last executing test programs: 3.712083035s ago: executing program 1 (id=3392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240bcb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x84000000, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r7, @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000004c0008804800008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b200004000a004e220000000100000000000000000000000000000001021000001400020077673000"/110], 0x74}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000000480)=@ethtool_pauseparam={0x12, 0x9e, 0x5, 0x7}}) sendmsg$inet6(r8, &(0x7f0000000b80)={&(0x7f0000000280)={0xa, 0x4e22, 0x100, @empty, 0x7}, 0x1c, 0x0}, 0x20040004) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0xdf, 0x55, &(0x7f0000000100)="8f6118d01ea59b03ec51e8a118f814382fc48bb7a9ec873a965db77b3ecee662947bfb87225076152e3db414c4586b5dc92721d315acb74e94c2b36c38e73bf6415c960d3fec940c7b93375301280a2f48d9763ac288382ca574c4c5bb310714c3ac344968e8ebc34ce85275eb177d10f87ae093671b6834a9675b7d71a24e83a0ad4a5bd9837594fa724085ad3ea3cab2c84a65da511c2d5259dc35d2018a1514969242a73b8d941428b7686c6cca52cd4cd9922126cba9d63bca439adca12bd348c35f37cb32e2357ba573fcf8ce0e4e84bff32ced24ccf606efe389b9c8", &(0x7f0000000200)=""/85, 0xc000, 0x0, 0x2e, 0x5e, &(0x7f0000000040)="01fd604d198b02f310e953b82f4522afa3b77dca35770c8010feb12144447ac65ade4d27d75770c731e3c5abe373", &(0x7f00000002c0)="9210e747493c2c983adafcf3b94d38ab2c59063c225d3233762053c9615de442ef14c5d5c9345cfdd8dab3c76d56f645b38f6cef2f1ca4912558e5ac3ff99d34312ba0e3b5ad0d02c6e618d4cdd25123873bef60e7f0eb5c9b2cb9f1c039", 0x4, 0x0, 0xfffffff8}, 0x50) 3.097448702s ago: executing program 2 (id=3403): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f000000a500)) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.757225051s ago: executing program 1 (id=3410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d616373656330"], 0x40}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="55d2", 0x2}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000780)="eb482cc1dac0131b9aeaba8aabfb339f011dee26984ad74b940590d18b03668c547f53ee88", 0x25, 0x20004010, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) 2.665406455s ago: executing program 4 (id=3413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70b52c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.535418546s ago: executing program 4 (id=3416): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.407931462s ago: executing program 3 (id=3418): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="f5ffffffffffffbf00000300000004000180"], 0x18}}, 0x0) 2.353912815s ago: executing program 4 (id=3419): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000c7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000bab704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newlink={0x170, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x100, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf0, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'vlan\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '$\\\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b84cb39beb014e289eeff96fe0111308"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "020f02a03c3a7c51f1ce9369ce129401"}]}, @IFLA_MASTER={0x8}]}, 0x170}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) close(r7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f00000006c0)="493d72f4b067b4d738686977534332e6fe2f7726c53d86149a16c217605187d90d608d611fca8ddaaad5a760", 0x2c}], 0x2) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f00000006c0)="493d72f4b067b4d738686977534332e6fe2f7726c53d86149a16c217605187d90d608d611fca8ddaaad5a760", 0x2c}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x4, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfe}], 0x60) r11 = socket$igmp6(0xa, 0x3, 0x2) splice(r11, &(0x7f0000000180), r8, &(0x7f00000001c0)=0x401, 0x5, 0xf) 2.301388679s ago: executing program 3 (id=3421): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="14e7ffff12000b0026bd7000024000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.231892499s ago: executing program 3 (id=3423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 2.135468592s ago: executing program 2 (id=3424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20) r1 = socket(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x74, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x74}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000002a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.998405041s ago: executing program 0 (id=3426): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x40, 0x18, 0x10, 0x70bd29, 0x25dfdbfb, {0x2, 0x10, 0x14, 0xd, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x20, 0x4, r0}}, @RTA_IIF={0x8, 0x3, r1}, @RTA_NH_ID={0x8, 0x1e, 0x83d}, @RTA_IP_PROTO={0x5, 0x1b, 0x2b}]}, 0x40}}, 0x80400c0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@un=@abs, &(0x7f0000000280)=0x80, 0x80000) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x200000a5) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, 0x3, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2f}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (rerun: 64) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @loopback}, &(0x7f00000006c0)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x4, [@float={0x10, 0x0, 0x0, 0x10, 0x10}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x9, 0x1}]}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @fwd={0x1}, @var={0xe, 0x0, 0x0, 0xe, 0x1, 0x3}, @fwd={0x10}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x3, 0x2}, {0x10, 0x3}, {0xa, 0x1}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000007c0)=""/4096, 0xa4, 0x1000, 0x1, 0x6, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x8, 0x20, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x15f}, @ldst={0x3, 0x3, 0x4, 0xb, 0x7, 0xfffffffffffffff8, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x6f, 0x9, 0xd, 0x4, 0x6}, @printk={@d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001900)='syzkaller\x00', 0xd0b, 0xef, &(0x7f0000001940)=""/239, 0x41000, 0x0, '\x00', r0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x3, 0x9, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001ac0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x2, 0x7, 0x7}, {0x2, 0x2, 0x5, 0x4}, {0x4, 0x4, 0xc, 0x1}, {0x2, 0x3, 0x2, 0xb}, {0x4, 0x1, 0x0, 0x3}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001c40), &(0x7f0000001c80)='%pK \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x2, 0x40, 0x2, 0x1, 0x4600, 0x1, 0x9500, '\x00', r0, r2, 0x0, 0x4, 0x2}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@bloom_filter={0x1e, 0x6, 0xe, 0x9, 0x40201, 0xffffffffffffffff, 0x1, '\x00', r0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x20, 0x9, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}, [@alu={0x7, 0x1, 0x7, 0x4, 0x6, 0x100}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @generic={0x5, 0x6, 0x1, 0x5ba8, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}]}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x2f, &(0x7f0000000640)=""/47, 0x40f00, 0x40, '\x00', r3, @netfilter, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x6, &(0x7f0000001e40)=[r6, 0xffffffffffffffff, r7, r8, 0x1, r9], &(0x7f0000001e80)=[{0x3, 0x4, 0x10, 0x5}, {0x2, 0x5, 0xf, 0x6}, {0x5, 0x1, 0xa, 0x1}, {0x0, 0x1, 0x4, 0xb}, {0x0, 0x5, 0x10, 0x8}, {0x2, 0x4, 0x9, 0x1}], 0x10, 0x101}, 0x94) (async, rerun: 64) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001fc0)={0x0, 0x2}, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000002040)={r10, 0x7}, 0x8) connect$packet(r2, &(0x7f0000002080)={0x11, 0x1, r3, 0x1, 0xe, 0x6, @remote}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000020c0)=[@sack_perm, @timestamp, @timestamp, @window={0x3, 0xfff7, 0x4}, @mss={0x2, 0xf}, @timestamp], 0x6) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000002100)=0xc9e) (async) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000002140)={0x0, @private=0xa010100, 0x4e23, 0x0, 'lc\x00', 0x20, 0x1, 0x38}, 0x2c) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002180)) (async) sendmsg$nl_route(r6, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)=@ipv6_getnetconf={0x34, 0x52, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x6578}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000022c0)={r10, 0x3}, &(0x7f0000002300)=0x8) (async) r11 = accept$nfc_llcp(r2, &(0x7f0000002340), &(0x7f00000023c0)=0x60) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002400)={0x1b, 0x0, 0x0, 0x2, 0x0, r6, 0xfffffff6, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002700)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0xb, 0x15, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @generic={0x8, 0x0, 0x2, 0xc4, 0xd0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002540)='syzkaller\x00', 0xffffca2b, 0xec, &(0x7f0000002580)=""/236, 0x40f00, 0x0, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000002680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000026c0)={0x0, 0x8, 0x7, 0x100}, 0x10, r13, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002740)=[{0x5, 0x1, 0x9, 0x6}], 0x10, 0xfffffffb}, 0x94) (async) r14 = accept4(r11, &(0x7f0000002840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000028c0)=0x80, 0x80000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r14, &(0x7f0000002d80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d40)={&(0x7f00000029c0)={0x374, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x328, 0x111, 0x0, 0x1, {0x324, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3fc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x355}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x220}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x70}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x298}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}]}, 0x374}, 0x1, 0x0, 0x0, 0x44000}, 0x4000001) 1.960700587s ago: executing program 0 (id=3427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000085100000faffffff180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000003c8727d73711fe72ce34fa7e0e156396838e3162e6456880109d881e0d40df334e8264bb2698484f8cd6e71cdaaf9ef58e25d83fd03b58c30458c1d6b2f4f2220647c23672b20efa182b51cfae1045307b98ef4814f75dad89b6cc0faea1ff098d51df2fc3843cd9fc41e9f9323d68c34a90d10e92e16f"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f00000002c0)=ANY=[], 0x90}, 0x20000000) socket(0x1, 0x3d084b5bce0c7f45, 0xa53) 1.836281625s ago: executing program 0 (id=3428): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) syz_emit_ethernet(0xd86, &(0x7f0000005100)={@random="9d3e485beb27", @random="78a4e8c9ab61", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0xd50, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xadd, {0x0, 0x6, "6b329f", 0x0, 0x3a, 0x0, @empty, @local, [@hopopts={0x33, 0x1a2, '\x00', [@ra={0x5, 0x2, 0x1000}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3, 0x8, [0x7fff, 0x8, 0x80, 0xef75, 0x5, 0x5, 0x9]}}, @jumbo={0xc2, 0x4, 0x200}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x6, [0x8]}}, @pad1, @generic={0xb7, 0xcae, "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"}]}]}}}}}}}, 0x0) 1.835732297s ago: executing program 1 (id=3429): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'lo\x00', 0x2}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xfff3, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r2, 0x33, 0x1, 0x8, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 619.720357ms ago: executing program 2 (id=3430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x18136329}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@union={0x6, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x9, 0x7fff, 0x5}, {0x8, 0x2, 0xc61}, {0x2, 0x0, 0x3ff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xc}}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x7fff}, {0x4}, {0xd, 0x6}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f00000005c0)=""/7, 0x8b, 0x7, 0x0, 0x10, 0x10000}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x7fffffff, 0x0, 0xfc7}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r8, 0x35, 0xffffffffffffffff}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x4, 0x9, 0xb, 0x30, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xaa, &(0x7f0000000400)=""/170, 0x40f00, 0x2, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x93, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r7, r8], &(0x7f0000000700)=[{0x0, 0x3, 0x5, 0x2}, {0x4, 0x3, 0x9, 0x2}, {0x5, 0x2, 0xf, 0xa}, {0x2, 0x2, 0x6, 0x6}, {0x3, 0x1, 0x2, 0x2}], 0x10, 0x8ce}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x2, 0x0, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 600.711934ms ago: executing program 0 (id=3431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfc8, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, "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"}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r7, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000a000180c2000000aaaaaaaaaabbaa2aaa7caabbffffffffffff30c323b87ce1ffffffffffff0180c2000002ffffffffffff0180c20000021aab5c8ba43770362e2c3b"]) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 600.054303ms ago: executing program 1 (id=3432): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 540.914399ms ago: executing program 4 (id=3433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvtap0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRESOCT=r0, @ANYBLOB="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"], 0x38}}, 0x4810) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 467.780308ms ago: executing program 3 (id=3434): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='veth1_vlan\x00') write(r0, &(0x7f0000000040)="0d000000010001", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 444.38787ms ago: executing program 2 (id=3435): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x1, 0x700, 0xfffffffc, 0x10001, {{0x30, 0x4, 0x2, 0x17, 0xc0, 0x64, 0x0, 0xcd, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x13, 0x9e, [@empty, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @ssrr={0x89, 0x27, 0x62, [@dev={0xac, 0x14, 0x14, 0x18}, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0x34, 0x1a, 0x3, 0x9, [{@multicast1, 0x8}, {@loopback, 0x79a}, {@empty, 0x9}, {@local, 0x4}, {@remote, 0x8}, {@local, 0x2}]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x2b, [@empty, @private=0xa010102, @multicast2, @private=0xa010102, @rand_addr=0x64010102, @remote, @rand_addr=0x64010102, @empty, @empty]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x1, [0x6, 0x6, 0x6]}, @noop]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@private0, 0x5e, r6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 423.513804ms ago: executing program 1 (id=3436): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="bd4e54d45303", @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @dev, @local, @multicast2}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x7ff, 0x2f1, 0x20010, r3, 0x3, '\x00', 0x0, r4, 0x5, 0x2, 0x5}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000080)={0x1}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0x801c581f, 0x30000002000005c) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000", @ANYRES16=r9, @ANYBLOB="2da52a54afb180fbdf250300000008000100000000000800010000000000340007800c00018008000100ba1ffca2cee7ab3d1b73234890ef2b76d50c8eff7a35c40498807f701bdc727f674c237beaa2eb710aff157787de8529c505b3"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 275.572404ms ago: executing program 2 (id=3437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 207.544538ms ago: executing program 4 (id=3438): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x2, 0xc318, 0x2]}, &(0x7f0000000100)=0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x2, 0xc318, 0x2]}, &(0x7f0000000100)=0x44) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) 206.20277ms ago: executing program 3 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) 205.578396ms ago: executing program 0 (id=3440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$tcp_mem(r0, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000240)={0x30000007}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}], 0x1, 0x0, 0x168}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 109.67825ms ago: executing program 1 (id=3441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040004}], 0x1, 0x40800) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x400, 0x70bd28, 0x81, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x184}}, 0x0) 90.078349ms ago: executing program 4 (id=3442): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000240)=0x80000001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) r6 = socket(0x8, 0x0, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00e57f08000500010000000000160000000000050029000000000000001b0007"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000000640)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) shutdown(r6, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000eb170000001800b7d8764c000000000000000000000c0500000000001dc10a6450727848ccb5cd707de8f2a8906580c33fbc2283e1b6b00d5dfc0efbf6e642b0d00561317b85a4f800596656c72a259302de15ff1e2f2c45106e4a8b7ff274f7435b90d0b83e9bb4bbc434eb4fa1fdf1a111427ff3dc29b1849e6843ecc789c16d27d8d9e3c92514339e4cbb3048bda94fd7cc444f3c31c287b2a0b882da"], &(0x7f0000000f40)=""/4087, 0x32, 0xff7, 0x1}, 0x28) 19.156ms ago: executing program 2 (id=3443): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) ioctl$sock_ifreq(r0, 0xcd15, &(0x7f0000000300)={'netdevsim0\x00', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x4}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000073110a00000000f59b0085100000020000007500000000006bb307000095000810000000009500a505000000000cf50167af48ddf4f7f506d36c0fb5e2065a2f8fe30ff3c7f422f69a9e18cd372e2c0546f8be6e86888b441dd39780499a19d13e7b0f490bf8995fc2a650642a1403710300c272e8e665f5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r3) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c22e580080002400000000b080001400000000308000300000000891800018008000100647570040c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000de0000000000000000000a"], 0x9c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c22e580080002400000000b080001400000000308000300000000891800018008000100647570040c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000de0000000000000000000a"], 0x9c}}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f0000000100)=[0x6d, 0x5, 0x5, 0xd], 0x9}}, 0x30) (async) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f0000000100)=[0x6d, 0x5, 0x5, 0xd], 0x9}}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r5}, 0x8) 16.204185ms ago: executing program 3 (id=3444): r0 = socket(0xa, 0x3, 0xff) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x94, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x3}, 0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"/471], 0x2d0}, 0x1, 0x0, 0x0, 0x4002}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x86, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) (async) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40010142, 0x0) 0s ago: executing program 0 (id=3445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0xc054}, 0x8081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), r0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xd, 0x5, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x80) kernel console output (not intermixed with test programs): 3] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 203.578301][T11587] netlink: 'syz.0.1642': attribute type 2 has an invalid length. [ 203.635363][T11589] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 203.712211][T11594] bridge_slave_0: invalid flags given to default FDB implementation [ 203.928207][T11608] netlink: 'syz.4.1650': attribute type 3 has an invalid length. [ 203.939831][T11608] netlink: 'syz.4.1650': attribute type 1 has an invalid length. [ 204.408242][T11627] syzkaller0: entered promiscuous mode [ 204.431797][T11627] syzkaller0: entered allmulticast mode [ 204.450645][T11627] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.460787][T11629] block nbd4: not configured, cannot reconfigure [ 204.654078][T11636] netlink: 'syz.4.1660': attribute type 11 has an invalid length. [ 204.789298][T11650] __nla_validate_parse: 17 callbacks suppressed [ 204.789314][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1665'. [ 204.819698][T11652] netlink: 'syz.0.1666': attribute type 2 has an invalid length. [ 205.028990][T11658] veth1_to_bond: entered allmulticast mode [ 205.104746][T11658] veth1_to_bond: left allmulticast mode [ 205.558131][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 205.815838][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 206.265328][T11729] openvswitch: netlink: Missing valid actions attribute. [ 206.272432][T11729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.461916][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 206.500425][T11741] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 206.522168][T11741] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 206.549360][T11741] netlink: 'syz.3.1697': attribute type 2 has an invalid length. [ 206.561253][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 206.570684][T11741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1697'. [ 206.648976][T11741] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) ! [ 206.687240][T11741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1697'. [ 206.731207][T11741] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1697'. [ 206.739936][T11753] syzkaller0: entered promiscuous mode [ 206.765902][T11753] syzkaller0: entered allmulticast mode [ 206.897878][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 207.109777][T11782] xt_l2tp: missing protocol rule (udp|l2tpip) [ 207.136219][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'. [ 207.369722][T11795] netlink: 'syz.1.1710': attribute type 11 has an invalid length. [ 207.396160][T11795] netlink: 'syz.1.1710': attribute type 11 has an invalid length. [ 207.586766][T11803] IPVS: length: 8 != 1152 [ 207.616309][T11799] syzkaller1: entered promiscuous mode [ 207.629748][T11799] syzkaller1: entered allmulticast mode [ 207.661096][T11799] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 207.721067][T11799] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.749767][T11799] gretap2: entered promiscuous mode [ 207.756157][T11799] gretap2: entered allmulticast mode [ 207.817218][T11809] veth0: entered promiscuous mode [ 207.822656][T11812] veth0: left promiscuous mode [ 207.832913][T11809] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.015673][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.547849][T11862] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 208.649631][T11864] syzkaller0: entered promiscuous mode [ 208.655786][T11864] syzkaller0: entered allmulticast mode [ 208.750178][T11868] dvmrp6: entered allmulticast mode [ 208.831653][T11882] netlink: 'syz.0.1738': attribute type 2 has an invalid length. [ 209.136322][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.188694][T11906] bond4: entered promiscuous mode [ 209.193956][T11906] bond4: entered allmulticast mode [ 209.200029][T11906] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.328275][T11916] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 209.671933][T11927] netlink: 'syz.0.1751': attribute type 2 has an invalid length. [ 209.693497][T11927] netlink: 'syz.0.1751': attribute type 2 has an invalid length. [ 209.768129][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.464605][T11988] batadv_slave_0: entered promiscuous mode [ 210.482303][T11988] __nla_validate_parse: 15 callbacks suppressed [ 210.482450][T11988] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1769'. [ 210.488094][T11993] netlink: 'syz.3.1770': attribute type 5 has an invalid length. [ 210.491114][T11988] netlink: 'syz.2.1769': attribute type 21 has an invalid length. [ 210.499066][T11993] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1770'. [ 210.534163][T11995] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 210.541727][T11995] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 210.561935][T11995] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 210.591690][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 210.602208][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 210.611593][T11998] netlink: 'syz.3.1771': attribute type 12 has an invalid length. [ 210.620654][T11998] netlink: 'syz.3.1771': attribute type 11 has an invalid length. [ 211.160477][T12008] openvswitch: netlink: Key type 105 is out of range max 32 [ 211.178633][T11982] batadv_slave_0: left promiscuous mode [ 211.376690][T12019] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 211.782532][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 211.848069][T12047] bond8 (unregistering): Released all slaves [ 211.923355][T12055] bond_slave_1: entered promiscuous mode [ 212.291347][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 212.334422][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 212.356297][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 212.376827][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 212.396501][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 212.559550][T12089] macvlan2: entered promiscuous mode [ 212.565190][T12089] macvlan2: entered allmulticast mode [ 212.571607][T12089] bond8: entered promiscuous mode [ 212.577790][T12089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.587086][T12089] bond8: left promiscuous mode [ 213.674748][ T8938] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 213.921518][T12149] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 214.941931][T12211] tipc: New replicast peer: 255.255.255.255 [ 214.950303][T12211] tipc: Enabled bearer , priority 10 [ 215.307116][T12239] netlink: 'syz.2.1843': attribute type 21 has an invalid length. [ 215.401701][T12248] tipc: Invalid UDP bearer configuration [ 215.401754][T12248] tipc: Enabling of bearer rejected, failed to enable media [ 215.604679][T12260] netlink: 'syz.0.1850': attribute type 22 has an invalid length. [ 215.612640][T12260] __nla_validate_parse: 38 callbacks suppressed [ 215.612656][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 215.648604][ T5091] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.658331][T12260] netlink: 'syz.0.1850': attribute type 22 has an invalid length. [ 215.666530][ T5091] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.676653][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 215.687164][ T5091] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.699839][ T5091] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.074090][ T5898] tipc: Node number set to 3213123822 [ 216.146566][T12292] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1861'. [ 216.421278][T12310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.479010][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 216.486556][T12310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1869'. [ 216.641261][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 216.665260][T12327] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 216.699969][T12328] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 217.018083][T12357] bridge0: Device is already in use. [ 217.083347][T12362] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1882'. [ 217.107089][T12366] netlink: 'syz.3.1883': attribute type 13 has an invalid length. [ 217.368866][T12384] netlink: 'syz.4.1886': attribute type 12 has an invalid length. [ 217.392812][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 217.414111][T12384] netlink: 'syz.4.1886': attribute type 12 has an invalid length. [ 217.452130][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 217.484370][T12390] sock: sock_timestamping_bind_phc: sock not bind to device [ 217.586369][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 217.621037][ T3453] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.635311][ T3453] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.657617][ T3453] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.677816][ T3453] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.796554][T12411] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 217.806819][T12411] bond0: Caught tx_queue_len zero misconfig [ 217.966119][T12422] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 218.041215][T12427] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 218.110514][T12427] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.143954][T12427] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 218.155949][T12427] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 218.403684][T12451] netlink: 'syz.4.1907': attribute type 11 has an invalid length. [ 218.421907][T12451] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 218.708396][T12463] sctp: [Deprecated]: syz.1.1908 (pid 12463) Use of int in maxseg socket option. [ 218.708396][T12463] Use struct sctp_assoc_value instead [ 218.940319][T12485] tipc: Invalid UDP bearer configuration [ 218.940369][T12485] tipc: Enabling of bearer rejected, failed to enable media [ 219.140646][T12500] syzkaller0: entered promiscuous mode [ 219.146769][T12500] syzkaller0: entered allmulticast mode [ 219.230592][T12502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.334822][T12502] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 219.670201][T12502] bond7: entered allmulticast mode [ 219.720146][T12530] vlan5: entered promiscuous mode [ 219.725537][T12530] bridge0: entered promiscuous mode [ 219.887307][T12540] lo: entered allmulticast mode [ 220.173143][T12560] x_tables: duplicate underflow at hook 2 [ 220.501690][T12587] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 220.855887][T12616] __nla_validate_parse: 10 callbacks suppressed [ 220.855900][T12616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 220.898723][T12616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 221.123293][ T5854] udevd[5854]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 221.206980][T12625] validate_nla: 5 callbacks suppressed [ 221.207000][T12625] netlink: 'syz.2.1954': attribute type 1 has an invalid length. [ 221.225574][ T5852] udevd[5852]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 221.282992][T12627] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1955'. [ 221.306886][T12625] 0: reclassify loop, rule prio 0, protocol 800 [ 221.425194][T12632] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 221.474317][T12633] netlink: 3556 bytes leftover after parsing attributes in process `syz.4.1957'. [ 221.686547][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 221.700184][T12645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1961'. [ 221.728368][T12646] bond0: Device is already in use. [ 221.755653][T12643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1963'. [ 221.797734][T12639] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 221.829351][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1960'. [ 221.876724][T12653] dvmrp0: left allmulticast mode [ 221.970782][ T11] block nbd0: Possible stuck request ffff8880259a0000: control (read@0,1024B). Runtime 120 seconds [ 221.983070][ T11] block nbd0: Possible stuck request ffff8880259a0200: control (read@1024,1024B). Runtime 120 seconds [ 221.994494][ T11] block nbd0: Possible stuck request ffff8880259a0400: control (read@2048,1024B). Runtime 120 seconds [ 222.006125][T12662] block nbd0: Dead connection, failed to find a fallback [ 222.019143][ T11] block nbd0: Possible stuck request ffff8880259a0600: control (read@3072,1024B). Runtime 120 seconds [ 222.035961][T12655] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 222.064184][T12659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1968'. [ 222.213196][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1970'. [ 225.262603][ T5201] udevd[5201]: worker [5835] /devices/virtual/block/nbd0 is taking a long time [ 245.066861][T12679] tipc: Enabled bearer , priority 0 [ 245.089623][T12677] netlink: 'syz.0.1971': attribute type 11 has an invalid length. [ 245.098515][T12677] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1971'. [ 245.133546][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 245.307004][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.318524][T12705] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.359716][T12705] tipc: Resetting bearer [ 245.398581][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.443209][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 245.454693][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1984'. [ 245.533261][T12717] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 245.619441][T12717] bond10 (unregistering): Released all slaves [ 245.707878][T12724] netlink: 'syz.4.1986': attribute type 10 has an invalid length. [ 245.724171][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 245.836250][T12725] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.853174][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1987'. [ 245.889401][T12732] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 245.917506][T12732] tipc: Enabling of bearer rejected, failed to enable media [ 245.961745][T12737] sctp: [Deprecated]: syz.0.1989 (pid 12737) Use of int in maxseg socket option. [ 245.961745][T12737] Use struct sctp_assoc_value instead [ 246.074431][T12741] syzkaller0: entered promiscuous mode [ 246.079951][T12741] syzkaller0: entered allmulticast mode [ 246.122512][T12741] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 246.244008][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.307285][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1997'. [ 246.314605][T12762] netlink: 'syz.3.1998': attribute type 9 has an invalid length. [ 246.339925][T12765] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.354262][T12765] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.505170][T12780] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2001'. [ 246.539945][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 246.560879][T12780] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.619440][T12786] netlink: 'syz.2.2004': attribute type 64 has an invalid length. [ 246.638486][T12786] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2004'. [ 247.109191][ T107] IPVS: starting estimator thread 0... [ 247.128096][T12828] IPVS: lc: FWM 3 0x00000003 - no destination available [ 247.146140][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 247.215406][T12830] IPVS: using max 33 ests per chain, 79200 per kthread [ 247.282339][T12844] sctp: [Deprecated]: syz.0.2021 (pid 12844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.282339][T12844] Use struct sctp_sack_info instead [ 247.301121][T12847] sctp: [Deprecated]: syz.0.2021 (pid 12847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.301121][T12847] Use struct sctp_sack_info instead [ 247.733480][T12878] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 247.746918][T12877] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.851292][T12888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.998140][T12895] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 248.030333][T12895] netlink: 'syz.4.2039': attribute type 2 has an invalid length. [ 248.038927][T12898] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 248.127456][T12898] 8021q: adding VLAN 0 to HW filter on device bond10 [ 248.177334][T12909] dvmrp0: entered allmulticast mode [ 248.215846][T12898] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 248.367986][T12926] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 248.385862][T12926] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 248.621018][T12959] veth0: entered promiscuous mode [ 248.629173][T12960] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 248.660868][T12959] veth0 (unregistering): left promiscuous mode [ 248.924611][T12975] openvswitch: netlink: Missing key (keys=40, expected=100) [ 249.173159][T12994] netlink: 'syz.1.2065': attribute type 2 has an invalid length. [ 249.182968][T12993] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 249.246148][T12993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.275098][T12998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.282051][T12998] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 249.293599][T12998] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 249.440955][T13005] xfrm2: entered promiscuous mode [ 249.476944][T13005] xfrm2: entered allmulticast mode [ 249.978495][T13042] : entered promiscuous mode [ 250.074971][T13051] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:65534 [ 250.117393][T13054] __nla_validate_parse: 14 callbacks suppressed [ 250.117413][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 250.175278][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 250.231980][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805612fc00: rx timeout, send abort [ 250.240738][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805612fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.401179][T13070] nbd: must specify at least one socket [ 250.419948][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 250.597878][T13089] 8021q: VLANs not supported on gre0 [ 250.614179][T13092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2090'. [ 250.814137][T13122] sctp: [Deprecated]: syz.4.2098 (pid 13122) Use of int in max_burst socket option deprecated. [ 250.814137][T13122] Use struct sctp_assoc_value instead [ 250.867410][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 251.078185][T13131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2100'. [ 251.099475][T13139] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 251.157641][T13141] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 251.188071][T13141] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 251.278865][T13153] netlink: 'syz.0.2107': attribute type 3 has an invalid length. [ 251.300604][T13153] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 251.318150][T13153] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2107'. [ 251.469988][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2113'. [ 251.479387][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 251.489359][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2113'. [ 251.645239][T13183] netlink: 'syz.4.2116': attribute type 7 has an invalid length. [ 251.689357][T13183] netlink: 'syz.4.2116': attribute type 7 has an invalid length. [ 252.071960][T13215] netlink: 'syz.2.2127': attribute type 3 has an invalid length. [ 252.168434][T13226] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 252.460104][T13247] netlink: 'syz.1.2139': attribute type 3 has an invalid length. [ 252.468653][T13247] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 252.559736][T13252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.663719][T13254] x_tables: duplicate underflow at hook 1 [ 252.715630][T13261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.827540][T13264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.828648][T13268] vxcan1: tx address claim with dlc 0 [ 252.951799][T13276] netlink: 'syz.4.2146': attribute type 1 has an invalid length. [ 253.065198][T13277] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 253.114907][T13277] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.191298][T13277] bond11: (slave veth15): Enslaving as an active interface with a down link [ 253.254582][T13283] bond10: (slave veth0_to_bond): Releasing active interface [ 253.277613][T13283] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 253.765474][T13329] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.812671][T13316] vlan2: entered promiscuous mode [ 253.819098][T13316] bridge0: entered promiscuous mode [ 253.911509][T13321] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 254.045026][T13337] netlink: 'syz.1.2165': attribute type 13 has an invalid length. [ 254.201261][T13337] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 254.232499][T13331] syzkaller0: entered promiscuous mode [ 254.242846][T13331] syzkaller0: entered allmulticast mode [ 254.528299][T13368] gtp2: entered promiscuous mode [ 254.533455][T13368] gtp2: entered allmulticast mode [ 254.551513][T13369] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 254.710939][T13381] vlan5: entered allmulticast mode [ 255.250035][T13421] __nla_validate_parse: 18 callbacks suppressed [ 255.250057][T13421] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2190'. [ 255.290814][T13421] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2190'. [ 255.465841][T13434] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 255.483526][T13434] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.699827][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 255.709032][T13448] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 255.721285][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 255.754689][T13438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.852284][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.082646][T13468] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.120146][T13469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.167742][T13477] bond6: (slave geneve2): making interface the new active one [ 256.182403][T13477] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 256.191572][T13476] GUP no longer grows the stack in syz.3.2208 (13476): 200000003000-20000000a000 (200000001000) [ 256.205318][ T3560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.225234][ T3560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.251344][T13476] CPU: 0 UID: 0 PID: 13476 Comm: syz.3.2208 Not tainted syzkaller #0 PREEMPT(full) [ 256.251370][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.251389][T13476] Call Trace: [ 256.251399][T13476] [ 256.251407][T13476] dump_stack_lvl+0x189/0x250 [ 256.251438][T13476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.251461][T13476] ? __pfx__printk+0x10/0x10 [ 256.251483][T13476] ? find_vma+0xe7/0x160 [ 256.251524][T13476] __get_user_pages+0x2465/0x29f0 [ 256.251545][T13476] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 256.251576][T13476] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 256.251623][T13476] ? rcu_is_watching+0x15/0xb0 [ 256.251650][T13476] __gup_longterm_locked+0xde4/0x1660 [ 256.251680][T13476] ? try_grab_folio_fast+0x1bf/0x6a0 [ 256.251715][T13476] ? gup_fast_fallback+0x1b82/0x22d0 [ 256.251750][T13476] gup_fast_fallback+0x1d6b/0x22d0 [ 256.251806][T13476] ? __pfx_gup_fast_fallback+0x10/0x10 [ 256.251826][T13476] ? __mutex_lock+0x335/0x1350 [ 256.251855][T13476] ? is_valid_gup_args+0x11f/0x200 [ 256.251880][T13476] ? get_user_pages_fast+0x4d/0xb0 [ 256.251905][T13476] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 256.251934][T13476] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 256.251957][T13476] ? wait_for_space+0x248/0x2d0 [ 256.251981][T13476] iov_iter_get_pages2+0x5e/0xa0 [ 256.252004][T13476] __se_sys_vmsplice+0x548/0x10d0 [ 256.252048][T13476] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 256.252070][T13476] ? __pfx_futex_wait+0x10/0x10 [ 256.252101][T13476] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 256.252174][T13476] ? do_syscall_64+0xbe/0xf80 [ 256.252199][T13476] do_syscall_64+0xfa/0xf80 [ 256.252219][T13476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.252236][T13476] ? clear_bhb_loop+0x60/0xb0 [ 256.252257][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.252274][T13476] RIP: 0033:0x7f675af8f749 [ 256.252303][T13476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.252318][T13476] RSP: 002b:00007f675bead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 256.252342][T13476] RAX: ffffffffffffffda RBX: 00007f675b1e5fa0 RCX: 00007f675af8f749 [ 256.252357][T13476] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 256.252369][T13476] RBP: 00007f675b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 256.252380][T13476] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 256.252390][T13476] R13: 00007f675b1e6038 R14: 00007f675b1e5fa0 R15: 00007ffca9d38aa8 [ 256.252422][T13476] [ 256.268361][ T3560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.315942][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 256.356848][ T3560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.385012][T13469] validate_nla: 6 callbacks suppressed [ 256.385029][T13469] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 256.775416][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 256.847809][T13519] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 256.860989][T13519] bond8: (slave vcan0): Error -95 calling set_mac_address [ 256.970432][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 256.985733][T13530] netlink: 'syz.0.2219': attribute type 39 has an invalid length. [ 257.050694][ T3560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.182989][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 257.221330][T13546] tls_set_device_offload: netdev not found [ 257.256158][ T8938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.300027][T13553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.318044][T13540] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2222'. [ 257.549914][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 257.596338][T13562] netlink: 'syz.3.2227': attribute type 7 has an invalid length. [ 257.606594][T13562] netlink: 'syz.3.2227': attribute type 8 has an invalid length. [ 257.638705][T13566] bond7: Unable to set down delay as MII monitoring is disabled [ 257.651129][T13566] bond7 (unregistering): Released all slaves [ 257.882116][T13585] 8021q: VLANs not supported on vxcan1 [ 258.084801][ T3560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.115088][ T3560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.294206][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.476156][ T3560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.734522][T13643] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 259.209178][ T5091] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 259.424868][T13704] netlink: 'syz.4.2270': attribute type 13 has an invalid length. [ 259.614047][ T8938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.105538][T13742] netlink: 'syz.2.2281': attribute type 7 has an invalid length. [ 260.141439][T13745] netlink: 'syz.0.2282': attribute type 13 has an invalid length. [ 260.146234][T13738] netlink: 'syz.2.2281': attribute type 7 has an invalid length. [ 260.159497][T13745] macvtap0: entered allmulticast mode [ 260.178620][T13745] macvtap0: refused to change device tx_queue_len [ 260.216184][T13742] netlink: 'syz.2.2281': attribute type 7 has an invalid length. [ 260.428189][T13761] tipc: Enabling of bearer rejected, failed to enable media [ 260.447924][T13761] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 260.646767][T13782] syzkaller0: entered promiscuous mode [ 260.652399][T13782] syzkaller0: entered allmulticast mode [ 260.662932][T13782] TC_ACT_REPEAT abuse ? [ 260.670020][T13782] tipc: Enabling of bearer rejected, media not registered [ 260.725796][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.840565][T13792] __nla_validate_parse: 7 callbacks suppressed [ 260.840583][T13792] netlink: 4492 bytes leftover after parsing attributes in process `syz.3.2297'. [ 260.870160][T13792] ip6tnl0: Caught tx_queue_len zero misconfig [ 260.917448][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 261.093153][T13809] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2305'. [ 261.210276][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 261.559131][T13849] team0: Cannot enslave team device to itself [ 261.777354][T13866] validate_nla: 5 callbacks suppressed [ 261.777373][T13866] netlink: 'syz.1.2320': attribute type 3 has an invalid length. [ 261.803876][ T5945] IPVS: starting estimator thread 0... [ 261.807134][T13875] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 261.946921][T13877] IPVS: using max 27 ests per chain, 64800 per kthread [ 262.030579][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 262.084230][ C1] net_ratelimit: 1 callbacks suppressed [ 262.084251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.321203][T13899] netlink: 'syz.2.2327': attribute type 21 has an invalid length. [ 262.344066][T13899] netlink: 'syz.2.2327': attribute type 6 has an invalid length. [ 262.363284][T13899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2327'. [ 262.401989][T13907] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 262.730936][T13931] vlan4: entered promiscuous mode [ 262.754424][T13931] bridge0: entered promiscuous mode [ 262.853310][T13941] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.875921][T13944] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.985695][ T8938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.043992][ T5847] Bluetooth: hci2: command 0x0401 tx timeout [ 263.050110][ T53] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 263.232198][T13964] ieee802154 phy0 wpan0: encryption failed: -90 [ 263.683554][T13995] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 263.822611][T14003] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 263.832741][T14003] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 264.106101][T14025] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 264.170830][ T6645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.399377][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2359'. [ 264.606292][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 264.622378][T14055] openvswitch: netlink: Flow key attr not present in new flow. [ 264.696470][T14057] netlink: 'syz.2.2364': attribute type 1 has an invalid length. [ 264.716792][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 264.909014][T14068] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 264.959961][T14075] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 264.982182][T14068] bond12: (slave ip6gretap3): making interface the new active one [ 264.990955][T14068] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 264.999464][T14068] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 265.007810][T14068] bond12: (slave ip6gretap3): Enslaving as an active interface with an up link [ 265.017545][T14070] syzkaller0: entered promiscuous mode [ 265.036811][T14070] syzkaller0: entered allmulticast mode [ 265.295283][T14089] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2375'. [ 265.377449][ T3676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.542603][T14094] netlink: 'syz.1.2376': attribute type 2 has an invalid length. [ 265.571785][T14094] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 265.613337][T14098] geneve4: entered promiscuous mode [ 265.632634][T14098] geneve4: entered allmulticast mode [ 265.782006][T14106] netlink: 'syz.4.2381': attribute type 3 has an invalid length. [ 265.936707][T14113] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 265.948414][T14113] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 265.972753][T14114] ipt_REJECT: TCP_RESET invalid for non-tcp [ 266.427066][T14146] : renamed from bond_slave_0 [ 266.524473][ T8938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.587897][T14151] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 266.865018][T14165] __nla_validate_parse: 3 callbacks suppressed [ 266.865046][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 266.935069][T14165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2396'. [ 266.948662][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 266.948798][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 267.020903][T14169] kthread_run failed with err -4 [ 267.046835][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 267.047251][T14165] geneve3: entered promiscuous mode [ 267.064231][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 267.083600][T14165] geneve3: entered allmulticast mode [ 267.208118][T14178] macvtap1: entered allmulticast mode [ 267.213539][T14178] veth0_macvtap: entered allmulticast mode [ 267.324223][T14192] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2402'. [ 267.388501][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 267.402981][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 267.424073][ T53] block nbd5: Receive control failed (result -32) [ 267.498902][T14203] bond0: (slave bridge_slave_1): Releasing backup interface [ 267.519648][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 267.555475][T14203] bond11: (slave veth0_to_bond): Releasing active interface [ 267.589301][T14203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 267.666095][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'. [ 267.859268][T14231] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 267.905504][T14231] bond6 (unregistering): Released all slaves [ 268.165988][T14257] x_tables: duplicate underflow at hook 3 [ 268.166794][T14258] x_tables: duplicate underflow at hook 3 [ 268.448483][T14272] batadv_slave_1: entered promiscuous mode [ 268.457491][T14270] batadv_slave_1: left promiscuous mode [ 268.611304][T14281] nbd: must specify a device to reconfigure [ 268.764506][T14293] netlink: 'syz.1.2427': attribute type 21 has an invalid length. [ 268.977563][T14300] pim6reg: entered allmulticast mode [ 269.204772][T14316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.280166][T14321] v: renamed from vlan0 [ 269.687064][T14355] netlink: 'syz.2.2450': attribute type 1 has an invalid length. [ 269.748606][T14355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.806592][T14359] bond5: (slave gretap1): making interface the new active one [ 269.815652][T14359] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 270.401324][T14404] netlink: 'syz.2.2463': attribute type 11 has an invalid length. [ 270.420964][T14405] netlink: 'syz.2.2463': attribute type 11 has an invalid length. [ 270.443416][T14405] netlink: 'syz.2.2463': attribute type 11 has an invalid length. [ 270.477868][T14404] netlink: 'syz.2.2463': attribute type 11 has an invalid length. [ 270.589810][T14419] netlink: 'syz.4.2468': attribute type 2 has an invalid length. [ 270.728523][T14428] netlink: 'syz.0.2472': attribute type 1 has an invalid length. [ 270.959214][T14432] bond7 (unregistering): Released all slaves [ 271.205609][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 271.291717][T14463] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.317401][T14463] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.529118][T14483] openvswitch: netlink: IP tunnel dst address not specified [ 271.548764][T14481] netlink: 'syz.0.2486': attribute type 4 has an invalid length. [ 271.559715][T14490] netlink: 'syz.2.2490': attribute type 1 has an invalid length. [ 271.611196][T14490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.921005][T14516] nbd: couldn't find a device at index 4 [ 271.972097][T14523] __nla_validate_parse: 22 callbacks suppressed [ 271.972114][T14523] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2495'. [ 272.011643][T14522] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2495'. [ 272.195856][T14541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2503'. [ 272.769372][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 272.918419][T14590] syzkaller0: entered promiscuous mode [ 272.924759][T14590] syzkaller0: entered allmulticast mode [ 272.949909][T14590] tipc: Enabled bearer , priority 0 [ 272.969024][T14589] tipc: Resetting bearer [ 273.006228][T14589] tipc: Disabling bearer [ 273.281181][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 273.320779][T14619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.355901][T14624] 8021q: VLANs not supported on gre0 [ 273.489493][T14631] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2534'. [ 273.920145][T14657] netlink: 'syz.0.2541': attribute type 29 has an invalid length. [ 273.959038][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 273.979181][T14660] netlink: 'syz.3.2543': attribute type 6 has an invalid length. [ 274.132221][T14667] syzkaller0: entered promiscuous mode [ 274.138592][T14667] syzkaller0: entered allmulticast mode [ 274.164203][T14667] dvmrp6: entered allmulticast mode [ 274.220059][T14677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2547'. [ 274.231642][T14677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2547'. [ 274.245416][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 274.349170][T14681] netlink: 'syz.4.2546': attribute type 7 has an invalid length. [ 275.020827][T14721] tipc: Enabled bearer , priority 0 [ 275.036971][T14721] syzkaller0: entered promiscuous mode [ 275.062057][T14721] syzkaller0: entered allmulticast mode [ 275.111483][T14725] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 275.123613][T14725] bond7 (unregistering): Released all slaves [ 275.148856][T14724] tipc: Invalid UDP bearer configuration [ 275.148919][T14724] tipc: Enabling of bearer rejected, failed to enable media [ 275.178485][T14721] tipc: Resetting bearer [ 275.196726][T14720] tipc: Resetting bearer [ 275.225783][T14720] tipc: Disabling bearer [ 275.240008][T14726] tipc: Invalid UDP bearer configuration [ 275.240056][T14726] tipc: Enabling of bearer rejected, failed to enable media [ 275.330977][T14735] ipt_ECN: cannot use operation on non-tcp rule [ 275.422390][T14741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.507998][T14751] netlink: 'syz.4.2570': attribute type 10 has an invalid length. [ 275.558902][T14751] bond0: (slave ): Enslaving as an active interface with an up link [ 275.790477][T14718] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 275.799152][T14719] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 275.920935][ T30] audit: type=1107 audit(1766598628.327:10): pid=14770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4i{\7>C`>߰'9? B-&K.,%E?+r B6' [ 276.257947][T14784] sit3: entered promiscuous mode [ 276.277479][T14784] sit3: entered allmulticast mode [ 276.827335][T14826] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 276.956460][T14833] tc_dump_action: action bad kind [ 277.043949][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.137596][T14841] IPv6: sit2: Disabled Multicast RS [ 277.196043][T14850] __nla_validate_parse: 45 callbacks suppressed [ 277.196063][T14850] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2599'. [ 277.332437][T14853] openvswitch: netlink: Missing valid actions attribute. [ 277.335204][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 277.348845][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.379285][T14857] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 277.411925][T14857] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2602'. [ 277.424308][T14861] tipc: MTU too low for tipc bearer [ 277.432548][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2603'. [ 277.456210][T14870] tipc: Enabling of bearer rejected, already enabled [ 277.467713][T14870] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 277.538096][T14876] netlink: 'syz.0.2607': attribute type 1 has an invalid length. [ 277.551557][T14876] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2607'. [ 277.567649][T14861] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 277.580346][T14861] bond7 (unregistering): Released all slaves [ 278.436571][T14887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.526700][T14894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.578554][T14899] netlink: 'syz.2.2614': attribute type 7 has an invalid length. [ 278.626320][T14899] netlink: 'syz.2.2614': attribute type 8 has an invalid length. [ 278.829329][T14915] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2618'. [ 278.836766][T14913] netlink: 'syz.1.2617': attribute type 10 has an invalid length. [ 278.853964][T14913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2617'. [ 278.917234][T14913] team0: Port device geneve0 added [ 278.995221][T14918] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 279.054303][T14921] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2621'. [ 279.096063][T14922] tipc: Enabling of bearer rejected, already enabled [ 279.109323][T14922] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 279.129481][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.219270][T14924] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 279.600418][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2630'. [ 279.604659][T14948] syzkaller0: entered promiscuous mode [ 279.623942][T14948] syzkaller0: entered allmulticast mode [ 279.766198][T14959] tipc: Enabled bearer , priority 0 [ 279.814870][T14959] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 279.835518][T14959] tipc: Resetting bearer [ 279.877631][T14958] tipc: Disabling bearer [ 279.908035][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2636'. [ 280.722628][T15021] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 281.173318][T15044] bond7: Removing last ns target with arp_interval on [ 281.219539][T15050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.272489][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.281433][T15115] __nla_validate_parse: 9 callbacks suppressed [ 282.281452][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 282.355665][T15117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 282.359595][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 282.403550][T15117] IPv6: sit3: Disabled Multicast RS [ 282.429476][T15117] sit3: entered allmulticast mode [ 282.846452][T15132] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2685'. [ 282.895241][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 283.204368][T15146] netlink: 'syz.4.2691': attribute type 10 has an invalid length. [ 283.447428][T15159] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 283.475347][T15163] xt_l2tp: invalid flags combination: 0 [ 283.539693][T15163] xt_l2tp: invalid flags combination: 0 [ 283.604695][T15163] xt_l2tp: invalid flags combination: 0 [ 283.651723][T15173] netlink: 'syz.0.2699': attribute type 11 has an invalid length. [ 283.660998][T15163] xt_l2tp: invalid flags combination: 0 [ 283.668479][T15173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2699'. [ 283.692143][T15163] xt_l2tp: invalid flags combination: 0 [ 283.709645][T15173] netlink: 'syz.0.2699': attribute type 1 has an invalid length. [ 283.720426][T15173] netlink: 'syz.0.2699': attribute type 11 has an invalid length. [ 283.744567][T15173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2699'. [ 283.756139][T15163] xt_l2tp: invalid flags combination: 0 [ 283.767754][T15163] xt_l2tp: invalid flags combination: 0 [ 283.775119][T15163] xt_l2tp: invalid flags combination: 0 [ 283.813211][T15163] xt_l2tp: invalid flags combination: 0 [ 283.829521][T15163] xt_l2tp: invalid flags combination: 0 [ 283.986533][T15193] set match dimension is over the limit! [ 283.993454][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 284.185703][T15203] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.467346][T15227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 284.619940][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'. [ 284.934274][T15255] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 285.107724][T15265] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 285.223153][T15275] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 285.238361][T15278] syzkaller0: entered promiscuous mode [ 285.245126][T15278] syzkaller0: entered allmulticast mode [ 285.254550][T15278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.274314][T15275] dummy0: entered promiscuous mode [ 285.281033][T15275] bridge0: port 1(dummy0) entered blocking state [ 285.290173][T15275] bridge0: port 1(dummy0) entered disabled state [ 285.297985][T15275] dummy0: entered allmulticast mode [ 285.306462][T15275] bridge0: port 1(dummy0) entered blocking state [ 285.312952][T15275] bridge0: port 1(dummy0) entered forwarding state [ 285.410505][T15287] netlink: 'syz.2.2739': attribute type 9 has an invalid length. [ 285.418822][T15287] netlink: 'syz.2.2739': attribute type 11 has an invalid length. [ 285.433186][T15287] netlink: 'syz.2.2739': attribute type 12 has an invalid length. [ 285.454727][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 285.499022][T15293] netlink: 'syz.0.2741': attribute type 11 has an invalid length. [ 285.826600][T15318] x_tables: unsorted underflow at hook 2 [ 285.950721][T15328] gre0: entered promiscuous mode [ 286.413501][T15353] xt_hashlimit: size too large, truncated to 1048576 [ 286.535933][T15365] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 287.069713][T15392] openvswitch: netlink: EtherType 50a is less than min 600 [ 287.148522][T15384] IPVS: Scheduler module ip_vs_sip not found [ 288.084738][T15464] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 288.085705][T15467] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 288.345574][T15482] sctp: [Deprecated]: syz.2.2791 (pid 15482) Use of int in maxseg socket option. [ 288.345574][T15482] Use struct sctp_assoc_value instead [ 288.439219][T15487] tipc: Enabling of bearer rejected, already enabled [ 288.668326][T15500] __nla_validate_parse: 17 callbacks suppressed [ 288.668344][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 288.844172][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 288.865339][T15514] validate_nla: 1 callbacks suppressed [ 288.865358][T15514] netlink: 'syz.0.2800': attribute type 13 has an invalid length. [ 289.251476][T15530] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 289.263979][T15530] syzkaller0: entered promiscuous mode [ 289.296139][T15530] syzkaller0: entered allmulticast mode [ 289.419681][T15514] tipc: Enabled bearer , priority 0 [ 289.471625][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 289.481935][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 289.530253][T15566] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2810'. [ 289.542707][T15566] tipc: Enabling of bearer rejected, failed to enable media [ 289.562235][T15567] netlink: 'syz.3.2809': attribute type 9 has an invalid length. [ 289.591877][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 289.631657][T15512] tipc: Resetting bearer [ 289.675942][T15512] tipc: Disabling bearer [ 289.751163][T15575] bond0: (slave bridge0): Releasing backup interface [ 289.773269][T15575] bond1: (slave bond0): Releasing active interface [ 289.784629][T15575] bridge_slave_0: left promiscuous mode [ 289.790438][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.811722][T15575] bond0: (slave bond_slave_0): Releasing backup interface [ 289.832310][T15575] bond0: (slave bond_slave_1): Releasing backup interface [ 289.847919][T15575] team0: Port device team_slave_0 removed [ 289.858375][T15575] team0: Port device team_slave_1 removed [ 289.865300][T15575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.873397][T15575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.885897][T15575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.915011][T15578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.123037][T15604] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2819'. [ 290.151659][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2819'. [ 290.368447][T15620] bridge6: entered promiscuous mode [ 290.383908][T15620] bridge6: entered allmulticast mode [ 290.528203][T15631] netlink: 'syz.4.2825': attribute type 4 has an invalid length. [ 290.586276][T15636] netlink: 'syz.4.2825': attribute type 4 has an invalid length. [ 290.737371][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 291.007001][T15666] netlink: 'syz.1.2832': attribute type 1 has an invalid length. [ 291.101162][T15666] 8021q: adding VLAN 0 to HW filter on device bond13 [ 291.119890][T15672] bond13: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 291.149464][T15672] bond13: entered allmulticast mode [ 291.227915][T15686] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2835'. [ 291.692931][T15720] bridge3: entered promiscuous mode [ 291.698864][T15720] bridge3: entered allmulticast mode [ 291.721903][T15722] sctp: [Deprecated]: syz.3.2844 (pid 15722) Use of int in maxseg socket option. [ 291.721903][T15722] Use struct sctp_assoc_value instead [ 291.736201][T15720] team0: Port device bridge3 added [ 291.741546][T15724] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 291.812260][T15725] bridge0: port 1(team0) entered blocking state [ 291.822705][T15725] bridge0: port 1(team0) entered disabled state [ 291.851333][T15725] team0: entered allmulticast mode [ 291.872754][T15725] geneve0: entered allmulticast mode [ 291.891883][T15725] geneve0: entered promiscuous mode [ 292.016138][T15743] xt_CONNSECMARK: invalid mode: 0 [ 292.186545][T15751] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 292.211383][T15751] bond6 (unregistering): Released all slaves [ 292.382168][T15736] syzkaller1: entered promiscuous mode [ 292.389383][T15736] syzkaller1: entered allmulticast mode [ 292.647119][ T5201] udevd[5201]: worker [5835] /devices/virtual/block/nbd0 timeout; kill it [ 292.685310][ T5201] udevd[5201]: seq 11969 '/devices/virtual/block/nbd0' killed [ 292.860989][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.878655][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.887496][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.897032][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.904984][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.011585][T15789] netlink: 'syz.1.2864': attribute type 1 has an invalid length. [ 293.186493][T15798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.393457][ T148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.411958][ T148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.469978][T15808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.621353][ T148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.640896][ T148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.761670][ T148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.773935][ T148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.904356][ T148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.934480][ T148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.990610][T15832] lo: Caught tx_queue_len zero misconfig [ 294.057236][T15832] netlink: 'syz.3.2876': attribute type 1 has an invalid length. [ 294.256993][T15849] __nla_validate_parse: 74 callbacks suppressed [ 294.257010][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'. [ 294.267431][ T992] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.282890][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2880'. [ 294.294186][T15853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2880'. [ 294.396551][ T1148] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.415861][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2879'. [ 294.425490][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2879'. [ 294.494424][ T8938] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.535250][T15198] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.596362][ T148] bridge_slave_1: left allmulticast mode [ 294.604123][ T148] bridge_slave_1: left promiscuous mode [ 294.611555][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.673128][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2885'. [ 294.687841][ T148] bridge_slave_0: left allmulticast mode [ 294.693524][ T148] bridge_slave_0: left promiscuous mode [ 294.702649][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.711468][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2885'. [ 294.867755][T15885] netlink: 'syz.0.2886': attribute type 4 has an invalid length. [ 294.921384][T15890] netlink: 'syz.0.2886': attribute type 12 has an invalid length. [ 294.978457][ T53] Bluetooth: hci5: command tx timeout [ 295.345812][ T148] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 295.354179][ T148] bond3 (unregistering): (slave bridge1): the permanent HWaddr of slave - 96:ab:d6:c4:83:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 295.372840][ T148] bridge1 (unregistering): left promiscuous mode [ 295.379348][ T148] bridge1 (unregistering): left allmulticast mode [ 295.385932][ T148] bond3 (unregistering): (slave bridge2): making interface the new active one [ 295.395295][ T148] bridge2 (unregistering): entered promiscuous mode [ 295.401914][ T148] bridge2 (unregistering): entered allmulticast mode [ 295.453566][ T148] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 295.461746][ T148] bridge2 (unregistering): left promiscuous mode [ 295.468186][ T148] bridge2 (unregistering): left allmulticast mode [ 295.688282][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.703016][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.717669][ T148] bond0 (unregistering): (slave ): Releasing backup interface [ 295.734763][ T148] bond0 (unregistering): Released all slaves [ 295.748009][ T148] bond1 (unregistering): Released all slaves [ 295.762306][ T148] bond2 (unregistering): (slave lo): Releasing backup interface [ 295.770656][ T148] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 295.785701][ T148] bond2 (unregistering): Released all slaves [ 295.893689][ T148] bond3 (unregistering): Released all slaves [ 295.980254][ T148] bond4 (unregistering): Released all slaves [ 296.066895][ T148] bond5 (unregistering): Released all slaves [ 296.079757][ T148] bond6 (unregistering): Released all slaves [ 296.168753][ T148] bond7 (unregistering): Released all slaves [ 296.181248][ T148] bond8 (unregistering): Released all slaves [ 296.193864][ T148] bond9 (unregistering): Released all slaves [ 296.206886][T15870] tipc: Enabling of bearer rejected, failed to enable media [ 296.318211][T15784] chnl_net:caif_netlink_parms(): no params data found [ 296.432864][ T148] tipc: Disabling bearer [ 296.485542][ T148] tipc: Disabling bearer [ 296.499187][ T148] tipc: Left network mode [ 296.557417][T15913] 8021q: VLANs not supported on caif0 [ 296.648933][T15915] 8021q: VLANs not supported on caif0 [ 296.798282][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 296.914098][T15941] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 296.989790][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.005230][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.017910][T15784] bridge_slave_0: entered allmulticast mode [ 297.036768][T15784] bridge_slave_0: entered promiscuous mode [ 297.044056][ T53] Bluetooth: hci5: command tx timeout [ 297.087939][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.134768][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.142054][T15784] bridge_slave_1: entered allmulticast mode [ 297.178973][T15784] bridge_slave_1: entered promiscuous mode [ 297.297377][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'. [ 297.323261][T15960] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 297.618061][T15980] netlink: 'syz.2.2901': attribute type 15 has an invalid length. [ 297.662728][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.751155][T15984] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2906'. [ 297.765975][ T148] hsr_slave_1: left promiscuous mode [ 297.777117][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.786552][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.797184][T15986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.807561][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.817728][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.851946][ T148] veth0_macvtap: left allmulticast mode [ 297.858224][ T148] veth1_macvtap: left promiscuous mode [ 297.864662][ T148] veth0_macvtap: left promiscuous mode [ 297.870448][ T148] veth1_vlan: left promiscuous mode [ 298.270883][ T148] team0 (unregistering): Port device team_slave_1 removed [ 298.307910][ T148] team0 (unregistering): Port device team_slave_0 removed [ 298.638919][ T148] lo (unregistering): left allmulticast mode [ 298.650229][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.668602][T15994] netlink: 'syz.0.2910': attribute type 4 has an invalid length. [ 298.885956][T15784] team0: Port device team_slave_0 added [ 298.967842][T15784] team0: Port device team_slave_1 added [ 299.023681][T16018] geneve3: entered promiscuous mode [ 299.032334][T16018] geneve3: entered allmulticast mode [ 299.123857][ T53] Bluetooth: hci5: command tx timeout [ 299.159745][ T992] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 299.174136][ T992] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 299.227532][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.254763][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.289467][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.301166][ T992] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 299.313231][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.337340][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.393899][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.423565][ T6645] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 299.444215][T16038] __nla_validate_parse: 2 callbacks suppressed [ 299.444233][T16038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2920'. [ 299.644467][T15784] hsr_slave_0: entered promiscuous mode [ 299.685716][T15784] hsr_slave_1: entered promiscuous mode [ 299.714481][T15784] debugfs: 'hsr0' already exists in 'hsr' [ 299.720302][T15784] Cannot create hsr debugfs directory [ 299.828383][T16062] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 299.909050][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2926'. [ 299.912662][ T148] IPVS: stop unused estimator thread 0... [ 299.933876][T16065] tipc: Invalid UDP bearer configuration [ 299.933934][T16065] tipc: Enabling of bearer rejected, failed to enable media [ 300.050953][T16074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2928'. [ 300.295068][T16085] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 300.422158][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2931'. [ 300.472156][T16091] netlink: 'syz.1.2931': attribute type 3 has an invalid length. [ 300.521975][T15784] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.620334][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 300.641089][T16093] tipc: Enabled bearer , priority 0 [ 300.671793][T15784] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.699467][T16093] syzkaller0: entered promiscuous mode [ 300.711756][T16093] syzkaller0: entered allmulticast mode [ 300.728326][T16106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2936'. [ 300.747756][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2936'. [ 300.754538][T16093] tipc: Resetting bearer [ 300.776463][T16105] delete_channel: no stack [ 300.781217][T16092] tipc: Resetting bearer [ 300.781342][T16105] delete_channel: no stack [ 300.833529][T16092] tipc: Disabling bearer [ 300.884152][T15784] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.909214][T16111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2937'. [ 300.923865][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 301.066962][T15784] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.118692][T16123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2941'. [ 301.206538][ T53] Bluetooth: hci5: command tx timeout [ 301.349703][T16138] !: renamed from bond_slave_0 [ 301.510850][T15784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 301.556309][T15784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 301.627120][T15784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 301.651273][T15784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.686858][T16151] tipc: Enabled bearer , priority 0 [ 301.702071][T16159] syzkaller1: entered promiscuous mode [ 301.710356][T16159] syzkaller1: entered allmulticast mode [ 301.717720][T16166] syzkaller0: entered promiscuous mode [ 301.735119][T16166] syzkaller0: entered allmulticast mode [ 301.797162][T16151] tipc: Resetting bearer [ 301.881792][T16150] tipc: Resetting bearer [ 301.923403][T16150] tipc: Disabling bearer [ 302.245660][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.299457][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.330669][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.337899][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.376898][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.384122][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.503444][T16218] : entered promiscuous mode [ 302.564615][T16218] netlink: 'syz.2.2964': attribute type 3 has an invalid length. [ 302.705062][T16226] tipc: Enabling of bearer rejected, already enabled [ 302.825036][T16240] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 302.825074][T16240] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 302.841163][T16249] netlink: 'syz.2.2968': attribute type 4 has an invalid length. [ 302.850362][T16240] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 302.857226][T16240] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 302.872488][T16240] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 302.881952][T16240] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 303.166523][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.478049][T16274] bond8: entered promiscuous mode [ 303.483136][T16274] bond8: entered allmulticast mode [ 303.514192][T16274] 8021q: adding VLAN 0 to HW filter on device bond8 [ 303.605625][T16279] bond9: entered promiscuous mode [ 303.610729][T16279] bond9: entered allmulticast mode [ 303.616630][T16279] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.884929][T16295] syzkaller1: entered promiscuous mode [ 303.898337][T16295] syzkaller1: entered allmulticast mode [ 304.172091][T16306] netlink: 'syz.2.2978': attribute type 13 has an invalid length. [ 304.187353][T15784] veth0_vlan: entered promiscuous mode [ 304.202652][T16307] netlink: 'syz.2.2978': attribute type 13 has an invalid length. [ 304.344414][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.375606][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.388704][T15784] veth1_vlan: entered promiscuous mode [ 304.410275][T16313] tipc: Enabled bearer , priority 0 [ 304.436259][T16313] syzkaller0: entered promiscuous mode [ 304.449959][T16313] syzkaller0: entered allmulticast mode [ 304.488535][T16313] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 304.507554][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.509156][T16313] tipc: Resetting bearer [ 304.566384][T16312] tipc: Resetting bearer [ 304.611766][T16312] tipc: Disabling bearer [ 304.673427][T15784] veth0_macvtap: entered promiscuous mode [ 304.704899][T16325] syzkaller0: entered promiscuous mode [ 304.710413][T16325] syzkaller0: entered allmulticast mode [ 304.801724][T15784] veth1_macvtap: entered promiscuous mode [ 304.819813][T16331] __nla_validate_parse: 6 callbacks suppressed [ 304.819831][T16331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2984'. [ 304.840910][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.901629][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.950983][ T4494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.027727][T15198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.054049][T15198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.076747][T15198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.131610][T16345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2988'. [ 305.278858][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.301501][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.370542][T16353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2989'. [ 305.394491][T16353] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2989'. [ 305.394666][T15198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.409066][T16353] netlink: 'syz.2.2989': attribute type 5 has an invalid length. [ 305.438882][T16353] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2989'. [ 305.443814][T15198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.567540][T16365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2992'. [ 305.614601][T16365] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2992'. [ 305.800552][T16379] tipc: Enabled bearer , priority 0 [ 305.827280][T16371] syzkaller0: entered promiscuous mode [ 305.832856][T16371] syzkaller0: entered allmulticast mode [ 305.850735][T16371] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 305.885342][T16371] tipc: Resetting bearer [ 305.914803][T16369] tipc: Resetting bearer [ 306.005544][T16369] tipc: Disabling bearer [ 306.097804][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.108646][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.117829][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.125929][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.133503][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.364602][T16399] team0: Caught tx_queue_len zero misconfig [ 306.457492][T16405] tipc: Started in network mode [ 306.462413][T16405] tipc: Node identity ac14140f, cluster identity 4711 [ 306.487752][T16405] tipc: New replicast peer: 255.255.255.255 [ 306.512913][T16405] tipc: Enabled bearer , priority 10 [ 306.546548][T16410] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3002'. [ 306.678856][T16409] team0: left allmulticast mode [ 306.704740][T16409] geneve0: left allmulticast mode [ 306.733045][T16409] geneve0: left promiscuous mode [ 306.766886][T16409] bridge0: port 1(team0) entered disabled state [ 306.797941][T16409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.980419][T16426] lo: Caught tx_queue_len zero misconfig [ 307.145967][T15211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.158134][T15211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.199935][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 307.250826][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3008'. [ 307.426695][ T3697] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.474985][T15211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.513520][T15211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.588183][ T3697] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.630005][ T10] tipc: Node number set to 2886997007 [ 307.672389][ T3697] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.758275][T15211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.774354][T15211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.794238][ T3697] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.923512][T15211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.942042][T15211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.164845][ T5847] Bluetooth: hci2: command tx timeout [ 308.177230][T16491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.246958][T16496] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 308.404193][T16496] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 308.407868][ T1148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.518887][ T4494] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.635424][T16514] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 308.652825][T16389] chnl_net:caif_netlink_parms(): no params data found [ 308.708025][T15198] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.711073][ T5918] IPVS: starting estimator thread 0... [ 308.770922][T15211] bridge_slave_0: left allmulticast mode [ 308.781066][T15211] bridge_slave_0: left promiscuous mode [ 308.791287][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.814100][T16526] IPVS: using max 30 ests per chain, 72000 per kthread [ 309.130552][T15211] dvmrp6 (unregistering): left allmulticast mode [ 309.168153][T15211] bond6 (unregistering): (slave geneve2): Releasing active interface [ 309.355191][T15211] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 309.363369][T15211] bridge3 (unregistering): left promiscuous mode [ 309.655723][T15211] bond0 (unregistering): (slave 32): Releasing backup interface [ 309.665708][T15211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.675188][T15211] bond0 (unregistering): Released all slaves [ 309.761209][T15211] bond1 (unregistering): Released all slaves [ 309.846270][T15211] bond2 (unregistering): (slave veth5): Releasing active interface [ 309.856224][T15211] bond2 (unregistering): Released all slaves [ 309.949213][T15211] bond3 (unregistering): Released all slaves [ 310.039081][T15211] bond4 (unregistering): Released all slaves [ 310.051250][T15211] bond5 (unregistering): Released all slaves [ 310.139161][T15211] bond6 (unregistering): Released all slaves [ 310.151460][T15211] bond7 (unregistering): Released all slaves [ 310.242246][T15211] bond8 (unregistering): Released all slaves [ 310.248715][ T53] Bluetooth: hci2: command tx timeout [ 310.329382][T15211] bond9 (unregistering): Released all slaves [ 310.341634][T16524] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 310.349043][T15198] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.548625][T15211] : left promiscuous mode [ 310.673214][T16558] __nla_validate_parse: 12 callbacks suppressed [ 310.673232][T16558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3037'. [ 310.691530][T15211] tipc: Left network mode [ 310.978615][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.001693][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.015481][T16389] bridge_slave_0: entered allmulticast mode [ 311.023227][T16389] bridge_slave_0: entered promiscuous mode [ 311.157179][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.179574][T16389] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.194136][T16389] bridge_slave_1: entered allmulticast mode [ 311.216409][T16389] bridge_slave_1: entered promiscuous mode [ 311.254767][T16602] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 311.312397][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3047'. [ 311.429946][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3048'. [ 311.519682][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.756629][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.819030][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3054'. [ 311.911734][T15211] hsr_slave_0: left promiscuous mode [ 311.918643][T15211] hsr_slave_1: left promiscuous mode [ 311.983047][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'. [ 312.324055][ T53] Bluetooth: hci2: command tx timeout [ 312.479447][T15211] team0 (unregistering): Port device team_slave_1 removed [ 312.549777][T15211] team0 (unregistering): Port device team_slave_0 removed [ 312.568982][ T13] smc: removing ib device !yz! [ 312.649834][T16654] netlink: 'syz.4.3057': attribute type 10 has an invalid length. [ 313.265616][T16389] team0: Port device team_slave_0 added [ 313.285711][T16675] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3061'. [ 313.308807][T16389] team0: Port device team_slave_1 added [ 313.458543][T16687] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 313.488598][T16683] team0: Caught tx_queue_len zero misconfig [ 313.536028][T16684] kthread_run failed with err -4 [ 313.990723][T16708] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 314.404263][ T53] Bluetooth: hci2: command tx timeout [ 315.401583][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.408875][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.435341][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.448933][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.456842][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.485502][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.619801][T16719] bond1: Removing last arp target with arp_interval on [ 315.765448][T16389] hsr_slave_0: entered promiscuous mode [ 315.783576][T16389] hsr_slave_1: entered promiscuous mode [ 315.796824][T16730] tipc: Enabling of bearer rejected, failed to enable media [ 315.839260][T16738] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 315.848053][T16734] netlink: 'syz.1.3077': attribute type 4 has an invalid length. [ 315.856460][T16730] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 315.889755][T16730] netlink: 'syz.2.3074': attribute type 3 has an invalid length. [ 315.925607][T16730] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3074'. [ 315.969982][T16730] NCSI netlink: No device for ifindex 813332851 [ 316.086587][T15211] IPVS: stop unused estimator thread 0... [ 316.249756][T16758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3082'. [ 316.260079][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 316.320407][T16764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3084'. [ 316.426158][T16754] netlink: 'syz.3.3081': attribute type 2 has an invalid length. [ 316.484449][ T53] Bluetooth: hci2: command tx timeout [ 316.570725][T16389] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.577989][T16777] nbd: illegal input index 2958377 [ 316.790382][T16389] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.956260][T16801] openvswitch: netlink: Actions may not be safe on all matching packets [ 316.989304][T16389] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.108785][T16389] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.186116][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 317.211383][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 317.263629][T16808] can: request_module (can-proto-0) failed. [ 317.272142][T16808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3096'. [ 317.299079][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.315596][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 317.337742][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 317.506094][T16827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3096'. [ 317.855438][T16845] netlink: 'syz.4.3103': attribute type 2 has an invalid length. [ 318.986522][T16389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.031151][T16389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.058390][T16389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.070594][T16852] netlink: 'syz.3.3108': attribute type 1 has an invalid length. [ 319.077300][T16853] netlink: 'syz.2.3107': attribute type 11 has an invalid length. [ 319.133600][T16853] netlink: 'syz.2.3107': attribute type 11 has an invalid length. [ 319.168072][T16389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.258887][T16861] bond6: (slave bridge8): making interface the new active one [ 319.297168][T16861] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 319.563376][T16890] syzkaller0: entered promiscuous mode [ 319.570926][T16890] syzkaller0: entered allmulticast mode [ 319.610034][T16389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.871463][T16909] mac80211_hwsim hwsim10 wlan1: Caught tx_queue_len zero misconfig [ 319.999997][T16389] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.047893][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.055123][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.106013][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.113185][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.605735][T16951] syzkaller1: entered promiscuous mode [ 320.614780][T16951] syzkaller1: entered allmulticast mode [ 320.639704][T16951] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 320.802761][T16389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.972469][T16389] veth0_vlan: entered promiscuous mode [ 321.002115][T16389] veth1_vlan: entered promiscuous mode [ 321.095257][T16389] veth0_macvtap: entered promiscuous mode [ 321.110775][T16389] veth1_macvtap: entered promiscuous mode [ 321.133512][T16978] __nla_validate_parse: 9 callbacks suppressed [ 321.133529][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 321.144380][T16980] netlink: 'syz.2.3134': attribute type 10 has an invalid length. [ 321.176917][T16389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.186492][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 321.269719][T16389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.375666][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.410017][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.441484][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.485230][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.834287][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.856352][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.974115][T17020] can: request_module (can-proto-0) failed. [ 321.982982][T17016] bond2: option all_slaves_active: invalid value (222) [ 322.074675][T17016] bond2 (unregistering): Released all slaves [ 322.112258][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3148'. [ 322.145666][ T8938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.171434][ T8938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.598103][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3152'. [ 322.662483][T17052] IPVS: Unknown mcast interface: vcan0 [ 322.854972][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.867671][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.885378][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.893353][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.902900][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.570935][T17102] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 323.597182][T17102] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 323.620516][T17107] netlink: 'syz.3.3162': attribute type 11 has an invalid length. [ 323.643647][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.654661][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.665455][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 323.811681][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.833896][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.850989][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 323.952725][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.954450][T17124] netlink: 'syz.3.3168': attribute type 1 has an invalid length. [ 323.964805][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.982673][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 323.985278][T17095] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 324.077601][T17124] bond7: entered promiscuous mode [ 324.092668][T17124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.131836][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'. [ 324.147469][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.157951][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.169023][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 324.189045][T17062] chnl_net:caif_netlink_parms(): no params data found [ 324.265360][T17133] bond0: (slave bond_slave_1): Releasing backup interface [ 324.270656][T17124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.361937][T17124] bond7: (slave bridge9): making interface the new active one [ 324.375099][T17124] bridge9: entered promiscuous mode [ 324.381635][T17124] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 324.388452][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3171'. [ 324.404342][T17138] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3171'. [ 324.433905][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3171'. [ 324.501179][T17142] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 324.636183][ T148] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.709614][T17154] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3175'. [ 324.777450][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.919537][ T6645] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.950695][T17169] sctp: [Deprecated]: syz.3.3179 (pid 17169) Use of int in maxseg socket option. [ 324.950695][T17169] Use struct sctp_assoc_value instead [ 324.974318][T17062] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.981559][ T53] Bluetooth: hci3: command tx timeout [ 324.995242][T17062] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.016860][T17062] bridge_slave_0: entered allmulticast mode [ 325.035759][T17062] bridge_slave_0: entered promiscuous mode [ 325.049961][T17062] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.058734][T17062] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.068307][T17062] bridge_slave_1: entered allmulticast mode [ 325.078227][T17062] bridge_slave_1: entered promiscuous mode [ 325.150774][T15211] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.392097][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'. [ 325.495111][T17187] netlink: 'syz.0.3182': attribute type 13 has an invalid length. [ 325.687833][T17208] xt_hashlimit: size too large, truncated to 1048576 [ 326.887702][ T13] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 326.901574][ T13] ip6gretap1 (unregistering): left allmulticast mode [ 327.043995][ T53] Bluetooth: hci3: command tx timeout [ 327.547968][ T13] bond12 (unregistering): (slave ip6gretap3): Releasing active interface [ 328.046221][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 328.181044][ T13] team0: Port device geneve0 removed [ 328.363476][ T13] team0: Port device bridge3 removed [ 328.423492][ T13] bond0 (unregistering): Released all slaves [ 328.510327][ T13] bond1 (unregistering): Released all slaves [ 328.597261][ T13] bond2 (unregistering): Released all slaves [ 328.609925][ T13] bond3 (unregistering): Released all slaves [ 328.622316][ T13] bond4 (unregistering): Released all slaves [ 328.635463][ T13] bond5 (unregistering): Released all slaves [ 328.650428][ T13] bond6 (unregistering): Released all slaves [ 328.747154][ T13] bond7 (unregistering): Released all slaves [ 328.759540][ T13] bond8 (unregistering): Released all slaves [ 328.771817][ T13] bond9 (unregistering): Released all slaves [ 328.860650][ T13] bond10 (unregistering): Released all slaves [ 328.945346][ T13] bond11 (unregistering): (slave veth15): Releasing active interface [ 328.955087][ T13] bond11 (unregistering): Released all slaves [ 328.968418][ T13] bond12 (unregistering): Released all slaves [ 329.056830][ T13] bond13 (unregistering): Released all slaves [ 329.074275][T17062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.134302][ T53] Bluetooth: hci3: command tx timeout [ 329.190591][T17187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.248296][T17062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.405956][T17223] netlink: 'syz.3.3187': attribute type 1 has an invalid length. [ 329.407624][T17219] IPVS: set_ctl: invalid protocol: 33 172.30.1.5:20001 [ 329.424769][T17062] team0: Port device team_slave_0 added [ 329.443725][T17062] team0: Port device team_slave_1 added [ 329.485045][T17223] __nla_validate_parse: 1 callbacks suppressed [ 329.485061][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 329.551391][T17225] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3188'. [ 329.618387][T17062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.637697][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.697602][T17062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.721134][T17241] openvswitch: netlink: Missing key (keys=40, expected=100) [ 329.726087][T17062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.753831][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.807917][T17062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.149284][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 330.158356][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'. [ 330.168973][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'. [ 331.217313][ T53] Bluetooth: hci3: command tx timeout [ 331.508020][T17062] hsr_slave_0: entered promiscuous mode [ 331.515408][T17062] hsr_slave_1: entered promiscuous mode [ 331.521791][T17062] debugfs: 'hsr0' already exists in 'hsr' [ 331.529085][T17062] Cannot create hsr debugfs directory [ 331.599379][T17281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3198'. [ 331.621166][T17284] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 331.634253][T17281] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.643178][T17281] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.651699][T17287] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3198'. [ 331.673174][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.680391][T17287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.687940][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.695134][T17287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.711494][T17287] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3198'. [ 331.751010][T17289] netlink: 'syz.2.3200': attribute type 1 has an invalid length. [ 331.774057][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.781406][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.915808][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3204'. [ 331.916040][T17301] delete_channel: no stack [ 332.128208][T17313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3206'. [ 332.151176][ T13] tipc: Disabling bearer [ 332.160549][ T13] tipc: Disabling bearer [ 332.173119][ T13] tipc: Left network mode [ 332.278814][T17062] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.407819][T17062] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.477516][T17334] tipc: Enabled bearer , priority 0 [ 332.538518][T17339] IPVS: set_ctl: invalid protocol: 137 172.20.20.47:20002 [ 332.565601][T17062] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.608385][T17329] syzkaller0: entered promiscuous mode [ 332.631415][T17329] syzkaller0: entered allmulticast mode [ 332.736746][T17062] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.771433][T17329] tipc: Resetting bearer [ 332.801396][T17328] tipc: Resetting bearer [ 332.819715][T17328] tipc: Disabling bearer [ 333.378422][T17379] netlink: 'syz.0.3219': attribute type 25 has an invalid length. [ 333.427727][ T13] hsr_slave_0: left promiscuous mode [ 333.472471][ T13] veth1_macvtap: left promiscuous mode [ 333.480570][ T13] veth0_macvtap: left promiscuous mode [ 334.600598][T17379] netlink: 'syz.0.3219': attribute type 25 has an invalid length. [ 334.608662][T17379] __nla_validate_parse: 3 callbacks suppressed [ 334.608679][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 334.666601][T15211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.705939][T15211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.765030][T15211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.798864][T15211] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.835126][T17420] tipc: Enabled bearer , priority 0 [ 334.851149][T17062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.885626][T17420] syzkaller0: entered promiscuous mode [ 334.904330][T17420] syzkaller0: entered allmulticast mode [ 334.917002][T17062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.941683][T17420] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 334.994327][T17062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.018511][T17420] tipc: Resetting bearer [ 335.026308][T17417] tipc: Resetting bearer [ 335.066969][T17417] tipc: Disabling bearer [ 335.086120][T17062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.175187][T17441] netlink: 'syz.0.3232': attribute type 12 has an invalid length. [ 335.223690][ T13] IPVS: stop unused estimator thread 0... [ 335.437201][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3236'. [ 335.475829][T17062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.515674][T17458] bond0: entered promiscuous mode [ 335.520760][T17458] bond_slave_0: entered promiscuous mode [ 335.544166][T17458] bond_slave_1: entered promiscuous mode [ 335.577565][T17458] ip6gretap0: entered promiscuous mode [ 335.593555][T17458] hsr1: entered promiscuous mode [ 335.648138][T17482] sit0: entered promiscuous mode [ 335.683513][T17482] netlink: 'syz.2.3241': attribute type 1 has an invalid length. [ 335.714043][T17482] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3241'. [ 335.778691][T17062] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.809561][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.816825][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.880092][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.887334][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.356103][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.509222][T17062] veth0_vlan: entered promiscuous mode [ 336.530544][T17062] veth1_vlan: entered promiscuous mode [ 336.609069][T17062] veth0_macvtap: entered promiscuous mode [ 336.637185][T17062] veth1_macvtap: entered promiscuous mode [ 336.643422][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 336.677916][T17062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.701976][T17062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.718506][ T6646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.729803][ T6646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.744151][ T6646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.752956][ T6646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.214821][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.252182][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.320329][T17558] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 337.331690][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.348595][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.357310][T17558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3262'. [ 337.395285][T17558] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.403061][T17558] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.514373][T17573] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 337.547012][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 337.557270][T17580] netlink: 'syz.2.3266': attribute type 30 has an invalid length. [ 337.635431][ T8938] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 337.664773][ T8938] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.706012][ T8938] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.749282][ T8938] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.981346][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.008202][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.017080][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.025135][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.035613][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.037959][T17594] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 338.131148][T17594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.249470][T17601] bond1: (slave geneve2): making interface the new active one [ 338.259260][T17601] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 338.575666][T17616] netlink: 'syz.1.3280': attribute type 21 has an invalid length. [ 338.629070][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 338.669406][T17616] netlink: 'syz.1.3280': attribute type 21 has an invalid length. [ 338.678721][ T3697] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.691042][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 338.722370][T17620] netlink: 'syz.4.3282': attribute type 29 has an invalid length. [ 338.749934][ T3697] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.785710][T17620] netlink: 'syz.4.3282': attribute type 29 has an invalid length. [ 338.812464][ T3697] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.835428][T17630] netlink: 'syz.4.3282': attribute type 29 has an invalid length. [ 338.844813][T17631] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3285'. [ 338.856404][ T3697] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.927174][T17591] chnl_net:caif_netlink_parms(): no params data found [ 338.963110][T17630] ipvlan2: entered promiscuous mode [ 338.992510][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3287'. [ 339.140753][T17642] ip6tnl0: Caught tx_queue_len zero misconfig [ 339.308959][T17591] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.317342][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.325861][T17591] bridge_slave_0: entered allmulticast mode [ 339.334246][T17591] bridge_slave_0: entered promiscuous mode [ 339.343456][T17591] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.351646][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.359336][T17591] bridge_slave_1: entered allmulticast mode [ 339.370272][T17591] bridge_slave_1: entered promiscuous mode [ 339.501601][T17672] vlan1: entered promiscuous mode [ 339.612441][T17591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.671816][T17591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.784407][T17591] team0: Port device team_slave_0 added [ 339.805997][T17591] team0: Port device team_slave_1 added [ 339.935058][T17591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.942825][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.977724][T17591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.001330][T17591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.018698][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.048604][T17591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.062969][T17709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.068302][T17697] syzkaller0: entered promiscuous mode [ 340.086226][T17697] syzkaller0: entered allmulticast mode [ 340.094557][ T5847] Bluetooth: hci0: command tx timeout [ 340.190457][T17716] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 340.269231][T17591] hsr_slave_0: entered promiscuous mode [ 340.276345][T17591] hsr_slave_1: entered promiscuous mode [ 340.282822][T17591] debugfs: 'hsr0' already exists in 'hsr' [ 340.288862][T17591] Cannot create hsr debugfs directory [ 340.407842][T17725] bridge: RTM_NEWNEIGH with invalid ether address [ 340.658201][T17591] bond0: (slave netdevsim0): Releasing backup interface [ 340.827130][T17591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.909016][T17698] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 340.942496][T17591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.968241][T17591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.987515][T17735] x_tables: duplicate underflow at hook 1 [ 341.007298][T17591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.050199][T17741] x_tables: duplicate entry at hook 2 [ 341.193146][T17757] netlink: 'syz.1.3318': attribute type 11 has an invalid length. [ 341.257024][T17757] __nla_validate_parse: 8 callbacks suppressed [ 341.257041][T17757] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3318'. [ 341.417994][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3321'. [ 341.449145][T17591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.494369][T17771] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 341.567174][T17591] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.621986][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.629208][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.675628][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.682811][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.731340][T17778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3325'. [ 341.795383][T17778] block nbd0: Unsupported socket: should be TCP or UNIX. [ 341.876472][T17783] vxlan0: entered promiscuous mode [ 341.893933][T17783] vxlan0: entered allmulticast mode [ 341.981939][T17786] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 342.026430][T17786] bond2 (unregistering): Released all slaves [ 342.045380][T17798] validate_nla: 5 callbacks suppressed [ 342.045398][T17798] netlink: 'syz.0.3331': attribute type 1 has an invalid length. [ 342.148796][T17798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.169262][T17804] macvlan2: entered promiscuous mode [ 342.175062][ T5847] Bluetooth: hci0: command tx timeout [ 342.184505][T17804] macvlan2: entered allmulticast mode [ 342.219067][T17804] bond2: entered allmulticast mode [ 342.236642][T17804] bond2: entered promiscuous mode [ 342.242391][T17804] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.266965][T17804] team0: Port device macvlan2 added [ 342.441208][T17591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.463145][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 342.486804][T17823] openvswitch: netlink: Message has 8 unknown bytes. [ 342.494092][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 342.495613][T17823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.552469][T17825] bond0: Caught tx_queue_len zero misconfig [ 342.558851][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 342.560565][T17824] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 342.577154][T17824] netlink: 'syz.4.3335': attribute type 2 has an invalid length. [ 342.586984][T17824] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 342.595283][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3335'. [ 342.613413][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 342.647745][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 342.706012][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 342.707700][T17591] veth0_vlan: entered promiscuous mode [ 342.767475][T17591] veth1_vlan: entered promiscuous mode [ 342.926818][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 342.965072][T17591] veth0_macvtap: entered promiscuous mode [ 342.978940][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 342.991684][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3341'. [ 343.014957][T17591] veth1_macvtap: entered promiscuous mode [ 343.069360][T17823] infiniband syz2: set active [ 343.074398][T17823] infiniband syz2: added vxcan1 [ 343.081257][T17591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.124381][T17823] RDS/IB: syz2: added [ 343.128476][T17823] smc: adding ib device syz2 with port count 1 [ 343.153855][T17823] smc: ib device syz2 port 1 has no pnetid [ 343.195857][ T107] vxcan1 speed is unknown, defaulting to 1000 [ 343.196992][T17591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.221141][ T5918] vxcan1 speed is unknown, defaulting to 1000 [ 343.282052][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.364707][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.406052][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 343.442366][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.519144][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.691633][T17876] bond1: Invalid ad_actor_system MAC address. [ 343.697991][T17876] bond1: option ad_actor_system: invalid value (1) [ 343.710898][T17876] bond1 (unregistering): Released all slaves [ 343.796104][T17881] gretap1: entered promiscuous mode [ 343.814565][T17881] gretap1: entered allmulticast mode [ 344.021275][T17891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.080864][T17893] netlink: 'syz.1.3349': attribute type 1 has an invalid length. [ 344.107963][T17893] NCSI netlink: No device for ifindex 0 [ 344.158130][T17891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.187207][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.222825][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.244177][ T5847] Bluetooth: hci0: command tx timeout [ 344.306076][T17899] netlink: 'syz.1.3351': attribute type 17 has an invalid length. [ 344.325230][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.333713][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 344.346500][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.489405][T17913] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 344.584314][T17917] netlink: 'syz.4.3355': attribute type 1 has an invalid length. [ 344.704488][T17917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.709500][T17926] netlink: 'syz.3.3269': attribute type 7 has an invalid length. [ 344.818102][T17922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.840179][T17922] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.871588][T17922] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 344.967988][T17917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.996609][T17933] netlink: 'syz.3.3360': attribute type 25 has an invalid length. [ 345.067045][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 345.169424][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.179877][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.195472][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.203462][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.211745][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.850089][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 346.036116][T17937] vxcan1 speed is unknown, defaulting to 1000 [ 346.190621][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 346.331372][T17979] __nla_validate_parse: 10 callbacks suppressed [ 346.331390][T17979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3366'. [ 346.344488][ T53] Bluetooth: hci0: command tx timeout [ 346.530655][T17982] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 346.590976][T17823] vxcan1 speed is unknown, defaulting to 1000 [ 346.886163][T17937] chnl_net:caif_netlink_parms(): no params data found [ 346.977552][T18005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3373'. [ 347.231730][T17937] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.239592][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.250919][T17937] bridge_slave_0: entered allmulticast mode [ 347.258702][T17937] bridge_slave_0: entered promiscuous mode [ 347.277406][T17937] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.285174][T17937] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.286950][ T53] Bluetooth: hci1: command tx timeout [ 347.292417][T17937] bridge_slave_1: entered allmulticast mode [ 347.307582][T17937] bridge_slave_1: entered promiscuous mode [ 347.349062][T17937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.360793][T17937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.393573][T17937] team0: Port device team_slave_0 added [ 347.401208][T17937] team0: Port device team_slave_1 added [ 347.430531][T17937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.438164][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.464852][T17937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.477698][T17937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.485189][T17937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.511167][T17937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.556766][T17937] hsr_slave_0: entered promiscuous mode [ 347.563070][T17937] hsr_slave_1: entered promiscuous mode [ 347.569643][T17937] debugfs: 'hsr0' already exists in 'hsr' [ 347.575432][T17937] Cannot create hsr debugfs directory [ 347.698163][T17937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.709848][T17937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.810735][T17937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.821080][T17937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.892522][T17937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.903197][T17937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.972578][T17937] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.984392][T17937] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.119165][T17937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.131862][T17937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.142406][T17937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.152367][T17937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.220194][T17937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.245759][T17937] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.263528][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.270711][ T8938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.287511][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.294644][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.456852][T17937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.499915][T17937] veth0_vlan: entered promiscuous mode [ 348.512148][T17937] veth1_vlan: entered promiscuous mode [ 348.540425][T17937] veth0_macvtap: entered promiscuous mode [ 348.550508][T17937] veth1_macvtap: entered promiscuous mode [ 348.570320][T17937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.585515][T17937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.599803][ T5091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.610348][ T5091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.620693][ T5091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.631149][ T5091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.701654][ T5091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.711219][ T5091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.741002][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.750660][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.364120][ T53] Bluetooth: hci1: command tx timeout [ 351.444082][ T53] Bluetooth: hci1: command tx timeout [ 353.524604][ T53] Bluetooth: hci1: command tx timeout [ 371.903299][T18050] tipc: Started in network mode [ 371.919440][T18053] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3377'. [ 371.921699][T18050] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 371.947780][T18050] tipc: Enabled bearer , priority 10 [ 372.099143][T18069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.165507][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 372.491178][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 372.612933][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 372.628622][T18105] bond1 (unregistering): Released all slaves [ 372.853480][T18122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3396'. [ 372.912094][T18131] netlink: 'syz.3.3399': attribute type 4 has an invalid length. [ 372.927422][T18127] IPVS: Scheduler module ip_vs_sip not found [ 372.943944][ T5917] tipc: Node number set to 10005162 [ 373.128577][T18141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3404'. [ 373.138543][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 373.174053][T18144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3405'. [ 373.274581][T18149] netlink: 'syz.3.3407': attribute type 2 has an invalid length. [ 373.291641][T18149] 9: entered promiscuous mode [ 373.322531][T18151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3408'. [ 373.374001][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 373.537339][T18161] vlan0: entered promiscuous mode [ 373.542737][T18161] vlan0: entered allmulticast mode [ 373.561356][T18161] veth0_vlan: entered allmulticast mode [ 373.701684][T18174] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 373.715058][T18174] netlink: 'syz.4.3416': attribute type 3 has an invalid length. [ 373.723150][T18174] NCSI netlink: No device for ifindex 813332851 [ 373.750280][T18176] tipc: Started in network mode [ 373.760538][T18176] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 373.780888][T18176] tipc: Enabled bearer , priority 10 [ 373.976920][T18183] syzkaller0: entered promiscuous mode [ 373.987562][T18183] syzkaller0: entered allmulticast mode [ 375.502668][T18221] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 375.512862][ T5918] tipc: Node number set to 4269801492 [ 375.746561][T18237] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 375.800254][T18237] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 375.819929][T18233] Bluetooth: MGMT ver 1.23 [ 375.850854][T18237] netlink: 'syz.0.3431': attribute type 2 has an invalid length. [ 376.175692][ T31] INFO: task kworker/0:2H:12662 blocked for more than 143 seconds. [ 376.183643][ T31] Not tainted syzkaller #0 [ 376.214144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.233832][ T31] task:kworker/0:2H state:D stack:26184 pid:12662 tgid:12662 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 376.247216][T18261] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 376.256289][T18274] tipc: Enabled bearer , priority 13 [ 376.262860][ T31] Workqueue: kblockd blk_mq_requeue_work [ 376.275213][ T31] Call Trace: [ 376.281884][ T31] [ 376.288322][ T31] __schedule+0x14bc/0x5000 [ 376.297299][T18272] sctp: [Deprecated]: syz.3.3444 (pid 18272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.297299][T18272] Use struct sctp_sack_info instead [ 376.302368][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 376.334008][ T31] ? preempt_schedule_common+0x83/0xd0 [ 376.347457][ T31] ? __pfx___schedule+0x10/0x10 [ 376.356880][ T31] ? preempt_schedule+0xae/0xc0 [ 376.365126][ T31] ? schedule+0x91/0x360 [ 376.369474][ T31] schedule+0x165/0x360 [ 376.376228][ T31] schedule_timeout+0x12b/0x270 [ 376.381192][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 376.386876][ T31] ? __pfx_process_timeout+0x10/0x10 [ 376.393388][ T31] ? prepare_to_wait_event+0x437/0x480 [ 376.399049][ T31] nbd_queue_rq+0x662/0xf10 [ 376.403580][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 376.409037][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 376.415343][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 376.420912][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 376.426095][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 376.432101][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 376.438241][ T31] ? lockdep_unlock+0x89/0x120 [ 376.443033][ T31] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 376.449538][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 376.456453][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 376.461764][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 376.468004][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 376.473307][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 376.478566][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 376.484060][ T31] blk_mq_requeue_work+0x717/0x760 [ 376.490097][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 376.497401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.502636][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 376.508422][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 376.514227][ T31] process_scheduled_works+0xad1/0x1770 [ 376.519794][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.525831][ T31] worker_thread+0x8a0/0xda0 [ 376.530447][ T31] ? __kthread_parkme+0x7b/0x200 [ 376.535530][ T31] kthread+0x711/0x8a0 [ 376.539616][ T31] ? __pfx_worker_thread+0x10/0x10 [ 376.545654][ T31] ? __pfx_kthread+0x10/0x10 [ 376.550257][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.555529][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 376.560737][ T31] ? __pfx_kthread+0x10/0x10 [ 376.565888][ T31] ret_from_fork+0x599/0xb30 [ 376.570504][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.575810][ T31] ? __switch_to_asm+0x39/0x70 [ 376.580592][ T31] ? __switch_to_asm+0x33/0x70 [ 376.585409][ T31] ? __pfx_kthread+0x10/0x10 [ 376.590013][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.594930][ T31] [ 376.600389][ T31] [ 376.600389][ T31] Showing all locks held in the system: [ 376.624083][ T31] 1 lock held by khungtaskd/31: [ 376.628983][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.639648][ T31] 1 lock held by klogd/5190: [ 376.648690][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 376.663051][ T31] 2 locks held by getty/5596: [ 376.668472][ T31] #0: ffff888034ce50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.678841][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 376.689033][ T31] 1 lock held by udevd/5835: [ 376.693625][ T31] #0: ffff8880258b6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 376.705505][ T31] 4 locks held by kworker/0:2H/12662: [ 376.710928][ T31] #0: ffff88801ea81548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 376.722052][ T31] #1: ffffc90003fffb80 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 376.735266][ T31] #2: ffff888140f64118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 376.744869][ T31] #3: ffff8880259a0380 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 376.753860][ T31] 4 locks held by syz.2.3443/18265: [ 376.759063][ T31] #0: ffff888052e94708 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 376.769425][ T31] #1: ffffffff8f377d30 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 376.780717][ T31] #2: ffff888031f964d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 376.791162][ T31] #3: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 376.803659][ T31] [ 376.815257][ T31] ============================================= [ 376.815257][ T31] [ 376.823693][ T31] NMI backtrace for cpu 0 [ 376.823710][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.823721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.823728][ T31] Call Trace: [ 376.823733][ T31] [ 376.823744][ T31] dump_stack_lvl+0x189/0x250 [ 376.823769][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.823787][ T31] ? __pfx__printk+0x10/0x10 [ 376.823820][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 376.823846][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 376.823871][ T31] ? __pfx__printk+0x10/0x10 [ 376.823899][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.823925][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 376.823951][ T31] sys_info+0x135/0x170 [ 376.823970][ T31] watchdog+0xf95/0xfe0 [ 376.823998][ T31] ? watchdog+0x20a/0xfe0 [ 376.824027][ T31] kthread+0x711/0x8a0 [ 376.824052][ T31] ? __pfx_watchdog+0x10/0x10 [ 376.824070][ T31] ? __pfx_kthread+0x10/0x10 [ 376.824089][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.824110][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 376.824126][ T31] ? __pfx_kthread+0x10/0x10 [ 376.824147][ T31] ret_from_fork+0x599/0xb30 [ 376.824174][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 376.824199][ T31] ? __switch_to_asm+0x39/0x70 [ 376.824219][ T31] ? __switch_to_asm+0x33/0x70 [ 376.824238][ T31] ? __pfx_kthread+0x10/0x10 [ 376.824260][ T31] ret_from_fork_asm+0x1a/0x30 [ 376.824297][ T31] [ 376.968801][ T31] Sending NMI from CPU 0 to CPUs 1: [ 376.975848][ C1] NMI backtrace for cpu 1 [ 376.975864][ C1] CPU: 1 UID: 0 PID: 5190 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 376.975881][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.975904][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x68/0x130 [ 376.975929][ C1] Code: 00 00 00 48 83 f9 07 0f 85 d1 00 00 00 b9 07 00 00 00 48 85 c0 75 13 e9 c2 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 b4 00 00 00 <41> 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 b0 7e 92 45 [ 376.975942][ C1] RSP: 0018:ffffc900030a7bc0 EFLAGS: 00000206 [ 376.975956][ C1] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000001 [ 376.975966][ C1] RDX: ffff88807f3a3d00 RSI: ffffffff8e608400 RDI: 0000000000000001 [ 376.975976][ C1] RBP: ffffc900030a7da0 R08: ffff888034bcc783 R09: 1ffff110069798f0 [ 376.975987][ C1] R10: dffffc0000000000 R11: ffffed10069798f1 R12: 0000000000000001 [ 376.975997][ C1] R13: dffffc0000000000 R14: ffff8880330fa300 R15: ffff888148c47300 [ 376.976009][ C1] FS: 00007f0e88c7fc80(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 376.976022][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.976032][ C1] CR2: 00007faa8c41a6b0 CR3: 000000007edd0000 CR4: 00000000003526f0 [ 376.976046][ C1] Call Trace: [ 376.976052][ C1] [ 376.976058][ C1] tomoyo_socket_sendmsg_permission+0xb9/0x300 [ 376.976086][ C1] security_socket_sendmsg+0x9b/0x2b0 [ 376.976108][ C1] __sock_sendmsg+0x49/0x270 [ 376.976129][ C1] __sys_sendto+0x3bd/0x520 [ 376.976145][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 376.976180][ C1] __x64_sys_sendto+0xde/0x100 [ 376.976197][ C1] do_syscall_64+0xfa/0xf80 [ 376.976214][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.976228][ C1] ? clear_bhb_loop+0x60/0xb0 [ 376.976245][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.976259][ C1] RIP: 0033:0x7f0e88dcf407 [ 376.976272][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 376.976284][ C1] RSP: 002b:00007ffdf4275250 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 376.976299][ C1] RAX: ffffffffffffffda RBX: 00007f0e88c7fc80 RCX: 00007f0e88dcf407 [ 376.976310][ C1] RDX: 0000000000000049 RSI: 00007ffdf4275390 RDI: 0000000000000003 [ 376.976320][ C1] RBP: 00007ffdf42757c0 R08: 0000000000000000 R09: 0000000000000000 [ 376.976329][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffdf42757d8 [ 376.976339][ C1] R13: 00007ffdf4275390 R14: 000000000000002e R15: 00007ffdf4275390 [ 376.976359][ C1] [ 377.239474][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 377.246349][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 377.255467][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.265531][ T31] Call Trace: [ 377.268815][ T31] [ 377.271739][ T31] dump_stack_lvl+0x99/0x250 [ 377.276340][ T31] ? __asan_memcpy+0x40/0x70 [ 377.280923][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.286111][ T31] ? __pfx__printk+0x10/0x10 [ 377.290703][ T31] vpanic+0x237/0x6d0 [ 377.294685][ T31] ? __pfx_vpanic+0x10/0x10 [ 377.299193][ T31] ? preempt_schedule_common+0x83/0xd0 [ 377.304649][ T31] panic+0xb9/0xc0 [ 377.308375][ T31] ? __pfx_panic+0x10/0x10 [ 377.312781][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 377.318154][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 377.324299][ T31] watchdog+0xfdf/0xfe0 [ 377.328448][ T31] ? watchdog+0x20a/0xfe0 [ 377.332768][ T31] kthread+0x711/0x8a0 [ 377.336829][ T31] ? __pfx_watchdog+0x10/0x10 [ 377.341497][ T31] ? __pfx_kthread+0x10/0x10 [ 377.346077][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.351274][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 377.356459][ T31] ? __pfx_kthread+0x10/0x10 [ 377.361039][ T31] ret_from_fork+0x599/0xb30 [ 377.365618][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 377.370719][ T31] ? __switch_to_asm+0x39/0x70 [ 377.375469][ T31] ? __switch_to_asm+0x33/0x70 [ 377.380225][ T31] ? __pfx_kthread+0x10/0x10 [ 377.384805][ T31] ret_from_fork_asm+0x1a/0x30 [ 377.389567][ T31] [ 377.392921][ T31] Kernel Offset: disabled [ 377.397228][ T31] Rebooting in 86400 seconds..