last executing test programs: 2.691918118s ago: executing program 0 (id=4306): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x44e9}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x44e9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="004200090026be7000ffdbdf0700000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x8001}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x8001}, 0x8) 2.58165625s ago: executing program 4 (id=4308): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x143, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x6, 0x5, 0x1, 0x2, 0x3, [0xbb, 0x1, 0x4, 0x2]}) 2.560421603s ago: executing program 3 (id=4309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003600)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f00000035c0)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$inet6(0xa, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r1, &(0x7f00000033c0)=[{{&(0x7f00000001c0)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/102, 0x66}, {&(0x7f0000000880)=""/119, 0x77}, {&(0x7f0000000900)=""/188, 0xbc}], 0x8}, 0x800}, {{&(0x7f0000000a40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f0000000c40)=""/26, 0x1a}, {&(0x7f0000000c80)=""/69, 0x45}, {&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000000d40)=""/233, 0xe9}, {&(0x7f0000000e40)=""/224, 0xe0}, {&(0x7f0000000f40)=""/147, 0x93}], 0x8, &(0x7f0000001080)=""/173, 0xad}, 0x200}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/134, 0x86}, {&(0x7f0000001280)=""/187, 0xbb}, {&(0x7f0000001340)=""/248, 0xf8}, {&(0x7f0000001440)=""/135, 0x87}], 0x4, &(0x7f0000001540)=""/64, 0x40}, 0x401}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001580)=""/112, 0x70}, {&(0x7f0000001600)=""/233, 0xe9}], 0x2, &(0x7f0000001740)=""/67, 0x43}, 0x58e}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/25, 0x19}], 0x1, &(0x7f0000001840)=""/79, 0x4f}, 0x650d}, {{&(0x7f00000018c0)=@x25, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001940)=""/69, 0x45}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/83, 0x53}, {&(0x7f0000002a40)=""/134, 0x86}, {&(0x7f0000002b00)=""/233, 0xe9}, {&(0x7f0000002c00)=""/158, 0x9e}, {&(0x7f0000002cc0)=""/47, 0x2f}, {&(0x7f0000002d00)=""/173, 0xad}, {&(0x7f0000002dc0)=""/125, 0x7d}, {&(0x7f0000002e40)=""/102, 0x66}], 0xa}, 0x1b}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002f80)=""/73, 0x49}, {&(0x7f0000003000)=""/62, 0x3e}, {&(0x7f0000003040)=""/165, 0xa5}, {&(0x7f0000003100)=""/187, 0xbb}, {&(0x7f00000031c0)=""/88, 0x58}, {&(0x7f0000003240)=""/126, 0x7e}], 0x6, &(0x7f0000003340)=""/67, 0x43}, 0x3d78ee10}], 0x7, 0x2042, &(0x7f0000003580)={0x0, 0x989680}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r10, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.33980938s ago: executing program 0 (id=4312): unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x4000}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac9}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x59, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@delqdisc={0x194, 0x25, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xb}, {0x4, 0x3}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x3800, 0x6, 0x1, 0x1, 0x4, 0x7}}, {0x12, 0x2, [0x5, 0x536b, 0xe7e, 0x610, 0xff7c, 0x7, 0x4]}}, {{0x1c, 0x1, {0x7, 0x1, 0x1, 0x9, 0x2, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x6, 0x7, 0xfff7, 0x80, 0x0, 0x8, 0xfd, 0x2}}, {0x8, 0x2, [0x4, 0x0]}}, {{0x1c, 0x1, {0x80, 0x2, 0x8, 0x9, 0x1, 0x9, 0x0, 0x6}}, {0x10, 0x2, [0x1, 0x9, 0xc3, 0x200, 0x3, 0x401]}}, {{0x1c, 0x1, {0x61, 0xb, 0x3, 0x3, 0x2, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe5a}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x11, 0xf7, 0x3, 0x7, 0x0, 0x5, 0x0, 0x8}}, {0x14, 0x2, [0x401, 0x9e, 0x5, 0x400, 0x5, 0x4, 0x83, 0x9]}}, {{0x1c, 0x1, {0x4, 0x95, 0x8000, 0x9, 0x2, 0x1, 0xf768b2a5, 0x1}}, {0x6, 0x2, [0x11]}}, {{0x1c, 0x1, {0x40, 0x7, 0x8, 0x5, 0x0, 0x2, 0xae3, 0x5}}, {0xe, 0x2, [0x7, 0x9, 0x1, 0x5, 0xd]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000001c0)="87", 0x1, 0x81, &(0x7f0000000280)={0x11, 0xc, r5, 0x1, 0x5, 0x6, @broadcast}, 0x14) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r9, 0x3a, 0x0, 0x0, 0x20000000) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000000000001000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000500000005001b0000000000", @ANYRES8, @ANYRES8=r5], 0x44}}, 0x4090) bind$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x0, 0x1, 0x4000000}, 0xc) close(0x3) r10 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_netfilter(r7, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)=ANY=[@ANYBLOB="000300001201070228bd7000ffdbdf25050000029ea198c6f8cbe256d7f7b74722ce4d16d09a7f46c0bcadb0b10a5d6227efdd66907668a0bbe82c5931354263b6b3a966f9a2c705163cece34cbbe16af6b620e3b43245955ebbabb696ff604f71175b653ffacaf8e272f56b9a616a9c9115ff8cefc0c7304ae31f3aca95bc5ac77e259e2020b74e7d925370b12d87b8753814579ad6d845918c9e709cedc2b5585ec244e72778186ec289a8a2145271d1b4ebde32c76a9a72d033f32f65eee89d218592456ca02c50b52837279ca70df42ccb7a7301505ade6ed04719011f4925206aff68bca1895dbab6d1a70a2bf5dbf50bae0b4498c1fb563d45a91a4a0bfd1b497d10facedb6089c92ef4df73aedc7dbc3b661f7681a2eb40ce076a1f446c7b84833f1f01f7a514ffeb864c4c77857ac9d7330e4f861a8b266a5b2539c0af590d9c19a71c3589b8af285d74027f058509a3c49ac7af8e3a26aba5e83a7888a316eef61a41a5537f9a361997889cfc65d5c7c04eb0063756d52242cfecec2777ba5a45a9bd38c1b681af2e5e4e187831d46429aa1decccd5c4544d1dbbe3539a68213f7a1dff1e72ec96eea9f859fd5cf354753a8ee968da72bc10d063958f363908001800ac1414290600c900d0000000ac6933c206427e0b9ab7815444378d5400063e968c81d574956ea25b45a999405ba857c46844458af80ebc915233416f9b9b8849bc7aa9c70b7ac7a001e50f6af48f49e064e79344bf6ae6b14e15536e6a8ccda30f6218d23cbba91932b707a7a59936b9fa994223179217b43047dfaeff96372df2f3547aeab149004489d33e806ff945cd12f9ed764ee74dea3207e2bd21827772580e685e46b289d245548ce260e6b376deff9c78692b152800151d8f6dc1477565fe57c38ce43802500178b15614d8d57a7e4f8f8947fc2ea3c351e0a5bcf1e72ff984ca440f4d25d0ef8450fe69a773b14b726edd4030f8d2ea5ab3dcc91f3d2021a51286cc0c002200030000000000000082a2848feb211fec2952082f16c01c6aa1b067bf7504da8457407ccb3cdfadfbd4a87a917b00"], 0x300}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f00000003c0)={0x1, 0x7, 0xd2, &(0x7f00000002c0)=""/210}) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.255057347s ago: executing program 4 (id=4313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$igmp6(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff0200"/50], 0x340a) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000020000000000000a0030"], 0xb8}}, 0x4000) 2.158003235s ago: executing program 1 (id=4314): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000fc7f20009600000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0x2}, {0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x6}}}}]}, 0xffffffffffffffca}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x776, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/1111, @ANYRESOCT=r2, @ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000000200), 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x7fffff, 0x4) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0x0) listen(r6, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x21}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) 2.024754419s ago: executing program 4 (id=4316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0xe}, 0x1d) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x10, 0x0, 0x0, @private0, @remote, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra={0x31}]}]}}}}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0xfffffffffffffffa}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) close(0x4) 1.81344996s ago: executing program 0 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='hsr0\x00', 0x10) 1.610969206s ago: executing program 1 (id=4319): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000002d"], 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 1.609951679s ago: executing program 0 (id=4320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) socket$alg(0x26, 0x5, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000f6ff8e8d5a8400000000000000000af900", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a44001280110001006272696467655f736c617665000000002c00058008002200", @ANYRES32=0x0, @ANYBLOB="05001d00010000000800250000020000050021000000000008002500648400001400030064756d6d793000"/52], 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00048dce7007fddbdf25170000b4587bfc00", @ANYRES32=r5, @ANYBLOB="e45c984d0a49dd31a10437d10359b6dceb1e623b8cbd1c291e992bb7dc147d09205eb8fcb1ff39b7121a37fd5b96b41c607da7a5926a83b19f792e1580cdb786d279d67322fd4617bf2e0e260762e1c77439daa3149a59d4ce460bdd0c27b0c0bccd19c77a19a8de7b3bf2e93665bd43dbbba8f114559fbb13c63b3279efbd38b51cc47da304589a9b36dccf3512c78206"], 0x1c}}, 0x4001) 1.549982824s ago: executing program 3 (id=4321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80c1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xf, 0x5}, {0xffff, 0xffff}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.51531406s ago: executing program 2 (id=4322): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 1.355029912s ago: executing program 2 (id=4323): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x200, 0x200, 0x168, 0x298, 0x98, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000000080)=""/102377, &(0x7f0000000040)=0x18fe9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, 0x0, 0x0) sendmmsg$inet(r10, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "2755f8bebdaf"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14}}], 0x40}}], 0x1, 0x804) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="0000000006100000140012840b000100623269646765000004000280080007008ad2aca07ceffb9947fb900000000000000e3e2c0206fcbaafe763946c80092b0c06b0869460b1b7ff1f55038cab2a795dc4c65bd4f7c96294011de9b1ee8e485b05393295e32260a8a5e0047f06437623ae4713eadb662d5aa4338403e7b6ea160885254d3d8c9cc654ac8e8212a69f142f93d6bd0d732fe38dee087a325a143aad95663ee7fc0d6d2a45b4e80e1ced7d6b5f230c35f19d464de54d707a9b2f", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x48901}, 0x440b0) 1.318335287s ago: executing program 0 (id=4324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @broadcast}}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x80000001, @mcast1, 0x5}}, 0x0, 0x0, 0x1c, 0x0, "c898aa70e71c31eda9bea79484e8144204b7d40e79e9e0b1ba6f15f757f8dda314523dc96aae68360acc84a109df94eada5313486d518e9c40505261c50eb4c28b3fb9b86b495e3ec6c9c7c3eed5dd66"}, 0xd8) 1.224247288s ago: executing program 1 (id=4325): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x5d, 0x0}, 0x40000020) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x8804) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001d40)=""/4068, 0xfe4}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000004000)=""/4085, 0xff5}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000004c0)=""/34, 0x22}, {&(0x7f00000003c0)=""/64, 0x40}], 0x8}, 0x20100) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.09899987s ago: executing program 0 (id=4326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket(0x10, 0x3, 0x402) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x14, 0x21, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9408008a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) close(0x3) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008000), r0) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000140)={0x842}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) r14 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r14, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000008180)={0x0, 0x0, &(0x7f0000008140)={&(0x7f00000080c0)={0x28, r11, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8885}, 0x4080) unshare(0x40000000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r3, 0x1203, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10044}, 0x0) 1.097927444s ago: executing program 3 (id=4327): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfff, @empty, 0x8001}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.055408398s ago: executing program 2 (id=4328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff041762f5e4087f04040042801400018006000600800a000008001300", @ANYRES32=0x0, @ANYBLOB="04000280"], 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a000900000000000000000002"], 0x2c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0xfffff000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000640)={0x0, 0x75e, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000cc0)={0x0, 0xd, 0x0, [0x0, 0x0, 0x8001, 0xc, 0x40], [0x4, 0x9, 0x8, 0x5, 0x7, 0x7, 0x9, 0x6, 0x967, 0x7, 0x3, 0x35, 0xb, 0x6, 0x9, 0x3, 0x3, 0xe, 0xd45c, 0x5, 0x4, 0x6e14, 0x4, 0x200, 0x8, 0x0, 0x10, 0x3, 0xf, 0xc, 0x5, 0x0, 0xe9, 0x9, 0x5, 0x1, 0x80000001, 0x0, 0x4, 0x1, 0x0, 0x6, 0x5, 0x7, 0x6, 0x100000000003, 0x2, 0x9, 0x6, 0x100000000, 0x4, 0x718, 0x5, 0xb1, 0x9, 0x8, 0x0, 0x5, 0x8, 0x6, 0x3, 0x8, 0x7, 0xc, 0x76, 0x9, 0x1, 0x100000001, 0x604, 0x3, 0x1f8, 0x6, 0xff, 0xffff, 0x6, 0xb045, 0xfffffffffffffffb, 0xad8, 0x200, 0x81, 0xf9e6, 0x1ff, 0x7, 0x0, 0x7, 0xd, 0xfff, 0x8, 0x6, 0x9, 0x0, 0xffffffffffffff85, 0x3, 0x40, 0x10000, 0x5, 0x9a2, 0x3f4, 0x800, 0x45d, 0x8c, 0x3, 0x4, 0x55ed, 0x80000000, 0x2, 0x800, 0x8, 0x0, 0x7fffffffffffffff, 0x4, 0x7, 0x10001, 0xe9d, 0x8000000000000000, 0x6, 0x4, 0x55626ac8, 0x1000, 0x2, 0x7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001500)={0x12, 0x0, {0x80000001, @usage=0x3, r7, 0x3, 0x5, 0x10000, 0x1000, 0x3, 0x81, @struct={0x4}, 0x0, 0x1, [0x8001, 0x14, 0x4, 0xfffffffffffffff4, 0x6, 0x9]}, {0x9, @struct={0x200, 0xfff}, r8, 0x9, 0x1, 0x7, 0x8, 0x6, 0x8, @struct={0x7, 0x3}, 0x50c, 0x5, [0x100000001, 0xb9, 0x80, 0x2, 0x1, 0x6]}, {0x5, @usage=0x1, r9, 0x1, 0x7fffffffffffffff, 0x1a2, 0x1, 0x1, 0xa0, @usage=0x6, 0x8, 0x80000000, [0x8594, 0x0, 0xffffffff7fffffff, 0x8, 0xe8, 0x9]}, {0x4, 0x100, 0x5}}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x174, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x9, 0x10001, 0x2, 0xb, 0x9, 0x1}}, {0x6, 0x2, [0x101]}}, {{0x1c, 0x1, {0xfc, 0xe0, 0x401, 0xffffffff, 0x0, 0x7, 0x8, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x6, 0x6, 0x0, 0xc60f, 0x2, 0xd814, 0x6, 0x5}}, {0xe, 0x2, [0xbcdd, 0x1, 0x3, 0xf342, 0x716e]}}, {{0x1c, 0x1, {0x7a, 0xb2, 0x4, 0x401, 0x0, 0x1, 0x8001, 0xa}}, {0x18, 0x2, [0x7f, 0x5, 0x400, 0x3, 0xfff1, 0x4f, 0xaa2, 0x100, 0xfff, 0x2]}}, {{0x1c, 0x1, {0x62, 0x2, 0x9, 0xfffffff0, 0x0, 0x4, 0x4, 0x3}}, {0xa, 0x2, [0x6, 0x2, 0x6]}}, {{0x1c, 0x1, {0x9, 0xd, 0x5, 0x81, 0x1, 0x1, 0x100, 0x9}}, {0x16, 0x2, [0x8001, 0x2, 0x3, 0x4, 0x800, 0x6, 0x6, 0x0, 0x52]}}, {{0x1c, 0x1, {0x2, 0x3e, 0x81, 0x8, 0x2, 0x5, 0xf99, 0x2}}, {0x8, 0x2, [0x800, 0x401]}}, {{0x1c, 0x1, {0x9, 0x1, 0x6, 0x8, 0x0, 0x6, 0xbe, 0x2}}, {0x8, 0x2, [0x7e7, 0x200]}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0xac, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x7c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0x3, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_PARMS={0x38, 0x1, {0x10, 0x5, 0x101, 0xb, 0x2, 0x6, 0x5, 0xb8, 0x7, 0x5266, 0xc, 0x17, 0x1f, 0xf0, 0x8, 0x1ff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 964.068305ms ago: executing program 3 (id=4329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0ffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae1c9cfff01cb02103e9430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f97b798f8125f1c322c2a154a8a8d00"/261], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, &(0x7f0000000340)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000003c0)=0x1) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x7}, @void, @ipv4=@tipc={{0x1b, 0x4, 0x2, 0x7, 0x97, 0x65, 0x0, 0x5, 0x6, 0x0, @local, @remote, {[@timestamp={0x44, 0x14, 0x3a, 0x0, 0x6, [0x5, 0x8, 0x9, 0xbf]}, @end, @rr={0x7, 0x23, 0x4c, [@dev={0xac, 0x14, 0x14, 0xd}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @broadcast, @broadcast, @broadcast]}, @ssrr={0x89, 0x1f, 0xe0, [@multicast1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, @empty, @local, @empty, @rand_addr=0x64010100]}, @end]}}, @payload_named={{{{{0x2b, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x7e7d, 0x0, 0x0, 0x8, 0x5, 0x2, 0xff, 0x3, 0x4, 0x4e24, 0x4e21}, 0x1, 0x1}, 0x4, 0x4}}, [0x0, 0x0, 0x0]}}}, 0x9b) r3 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 843.553642ms ago: executing program 4 (id=4330): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async, rerun: 64) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x4, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async, rerun: 64) r7 = socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 64) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000290000000300"], 0x18}, 0x4004080) 843.104581ms ago: executing program 1 (id=4331): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x40000) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}}}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000023000100000000000000000001"], 0x114}], 0x1}, 0x0) write(r1, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) 692.791449ms ago: executing program 2 (id=4332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$AUDIT_USER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3ed, 0x1, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x1010}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x2000000, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x20) 688.386527ms ago: executing program 3 (id=4333): r0 = socket$kcm(0x10, 0x2, 0x0) (async) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x40000000, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 595.747174ms ago: executing program 1 (id=4334): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x148, 0xb, 0x148, 0x148, 0x148, 0x220, 0x240, 0x240, 0x220, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x148, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x0, 0x1, 0x1, 0x1], 0x6, 0x4}, {0x3, [0x4, 0x2, 0x6, 0x4, 0x2, 0x7], 0x2, 0x7}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async, rerun: 64) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) bind$bt_l2cap(r11, &(0x7f0000000980), 0xe) (async, rerun: 32) listen(r11, 0x0) (async, rerun: 32) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000000280), 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="9082", 0x2}], 0x1}}], 0x1, 0x20008000) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) syz_emit_ethernet(0x53, &(0x7f0000000180)={@local, @multicast, @void, {@llc={0x4, {@llc={0xd4, 0xaa, "cf", "a5ed8d4de37a4bdf43778b735f5f328543bcff558b567cb3c819a14c8f9b9e44e5efa11685fe883e76e8abad91c0e0cc63f660bfd4ac1aabe9c0c835669cc5e527ed"}}}}}, 0x0) 539.237229ms ago: executing program 4 (id=4335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$igmp6(0xa, 0x3, 0x3a) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000000000000010ff0200"/50], 0x340a) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000040000000000000a0030"], 0xb8}}, 0x4000) 363.299619ms ago: executing program 3 (id=4336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000fdfc067076e619c0b453"], 0x48) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02010000000000de130003006e657464657673696d30000000000000200016801c00018018000c8014"], 0x54}}, 0x24040800) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000000040), 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000001c00128009000100000c00028008001400ffffffffc006853e535eaf483af98405b26b10ef126d79669605e033ccff3a8456a1bc6ebf7240235a6424af3c681b3373f9c21d83fd1ea0086145ba344df53b7b2bc6bd231b1e74d99ebe7fb0cab9b70cdce90a24cce3f01048ffe628ad8925ebac6e9737937fc095bd07a59999402797068d35d28ac7b21550e144ee8a3cf8319d278ab418bf23c10254141afd2d3c0ee682ec5b90170e98a91f390112e02dd6ae3102529da1baefe69a3f657b73e83a5b7d2bd32e4c1c36a58b284ca3145daf"], 0x3c}}, 0x0) 349.57758ms ago: executing program 4 (id=4337): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000004080)=ANY=[], 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1b8, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x18, {0x8c, "532b200022d6", @long="743ca12139290d665adc984cd7c4c106"}}]}, @NL80211_ATTR_IE={0xfd, 0x2a, [@perr={0x84, 0xc8, {0xa, 0xc, [{{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0xf}, {{}, @device_a, 0x2, @void, 0x25}, {{0x0, 0x1}, @device_a, 0x401, @value, 0x33}, {{0x0, 0x1}, @device_b, 0x6c, @value, 0xe}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_b, 0x1000, @value=@broadcast, 0x10}, {{}, @broadcast, 0x2, @void, 0x2c}, {{}, @device_b, 0xe, @void, 0x7}, {{}, @device_b, 0x9, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x7c3, @value, 0x3f}, {{}, @device_a, 0xfdd, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x14}]}}, @chsw_timing={0x68, 0x4, {0x99, 0x101}}, @prep={0x83, 0x1f, {{}, 0x7f, 0xde, @device_b, 0x8, @void, 0x4, 0x7, @device_a, 0x8}}, @gcr_ga={0xbd, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @NL80211_ATTR_IE={0x62, 0x2a, [@random_vendor={0xdd, 0x57, "edef1c602367daf518689c4ebfa55f1a88ee166564cde530cedede355e01d899d83344dda771b2f9b5568c10b7ce3686dfdfb6baea63d5f30b0116fb9ada5ac12a3110f4d9770c7e6f33aec418e952bc9e93a22a3269d9"}, @channel_switch={0x25, 0x3, {0x0, 0x9, 0x7}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4841}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x3c}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x10000040) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write(r9, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x70bd25, 0xffffffff, {0x1}}, 0x14}}, 0x81) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'nr0\x00'}) 198.829502ms ago: executing program 2 (id=4338): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) (async, rerun: 64) sendto$inet(r1, 0x0, 0x60, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000100)) 91.484137ms ago: executing program 1 (id=4339): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a00000000000061114c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014500d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000d00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xd6a}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x7, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 0s ago: executing program 2 (id=4340): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x843}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x55}]}, 0x84}}, 0x20000000) kernel console output (not intermixed with test programs): t allmulticast mode [ 288.407642][T15421] bridge_slave_1: left promiscuous mode [ 288.413975][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.427048][T15421] bond0: (slave bond_slave_0): Releasing backup interface [ 288.437429][T15421] bond0: (slave bond_slave_1): Releasing backup interface [ 288.460498][T15421] team0: Port device team_slave_0 removed [ 288.475986][T15421] team0: Port device team_slave_1 removed [ 288.484235][T15421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.841111][ T5626] syz_tun: tun_net_xmit 110 [ 289.567808][T15490] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 289.679202][T15498] lo: Caught tx_queue_len zero misconfig [ 290.456133][T15554] ±ÿ: renamed from team_slave_1 (while UP) [ 290.848724][T15579] vlan2: entered allmulticast mode [ 290.864087][T15579] bond0: entered allmulticast mode [ 290.965728][T15585] bond0: (slave bond_slave_1): Releasing backup interface [ 290.973776][T15585] bond_slave_1: left allmulticast mode [ 293.421792][T15552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.621373][T15600] __nla_validate_parse: 8 callbacks suppressed [ 293.621391][T15600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2755'. [ 293.641270][T15606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 293.660515][T15606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 293.708378][T15606] gretap0: entered promiscuous mode [ 293.729326][T15606] gretap0: left promiscuous mode [ 293.893686][T15619] netlink: 'syz.1.2763': attribute type 4 has an invalid length. [ 293.928540][T15619] tipc: Started in network mode [ 293.934119][T15619] tipc: Node identity ac14140f, cluster identity 4711 [ 293.934133][T15622] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2765'. [ 293.941486][T15619] tipc: New replicast peer: 172.20.20.187 [ 293.959396][T15619] tipc: Enabled bearer , priority 10 [ 293.966742][T15625] netlink: 'syz.2.2766': attribute type 20 has an invalid length. [ 293.978797][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 294.111587][T15625] netlink: 'syz.2.2766': attribute type 20 has an invalid length. [ 294.127746][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 294.280523][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2771'. [ 294.426651][T15651] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2774'. [ 294.577502][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 294.620242][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 294.942774][T15681] netlink: 'syz.2.2784': attribute type 10 has an invalid length. [ 294.977243][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.994847][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.004093][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.018160][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.026537][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.072607][ T5742] tipc: Node number set to 2886997007 [ 295.142546][T15694] netlink: 'syz.0.2788': attribute type 39 has an invalid length. [ 295.472014][T15709] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 295.969452][T15704] dummy0: left allmulticast mode [ 296.013718][T15704] vlan0: left allmulticast mode [ 296.018751][T15704] veth0_vlan: left allmulticast mode [ 296.026322][T15704] vlan0: left promiscuous mode [ 296.076565][T15709] 8021q: adding VLAN 0 to HW filter on device bond11 [ 296.105313][T15709] bond10: (slave bond11): making interface the new active one [ 296.117090][T15709] bond10: (slave bond11): Enslaving as an active interface with an up link [ 296.133327][T10367] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.143606][T10367] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.156054][T10367] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 296.166185][T10367] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 296.175857][T10367] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.185726][T10367] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.195891][T10367] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 296.204899][T10367] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 296.215000][T10367] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.224303][T10367] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.233614][T10367] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 296.243306][T10367] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 296.254399][T15748] veth0_to_bond: entered allmulticast mode [ 296.306264][T10367] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.326806][T15752] ip6t_REJECT: ECHOREPLY is not supported [ 296.342006][T10367] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.367925][T10367] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 296.385922][T10367] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 296.528541][T15682] C speed is unknown, defaulting to 1000 [ 296.749376][T15784] sctp: [Deprecated]: syz.2.2808 (pid 15784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.749376][T15784] Use struct sctp_sack_info instead [ 296.887739][T15788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.898464][T15788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.915844][T15788] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 297.107254][ T5628] Bluetooth: hci5: command tx timeout [ 297.199208][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.207165][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.214663][T15682] bridge_slave_0: entered allmulticast mode [ 297.224442][T15682] bridge_slave_0: entered promiscuous mode [ 297.233044][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.240316][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.247956][T15682] bridge_slave_1: entered allmulticast mode [ 297.255856][T15682] bridge_slave_1: entered promiscuous mode [ 297.295332][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.308262][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.433574][T15682] team0: Port device team_slave_0 added [ 297.454786][T15682] team0: Port device team_slave_1 added [ 297.548769][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.579214][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.631837][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.647043][T15828] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 297.672440][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.693906][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.770927][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.000312][T15853] openvswitch: netlink: Unknown nsh attribute 0 [ 298.029311][T15682] hsr_slave_0: entered promiscuous mode [ 298.036675][T15682] hsr_slave_1: entered promiscuous mode [ 298.044748][T15682] debugfs: 'hsr0' already exists in 'hsr' [ 298.050725][T15682] Cannot create hsr debugfs directory [ 298.052878][T15856] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 298.100436][T15860] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 298.126127][T15856] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 298.434657][T15879] bond11: Unable to set up delay as MII monitoring is disabled [ 298.452422][T15879] bond11 (unregistering): Released all slaves [ 298.677318][T15682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.696211][T15682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.731035][T15900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.746666][T15893] __nla_validate_parse: 13 callbacks suppressed [ 298.746682][T15893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2839'. [ 298.755374][T15900] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 298.876394][T15682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.918000][T15682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.170257][T15682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.181066][ T5628] Bluetooth: hci5: command tx timeout [ 299.190766][T15682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.210319][T15926] netlink: 'syz.2.2846': attribute type 8 has an invalid length. [ 299.258689][T15928] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2848'. [ 299.293535][T15929] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2848'. [ 299.346785][T15682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.371172][T15682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.389710][T15937] C: renamed from lo [ 299.405270][T15937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 299.443016][T15937] netlink: 'syz.2.2851': attribute type 3 has an invalid length. [ 299.560157][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2852'. [ 299.596650][T15940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.919173][T15958] veth1_macvtap: entered allmulticast mode [ 299.979581][T15682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.013345][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.028116][T15958] veth1_macvtap: left allmulticast mode [ 300.036535][T15682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.068258][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.095055][T15682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.126583][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.147883][T15682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.165965][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.390544][T15682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.457365][T15682] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.530377][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.537595][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.581386][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.588574][T10377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.609880][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 300.693060][T16013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2865'. [ 301.072793][T16037] x_tables: duplicate underflow at hook 1 [ 301.088995][T16040] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2873'. [ 301.260992][ T5628] Bluetooth: hci5: command tx timeout [ 301.315217][T16049] xt_connbytes: Forcing CT accounting to be enabled [ 301.548203][T16063] lo speed is unknown, defaulting to 1000 [ 301.576703][T16063] lo speed is unknown, defaulting to 1000 [ 301.589478][T16066] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 301.598514][T16063] lo speed is unknown, defaulting to 1000 [ 301.609043][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2881'. [ 301.735536][T15682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.829515][T16074] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2883'. [ 301.875551][T15682] veth0_vlan: entered promiscuous mode [ 301.908640][T15682] veth1_vlan: entered promiscuous mode [ 301.995150][T15682] veth0_macvtap: entered promiscuous mode [ 302.025366][T15682] veth1_macvtap: entered promiscuous mode [ 302.029199][T16080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2885'. [ 302.085435][T15682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.122863][T15682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.155644][T10377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.195869][T10377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.255222][T10377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.276035][T10377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.344582][T16080] tipc: Enabled bearer , priority 24 [ 302.395343][T16084] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 302.395591][T16063] infiniband syz0: set active [ 302.433718][T16084] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 302.441410][T16063] infiniband syz0: added lo [ 302.449310][T16063] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 302.464217][T16084] gretap1: entered promiscuous mode [ 302.467782][T16063] infiniband syz0: Couldn't open port 1 [ 302.487139][T16084] gretap1: entered allmulticast mode [ 302.496674][T16063] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 302.576653][ T6628] lo speed is unknown, defaulting to 1000 [ 302.588898][T16063] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 302.627374][T16063] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 302.694737][T16063] RDS/IB: syz0: added [ 302.700471][T16063] smc: adding ib device syz0 with port count 1 [ 302.711255][T16063] smc: ib device syz0 port 1 has no pnetid [ 302.806005][ T5756] lo speed is unknown, defaulting to 1000 [ 302.808369][T10371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.831511][T10371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.843319][T16106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.895880][T16063] lo speed is unknown, defaulting to 1000 [ 302.919663][T10371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.938022][T10371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.048747][T16115] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 303.122331][T16115] syzkaller0: entered promiscuous mode [ 303.136655][T16115] syzkaller0: entered allmulticast mode [ 303.342501][ T5628] Bluetooth: hci5: command tx timeout [ 303.606060][T16063] lo speed is unknown, defaulting to 1000 [ 303.945619][T16160] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 304.137626][T16171] __nla_validate_parse: 4 callbacks suppressed [ 304.137647][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 304.235158][T16063] lo speed is unknown, defaulting to 1000 [ 304.360163][T16174] openvswitch: netlink: Tunnel attr 13 has unexpected len 36 expected 16 [ 304.517216][T16184] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 304.612317][T16191] tipc: Enabling of bearer rejected, failed to enable media [ 304.671496][T16194] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2914'. [ 304.936723][T16063] lo speed is unknown, defaulting to 1000 [ 304.979063][T16210] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2922'. [ 305.108845][T16213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2922'. [ 305.460762][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 305.527488][T16236] syzkaller0: entered allmulticast mode [ 305.767550][T16236] C speed is unknown, defaulting to 1000 [ 305.769048][T16063] lo speed is unknown, defaulting to 1000 [ 306.436217][T16236] lo speed is unknown, defaulting to 1000 [ 306.584027][T16289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.591408][T16289] IPv6: NLM_F_CREATE should be set when creating new route [ 306.598775][T16289] IPv6: NLM_F_CREATE should be set when creating new route [ 306.606066][T16289] IPv6: NLM_F_CREATE should be set when creating new route [ 306.917044][T16063] lo speed is unknown, defaulting to 1000 [ 307.229830][T16315] netlink: 'syz.2.2950': attribute type 39 has an invalid length. [ 307.398650][T16318] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 307.578877][T16322] team0: No ports can be present during mode change [ 307.908341][T16325] bond11: entered promiscuous mode [ 307.925409][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.938092][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.950483][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.966589][T16325] bond11: entered allmulticast mode [ 307.972217][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.983007][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.990477][T16325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.128087][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 308.138565][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.156402][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 308.166467][T16341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.355155][T16351] netlink: 'syz.3.2961': attribute type 11 has an invalid length. [ 308.384469][T16351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2961'. [ 308.527910][T16356] x_tables: duplicate underflow at hook 1 [ 308.769793][T10367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.802224][T10367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.860295][T16376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 309.125658][T16388] netlink: 'syz.2.2970': attribute type 2 has an invalid length. [ 309.152437][T10367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.178915][T10367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.211010][T16387] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 309.277718][T16333] C speed is unknown, defaulting to 1000 [ 309.373943][T10367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.384668][T10367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.436149][T16333] lo speed is unknown, defaulting to 1000 [ 309.457326][T16399] netlink: 'syz.2.2975': attribute type 3 has an invalid length. [ 309.539824][T10367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.569543][T10367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.782828][ T7854] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 310.061365][ T5628] Bluetooth: hci0: command tx timeout [ 310.244884][T10367] dvmrp0: left allmulticast mode [ 310.254573][T10367] pimreg: left allmulticast mode [ 310.540746][T16446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 310.675606][T10367] bond9 (unregistering): (slave bridge3): Releasing active interface [ 310.760903][T10367] bond0 (unregistering): Released all slaves [ 310.771536][T10367] bond1 (unregistering): Released all slaves [ 310.786196][T10367] bond2 (unregistering): Released all slaves [ 310.805797][T10367] bond3 (unregistering): Released all slaves [ 310.820991][T10367] bond4 (unregistering): Released all slaves [ 310.838771][T10367] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 310.858049][T10367] bond5 (unregistering): Released all slaves [ 310.872604][T10367] bond6 (unregistering): Released all slaves [ 310.887694][T10367] bond7 (unregistering): Released all slaves [ 310.902393][T10367] bond8 (unregistering): (slave lo): Releasing backup interface [ 310.910532][T10367] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 310.935450][T10367] bond8 (unregistering): Released all slaves [ 310.949711][T10367] bond9 (unregistering): Released all slaves [ 310.964211][T10367] bond10 (unregistering): Released all slaves [ 311.004951][ T5816] lo speed is unknown, defaulting to 1000 [ 311.020945][ T5816] syz0: Port: 1 Link DOWN [ 311.034555][ T5816] lo speed is unknown, defaulting to 1000 [ 311.264418][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.271974][T16333] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.279173][T16333] bridge_slave_0: entered allmulticast mode [ 311.286556][T16333] bridge_slave_0: entered promiscuous mode [ 311.295150][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.303335][T16333] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.310641][T16333] bridge_slave_1: entered allmulticast mode [ 311.317900][T16333] bridge_slave_1: entered promiscuous mode [ 311.343637][T16333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.355534][T16333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.383445][T16333] team0: Port device team_slave_0 added [ 311.391332][T16333] team0: Port device team_slave_1 added [ 311.413464][T16333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.420442][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.446766][T16333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.459010][T16333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.466059][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.492475][T16333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.531732][T16333] hsr_slave_0: entered promiscuous mode [ 311.538492][T16333] hsr_slave_1: entered promiscuous mode [ 311.544821][T16333] debugfs: 'hsr0' already exists in 'hsr' [ 311.550564][T16333] Cannot create hsr debugfs directory [ 312.140993][ T5628] Bluetooth: hci0: command tx timeout [ 312.626217][T16413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.653123][T16333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.724585][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.751857][T16333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.783979][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.798899][T16333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.818921][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.839273][T16333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.853527][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 312.870088][T16333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.916931][T16456] syzkaller0: entered promiscuous mode [ 312.923256][T16456] syzkaller0: entered allmulticast mode [ 313.055593][T16460] bond1 (unregistering): Released all slaves [ 313.221447][T16481] netlink: 'syz.4.2991': attribute type 13 has an invalid length. [ 313.548998][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 313.686589][T16502] syzkaller0: entered promiscuous mode [ 313.702377][T16502] syzkaller0: entered allmulticast mode [ 313.786404][T16497] tipc: Started in network mode [ 313.815410][T16497] tipc: Node identity de6e46c544f4, cluster identity 4711 [ 313.826694][T16497] tipc: Enabled bearer , priority 0 [ 313.834743][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 313.905604][T16333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.995918][T16333] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.047268][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.054472][T10368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.119022][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.126261][T10371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.155558][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3001'. [ 314.221342][ T5628] Bluetooth: hci0: command tx timeout [ 314.253530][T16488] tipc: Resetting bearer [ 314.319032][T16488] tipc: Disabling bearer [ 314.363196][T16531] lo: Caught tx_queue_len zero misconfig [ 314.403598][T16544] netlink: 'syz.0.3002': attribute type 4 has an invalid length. [ 314.403899][T16545] netlink: 'syz.0.3002': attribute type 4 has an invalid length. [ 314.489141][T16535] syzkaller0: entered promiscuous mode [ 314.503612][T16535] syzkaller0: entered allmulticast mode [ 315.034200][T16583] netlink: 'syz.4.3007': attribute type 8 has an invalid length. [ 315.251559][T16594] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3009'. [ 316.301804][ T5628] Bluetooth: hci0: command tx timeout [ 316.871407][T16580] tipc: Enabled bearer , priority 10 [ 317.050046][T16621] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 317.109172][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.118015][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 317.198604][T16620] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.246921][T16620] bond12: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 317.312167][T16620] bond12: (slave vxcan3): making interface the new active one [ 317.320668][T16620] bond12: (slave vxcan3): Enslaving as an active interface with an up link [ 317.385311][T16621] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 317.402039][T16621] bond12: (slave vxcan5): Enslaving as a backup interface with an up link [ 317.649144][T16658] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.772829][T16666] netlink: 'syz.0.3019': attribute type 6 has an invalid length. [ 317.920042][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3019'. [ 317.989161][T16677] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3020'. [ 318.015354][ T6628] tipc: Node number set to 2593801925 [ 318.179074][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 318.225973][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3022'. [ 318.285123][T16333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.337062][T16696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3025'. [ 318.447048][T16701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'. [ 318.482798][T16333] veth0_vlan: entered promiscuous mode [ 318.502843][T16701] only policy match revision 0 supported [ 318.502877][T16701] unable to load match [ 318.543752][T16333] veth1_vlan: entered promiscuous mode [ 318.589513][T16713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3031'. [ 318.699345][T16333] veth0_macvtap: entered promiscuous mode [ 318.753853][T16333] veth1_macvtap: entered promiscuous mode [ 318.814899][T16333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.862691][T16333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.876185][T16728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3032'. [ 318.903741][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3035'. [ 318.920370][T10368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.962204][T10368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.045412][T16728] can: request_module (can-proto-0) failed. [ 319.089951][T10368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.125529][T10368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.147827][T16746] netlink: 'syz.0.3037': attribute type 29 has an invalid length. [ 319.402896][T10376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.438733][T10376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.578389][T10368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.615336][T10368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.635102][T16762] x_tables: duplicate entry at hook 1 [ 319.654478][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 320.051577][T16780] netlink: Conntrack attr has 3 unknown bytes [ 320.068575][T10377] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 320.816060][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.830106][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.844997][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.860575][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.878718][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.233173][T16835] veth0_macvtap: Caught tx_queue_len zero misconfig [ 321.515871][T16852] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 321.625631][T16854] syzkaller0: entered promiscuous mode [ 321.650465][T16854] syzkaller0: entered allmulticast mode [ 321.705720][T16863] openvswitch: netlink: Tunnel attr 19 out of range max 16 [ 322.035748][T16876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.063715][T16876] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 322.132803][T16877] bond0: Caught tx_queue_len zero misconfig [ 322.225198][T16814] C speed is unknown, defaulting to 1000 [ 322.244886][T16814] lo speed is unknown, defaulting to 1000 [ 322.376639][T16885] bond5: (slave ip6gretap0): Releasing active interface [ 322.421758][T16892] tipc: Enabled bearer , priority 27 [ 322.441356][T16888] block nbd2: Unsupported socket: should be TCP or UNIX. [ 322.570066][T16896] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 322.944428][ T5628] Bluetooth: hci1: command tx timeout [ 322.976790][T16918] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 323.187727][T16929] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 323.231705][T16919] syzkaller0: entered promiscuous mode [ 323.249320][T16919] syzkaller0: entered allmulticast mode [ 323.437133][T16950] __nla_validate_parse: 8 callbacks suppressed [ 323.437151][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3087'. [ 323.761707][T16814] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.774824][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.782906][T16814] bridge_slave_0: entered allmulticast mode [ 323.802827][T16814] bridge_slave_0: entered promiscuous mode [ 323.834672][T16814] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.863999][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.895052][T16814] bridge_slave_1: entered allmulticast mode [ 323.935337][T16814] bridge_slave_1: entered promiscuous mode [ 324.065252][T16814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.079268][T16984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.085974][T16998] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3097'. [ 324.132821][T16814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.307775][T16814] team0: Port device team_slave_0 added [ 324.329864][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3101'. [ 324.353441][T17013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.359605][T16814] team0: Port device team_slave_1 added [ 324.567476][T16814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.580926][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.610180][T16814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.677643][T16814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.694563][T16814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.723310][T17036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.727847][T16814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.795470][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'. [ 324.888081][T16814] hsr_slave_0: entered promiscuous mode [ 324.927713][T16814] hsr_slave_1: entered promiscuous mode [ 324.942827][T16814] debugfs: 'hsr0' already exists in 'hsr' [ 324.955790][T16814] Cannot create hsr debugfs directory [ 325.020914][ T5628] Bluetooth: hci1: command tx timeout [ 325.070215][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'. [ 325.169325][T17051] netlink: 'syz.4.3111': attribute type 13 has an invalid length. [ 325.504415][T16814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.516612][T16814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.563297][T17084] netlink: 'syz.3.3118': attribute type 9 has an invalid length. [ 325.571777][T17090] netlink: 'syz.4.3119': attribute type 1 has an invalid length. [ 325.597601][ T5626] IPVS: starting estimator thread 0... [ 325.657531][T17099] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3122'. [ 325.666496][T17090] 8021q: adding VLAN 0 to HW filter on device bond14 [ 325.694422][T17096] bond14: (slave geneve3): making interface the new active one [ 325.700986][T17095] IPVS: using max 32 ests per chain, 76800 per kthread [ 325.709031][T17096] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 325.869882][T16814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.891781][T16814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.098485][T16814] bond0: (slave netdevsim1): Releasing backup interface [ 326.128165][T16814] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 326.143063][T16814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.169078][T16814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.316117][T16814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.328147][T16814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.377137][T17128] syzkaller0: entered promiscuous mode [ 326.396525][T17128] syzkaller0: entered allmulticast mode [ 326.425414][T17128] xt_cluster: node mask cannot exceed total number of nodes [ 326.809916][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3140'. [ 326.854828][T17153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.991623][T16814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.049079][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.066550][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 327.076786][T16814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.094563][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 327.117755][ T5628] Bluetooth: hci1: command tx timeout [ 327.119509][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.232827][T17163] syzkaller0: entered promiscuous mode [ 327.239026][T17163] syzkaller0: entered allmulticast mode [ 327.294802][T17155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3142'. [ 327.540875][T16814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.630445][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.115267][T17180] netlink: 'syz.3.3147': attribute type 3 has an invalid length. [ 328.190753][T17184] netlink: 'syz.1.3148': attribute type 24 has an invalid length. [ 328.353202][T17186] netlink: 'syz.0.3149': attribute type 49 has an invalid length. [ 328.406728][T17191] Bluetooth: MGMT ver 1.23 [ 328.578773][T17196] __nla_validate_parse: 2 callbacks suppressed [ 328.578794][T17196] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3152'. [ 328.750590][T17201] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3153'. [ 328.764113][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'. [ 329.181314][ T5628] Bluetooth: hci1: command tx timeout [ 330.811119][T16814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.823345][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.856513][T17202] IPv6: sit1: Disabled Multicast RS [ 331.058488][T17221] netlink: 'syz.3.3159': attribute type 15 has an invalid length. [ 331.071395][T17216] sit2: entered promiscuous mode [ 331.072495][T17221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3159'. [ 331.076933][T17216] sit2: entered allmulticast mode [ 331.148086][T17223] C speed is unknown, defaulting to 1000 [ 331.342720][T16814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.473437][T16814] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.504144][T17236] bond15: option resend_igmp: invalid value (32767) [ 331.515676][T17236] bond15: option resend_igmp: allowed values 0 - 255 [ 331.532367][T17236] bond15 (unregistering): Released all slaves [ 331.647471][T10042] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.654749][T10042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.709129][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.716388][T10042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.898532][T17255] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.071223][T17258] netlink: 'syz.0.3171': attribute type 5 has an invalid length. [ 332.091585][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 332.125777][T17265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3171'. [ 332.226013][T17258] vlan5: entered allmulticast mode [ 332.237389][T17258] bond0: entered allmulticast mode [ 332.274803][T17269] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3174'. [ 332.306578][T17265] bond0 (unregistering): Released all slaves [ 332.348206][T17271] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3174'. [ 332.375045][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.387991][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.473153][T17273] lo: Caught tx_queue_len zero misconfig [ 332.515165][T17271] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.525032][T17271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.534010][T17271] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.542096][T17271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.568352][T17271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3174'. [ 332.635624][T17271] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.647640][T17271] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.951754][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3179'. [ 333.331173][T17309] netlink: 'syz.4.3183': attribute type 49 has an invalid length. [ 333.497935][T17318] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 333.856892][T16814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.867326][T17329] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3189'. [ 334.069119][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 334.468619][T16814] veth0_vlan: entered promiscuous mode [ 334.529794][T16814] veth1_vlan: entered promiscuous mode [ 334.538179][T17353] netlink: 'syz.3.3197': attribute type 1 has an invalid length. [ 334.682543][T17360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.733146][T17355] bond1: (slave bridge2): making interface the new active one [ 334.742371][T17355] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 334.826292][T17357] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 334.836414][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3200'. [ 334.868005][T17357] bond0 (unregistering): Released all slaves [ 335.082082][T17380] netlink: 'syz.3.3206': attribute type 1 has an invalid length. [ 335.206286][T17385] netlink: 'syz.3.3206': attribute type 1 has an invalid length. [ 335.223525][T17387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3207'. [ 335.305208][T17382] bond2: (slave gretap1): making interface the new active one [ 335.314772][T17382] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 335.339939][T17387] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3207'. [ 335.419814][T16814] veth0_macvtap: entered promiscuous mode [ 335.442427][T16814] veth1_macvtap: entered promiscuous mode [ 335.497998][T16814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.540683][T16814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.585169][T10368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.606022][T10368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.618330][T10368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.630351][T10368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.855664][T17406] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 336.035819][T17413] team_slave_0: mtu less than device minimum [ 336.052420][T10042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.078572][T10042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.248087][T10375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.262603][T17418] syz.0.3217: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.294583][T10375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.329087][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.0.3217 Not tainted syzkaller #0 PREEMPT(full) [ 336.329120][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.329147][T17418] Call Trace: [ 336.329155][T17418] [ 336.329162][T17418] dump_stack_lvl+0xe8/0x150 [ 336.329186][T17418] warn_alloc+0x249/0x340 [ 336.329203][T17418] ? stack_trace_save+0xa9/0x100 [ 336.329222][T17418] ? __pfx_warn_alloc+0x10/0x10 [ 336.329241][T17418] ? kasan_save_track+0x4f/0x80 [ 336.329255][T17418] ? kasan_save_track+0x3e/0x80 [ 336.329270][T17418] ? __kasan_kmalloc+0x93/0xb0 [ 336.329284][T17418] ? __kmalloc_cache_noprof+0x31c/0x660 [ 336.329298][T17418] ? xskq_create+0x56/0x170 [ 336.329311][T17418] ? xsk_setsockopt+0x54c/0x990 [ 336.329322][T17418] ? do_sock_setsockopt+0x17c/0x1b0 [ 336.329337][T17418] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 336.329350][T17418] ? do_syscall_64+0x15f/0xf80 [ 336.329371][T17418] __vmalloc_node_range_noprof+0x132/0x1750 [ 336.329405][T17418] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.329423][T17418] ? __kasan_kmalloc+0x93/0xb0 [ 336.329441][T17418] vmalloc_user_noprof+0xad/0xe0 [ 336.329456][T17418] ? xskq_create+0xbf/0x170 [ 336.329470][T17418] xskq_create+0xbf/0x170 [ 336.329484][T17418] xsk_init_queue+0x8a/0xe0 [ 336.329498][T17418] xsk_setsockopt+0x54c/0x990 [ 336.329512][T17418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.329525][T17418] ? __pfx_aa_sk_perm+0x10/0x10 [ 336.329540][T17418] ? aa_sock_opt_perm+0xff/0x1a0 [ 336.329556][T17418] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 336.329571][T17418] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.329584][T17418] do_sock_setsockopt+0x17c/0x1b0 [ 336.329601][T17418] __x64_sys_setsockopt+0x13d/0x1b0 [ 336.329626][T17418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.329638][T17418] do_syscall_64+0x15f/0xf80 [ 336.329652][T17418] ? trace_irq_disable+0x3b/0x140 [ 336.329669][T17418] ? clear_bhb_loop+0x40/0x90 [ 336.329682][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.329693][T17418] RIP: 0033:0x7fb261d9ce59 [ 336.329705][T17418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.329715][T17418] RSP: 002b:00007fb262c32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 336.329727][T17418] RAX: ffffffffffffffda RBX: 00007fb262015fa0 RCX: 00007fb261d9ce59 [ 336.329735][T17418] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 336.329742][T17418] RBP: 00007fb261e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 336.329749][T17418] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.329756][T17418] R13: 00007fb262016038 R14: 00007fb262015fa0 R15: 00007ffe952401c8 [ 336.329773][T17418] [ 336.329826][T17418] Mem-Info: [ 336.566757][T17433] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 336.583196][T17418] active_anon:5733 inactive_anon:0 isolated_anon:0 [ 336.583196][T17418] active_file:3081 inactive_file:40058 isolated_file:0 [ 336.583196][T17418] unevictable:768 dirty:99 writeback:0 [ 336.583196][T17418] slab_reclaimable:11797 slab_unreclaimable:120351 [ 336.583196][T17418] mapped:29508 shmem:1288 pagetables:3529 [ 336.583196][T17418] sec_pagetables:0 bounce:0 [ 336.583196][T17418] kernel_misc_reclaimable:0 [ 336.583196][T17418] free:1295592 free_pcp:10442 free_cma:0 [ 336.635886][T17433] 8021q: adding VLAN 0 to HW filter on device bond15 [ 336.645438][T17418] Node 0 active_anon:22932kB inactive_anon:0kB active_file:12324kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118032kB dirty:392kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15856kB pagetables:13956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.811078][T17418] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.921017][T17418] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 336.996845][T17418] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 337.009402][T17418] Node 0 DMA32 free:1224084kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22672kB inactive_anon:0kB active_file:12324kB inactive_file:160048kB unevictable:1536kB writepending:396kB zspages:0kB present:3129332kB managed:2552624kB mlocked:0kB bounce:0kB free_pcp:42132kB local_pcp:21340kB free_cma:0kB [ 337.081267][T17418] lowmem_reserve[]: 0 0 0 0 0 [ 337.089208][T17418] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 337.186701][T17418] lowmem_reserve[]: 0 0 0 0 0 [ 337.202154][T17418] Node 1 Normal free:3941440kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2260kB local_pcp:1004kB free_cma:0kB [ 337.251428][T17418] lowmem_reserve[]: 0 0 0 0 0 [ 337.257821][T17418] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 337.314607][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 337.333680][T17418] Node 0 DMA32: 6054*4kB (UME) 3993*8kB (UM) 1908*16kB (UME) 123*32kB (UME) 841*64kB (UM) 1008*128kB (UM) 673*256kB (UME) 340*512kB (UME) 156*1024kB (UME) 48*2048kB (UME) 78*4096kB (UM) = 1197376kB [ 337.408450][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.424403][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.437262][T17418] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 337.452302][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.459971][T17418] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3941440kB [ 337.477859][T17418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.488359][T17418] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.498084][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.509152][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.544383][T17418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.556582][T17418] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.566111][T17418] 44426 total pagecache pages [ 337.571122][T17418] 0 pages in swap cache [ 337.575318][T17418] Free swap = 124996kB [ 337.579486][T17418] Total swap = 124996kB [ 337.585025][T17418] 2097051 pages RAM [ 337.589057][T17418] 0 pages HighMem/MovableOnly [ 337.593969][T17418] 427113 pages reserved [ 337.598344][T17418] 0 pages cma reserved [ 337.754371][T17459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3228'. [ 337.785342][T17464] netlink: 'syz.2.3230': attribute type 1 has an invalid length. [ 337.796618][T17459] openvswitch: netlink: Flow key attr not present in new flow. [ 337.812755][T17464] xt_hashlimit: size too large, truncated to 1048576 [ 337.991480][T17472] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 338.015340][T17474] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3230'. [ 338.048956][T17472] syzkaller0: group set to 10 [ 338.103499][T17474] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.238060][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 338.630460][T17451] C speed is unknown, defaulting to 1000 [ 338.669361][T17451] lo speed is unknown, defaulting to 1000 [ 339.546794][T17520] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3244'. [ 339.581071][ T5628] Bluetooth: hci3: command tx timeout [ 339.589992][T17520] netlink: Conntrack attr has 4 unknown bytes [ 340.020086][T17534] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3246'. [ 340.035215][T17534] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.098824][T17534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.508142][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 340.522239][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3252'. [ 340.565047][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3252'. [ 340.590167][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3252'. [ 340.747078][T17560] netlink: 'syz.1.3253': attribute type 3 has an invalid length. [ 340.910255][T17563] tipc: Started in network mode [ 340.931182][T17563] tipc: Node identity ac14140f, cluster identity 4711 [ 340.951084][T17563] tipc: New replicast peer: 255.255.255.255 [ 340.964188][T17563] tipc: Enabled bearer , priority 10 [ 341.008465][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'. [ 341.150765][T17576] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 341.179770][T17584] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3259'. [ 341.201327][T17584] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3259'. [ 341.258713][T17584] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3259'. [ 341.663971][ T5628] Bluetooth: hci3: command tx timeout [ 341.820671][T17451] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.860164][T17451] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.902904][T17451] bridge_slave_0: entered allmulticast mode [ 341.926377][T17451] bridge_slave_0: entered promiscuous mode [ 341.942996][T17451] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.953826][T17451] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.956181][T17614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.962623][T17451] bridge_slave_1: entered allmulticast mode [ 341.983687][T17451] bridge_slave_1: entered promiscuous mode [ 342.033490][T17618] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 342.190414][ T5816] tipc: Node number set to 2886997007 [ 342.264956][T17451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.277505][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.318465][T17622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.386077][T17623] ip6gretap0: entered promiscuous mode [ 342.430472][T17451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.590243][T17451] team0: Port device team_slave_0 added [ 342.630554][T17451] team0: Port device team_slave_1 added [ 342.853186][T17451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.862663][T17451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.907230][T17451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.930056][T17451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.944410][T17451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.973930][T17451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.279588][T17669] block nbd2: Unsupported socket: should be TCP or UNIX. [ 343.294587][T17451] hsr_slave_0: entered promiscuous mode [ 343.303408][T17451] hsr_slave_1: entered promiscuous mode [ 343.312569][T17451] debugfs: 'hsr0' already exists in 'hsr' [ 343.319288][T17451] Cannot create hsr debugfs directory [ 343.741717][ T5628] Bluetooth: hci3: command tx timeout [ 343.858648][T17688] macvlan2: entered promiscuous mode [ 343.870235][T17688] macvlan2: entered allmulticast mode [ 343.888456][T17697] TCP: TCP_TX_DELAY enabled [ 344.473172][T17451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.486333][T17451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.568477][T17719] netlink: 'syz.1.3294': attribute type 21 has an invalid length. [ 344.746136][T17451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.780174][T17451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.916904][T17719] __nla_validate_parse: 9 callbacks suppressed [ 344.916923][T17719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3294'. [ 345.064408][T17727] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 345.112584][T17730] tunl0: Caught tx_queue_len zero misconfig [ 345.358283][T17451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.371516][T17451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.551916][T17753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.621782][T17757] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 345.641230][T17757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'. [ 345.684062][T17763] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3306'. [ 345.702925][T17764] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3305'. [ 345.821365][ T5631] Bluetooth: hci3: command tx timeout [ 345.831595][T17773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3306'. [ 345.844651][T17451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.890028][T17451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.007723][T17757] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.016305][T17757] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.298936][T17783] veth1_macvtap: entered allmulticast mode [ 346.313728][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 346.476457][T17797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3311'. [ 346.699847][T17783] veth1_macvtap (unregistering): left allmulticast mode [ 346.990289][T17814] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 347.074881][T17818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3318'. [ 347.150621][T17824] netlink: 'syz.1.3319': attribute type 1 has an invalid length. [ 347.159726][T17824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3319'. [ 347.187255][T17451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 347.252849][T17451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.263067][T17451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 347.307902][T17451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.327760][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 347.357182][T17451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 347.408634][T17451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.458959][T17451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.537494][T17451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.626570][T17839] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 347.902557][ T5631] Bluetooth: hci3: command 0x0411 tx timeout [ 347.941304][T17451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.034222][T17451] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.085510][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.092760][T10369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.175662][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.182908][ T7854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.328903][T17873] bond1 (unregistering): Released all slaves [ 349.749993][T17941] block nbd2: not configured, cannot reconfigure [ 349.891015][T17952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.949454][T17952] __nla_validate_parse: 10 callbacks suppressed [ 349.949474][T17952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3352'. [ 349.987756][ T5628] Bluetooth: hci3: command 0x0411 tx timeout [ 350.013313][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 350.113758][T17962] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 350.130383][T17964] syz_tun: entered allmulticast mode [ 350.230470][T17451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.484086][T17977] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3356'. [ 351.095997][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3366'. [ 351.103796][T18009] netlink: 'syz.3.3365': attribute type 21 has an invalid length. [ 351.118528][T17451] veth0_vlan: entered promiscuous mode [ 351.128496][T18009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3365'. [ 351.175683][T18010] veth1_macvtap: left promiscuous mode [ 351.243701][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3368'. [ 351.298437][T17451] veth1_vlan: entered promiscuous mode [ 351.398968][T18021] xt_hashlimit: size too large, truncated to 1048576 [ 351.474256][T17451] veth0_macvtap: entered promiscuous mode [ 351.534349][T17451] veth1_macvtap: entered promiscuous mode [ 351.592579][T18025] netlink: 'syz.1.3370': attribute type 1 has an invalid length. [ 351.611155][T18025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3370'. [ 351.613283][T17451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.663061][T17451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.724415][T10376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.753795][T10376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.780596][T10376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.819531][T10376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.834155][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3372'. [ 351.871762][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3372'. [ 351.916995][T18035] syzkaller1: entered promiscuous mode [ 351.923834][T18035] syzkaller1: entered allmulticast mode [ 351.934494][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 352.016846][T18039] netlink: 'syz.3.3375': attribute type 1 has an invalid length. [ 352.098079][T18039] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 352.103244][T18042] veth1_macvtap: entered allmulticast mode [ 352.284877][T18046] veth1_macvtap (unregistering): left allmulticast mode [ 352.420584][T18042] erspan0: entered allmulticast mode [ 352.527311][T10368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.544512][T10368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.664376][ T7854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.696549][ T7854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.921695][T18071] netlink: 'syz.1.3384': attribute type 4 has an invalid length. [ 353.060298][T18080] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 353.116768][T18081] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 353.194417][T18080] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 353.271806][T18085] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 353.299247][T18086] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 353.525176][T18090] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 353.536303][T18090] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 353.557808][T18090] bond1: (slave vxcan1): making interface the new active one [ 353.570446][T18090] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 353.613158][T18092] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 353.629888][T18092] bond1: (slave vxcan3): Enslaving as a backup interface with an up link [ 353.833229][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.848600][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.859325][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.883682][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.894896][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.003394][T18091] syzkaller0: entered promiscuous mode [ 354.012396][T18091] syzkaller0: entered allmulticast mode [ 355.990957][ T5628] Bluetooth: hci2: command tx timeout [ 356.709974][ T5638] syz_tun (unregistering): left allmulticast mode [ 356.830337][T18129] __nla_validate_parse: 7 callbacks suppressed [ 356.830375][T18129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3398'. [ 356.950358][T18131] syzkaller0: entered promiscuous mode [ 356.967734][T18131] syzkaller0: entered allmulticast mode [ 356.998025][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3399'. [ 357.037617][T18138] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3401'. [ 357.547624][T18163] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3405'. [ 357.613158][T18104] C speed is unknown, defaulting to 1000 [ 357.649986][T18104] lo speed is unknown, defaulting to 1000 [ 357.812599][T18178] netlink: 'syz.4.3408': attribute type 11 has an invalid length. [ 357.851133][T18178] netlink: 'syz.4.3408': attribute type 11 has an invalid length. [ 357.875597][T18178] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3408'. [ 357.921162][T18181] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3409'. [ 357.967781][T18167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.066273][ T5628] Bluetooth: hci2: command tx timeout [ 358.218941][T18186] netlink: 'syz.1.3411': attribute type 4 has an invalid length. [ 358.349227][T18167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.463774][T18197] bridge3: entered promiscuous mode [ 358.469124][T18197] bridge3: entered allmulticast mode [ 358.489431][T18202] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 358.496644][T18197] team0: Port device bridge3 added [ 358.573405][T18204] netlink: 'syz.3.3416': attribute type 21 has an invalid length. [ 358.593840][T18204] netlink: 'syz.3.3416': attribute type 22 has an invalid length. [ 358.602670][T18204] netlink: 'syz.3.3416': attribute type 23 has an invalid length. [ 358.612337][T18204] netlink: 'syz.3.3416': attribute type 25 has an invalid length. [ 358.628691][T18204] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3416'. [ 358.676407][T18167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.894147][T18167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.297870][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3424'. [ 359.418243][T10372] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.498660][T18239] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 359.526798][T10042] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.536758][T10042] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.601439][T10042] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.001029][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.022724][T18104] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.030303][T18104] bridge_slave_0: entered allmulticast mode [ 360.038868][T18104] bridge_slave_0: entered promiscuous mode [ 360.047724][T18104] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.055310][T18104] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.064292][T18104] bridge_slave_1: entered allmulticast mode [ 360.072660][T18104] bridge_slave_1: entered promiscuous mode [ 360.141030][ T5628] Bluetooth: hci2: command tx timeout [ 360.196280][T18104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.227430][T18104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.393223][T18104] team0: Port device team_slave_0 added [ 360.412336][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 360.433434][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 360.449220][T18273] netlink: 'syz.4.3433': attribute type 3 has an invalid length. [ 360.469371][T18104] team0: Port device team_slave_1 added [ 360.483491][T18277] sctp: [Deprecated]: syz.3.3434 (pid 18277) Use of int in maxseg socket option. [ 360.483491][T18277] Use struct sctp_assoc_value instead [ 360.607738][T18104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.642598][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.729153][T18104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.778620][T18104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.804874][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.868921][T18290] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 360.882676][T18104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.914213][T18293] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 360.936107][T18288] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 361.102438][T18104] hsr_slave_0: entered promiscuous mode [ 361.117718][T18104] hsr_slave_1: entered promiscuous mode [ 361.127471][T18104] debugfs: 'hsr0' already exists in 'hsr' [ 361.142375][T18104] Cannot create hsr debugfs directory [ 361.170690][T18298] gretap2: entered promiscuous mode [ 361.178682][T18298] gretap2: entered allmulticast mode [ 361.385747][T18317] netlink: 'syz.2.3448': attribute type 4 has an invalid length. [ 362.221542][ T5628] Bluetooth: hci2: command tx timeout [ 364.346192][T18313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.378800][T18350] __nla_validate_parse: 40 callbacks suppressed [ 364.378820][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 364.427958][T18104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.473497][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.503022][T18104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.549309][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.583298][T18104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.615158][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.646729][T18104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.664840][T18104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.679389][T18359] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3454'. [ 364.975270][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 365.068532][T18104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.175457][T18104] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.209697][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.217453][T10375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.279717][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.286960][T10372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.366557][T18391] syzkaller0: entered allmulticast mode [ 366.163838][T18428] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3465'. [ 366.195139][T18428] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 366.234211][T18428] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3465'. [ 366.772816][T18460] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3472'. [ 366.812660][T18456] vlan2: entered allmulticast mode [ 366.823851][T18456] bond0: entered allmulticast mode [ 366.839723][T18456] bond_slave_0: entered allmulticast mode [ 366.849161][T18456] bond_slave_1: entered allmulticast mode [ 366.914706][T18460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.937144][T18460] bond_slave_0: left allmulticast mode [ 366.959885][T18460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.981843][T18460] bond_slave_1: left allmulticast mode [ 367.002588][T18460] bond0 (unregistering): Released all slaves [ 367.034848][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057405c00: rx timeout, send abort [ 367.076439][T18464] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3476'. [ 367.534965][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057404800: rx timeout, send abort [ 367.545463][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057405c00: abort rx timeout. Force session deactivation [ 367.680077][T18491] syzkaller0: entered promiscuous mode [ 367.704431][T18491] syzkaller0: entered allmulticast mode [ 367.725068][T10370] syzkaller0: tun_net_xmit 70 [ 367.734865][T18491] syzkaller0: tun_net_xmit 14 [ 367.869778][T18104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.958327][T18104] veth0_vlan: entered promiscuous mode [ 367.989905][T18104] veth1_vlan: entered promiscuous mode [ 368.043266][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057404800: abort rx timeout. Force session deactivation [ 368.115505][T18104] veth0_macvtap: entered promiscuous mode [ 368.160055][T18104] veth1_macvtap: entered promiscuous mode [ 368.197176][T18104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.227325][T18104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.268645][T10375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.287585][T10375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.325539][T10370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.339692][T10370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.419567][T18515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.659345][T10371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.694643][T10371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.784223][T10368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.810740][T10368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.016134][T18541] netlink: 'syz.4.3496': attribute type 23 has an invalid length. [ 369.852295][T18583] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3506'. [ 369.993594][T18595] veth0: entered promiscuous mode [ 370.371695][T18595] veth0: left promiscuous mode [ 370.412214][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 370.427692][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 370.639786][T18625] netlink: 'syz.4.3519': attribute type 1 has an invalid length. [ 370.884792][T18632] netlink: 'syz.4.3521': attribute type 39 has an invalid length. [ 371.173195][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 371.296133][T18640] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 371.326549][T18640] bond1 (unregistering): Released all slaves [ 371.785305][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3532'. [ 372.032884][T18673] netlink: 'syz.4.3536': attribute type 58 has an invalid length. [ 372.052834][T18673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3536'. [ 372.068635][T18670] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 372.080903][T18670] syzkaller1: Refused to change device type [ 372.096590][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3536'. [ 372.133234][T18670] syzkaller0: entered promiscuous mode [ 372.138973][T18670] syzkaller0: entered allmulticast mode [ 372.401673][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3540'. [ 372.445378][T18684] netlink: 'syz.3.3540': attribute type 5 has an invalid length. [ 372.468725][T18684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3540'. [ 372.632506][T18683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.717961][T18684] geneve2: entered promiscuous mode [ 372.724058][T18684] geneve2: entered allmulticast mode [ 372.736779][T10375] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 372.757665][T10375] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 372.793614][T10375] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 372.959617][T18683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.971846][T18683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 373.531732][T18711] netlink: 'syz.4.3549': attribute type 9 has an invalid length. [ 373.634324][T18725] xt_hl: Unknown TTL match mode: 255 [ 373.712959][T18718] syzkaller0: entered promiscuous mode [ 373.734176][T18718] syzkaller0: entered allmulticast mode [ 373.810309][T18683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.822424][T18683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 373.855891][T18726] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 373.868462][T18729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.113138][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3556'. [ 374.347467][T18683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.371958][T18683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 374.536460][T18736] syzkaller0: entered promiscuous mode [ 374.549162][T18736] syzkaller0: entered allmulticast mode [ 377.458520][T10368] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 377.467034][T10368] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.530714][T10374] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 377.555427][T10374] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.603836][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3564'. [ 377.630107][T18776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3564'. [ 377.647440][T18782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3565'. [ 377.702678][T18780] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3566'. [ 377.711937][T10374] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 377.732445][T10374] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 377.755898][T18782] batadv0: entered promiscuous mode [ 377.849653][T10374] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 377.889909][T10374] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.239991][T18805] netlink: 'syz.0.3572': attribute type 3 has an invalid length. [ 378.434833][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 378.546547][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.554262][T18823] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3580'. [ 378.620142][T18817] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 378.655953][T18817] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 379.281663][T18864] Cannot find add_set index 0 as target [ 379.344854][T18868] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3589'. [ 379.575880][T18878] netlink: 'syz.2.3593': attribute type 39 has an invalid length. [ 379.949055][T18892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3597'. [ 380.039100][T18892] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3597'. [ 380.078135][T18892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.444253][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 380.747892][T18936] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 380.747892][T18936] Please contact the netfilter-devel mailing list or update your nftables rules. [ 380.798348][T18938] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 380.807019][ T5727] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 383.585874][T18926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.835856][T18948] __nla_validate_parse: 3 callbacks suppressed [ 383.835875][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 383.887033][T18948] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3614'. [ 383.897470][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3614'. [ 383.907481][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'. [ 383.924917][T18955] nft_compat: unsupported protocol 0 [ 383.935926][T18956] tipc: Enabled bearer , priority 4 [ 384.000187][T18956] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.233840][T18968] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3621'. [ 384.245497][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 384.480616][T18977] netlink: 'syz.4.3626': attribute type 1 has an invalid length. [ 384.508177][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3626'. [ 384.535591][T18987] netlink: 'syz.0.3628': attribute type 10 has an invalid length. [ 384.535594][T18977] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3626'. [ 384.535630][T18977] netlink: 'syz.4.3626': attribute type 1 has an invalid length. [ 384.638815][T18987] team0: Port device vlan0 added [ 385.363091][T19018] syzkaller1: entered promiscuous mode [ 385.381076][T19018] syzkaller1: entered allmulticast mode [ 385.533093][T19012] sctp: [Deprecated]: syz.1.3635 (pid 19012) Use of int in max_burst socket option. [ 385.533093][T19012] Use struct sctp_assoc_value instead [ 385.971230][T19040] syzkaller0: entered promiscuous mode [ 385.984826][T19040] syzkaller0: entered allmulticast mode [ 386.087340][T19040] tipc: Started in network mode [ 386.121130][T19040] tipc: Node identity 969a8ce0807, cluster identity 4711 [ 386.161916][T19040] tipc: Enabled bearer , priority 0 [ 386.198817][T19039] tipc: Resetting bearer [ 386.330088][T19039] tipc: Disabling bearer [ 386.354563][T19053] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3647'. [ 386.575575][T19063] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 386.620598][T19067] openvswitch: netlink: Missing key (keys=40, expected=80) [ 386.841291][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'. [ 386.867696][T19075] tc action pedit 'at' offset 3425 out of bounds [ 386.921212][T19075] netlink: 'syz.1.3653': attribute type 39 has an invalid length. [ 387.053902][T19075] syz_tun (unregistering): left allmulticast mode [ 387.091480][T19087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.097115][T19085] netlink: 'syz.3.3658': attribute type 1 has an invalid length. [ 387.215618][T19095] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 387.257878][T19095] bond1: entered promiscuous mode [ 387.263819][T19095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.426358][T19101] xt_HMARK: spi-set and port-set can't be combined [ 387.444634][T19101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.602242][T19108] bond0: option lp_interval: invalid value (0) [ 387.653498][T19108] bond0: option lp_interval: allowed values 1 - 2147483647 [ 387.701804][T19108] bond0 (unregistering): Released all slaves [ 388.202292][T10370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.247171][T10370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.295155][T19144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.383921][T19148] tipc: New replicast peer: 224.0.0.1 [ 388.783680][T19157] netlink: 'syz.2.3677': attribute type 1 has an invalid length. [ 388.843669][T19166] __nla_validate_parse: 7 callbacks suppressed [ 388.843701][T19166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'. [ 388.875553][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 389.248498][T19172] C speed is unknown, defaulting to 1000 [ 389.303443][T19172] lo speed is unknown, defaulting to 1000 [ 389.346571][T19179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3682'. [ 389.373512][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'. [ 389.497279][T19183] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 389.629990][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 389.689167][T19189] netlink: 'syz.0.3685': attribute type 30 has an invalid length. [ 390.266812][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3690'. [ 391.347808][T19204] netlink: 'syz.2.3689': attribute type 2 has an invalid length. [ 391.597703][T19227] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3696'. [ 391.615714][T19234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.688489][T10377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.713813][T10377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.862887][T10370] nci: nci_ntf_packet: unknown ntf opcode 0x39 [ 391.934401][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3700'. [ 392.329464][T19236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.350150][T19261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.428346][T19264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.560055][T19268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.756429][T19274] netlink: 'syz.2.3709': attribute type 83 has an invalid length. [ 392.795841][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 392.955695][T19284] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3712'. [ 393.954440][T19322] __nla_validate_parse: 1 callbacks suppressed [ 393.954460][T19322] netlink: 780 bytes leftover after parsing attributes in process `syz.0.3726'. [ 393.965491][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3724'. [ 393.988481][T19322] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 394.021031][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3724'. [ 394.183173][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3724'. [ 394.199067][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3724'. [ 394.212772][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 394.525555][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3724'. [ 394.564027][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3724'. [ 394.640984][T19352] block nbd2: Unsupported socket: should be TCP or UNIX. [ 394.918884][T19360] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3736'. [ 394.944750][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'. [ 395.356896][T19380] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 396.659831][T19438] syzkaller1: entered promiscuous mode [ 396.685787][T19438] syzkaller1: entered allmulticast mode [ 397.125830][T19456] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.443839][T19467] openvswitch: netlink: IP tunnel dst address not specified [ 397.863386][T19474] syzkaller0: entered promiscuous mode [ 397.870329][T19474] syzkaller0: entered allmulticast mode [ 398.395424][T19497] netlink: 'syz.0.3778': attribute type 24 has an invalid length. [ 401.099297][T19495] __nla_validate_parse: 10 callbacks suppressed [ 401.099318][T19495] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3778'. [ 401.486530][T19522] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3783'. [ 401.767943][T19536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'. [ 404.118704][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 404.177624][T19550] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 404.547626][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3793'. [ 404.575676][T19568] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 404.592876][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 404.636657][T19561] netlink: 'syz.3.3793': attribute type 3 has an invalid length. [ 404.887938][T19582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3798'. [ 404.897835][T19579] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 404.914937][T19581] syzkaller0: entered promiscuous mode [ 404.923697][T19582] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3798'. [ 404.938211][T19581] syzkaller0: entered allmulticast mode [ 404.954950][T19579] hsr0 speed is unknown, defaulting to 1000 [ 404.961135][T19582] netlink: 'syz.1.3798': attribute type 6 has an invalid length. [ 404.977427][T19579] hsr0 speed is unknown, defaulting to 1000 [ 404.986862][T19582] netlink: 'syz.1.3798': attribute type 5 has an invalid length. [ 404.998925][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.024027][T19582] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3798'. [ 405.038625][T19579] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 405.071841][T19579] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 405.091282][T19579] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 405.114182][T19582] IPVS: set_ctl: invalid protocol: 59 172.20.20.22:20002 [ 405.133155][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3801'. [ 405.227931][T19579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 405.392418][T19597] netlink: 'syz.4.3803': attribute type 2 has an invalid length. [ 405.448037][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.470713][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.500499][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.523243][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.552876][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.580653][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.613087][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.784381][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.916510][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.956878][T19579] hsr0 speed is unknown, defaulting to 1000 [ 405.995825][T19579] hsr0 speed is unknown, defaulting to 1000 [ 406.842191][T19659] netlink: 'syz.0.3819': attribute type 3 has an invalid length. [ 407.316537][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3823'. [ 407.368417][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3823'. [ 407.740682][T19690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.777549][T19690] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 408.101596][T19702] netlink: 'syz.4.3832': attribute type 10 has an invalid length. [ 408.135792][T19702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.169722][T19702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.204111][T19702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.229075][T19702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.335596][T19715] netlink: 'syz.2.3836': attribute type 28 has an invalid length. [ 408.345288][T19715] netlink: 'syz.2.3836': attribute type 3 has an invalid length. [ 408.353576][T19715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3836'. [ 408.824794][T19723] Cannot find map_set index 135 as target [ 408.833826][T19729] netlink: 'syz.1.3841': attribute type 1 has an invalid length. [ 408.843852][T19729] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.3841'. [ 409.214372][T19741] team0 (unregistering): Port device team_slave_0 removed [ 409.233861][T19741] team0 (unregistering): Port device team_slave_1 removed [ 409.312362][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 409.362042][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3848'. [ 409.372847][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'. [ 409.408833][T19750] veth0_macvtap: left promiscuous mode [ 409.498731][T19757] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3851'. [ 409.890639][T19768] netlink: 'syz.0.3856': attribute type 3 has an invalid length. [ 409.919692][T19768] netlink: 'syz.0.3856': attribute type 1 has an invalid length. [ 409.937482][T19768] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3856'. [ 410.107229][T19779] netlink: 'syz.3.3859': attribute type 1 has an invalid length. [ 410.209369][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'. [ 410.256980][T19779] bond0: entered promiscuous mode [ 410.262711][T19779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.434112][T19779] bond0: (slave bridge3): making interface the new active one [ 410.451649][T19779] bridge3: entered promiscuous mode [ 410.467391][T19779] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 410.796119][T19811] tc_dump_action: action bad kind [ 410.977455][T19819] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 411.079779][T19823] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 411.494746][T19851] netlink: 'syz.3.3877': attribute type 30 has an invalid length. [ 411.556477][T19838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.999759][T19875] xt_hashlimit: size too large, truncated to 1048576 [ 412.527095][T19896] Bluetooth: MGMT ver 1.23 [ 412.563767][T19896] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 412.669749][T19906] netlink: 'syz.4.3892': attribute type 49 has an invalid length. [ 412.840715][T19906] ip6gretap0: entered promiscuous mode [ 412.851145][T19906] ip6gretap0: entered allmulticast mode [ 413.164490][T19918] __nla_validate_parse: 6 callbacks suppressed [ 413.164509][T19918] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3897'. [ 413.312640][T19913] syzkaller0: entered promiscuous mode [ 413.318892][T19913] syzkaller0: entered allmulticast mode [ 413.335773][T19926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3895'. [ 413.488631][T19918] bond2 (unregistering): Released all slaves [ 416.158845][T19938] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 416.508090][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 416.628272][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 416.722960][T19977] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 417.079708][T19996] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3913'. [ 417.389784][T19994] bond2: entered promiscuous mode [ 417.406430][T19994] bond2: entered allmulticast mode [ 417.424164][T19994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.442873][T20011] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3916'. [ 417.462364][T20013] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3916'. [ 417.537869][T20006] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 417.572820][T20006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 417.614281][T20006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 418.050323][T20033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3922'. [ 418.167663][T20040] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3923'. [ 418.256061][T20043] xt_hashlimit: size too large, truncated to 1048576 [ 418.285165][T20041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3924'. [ 419.064593][T20065] netlink: 'syz.1.3928': attribute type 1 has an invalid length. [ 419.288059][T20065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3928'. [ 419.314444][T20081] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 419.338720][T20074] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 419.352281][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 419.391614][T10368] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 419.413868][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'. [ 419.425452][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3934'. [ 419.432692][T20065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.442797][T20084] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3934'. [ 419.539428][T10368] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 419.809918][T20095] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3936'. [ 419.959005][T20106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3940'. [ 419.998538][T20098] syzkaller1: entered promiscuous mode [ 420.027167][T20098] syzkaller1: entered allmulticast mode [ 420.041376][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3938'. [ 420.236181][T20101] ip6erspan1: entered allmulticast mode [ 420.851795][T20136] bridge_slave_0: left allmulticast mode [ 420.857537][T20136] bridge_slave_0: left promiscuous mode [ 420.864763][T20136] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.883193][T20136] bridge_slave_1: left allmulticast mode [ 420.888911][T20136] bridge_slave_1: left promiscuous mode [ 420.895367][T20136] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.916557][T20136] bond0: (slave bond_slave_0): Releasing backup interface [ 420.932538][T20136] bond0: (slave bond_slave_1): Releasing backup interface [ 420.948551][T20136] team0: Port device team_slave_0 removed [ 420.962878][T20136] team0: Port device team_slave_1 removed [ 420.972780][T20136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.984088][T20136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.004375][T20136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.030015][T20148] syzkaller0: entered promiscuous mode [ 421.038117][T20148] syzkaller0: entered allmulticast mode [ 421.679183][T20168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.708216][T20168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.757718][T20168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.800838][T20168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.399450][ T809] hsr0 speed is unknown, defaulting to 1000 [ 422.419722][ T809] syz1: Port: 1 Link DOWN [ 422.552042][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'. [ 422.874462][T20222] bond0: entered promiscuous mode [ 422.903094][T20222] bond_slave_0: entered promiscuous mode [ 422.911138][T20222] bond_slave_1: entered promiscuous mode [ 422.947529][T20222] gretap0: entered promiscuous mode [ 422.980878][T20222] hsr1: entered promiscuous mode [ 423.120528][T20233] syzkaller0: entered promiscuous mode [ 423.148269][T20233] syzkaller0: entered allmulticast mode [ 423.598951][T20261] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 423.821233][T20270] __nla_validate_parse: 3 callbacks suppressed [ 423.821278][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 423.861290][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 424.146739][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4000'. [ 424.194264][T20295] nbd: must specify at least one socket [ 424.205344][T20289] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4000'. [ 424.212253][T20295] syzkaller0: entered promiscuous mode [ 424.217469][ T6628] IPVS: starting estimator thread 0... [ 424.246019][T20295] syzkaller0: entered allmulticast mode [ 424.273846][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4001'. [ 424.295060][T20289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 424.322750][T20289] nbd: must specify a size in bytes for the device [ 424.335889][T20299] IPVS: using max 30 ests per chain, 72000 per kthread [ 424.338893][T20305] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4003'. [ 424.489036][T20308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'. [ 424.923749][T20324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.091327][T20327] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 425.107927][T20327] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.179271][T20333] syzkaller1: entered allmulticast mode [ 425.275152][T20327] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 425.310932][T20327] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.448888][T20327] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 425.481623][T20327] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.646903][T20327] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 425.671492][T20327] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 425.875827][T20360] netlink: 'syz.4.4020': attribute type 21 has an invalid length. [ 425.899979][T20360] netlink: 'syz.4.4020': attribute type 6 has an invalid length. [ 425.913186][T20360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4020'. [ 425.990955][T10377] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 426.025226][T10377] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 426.085322][T10043] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 426.131242][T10043] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 426.152745][T20366] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4026'. [ 426.247371][T10377] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 426.260015][T10377] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 426.286904][T20366] syzkaller0: entered promiscuous mode [ 426.302942][T20366] syzkaller0: entered allmulticast mode [ 426.390161][T10377] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 426.405046][T10377] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 426.700961][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 427.057422][T20417] netlink: 'syz.3.4036': attribute type 1 has an invalid length. [ 427.095664][T20418] netlink: 'syz.4.4035': attribute type 1 has an invalid length. [ 427.184827][T20425] netlink: 'syz.2.4037': attribute type 39 has an invalid length. [ 427.452918][T20422] bond3: (slave gretap3): making interface the new active one [ 427.527120][T20422] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 427.653776][T20427] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 427.685701][T20417] macvlan2: entered promiscuous mode [ 427.711027][T20417] macvlan2: entered allmulticast mode [ 427.726007][T20417] bond3: entered promiscuous mode [ 427.738954][T20417] gretap3: entered promiscuous mode [ 427.750383][T20448] x_tables: unsorted entry at hook 1 [ 427.772109][T20417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.783865][T20417] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 427.802684][T20417] bond3: left promiscuous mode [ 427.807681][T20417] gretap3: left promiscuous mode [ 428.333445][T20471] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 428.836574][T20488] netem: change failed [ 429.103029][T20492] __nla_validate_parse: 9 callbacks suppressed [ 429.103048][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4053'. [ 429.288957][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4055'. [ 430.098122][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4061'. [ 430.128250][T20542] netlink: 'syz.1.4061': attribute type 5 has an invalid length. [ 430.139939][T20542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4061'. [ 430.197128][T20559] xt_hashlimit: max too large, truncated to 1048576 [ 430.232943][T20542] geneve2: entered promiscuous mode [ 430.256013][T20542] geneve2: entered allmulticast mode [ 430.294639][T10368] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 430.343212][T20564] netlink: 'syz.2.4066': attribute type 8 has an invalid length. [ 430.385023][T10368] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 430.576197][T10368] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 430.619659][T10368] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 430.656299][T20574] syzkaller0: entered promiscuous mode [ 430.673376][T20574] syzkaller0: entered allmulticast mode [ 430.709448][T20575] x_tables: duplicate underflow at hook 1 [ 430.799328][T20586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.056582][T20595] ipt_rpfilter: unknown options [ 431.500014][T20611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.587592][T20611] ip6gre1: entered allmulticast mode [ 431.622393][T20611] team0: Device ip6gre1 is of different type [ 431.842438][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 431.860232][T20630] netlink: 'syz.2.4083': attribute type 1 has an invalid length. [ 432.008296][T20634] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 432.043582][T20636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4083'. [ 432.085593][T20631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.110200][T20631] bond1: (slave bond2): making interface the new active one [ 432.120480][T20631] bond1: (slave bond2): Enslaving as an active interface with an up link [ 432.169852][T20630] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 432.208399][T20636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.689523][T20681] netlink: 'syz.2.4094': attribute type 1 has an invalid length. [ 432.769660][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4094'. [ 432.800540][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4094'. [ 432.832946][T20681] bond3: entered promiscuous mode [ 432.839511][T20681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.866633][T20676] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.887159][T20688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4095'. [ 432.936305][T20689] bond3: (slave bridge3): making interface the new active one [ 432.945673][T20689] bridge3: entered promiscuous mode [ 432.964740][T20689] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 433.037676][T20694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.427313][T20714] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 433.453741][T20714] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4101'. [ 433.473796][T20717] netlink: 'syz.2.4104': attribute type 21 has an invalid length. [ 433.481945][T20714] tipc: Started in network mode [ 433.487221][T20714] tipc: Node identity e0000001, cluster identity 4711 [ 433.498051][T20714] tipc: Enabling of bearer rejected, failed to enable media [ 433.805009][T20733] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 433.959653][T20747] netlink: 'syz.0.4111': attribute type 1 has an invalid length. [ 433.982894][T20733] bond3: entered promiscuous mode [ 433.988869][T20733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.999976][T20737] tipc: Resetting bearer [ 434.009149][T20737] tipc: Resetting bearer [ 434.083546][T20749] bond3: (slave bridge2): making interface the new active one [ 434.108124][T20749] bridge2: entered promiscuous mode [ 434.124361][T20749] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 434.133946][T20746] veth0_to_bridge: entered promiscuous mode [ 434.194215][T20754] __nla_validate_parse: 8 callbacks suppressed [ 434.194234][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 434.240083][T20754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.280560][T20745] veth0_to_bridge: left promiscuous mode [ 434.303590][T20761] netlink: 'syz.4.4114': attribute type 3 has an invalid length. [ 434.312971][T20761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4114'. [ 434.469692][T20764] x_tables: duplicate underflow at hook 2 [ 434.741943][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 434.777494][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4122'. [ 434.822855][T20774] bond5: Invalid ad_actor_system MAC address. [ 434.831475][T20774] bond5: option ad_actor_system: invalid value (1) [ 434.840416][T20774] bond5 (unregistering): Released all slaves [ 434.947729][T20779] hsr_slave_1 (unregistering): left promiscuous mode [ 435.179689][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4125'. [ 435.406730][T20809] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 435.523531][T20817] openvswitch: netlink: Missing valid actions attribute. [ 435.523680][T20816] openvswitch: netlink: Missing valid actions attribute. [ 435.556828][T20817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.587086][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.592172][T20823] sctp: [Deprecated]: syz.1.4131 (pid 20823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.592172][T20823] Use struct sctp_sack_info instead [ 435.616518][T20822] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 435.786144][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4134'. [ 435.909853][T20830] bond2: entered promiscuous mode [ 435.918604][T20830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.979043][T20831] bridge2: entered promiscuous mode [ 435.989588][T20831] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 436.029952][T20835] bridge3: entered promiscuous mode [ 436.036579][T20835] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 436.273679][T20851] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 436.285373][T20851] netlink: 476 bytes leftover after parsing attributes in process `syz.2.4142'. [ 436.306002][T20851] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4142'. [ 436.334147][T20853] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4141'. [ 436.377379][T20858] siw: device registration error -23 [ 436.765575][T20883] bond0: Device is already in use. [ 437.046842][T20873] bridge3: entered promiscuous mode [ 437.075994][T20887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.081475][T20898] netlink: 'syz.2.4151': attribute type 10 has an invalid length. [ 437.108588][T20873] bridge3: entered allmulticast mode [ 437.178635][T20873] team0: Port device bridge3 added [ 437.208236][T20898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.229127][T20904] netlink: 'syz.0.4153': attribute type 1 has an invalid length. [ 437.245003][T20898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.282991][T20898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.300500][T20898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.811828][T20923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.158755][T20941] netlink: 'syz.0.4166': attribute type 1 has an invalid length. [ 438.180858][T20941] netlink: 'syz.0.4166': attribute type 3 has an invalid length. [ 438.206811][T20941] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4166'. [ 438.577549][T20963] xfrm1: entered promiscuous mode [ 438.586810][T20963] xfrm1: entered allmulticast mode [ 439.333217][T20982] netlink: 'syz.3.4179': attribute type 12 has an invalid length. [ 439.345598][T20982] netlink: 'syz.3.4179': attribute type 29 has an invalid length. [ 439.354025][T20982] __nla_validate_parse: 4 callbacks suppressed [ 439.354040][T20982] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4179'. [ 439.369979][T20982] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4179'. [ 439.983027][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 441.005347][T20932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.145221][T21012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4188'. [ 441.156285][T21012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4188'. [ 441.169265][T21012] netlink: 'syz.2.4188': attribute type 13 has an invalid length. [ 441.179396][T21012] netlink: 'syz.2.4188': attribute type 58 has an invalid length. [ 441.196892][T21012] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4188'. [ 441.206630][T21014] xt_cgroup: path and classid specified [ 441.378162][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4194'. [ 441.542137][T21041] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4195'. [ 441.805486][T21053] netlink: 'syz.1.4202': attribute type 5 has an invalid length. [ 441.828151][T21053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4202'. [ 442.003789][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4204'. [ 442.335190][T21085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.614358][T21101] xt_hashlimit: size too large, truncated to 1048576 [ 442.893039][T21106] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4218'. [ 443.177707][T21126] C speed is unknown, defaulting to 1000 [ 443.227175][T21126] lo speed is unknown, defaulting to 1000 [ 443.445983][T21152] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 443.484958][T21152] NCSI netlink: No device for ifindex 0 [ 443.759481][T21126] hsr0 speed is unknown, defaulting to 1000 [ 444.333239][T21194] macvtap1: entered allmulticast mode [ 444.347608][ T6628] IPVS: starting estimator thread 0... [ 444.352070][T21194] veth0_macvtap: entered allmulticast mode [ 444.371615][T21198] netlink: 'syz.0.4243': attribute type 21 has an invalid length. [ 444.392823][T21198] netlink: 'syz.0.4243': attribute type 21 has an invalid length. [ 444.474664][T21200] IPVS: using max 32 ests per chain, 76800 per kthread [ 444.735190][T21213] __nla_validate_parse: 70 callbacks suppressed [ 444.735210][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4247'. [ 444.875739][T21217] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4249'. [ 444.909583][T21217] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 445.071873][T21226] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4252'. [ 445.307372][T21238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4255'. [ 445.372274][T21241] sctp: [Deprecated]: syz.4.4256 (pid 21241) Use of int in max_burst socket option. [ 445.372274][T21241] Use struct sctp_assoc_value instead [ 445.527272][T21253] openvswitch: netlink: Missing key (keys=40, expected=100) [ 445.538235][T21253] netlink: 'syz.2.4258': attribute type 1 has an invalid length. [ 445.546675][T21253] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4258'. [ 445.567966][T21253] vxcan0: tx address claim with dlc 0 [ 445.599422][T21253] netlink: 'syz.2.4258': attribute type 83 has an invalid length. [ 445.898900][T21273] netlink: 'syz.4.4264': attribute type 1 has an invalid length. [ 446.069397][T21286] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4264'. [ 446.072187][T21273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.089862][T21276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4266'. [ 446.113374][T21276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4266'. [ 446.142982][T21283] bond4: (slave geneve2): making interface the new active one [ 446.163459][T21283] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 446.187161][T10371] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.233048][T10371] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.270313][T10371] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.312767][T10371] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 446.358501][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'. [ 446.378008][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'. [ 446.464761][T21303] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.472081][T21303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.479734][T21303] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.486959][T21303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.670703][T21303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.682169][T21303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.696618][T21303] gretap0: entered promiscuous mode [ 446.725574][T21336] netlink: 'syz.2.4278': attribute type 11 has an invalid length. [ 446.730038][T21303] 8021q: adding VLAN 0 to HW filter on device eth0 [ 446.755411][T21303] 8021q: adding VLAN 0 to HW filter on device eth1 [ 446.783014][T21303] 8021q: adding VLAN 0 to HW filter on device eth2 [ 446.805429][T21303] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.832531][T21303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.859588][ T809] hsr0 speed is unknown, defaulting to 1000 [ 446.873800][ T809] syz1: Port: 1 Link ACTIVE [ 447.074788][T21355] x_tables: duplicate underflow at hook 1 [ 447.306573][T21368] netlink: 'syz.1.4288': attribute type 2 has an invalid length. [ 447.330255][T21367] netlink: 'syz.0.4287': attribute type 1 has an invalid length. [ 447.333006][T21366] syzkaller1: entered promiscuous mode [ 447.371247][T21366] syzkaller1: entered allmulticast mode [ 447.475153][T21367] bond3: entered promiscuous mode [ 447.493110][T21367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.586853][T21382] bond3: (slave bridge4): making interface the new active one [ 447.605257][T21382] bridge4: entered promiscuous mode [ 447.628641][T21382] bridge4: left promiscuous mode [ 447.829799][T21389] ip6t_rpfilter: unknown options [ 448.522457][T21427] erspan0: entered promiscuous mode [ 448.802279][T21445] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 448.976960][T21455] smc: net device team0 applied user defined pnetid SYZ2 [ 449.031680][T21458] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 449.072635][T21458] syzkaller0: entered promiscuous mode [ 449.089426][T21458] syzkaller0: entered allmulticast mode [ 449.416986][T21477] openvswitch: netlink: IP tunnel dst address not specified [ 449.673084][T21486] netlink: 'syz.1.4319': attribute type 4 has an invalid length. [ 449.702882][T21486] netlink: 'syz.1.4319': attribute type 1 has an invalid length. [ 449.749156][T21486] __nla_validate_parse: 17 callbacks suppressed [ 449.749174][T21486] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4319'. [ 449.797141][T21486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4319'. [ 449.929471][T21498] Cannot find add_set index 0 as target [ 449.962628][T21498] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 450.034414][T21498] bond4: entered promiscuous mode [ 450.040056][T21498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.281896][T21516] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4328'. [ 450.350025][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4328'. [ 450.442954][T21525] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4331'. [ 450.488540][T21517] C speed is unknown, defaulting to 1000 [ 450.549163][T21517] lo speed is unknown, defaulting to 1000 [ 450.660005][T21533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4333'. [ 450.823134][T21542] Cannot find add_set index 4 as target [ 451.033990][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4336'. [ 451.113517][T21556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.160883][T10367] unregister_netdevice: waiting for bond8 to become free. Usage count = 2 [ 451.302087][T21517] hsr0 speed is unknown, defaulting to 1000 [ 451.309414][T21561] openvswitch: netlink: IP tunnel attribute has 40 unknown bytes. [ 451.320468][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4340'. [ 451.375963][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4340'. [ 453.127354][T21507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.431578][ T5631] Bluetooth: hci1: command 0x0406 tx timeout