.241435][T28813] pimreg3: entered allmulticast mode [ 1281.251691][T28812] __nla_validate_parse: 7 callbacks suppressed [ 1281.251708][T28812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15327'. [ 1281.405811][T28822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15328'. [ 1281.423921][T28772] lo speed is unknown, defaulting to 1000 [ 1281.802373][T28842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15332'. [ 1281.872016][ T5483] veth0_macvtap: left promiscuous mode [ 1281.942010][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15334'. [ 1282.099141][T28756] chnl_net:caif_netlink_parms(): no params data found [ 1282.180763][ T5824] Bluetooth: hci1: command tx timeout [ 1282.359531][T28869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15340'. [ 1282.623567][T28756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.643366][T28756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.658976][T27318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.671387][T28756] bridge_slave_0: entered allmulticast mode [ 1282.693420][T28756] bridge_slave_0: entered promiscuous mode [ 1282.731367][T28756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.759773][T28756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.782172][T28756] bridge_slave_1: entered allmulticast mode [ 1282.796089][T28756] bridge_slave_1: entered promiscuous mode [ 1282.867492][T28898] netlink: 'syz.0.15346': attribute type 2 has an invalid length. [ 1282.879154][T28897] netlink: 'syz.2.15345': attribute type 2 has an invalid length. [ 1282.896158][T27397] Bluetooth: hci4: command tx timeout [ 1282.902693][T28898] netlink: 'syz.0.15346': attribute type 1 has an invalid length. [ 1282.914586][T28897] netlink: 'syz.2.15345': attribute type 3 has an invalid length. [ 1282.928987][T28756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.960467][T28756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.061239][T28907] netlink: 'syz.4.15348': attribute type 39 has an invalid length. [ 1283.067924][T28756] team0: Port device team_slave_0 added [ 1283.099042][T28756] team0: Port device team_slave_1 added [ 1283.110804][T28914] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15347'. [ 1283.240614][T28756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.251403][T28756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.300360][T28923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15351'. [ 1283.311749][T28756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.358309][T28756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.390010][T28756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.502269][T28756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.536756][T13925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.544912][T13925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.553544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.581904][T28931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.611542][T15612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.640260][T28928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.649280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.662522][T28756] hsr_slave_0: entered promiscuous mode [ 1283.702344][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.708714][T28756] hsr_slave_1: entered promiscuous mode [ 1283.725108][T28756] debugfs: 'hsr0' already exists in 'hsr' [ 1283.739861][T28756] Cannot create hsr debugfs directory [ 1283.823213][T28939] netlink: 'syz.1.15356': attribute type 32 has an invalid length. [ 1283.845999][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15356'. [ 1283.859395][T28943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15357'. [ 1283.880246][T28947] Cannot find map_set index 65533 as target [ 1283.958615][T28939] bond5: option coupled_control: invalid value (52) [ 1283.968582][T28939] bond5 (unregistering): Released all slaves [ 1284.016452][T28951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15360'. [ 1284.033827][T28947] tipc: Enabled bearer , priority 0 [ 1284.097821][T13927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.137677][T28947] syzkaller0: entered promiscuous mode [ 1284.143193][T28947] syzkaller0: entered allmulticast mode [ 1284.154303][T28947] tipc: Resetting bearer [ 1284.163118][T28946] tipc: Resetting bearer [ 1284.167633][T28959] IPVS: length: 58 != 8 [ 1284.198493][T28946] tipc: Disabling bearer [ 1284.258837][T27397] Bluetooth: hci1: command tx timeout [ 1284.773241][T28997] netlink: 'syz.0.15373': attribute type 1 has an invalid length. [ 1284.830797][T28997] sctp: [Deprecated]: syz.0.15373 (pid 28997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1284.830797][T28997] Use struct sctp_sack_info instead [ 1284.856587][T29003] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1284.929587][T17596] IPVS: starting estimator thread 0... [ 1285.000080][T28756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1285.044198][T29009] IPVS: using max 34 ests per chain, 81600 per kthread [ 1285.058704][T28756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1285.079237][T28756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1285.146129][T28756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1285.239001][T29023] netlink: 'syz.2.15381': attribute type 24 has an invalid length. [ 1285.422285][T28756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.443633][T28756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.465759][T29038] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1285.497520][T15595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.504714][T15595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.532760][T15595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.539977][T15595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.595459][T29044] bond5: option xmit_hash_policy: invalid value (64) [ 1285.605578][T29044] bond5 (unregistering): Released all slaves [ 1285.631711][T29049] pimreg3: entered allmulticast mode [ 1285.693141][T28756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.774277][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 1285.782344][ C1] lec:lec_tx_timeout: lec0 [ 1286.023633][T29069] syzkaller0: entered promiscuous mode [ 1286.033362][T29069] syzkaller0: entered allmulticast mode [ 1286.339413][T27397] Bluetooth: hci1: command tx timeout [ 1287.859608][T27318] net_ratelimit: 10 callbacks suppressed [ 1287.859622][T27318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.991103][T29088] tipc: Enabling of bearer rejected, failed to enable media [ 1288.040510][T28756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.105469][T29068] ip6_vti0 speed is unknown, defaulting to 1000 [ 1288.160205][T28756] veth0_vlan: entered promiscuous mode [ 1288.180640][T28756] veth1_vlan: entered promiscuous mode [ 1288.270478][T28756] veth0_macvtap: entered promiscuous mode [ 1288.308820][T28756] veth1_macvtap: entered promiscuous mode [ 1288.315259][T29100] netlink: 'syz.4.15403': attribute type 1 has an invalid length. [ 1288.341461][T28756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.416174][T27397] Bluetooth: hci1: command tx timeout [ 1288.480672][T29100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1288.506499][T28756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.531948][T29068] lo speed is unknown, defaulting to 1000 [ 1288.557379][T15595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.629961][T15595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.689702][T15595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.702390][T15595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.886074][T15595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.894029][T15595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.903793][T13642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.033712][T15612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.072165][T15612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.356111][T29143] vcan0: entered allmulticast mode [ 1289.648875][T29164] geneve2: entered promiscuous mode [ 1289.662877][T29167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.672762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.677737][T29164] geneve2: entered allmulticast mode [ 1289.689468][T29169] IPv6: addrconf: prefix option has invalid lifetime [ 1289.709943][T29167] __nla_validate_parse: 8 callbacks suppressed [ 1289.709960][T29167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15420'. [ 1289.736482][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.798173][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15423'. [ 1289.830115][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15423'. [ 1289.938000][T13642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.089379][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1290.105709][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1290.116357][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1290.136625][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1290.157120][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1290.161161][T13927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.221910][T13927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.231819][T29189] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15429'. [ 1290.319213][T29184] ip6_vti0 speed is unknown, defaulting to 1000 [ 1290.336518][T15589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.588845][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15436'. [ 1290.620489][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15437'. [ 1290.646064][T29214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15437'. [ 1290.792545][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15440'. [ 1290.806774][T29221] netlink: 'syz.0.15440': attribute type 3 has an invalid length. [ 1290.823777][T29221] netlink: 'syz.0.15440': attribute type 3 has an invalid length. [ 1290.843339][T29225] netlink: 'syz.0.15440': attribute type 3 has an invalid length. [ 1290.855610][T29184] lo speed is unknown, defaulting to 1000 [ 1291.070717][T29184] chnl_net:caif_netlink_parms(): no params data found [ 1291.247745][T29184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.271302][T29184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.291532][T29184] bridge_slave_0: entered allmulticast mode [ 1291.312556][T29184] bridge_slave_0: entered promiscuous mode [ 1291.328259][T29184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.337210][T29184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.345351][T29184] bridge_slave_1: entered allmulticast mode [ 1291.352638][T29184] bridge_slave_1: entered promiscuous mode [ 1291.360215][T29247] syzkaller1: entered promiscuous mode [ 1291.367223][T29247] syzkaller1: entered allmulticast mode [ 1291.437184][T29184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.452532][T29184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.559052][T29184] team0: Port device team_slave_0 added [ 1291.572404][T29256] netlink: 'syz.0.15448': attribute type 1 has an invalid length. [ 1291.598918][T29184] team0: Port device team_slave_1 added [ 1291.753756][T29266] netlink: 'syz.3.15450': attribute type 1 has an invalid length. [ 1291.798086][T29261] bond1: (slave gretap1): making interface the new active one [ 1291.807867][T29261] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1291.818649][T29184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.826880][T29184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.861181][T29184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.875716][T29267] netlink: 'syz.3.15450': attribute type 1 has an invalid length. [ 1291.923358][T29184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.945102][T29184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.002818][T29184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.033613][T29279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.15453'. [ 1292.055199][T29279] netlink: 392 bytes leftover after parsing attributes in process `syz.3.15453'. [ 1292.168430][T29184] hsr_slave_0: entered promiscuous mode [ 1292.182055][T29184] hsr_slave_1: entered promiscuous mode [ 1292.190204][T29184] debugfs: 'hsr0' already exists in 'hsr' [ 1292.197555][T29184] Cannot create hsr debugfs directory [ 1292.255887][ T5824] Bluetooth: hci3: command tx timeout [ 1292.431145][T29184] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.455094][T29184] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.491503][T29297] netlink: 'syz.3.15462': attribute type 12 has an invalid length. [ 1292.521943][T29184] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.533113][T29184] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.604910][T28716] IPVS: starting estimator thread 0... [ 1292.632155][T29184] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.659054][T29184] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.715060][T29312] IPVS: using max 32 ests per chain, 76800 per kthread [ 1292.746519][T29184] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1292.765636][T29184] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.886452][T29328] : entered promiscuous mode [ 1293.139207][T29341] netlink: 'syz.2.15472': attribute type 1 has an invalid length. [ 1293.199105][T29184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1293.252662][T29184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1293.312139][T29184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1293.355711][T29184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1293.403803][T29352] netlink: 'syz.2.15473': attribute type 21 has an invalid length. [ 1293.578359][T29365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1294.001965][T29402] net_ratelimit: 24 callbacks suppressed [ 1294.001984][T29402] openvswitch: netlink: IPv4 tun info is not correct [ 1294.046689][T29184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.109990][T29184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.162096][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.169543][T14394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.238992][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.246170][T15589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.335221][T29291] Bluetooth: hci3: command 0x041b tx timeout [ 1294.571436][T29425] xt_cgroup: xt_cgroup: no path or classid specified [ 1294.660751][T29438] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1294.796733][T29446] __nla_validate_parse: 9 callbacks suppressed [ 1294.796753][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15491'. [ 1294.882668][T29446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15491'. [ 1294.996412][T14651] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1294.996553][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15491'. [ 1295.019447][T14651] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.028631][T29446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15491'. [ 1295.047058][T14651] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.095867][T14651] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1295.136987][T29456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15492'. [ 1295.179648][T29456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15492'. [ 1295.182932][T29184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.272247][T29460] netlink: 'syz.2.15494': attribute type 11 has an invalid length. [ 1295.305092][T29460] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15494'. [ 1295.543003][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15497'. [ 1295.606896][T29478] ip6_vti0 speed is unknown, defaulting to 1000 [ 1296.359333][T29512] tipc: Enabled bearer , priority 0 [ 1296.369510][T29512] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.15503'. [ 1296.414707][T27397] Bluetooth: hci3: command 0x041b tx timeout [ 1296.505753][T29511] tipc: Disabling bearer [ 1296.696440][T29479] ip6_vti0 speed is unknown, defaulting to 1000 [ 1296.697955][T29478] lo speed is unknown, defaulting to 1000 [ 1296.726981][T29184] veth0_vlan: entered promiscuous mode [ 1296.758385][T29184] veth1_vlan: entered promiscuous mode [ 1296.972214][T29184] veth0_macvtap: entered promiscuous mode [ 1297.053595][T29184] veth1_macvtap: entered promiscuous mode [ 1297.186931][T29184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.279226][T29184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.326118][T31789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.360887][T31789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.423303][T31789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.440091][T31789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.730191][T29479] lo speed is unknown, defaulting to 1000 [ 1298.093703][T14395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.111152][T14395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.279595][T14394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.298361][T14394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.463589][T29591] ipvlan2: entered allmulticast mode [ 1298.484491][T29591] macvlan1: entered allmulticast mode [ 1298.490057][T29591] veth1_vlan: entered allmulticast mode [ 1298.500235][T27397] Bluetooth: hci3: command 0x041b tx timeout [ 1298.522524][T29593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15525'. [ 1298.568956][T29591] batman_adv: batadv0: Adding interface: ipvlan2 [ 1298.582724][T29591] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.628151][T29591] batman_adv: batadv0: Interface activated: ipvlan2 [ 1298.680881][T29597] bridge_slave_1: left allmulticast mode [ 1298.690648][T29597] bridge_slave_1: left promiscuous mode [ 1298.721449][T29597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.776008][T29597] bridge_slave_0: left allmulticast mode [ 1298.781906][T29597] bridge_slave_0: left promiscuous mode [ 1298.789138][T29597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.870694][T29593] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 1298.896365][T29615] xt_socket: unknown flags 0x50 [ 1298.963755][T29605] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1298.994812][T29605] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1299.438833][T29651] xt_l2tp: v2 doesn't support IP mode [ 1299.607235][T29661] netlink: 'syz.1.15538': attribute type 10 has an invalid length. [ 1299.699130][T29661] mac80211_hwsim hwsim124 wlan1: entered promiscuous mode [ 1299.728204][T29661] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1300.117624][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1300.258735][T29683] __nla_validate_parse: 2 callbacks suppressed [ 1300.258755][T29683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15542'. [ 1300.575462][T27397] Bluetooth: hci3: command 0x041b tx timeout [ 1301.022123][T29726] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15551'. [ 1301.037714][T29720] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1301.102726][T29720] bond1 (unregistering): Released all slaves [ 1301.658331][T29758] ip6_vti0 speed is unknown, defaulting to 1000 [ 1301.891941][T29774] bridge0: port 1(batadv1) entered blocking state [ 1301.926422][T29774] bridge0: port 1(batadv1) entered disabled state [ 1301.946578][T29774] batadv1: entered allmulticast mode [ 1301.969384][T29774] batadv1: entered promiscuous mode [ 1302.001775][T29783] syzkaller0: entered promiscuous mode [ 1302.010618][T29783] syzkaller0: entered allmulticast mode [ 1302.089496][T29758] lo speed is unknown, defaulting to 1000 [ 1302.395008][T31789] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1302.406356][T31789] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1302.551648][T29807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15581'. [ 1302.723915][T29810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15582'. [ 1302.750895][T29812] ip6_vti0 speed is unknown, defaulting to 1000 [ 1302.755028][T29810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.764816][T29810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.817941][T29814] syzkaller0: entered promiscuous mode [ 1302.823539][T29814] syzkaller0: entered allmulticast mode [ 1302.983379][T29798] bridge0: entered promiscuous mode [ 1303.005860][T29798] bridge0: entered allmulticast mode [ 1303.456580][T27318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.491562][T29845] netlink: 'syz.0.15592': attribute type 1 has an invalid length. [ 1303.502372][T29812] lo speed is unknown, defaulting to 1000 [ 1304.151938][T29877] veth11: entered promiscuous mode [ 1304.170058][T29877] veth11: entered allmulticast mode [ 1304.303127][T29885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15599'. [ 1304.495723][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.520480][T29911] netlink: 232 bytes leftover after parsing attributes in process `syz.1.15605'. [ 1304.729021][T29916] mac80211_hwsim hwsim137 : renamed from wlan1 (while UP) [ 1304.910854][T29927] syzkaller0: entered promiscuous mode [ 1304.935668][T29927] syzkaller0: entered allmulticast mode [ 1305.018360][T29937] : renamed from veth1_vlan (while UP) [ 1305.065357][T13922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.213725][T29952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1305.297954][T15595] team0: left allmulticast mode [ 1305.328272][T15595] team_slave_0: left allmulticast mode [ 1305.333775][T15595] team_slave_1: left allmulticast mode [ 1305.360682][T15595] team0: left promiscuous mode [ 1305.373068][T15595] team_slave_0: left promiscuous mode [ 1305.396851][T15595] team_slave_1: left promiscuous mode [ 1305.416916][T15595] bridge0: port 3(team0) entered disabled state [ 1305.433838][T15595] bridge_slave_1: left allmulticast mode [ 1305.447751][T15595] bridge_slave_1: left promiscuous mode [ 1305.453537][T15595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.482477][T15595] bridge_slave_0: left allmulticast mode [ 1305.489862][T15595] bridge_slave_0: left promiscuous mode [ 1305.493231][T29978] netlink: 'syz.2.15624': attribute type 75 has an invalid length. [ 1305.497492][T15595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.534714][T17596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.775530][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.783606][ C1] lec:lec_tx_timeout: lec0 [ 1305.843671][T15595] bond3 (unregistering): (slave geneve4): Releasing active interface [ 1306.249321][T15595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.280250][T15595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.291963][T15595] bond0 (unregistering): Released all slaves [ 1306.305788][T15595] bond1 (unregistering): Released all slaves [ 1306.325452][T15595] bond2 (unregistering): Released all slaves [ 1306.349381][T15595] bond3 (unregistering): Released all slaves [ 1306.365442][T29992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15626'. [ 1306.370525][T15595] bond4 (unregistering): Released all slaves [ 1306.391907][T15595] bond5 (unregistering): Released all slaves [ 1306.405543][T15595] bond6 (unregistering): Released all slaves [ 1306.436595][T29993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15626'. [ 1306.446796][T29994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15626'. [ 1306.586862][T27318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.628719][T15595] : left promiscuous mode [ 1306.667585][T30005] netlink: 'syz.2.15629': attribute type 83 has an invalid length. [ 1306.703689][T15595] 9: left promiscuous mode [ 1306.814735][T15595] tipc: Left network mode [ 1307.051714][T15595] IPVS: stopping master sync thread 13830 ... [ 1307.142981][T29291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1307.169588][T29291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1307.180049][T29291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1307.190967][T29291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1307.204357][T29291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1307.216836][T30030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15637'. [ 1307.469986][T30035] netlink: 'syz.0.15639': attribute type 1 has an invalid length. [ 1307.511371][T22536] ================================================================== [ 1307.519466][T22536] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 1307.526581][T22536] Read of size 8 at addr ffff8880962a40a8 by task khidpd_00065508/22536 [ 1307.534894][T22536] [ 1307.537212][T22536] CPU: 0 UID: 0 PID: 22536 Comm: khidpd_00065508 Not tainted syzkaller #0 PREEMPT(full) [ 1307.537240][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.537250][T22536] Call Trace: [ 1307.537256][T22536] [ 1307.537262][T22536] dump_stack_lvl+0xe8/0x150 [ 1307.537285][T22536] print_report+0xba/0x230 [ 1307.537301][T22536] ? __mutex_lock+0x812/0x1300 [ 1307.537318][T22536] kasan_report+0x117/0x150 [ 1307.537338][T22536] ? __mutex_lock+0x812/0x1300 [ 1307.537358][T22536] __mutex_lock+0x812/0x1300 [ 1307.537376][T22536] ? __mutex_lock+0x5ac/0x1300 [ 1307.537394][T22536] ? l2cap_unregister_user+0x6a/0x1b0 [ 1307.537414][T22536] ? __pfx___mutex_lock+0x10/0x10 [ 1307.537435][T22536] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1307.537451][T22536] ? lockdep_hardirqs_on+0x7a/0x110 [ 1307.537469][T22536] l2cap_unregister_user+0x6a/0x1b0 [ 1307.537488][T22536] hidp_session_thread+0x3cb/0x440 [ 1307.537501][T22536] ? lock_acquire+0x106/0x330 [ 1307.537515][T22536] ? __pfx_hidp_session_thread+0x10/0x10 [ 1307.537528][T22536] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1307.537544][T22536] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1307.537558][T22536] ? __kthread_parkme+0x7a/0x1f0 [ 1307.537578][T22536] ? __kthread_parkme+0x19c/0x1f0 [ 1307.537595][T22536] kthread+0x388/0x470 [ 1307.537612][T22536] ? __pfx_hidp_session_thread+0x10/0x10 [ 1307.537624][T22536] ? __pfx_kthread+0x10/0x10 [ 1307.537641][T22536] ret_from_fork+0x51e/0xb90 [ 1307.537657][T22536] ? __pfx_ret_from_fork+0x10/0x10 [ 1307.537671][T22536] ? __switch_to+0xc7d/0x1400 [ 1307.537684][T22536] ? __pfx_kthread+0x10/0x10 [ 1307.537701][T22536] ret_from_fork_asm+0x1a/0x30 [ 1307.537724][T22536] [ 1307.537730][T22536] [ 1307.702923][T22536] The buggy address belongs to the physical page: [ 1307.709330][T22536] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880962a4d00 pfn:0x962a4 [ 1307.719380][T22536] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1307.726481][T22536] raw: 00fff00000000000 ffffea0000ad5a08 ffff8880b8640a40 0000000000000000 [ 1307.735047][T22536] raw: ffff8880962a4d00 0000000000000000 00000000ffffffff 0000000000000000 [ 1307.743614][T22536] page dumped because: kasan: bad access detected [ 1307.750014][T22536] page_owner tracks the page as freed [ 1307.755358][T22536] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 18956, tgid 18956 (syz-executor), ts 1063540686646, free_ts 1307499833137 [ 1307.773754][T22536] post_alloc_hook+0x228/0x280 [ 1307.778527][T22536] get_page_from_freelist+0x24dc/0x2580 [ 1307.784072][T22536] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1307.789875][T22536] alloc_pages_mpol+0x232/0x4a0 [ 1307.794719][T22536] ___kmalloc_large_node+0x4e/0x150 [ 1307.799913][T22536] __kmalloc_large_node_noprof+0x18/0x90 [ 1307.805543][T22536] __kmalloc_noprof+0x3e8/0x760 [ 1307.810390][T22536] hci_alloc_dev_priv+0x28/0x2060 [ 1307.815411][T22536] vhci_create_device+0x120/0x650 [ 1307.820427][T22536] vhci_write+0x3ce/0x4a0 [ 1307.824744][T22536] vfs_write+0x61d/0xb90 [ 1307.828972][T22536] ksys_write+0x150/0x270 [ 1307.833284][T22536] do_syscall_64+0x14d/0xf80 [ 1307.837860][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.843734][T22536] page last free pid 18956 tgid 18956 stack trace: [ 1307.850214][T22536] __free_frozen_pages+0xbf8/0xd70 [ 1307.855310][T22536] bt_host_release+0x82/0x90 [ 1307.859887][T22536] device_release+0x9e/0x1d0 [ 1307.864470][T22536] kobject_put+0x228/0x560 [ 1307.868872][T22536] vhci_release+0x15a/0x1a0 [ 1307.873355][T22536] __fput+0x44f/0xa70 [ 1307.877316][T22536] task_work_run+0x1d9/0x270 [ 1307.881893][T22536] do_exit+0x69b/0x2310 [ 1307.886033][T22536] do_group_exit+0x21b/0x2d0 [ 1307.890606][T22536] get_signal+0x1284/0x1330 [ 1307.895090][T22536] arch_do_signal_or_restart+0xbc/0x830 [ 1307.900614][T22536] exit_to_user_mode_loop+0x86/0x480 [ 1307.905876][T22536] do_syscall_64+0x32d/0xf80 [ 1307.910447][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.916325][T22536] [ 1307.918632][T22536] Memory state around the buggy address: [ 1307.924240][T22536] ffff8880962a3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1307.932302][T22536] ffff8880962a4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1307.940343][T22536] >ffff8880962a4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1307.948381][T22536] ^ [ 1307.953742][T22536] ffff8880962a4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1307.961792][T22536] ffff8880962a4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1307.969836][T22536] ================================================================== [ 1307.978722][T27318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.981560][T22536] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1307.981577][T22536] CPU: 0 UID: 0 PID: 22536 Comm: khidpd_00065508 Not tainted syzkaller #0 PREEMPT(full) [ 1307.981600][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.981612][T22536] Call Trace: [ 1307.981620][T22536] [ 1307.981630][T22536] vpanic+0x1e0/0x670 [ 1307.981658][T22536] panic+0xc5/0xd0 [ 1307.981679][T22536] ? __pfx_panic+0x10/0x10 [ 1307.981701][T22536] ? __mutex_lock+0x812/0x1300 [ 1307.981729][T22536] ? __mutex_lock+0x812/0x1300 [ 1307.981749][T22536] check_panic_on_warn+0x89/0xb0 [ 1307.981774][T22536] ? __mutex_lock+0x812/0x1300 [ 1307.981794][T22536] end_report+0x6f/0x140 [ 1307.981817][T22536] kasan_report+0x128/0x150 [ 1307.981839][T22536] ? __mutex_lock+0x812/0x1300 [ 1307.981864][T22536] __mutex_lock+0x812/0x1300 [ 1307.981887][T22536] ? __mutex_lock+0x5ac/0x1300 [ 1307.981910][T22536] ? l2cap_unregister_user+0x6a/0x1b0 [ 1307.981935][T22536] ? __pfx___mutex_lock+0x10/0x10 [ 1307.981962][T22536] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1307.981981][T22536] ? lockdep_hardirqs_on+0x7a/0x110 [ 1307.982003][T22536] l2cap_unregister_user+0x6a/0x1b0 [ 1307.982027][T22536] hidp_session_thread+0x3cb/0x440 [ 1307.982044][T22536] ? lock_acquire+0x106/0x330 [ 1307.982063][T22536] ? __pfx_hidp_session_thread+0x10/0x10 [ 1307.982081][T22536] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1307.982101][T22536] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1307.982118][T22536] ? __kthread_parkme+0x7a/0x1f0 [ 1307.982138][T22536] ? __kthread_parkme+0x19c/0x1f0 [ 1307.982160][T22536] kthread+0x388/0x470 [ 1307.982181][T22536] ? __pfx_hidp_session_thread+0x10/0x10 [ 1307.982197][T22536] ? __pfx_kthread+0x10/0x10 [ 1307.982219][T22536] ret_from_fork+0x51e/0xb90 [ 1307.982239][T22536] ? __pfx_ret_from_fork+0x10/0x10 [ 1307.982257][T22536] ? __switch_to+0xc7d/0x1400 [ 1307.982276][T22536] ? __pfx_kthread+0x10/0x10 [ 1307.982297][T22536] ret_from_fork_asm+0x1a/0x30 [ 1307.982333][T22536] [ 1307.987138][T22536] Kernel Offset: disabled