last executing test programs: 2.197979505s ago: executing program 0 (id=10852): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000040)="ad0b9acb7c4f8e74626c4cdb4d2023dedb79f301873106a5b9c4baa4dbc0c6ab733aef780465152bfb451b23fa432d45828a7fe867cbacdd249300b3a9e556bb5225a606df339c5e1064326a3d52d3e1a96b6b6bd1cd599633688fb03877d5a1a8dda5f1cd3689adea09188b956b00b4d63aba33b3b886578f8f0782623af5953d6b2477c92ef9b7ac9cfdb133d206b5261a4efdd1379a61f975355b2ff08645fb07830ef3c177aae77c5bdf7203714f0de5cd6e6a3a6371c2b64aa2c68881f7e147791d3c240b2c87bcecfeeac9c14af9c6d314f1cae8b7affcc0e9352054ca4169942d20c4246e0cc70a", 0xeb) getsockopt$inet_udp_int(r0, 0x11, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000200)=0x8, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x145500, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000300)=0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x3f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe4}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x4c) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x22, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9cf}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000005c0)={0xfffffffffffffc01, 0x38, '\x00', 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bond_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'ip6tnl0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x50b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xaa1}, @broadcast, @broadcast, @initial, {0xd, 0x2}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x2, @void}}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x4810) r7 = socket$vsock_stream(0x28, 0x1, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'syz_tun\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0xdc237000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f0000000940)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000980)={r8, 0x0, 0x9}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000a00)={r9, 0x2}, 0x8) sendmsg$NFT_MSG_GETOBJ_RESET(r3, 0xfffffffffffffffc, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000a80), 0x10) 1.954178936s ago: executing program 3 (id=10858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) 1.899275304s ago: executing program 0 (id=10859): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xbe, 0x6, 0x95, 0x0, @private2, @private2, 0x10, 0x8, 0x1, 0x1000}}) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x28, 0x4, 0x37) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x64ceef03d81ddb0f, 0xc0, 0x0, 0x738484a1}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e00)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x4a, 0x0, "e54abd3d3aa6a2af75a9001e8abcb31c13063a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea318800"}, 0xd8) listen(r1, 0x7c2) (async) listen(r1, 0x7c2) r2 = socket(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x4008005}, 0x8081) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000003f00)=""/4100, 0x1004}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000180)=""/112, 0x70}], 0x4}, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) listen(r6, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000000206010200000000000000000a0000030900020073797a3100000000050004000300005bdedf823eb79ce3683a6970000c000300686173683a697000050004000300000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040003000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000000206010200000000000000000a0000030900020073797a3100000000050004000300005bdedf823eb79ce3683a6970000c000300686173683a697000050004000300000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040003000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.876675413s ago: executing program 2 (id=10860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.68261656s ago: executing program 3 (id=10861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000680)=@qipcrtr={0x2a, 0x2, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf2f61952a03060000d4c6e9c07f0f7b68d90540739b", 0x3b}, {&(0x7f0000000400)="2b98", 0x2}, {&(0x7f0000000040)="1c46ca65", 0x4}], 0x3}, 0x48081) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000008181ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200), 0x10) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fe1d8300"/28], 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r7}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f00000000c0)={0x1, 'nicvf0\x00', {}, 0x1000}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffffb8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000300000000000000040000000000000600024000000000f2bbac7a3b7d34ae2feb180f33aa64f6fdddef1c1b7fd405443b3119ac0b3ada0a4c645cab758a9a918344a966467e073a1b806559879a74829d148e1f19beab8daf7d5df31c0175b8fc01ec2d1a18e915116f02000000c0e03ae24a7e677980ae96b7e7d9027eaef046426eba50ef2305a5d0f6aad26d4274460900"/165], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005"], 0x24}}, 0x0) 1.616112042s ago: executing program 2 (id=10863): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.092694484s ago: executing program 1 (id=10869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x4041) write$cgroup_int(r1, &(0x7f0000000040)=0x5, 0x12) 1.077588034s ago: executing program 4 (id=10870): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000100)='.^:!)\xbc\x00', 0x28c800, &(0x7f0000000140)={@_ha_fsid={[0x8, 0xb1]}, {0xe, 0x81, 0x7, 0x7fffffff}}, 0x6, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x9511}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 926.7347ms ago: executing program 1 (id=10871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a2dbf643599a7a0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 925.963358ms ago: executing program 4 (id=10872): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4600010002", @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x8) 924.28537ms ago: executing program 0 (id=10873): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40000000}) close(r3) r7 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20040000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'vlan1\x00', {0x2, 0x4e23, @private=0xa010102}}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20001000120001002768d8bd7000fbe9df2507000000", @ANYRES64=r4, @ANYBLOB="00c0000001880000071a0349ef943e7b29b6d55d0725b060523357e095bd1d393be107e7c2b1b8391758a7d35cd7c4ab938d2ff836e4b42e39aff82157d0f23b159cc04f18"], 0x20}, 0x1, 0x0, 0x0, 0x40811}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x9) ioctl$FICLONE(r7, 0x40049409, r0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xa8, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0xffe0, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0x1, 0x7}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xf, 0x2, 0x5, 0x1, 0x95, 0xa, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0xa, 0x3, 0x2, 0x9, 0x7, 0x8}}, {0x14, 0x2, [0xd, 0x4, 0x8bdf, 0x7, 0xc0, 0x293, 0x2, 0xfffa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xa8}}, 0x841) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0xfffffffe, 0x25dfdbfc, {0x60, 0x0, 0x0, r11, {0xfff2}, {0x1, 0x10}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 892.496627ms ago: executing program 4 (id=10874): r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'batadv0\x00', {0x2, 0x0, @multicast1}}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) 790.932265ms ago: executing program 1 (id=10875): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000400)="170000000200020000ffbe8c", 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES8=r0], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 707.102244ms ago: executing program 0 (id=10876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8e31}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x99}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x15}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008840}, 0x48000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={0x0, 0xe5, 0x10, 0x496b, 0x8}, &(0x7f0000000280)=0x18) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0xcf, "2a7899f6e73b5ccadec708ce3b1983c974434aadfd290912a9b9f25fbf1d86f92290a0366b94220789c9db5b03b0654f0bc10bfa1624614e74897701bb4453db48d9f1397b528161f4a8c5e130074969b34915c78971ae2eefe62133c747915f235ad846537bc00a7fef645b5857c3982a19d208d63eeebf2d4274c8813dc06dbedf6c6c646f15362b84c3bcd1f290f39f72a6289debfbe80986657eb553dad022340ecf28d2cd3c493d4e625e30a4bc626145e822b827fdad3280dde6ccb0299b08e2103962bcf319515465ab037a"}, &(0x7f00000003c0)=0xd7) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000400)={r5, 0xffff, 0x1, [0x3]}, 0xa) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000440)={r5, 0x8}, 0x8) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x74}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r7 = accept4$bt_l2cap(r6, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x180000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000640)={r3, 0x7ff, 0x6, 0xf, 0x8, 0x8}, 0x14) accept4$inet(r4, &(0x7f0000000680)={0x2, 0x0, @broadcast}, &(0x7f00000006c0)=0x10, 0x80400) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000700)) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000740)=0x5e3, &(0x7f0000000780)=0x2) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r6) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x6}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44804}, 0x48050) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000940)={r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7ff, 0x0, 0x1, 0x9, 0x40, 0x56378ea8, 0xff}, &(0x7f0000000a00)=0x9c) bind$bt_hci(r6, &(0x7f0000000a40)={0x1f, 0x4, 0x2}, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r7) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0xeb5be6b7ee8f4fc9, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4044844) ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000cc0)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000d40)={r3, 0x9, 0x8}, 0x8) 676.773039ms ago: executing program 0 (id=10877): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x1, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmmsg$unix(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000001f0100000001000000", @ANYRESHEX=r0, @ANYBLOB="08000200", @ANYRES8=r0, @ANYRESOCT=r0], 0x18, 0x10}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001e000000000000000c0000000c"], 0x0, 0x2a}, 0x20) r5 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x18, 0x140b, 0x301, 0x70bd2a, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'team0\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0xa, [0x2, 0x7, 0x40000, 0xc, 0x2f, 0x86, 0x2, 0xc, 0xa, 0x7]}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'dvmrp0\x00', &(0x7f0000000180)=@ethtool_ts_info}) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffefa, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES64=r7, @ANYRES32=0x0], 0x138}}, 0x0) 676.294494ms ago: executing program 3 (id=10878): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x101, 0x5}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x90000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000001240)={0x10ac, 0x13, 0x20, 0x5, 0x25dfdbfc, {0x22, 0x8, 0xd6, 0x4, {0x4e24, 0x4e22, [0xdf, 0x2, 0x2, 0xce3], [0x9, 0x8, 0x3ff, 0xfffffff7], r2, [0x6, 0x7]}, 0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x59, 0x1, "ade1ce5214155d800145811dbbfda66359103aff0cb4680e4de27be1ffdd2e42b773dffaf06ffd6d1f7b4137a1a8d7590a24ec431c3809a124bc628f3c3c81f8004cdfcbbe62de38c8a91e5e73a5de8157d4ec783d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x8090}, 0x800) 593.088729ms ago: executing program 0 (id=10879): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)=""/199, &(0x7f0000000100)=0xc7) 515.138693ms ago: executing program 4 (id=10880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 470.340048ms ago: executing program 2 (id=10881): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='+\x00', 0x35400, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x5]}, {0xfffa, 0x17, 0x80000000, 0x3f8000}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x80000001}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000fedbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0400cc000a001803003c9ec9000000000000000a101800030303030303004e7dd80300000000000a0018000303030303030000c60665fd1aaa6e05ed18fa5768dfab948f0823e3798937178987098f7b736595f812936c69201186b7e0d5415030cee906c4161745be4b670fc9"], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) (async) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x201, 0x0, 0x0, 0x0, 0xf9, @link_local}, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2a, &(0x7f0000000440)=0x76, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x80}]}, 0x10) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="33c6469b", @ANYRES16=r10, @ANYBLOB="59e3000000000000000008000000100004800900050073797a3000000000"], 0x24}}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 464.588376ms ago: executing program 3 (id=10882): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x10, 0x0, 0x6f8b719a, {{0x2b, 0x4, 0x1, 0x7, 0xac, 0x68, 0x0, 0x2, 0x29, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x27, 0x4f, [@loopback, @multicast2, @broadcast, @remote, @local, @remote, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x44, 0x6e, 0x3, 0xc, [{@local, 0x4}, {@broadcast}, {@private=0xa010100, 0x4}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x1}, {@multicast2, 0xd7}, {@remote, 0x4}, {@broadcast, 0x10001}]}, @timestamp={0x44, 0x10, 0xaf, 0x0, 0x9, [0xe, 0x76492e6d, 0x6]}, @lsrr={0x83, 0x7, 0x2c, [@private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x10, "3b557b98e536c4544a71e6fdc9b1"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x3, 0x5, 0x10, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x707, 0x700, 0x59d, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@private, @dev, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x9, 0x7, 0x54, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x8, 0x10, 0xaea}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x23c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_WOL_MODES={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x40, 0x3, "d9747988167ec8ee501eafcb3b8e66e5d50ddc9f0afac681a4e7ff324c56655ad05f3ac2942ac0b4786915d1515d2bf234de25a64dc501b45913a7ec"}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_WOL_MODES={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0xc804}, 0x41840) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/70, 0x46, 0x0, &(0x7f0000000900)=""/122, 0x7a}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r8, 0x4) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, &(0x7f0000000a40)) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) r11 = accept$unix(r10, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e) connect$unix(r10, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r12, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r10, 0x0, 0xd6, 0x52, &(0x7f0000000d40)="d3282a04b845776849c4adf412726928b3354d85e9b1a783523311f87420336b25f3fd14c0456aa335ee91705e7071e47581b224a1ef61722d72f07bf0ec744d721612f30a8d3a9e1eaa316e59141dd59407a1f9b30fe7a0e136b77c45199884a1ba86564696a02ca2539eb41ee2466cc66fa95b7465e7255b3a2e89e13699e106f5ddffafc89d839bddc4029c02340c68b2fb1f0ebf82683ab5ba5c3f7a6b9e5c42e96e0203ff6b9fb67f18ef7d4a7136019cf4082b16027262f20d139dff888683c534db979578d735dc1c240acaf928d9f8493e0f", &(0x7f0000000e40)=""/82, 0x4, 0x0, 0x60, 0xbd, &(0x7f0000000ec0)="934ba7d8bb06c6374802770edb3140d7a75890df5baa70419dd802c987ff5a6bc84ccd38f2e36fa02bcac6d8d34c8478194563e45dcb1d94949139b962bd953d90c76af2377c5dec5e180a27c367da8d1fb5c8f5e8981f5fe3d7ba4ff0f58bb4", &(0x7f0000000f40)="44b0c453248664dc15b0341b6ecd6496f7334d46bc8019a07513795b84bafcec4f14893c49fc044866588b95b1ca5c1b3aa512f68853ed5e8313325806244424f94e1ecdd6ee6b97b36ad154039cfee1f52361bd56e9a9f55bd0387ad953392ccad7ad6837878166b978d3817d50cebafd9b04554421337b706f0b2f121f4ee9c0f885f89aaec8997b1502d7ef6ef02df985e9eba21c1ce6323c848ab50a1d501858b09c0058429798c66c2919a4c52418113a6ee998e653f1c0329ee0", 0x2, 0x0, 0xfff}, 0x50) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='GPL\x00', 0x0, 0xd2, &(0x7f00000011c0)=""/210, 0x41000, 0x22, '\x00', r7, 0x1b, r11, 0x8, &(0x7f00000012c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x0, 0xd, 0x883, 0x8}, 0x10, r8}, 0x94) ioctl$sock_inet6_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000001400)) ioctl$sock_inet6_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000001440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000001480)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000014c0)=0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001680)={r10, &(0x7f0000001500)="139fd613310a865c8d34261c11a50ea017fe426f0aa3d5e1643fa697b287bfac44ad31a5f4e78c52fbb82c5fdd1af38e38550eff79d6025002f24c12159d90f626c9aa2ed4a966198a23f4d0505537314e957f1533be1495655e1aee77e2e70b283a5fd240c804adbb35d45815d41ac34be3a5cf29402434fadbc61a5a3f4921bae76f717dba33d624fab9515ea86ba68735c124621a16706dbd5974a070990331354fb27f390698451b198a3dd4175f24f497bcbb4e", &(0x7f00000015c0)=""/177, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r10, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x9, 0x1f, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}}, @ldst={0x0, 0x3, 0x6, 0x8, 0x3, 0xfffffffffffffff8, 0x8}]}, &(0x7f00000018c0)='GPL\x00', 0x6, 0x16, &(0x7f0000001900)=""/22, 0x40f00, 0x4, '\x00', r3, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001980)={0x5, 0x7, 0x5, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000019c0)=[{0x3, 0x3, 0xd, 0x3}, {0x1, 0x1, 0xe, 0xa}, {0x1, 0x4, 0xe, 0x5}, {0x2, 0x3, 0xf}, {0x0, 0x3, 0x2, 0x1}, {0x3, 0x3, 0xb, 0x9}], 0x10, 0x2}, 0x94) 367.186369ms ago: executing program 4 (id=10883): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/28, 0x1c, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x8c, 0x4, 0x0, 0x0, 0x4, 0x2}, ["", "", "", "", ""]}, 0x1c}}, 0x40814) 353.978564ms ago: executing program 1 (id=10884): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r1, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) socket(0x23, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES16=0x0], 0x50}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x30}}, 0x20000006) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r1, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) (async) socket(0x23, 0x0, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES16=0x0], 0x50}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x30}}, 0x20000006) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) 318.258628ms ago: executing program 2 (id=10885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfce) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x8880) 317.775666ms ago: executing program 3 (id=10886): r0 = socket$kcm(0x10, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'netdevsim0\x00', @ifru_hwaddr=@multicast}) ioctl$FIONCLEX(r0, 0x5450) socket$kcm(0x10, 0x6, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) (async) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'netdevsim0\x00', @ifru_hwaddr=@multicast}) (async) ioctl$FIONCLEX(r0, 0x5450) (async) 231.070369ms ago: executing program 4 (id=10887): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 184.719458ms ago: executing program 1 (id=10888): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="56076efd8e0448c73908b290c97732db08", @ANYRES16=r4, @ANYRESOCT=r4], 0x14}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)={0x24, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@mcast1}]}, 0x24}], 0x1, 0x0, 0x0, 0x22004084}, 0x0) 172.853683ms ago: executing program 3 (id=10889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@gettfilter={0x54, 0x2e, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x10}, {0x0, 0xd}, {0xd}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x575}, {0x8, 0xb, 0xfb12}]}, 0x54}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000000)) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0xfffffffffffffe04) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={r4, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r4, 0x10001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000140)={r4, @in6={{0xa, 0x0, 0x8, @local}}, 0x7}, &(0x7f0000000200)=0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002e00090004004a00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000000c0)="510003000000", 0x6) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000001000)={r3, &(0x7f0000000f00)='\x00', 0x0, &(0x7f0000000f40)={@_ha_fsid={[0x7fff, 0xa3]}, {0x56c7, 0x2, 0x4, 0x6}}, 0xfffffffe, &(0x7f0000000f80)={@_ha_fsid}, &(0x7f0000000fc0)=0x8000}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8], 0x34}}, 0x4008000) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f00000004c0)={0x3, 0x8, @start={0x0, 0x0, "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", "c16dc93f6651ec3451015c45491a7defd987c091c117b977c113ffbbef24588b651ce8017fb9e9440b9957cb53917018ebf7ad9012e5569add18241e415f74216ad51d7db82ad409a84fa90b94558002de819954ddc8b3b0e2f97d1225abb525dbf0885b5ed8439307c2060f16eb02c2708b6076e345e8962e4824738fa815b616c87340faa13af972fb06489bdf5f00bffcdd081ee8eb992bbcbf677719d07596226db5c1abded001bf6db75d4961aa8e4a91a6bd4844c7ef78dd41d37ae953ee626151c89a896fad1b43befbdff4b1a42ce036c9ded9ac53cb204ac61a81ee9ce84480052f3ebd1b7944eff75ccf20d2704d80f9381ff22f1e53f781699ec88bffec77d927c825155c0288c5e928d5a2e10d2df0fd0efd5378370261248916cf664ced3c8cee5ab3b684c03b81b0335d6ecc34b2e040d9998634d19c6df7cd8ecf49f3f9289a5825581093d82552e2217447584fb032b5cf85e08c87e90a5661c01f9a390d8c0ac9c629447803785659e6774e55d9d741d34328adfeec3a4220c5660e776b9db9a6c6eb7cd5e0b2388975e45d027e9186fab75c491572da70dca26c670aa535e726d4453585dd8014d7b7b5e0f2d5b35188124abd3a3804d05ba2ec11401533a18f2c5615ae81ae31d3e0965c1a143176ec27b6b1fc304a564a343534a847ba05cab52a801c69a85e943265865c85059158334b9b9ec34108584b12bfa3b8c5a4bc045b0f2b444391298453f081f94e3eb7d04504bbe62d41969ffc37c4b5da160a93bcfd6d974cf4e04719b2dba6902e979c70c50adc65468b9dbf32b3f49f51c5f2729af87f504376a3b73ba08ff92328b26bff046f2e1350ebb3aeaa3be583b72bcb2aa705d9e4de2152e1b1f2844e1dc8811969d08ede7342e7f6073f1ee2da2a0f7b3e6e04263acd5579f3cd067bd2cae42ddb4a011d0da7f29c88d68839d5a3c2f09e9575b9f175f6492fbd5617e1a4e76be13a035c055f1214b93568ba148e2160a93cfa745cbc18d05729ac62e9b4a0e6bec437c4fa472190fd540da372f27051915c300952283c541d94e0e6c18a1da299eddf3e8002e827313b560650c6eba9e4006ecf52eaf1d008e780b41c9a462f8a159832f38bd61b8b0b69fc5afb8f41e4af98d26d77d5c5159e612ee22ade8217ef85e9dd24c71ee11964aca8dc8c6721dafc37b7d91eb86bd3e6cf6f18eaf3049648dc42631b906368b40e7f2a3b31e92c44d0f55d19a4acb83838fcee2d2c4e311ba84b2a0f8f6d9f4d3804a188bd9b1a04eb4c40779ad74719b7690efcabe9363c93f583c04fa18e262cd3e35ebc522d2d22925500424cba8c57bfb6304ad9a9ebd67a110f3056bcc71fde0be9606e59915c427cae68ee91773cfe3c3c204ce47f1b3ac3cb8f3cf4e35228d53075c671fcc03adea4230f8eda075ace3b85c46ccc0dac"}, [0x3, 0x6, 0x1a68, 0xea, 0x3, 0x0, 0x8000000001, 0x6, 0xf, 0x7f, 0x6, 0x4, 0x2, 0x0, 0x77, 0x9, 0x6, 0x4, 0x70d, 0x6, 0x7fffffff, 0x9, 0x1, 0x0, 0x0, 0x48263829, 0x1, 0x4, 0x800000000008, 0x1, 0xf33, 0x400b5929, 0x3, 0xfffffffffffffffc, 0x700000, 0x100, 0x8, 0x7, 0x2, 0x2, 0xc707, 0x2, 0x2, 0x4000002, 0x4c9, 0x401, 0x62, 0x7, 0x6, 0x0, 0xb6, 0x7fffffff, 0x4, 0x7, 0x4000000000000000, 0x8, 0xffff, 0x1a, 0xb, 0x708, 0xa5, 0x100, 0x4762, 0xa]}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000001040)=0x1, &(0x7f0000001080)=0x4) r9 = epoll_create1(0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000010c0)={"a681ff2e99acabb555870424dc8dc816", 0x0, 0x0, {0x5, 0x4}, {0xe3ad, 0x80000001}, 0x100000001, [0x6, 0x1, 0x162, 0x0, 0x5, 0x4, 0x7, 0x10000, 0xfffffffffffffff9, 0x5, 0x2, 0x4, 0x53, 0x3ff, 0x7, 0x7fff]}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000016c0)={0x0, "02ef6e80910259c1ba70f63a4ccce584"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000026c0)={{r10}, r11, 0x8, @inherit={0x90, &(0x7f0000001280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffff00000000d073fb5b0eef54e74b3d0900000000f2ffff42a8f3b8713000000000000000010000000000000007000000000000000900000000000000010000000100000001040000000000000900000000000000030000000000000006000000000000000200000000000000010000000100000040000000000000002c45000000000000060044f4ab00ea000000000000"]}, @devid=r12}) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f0000001340)=ANY=[@ANYBLOB="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"/279], 0x110) 79.223296ms ago: executing program 2 (id=10890): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="408f010008200200280012800e00010069703667726574617000000014000280060011e64d24000006001000"], 0x48}}, 0x0) 78.843636ms ago: executing program 1 (id=10891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}]}, 0x5c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 0s ago: executing program 2 (id=10892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x17}, @NL80211_ATTR_PMKID={0x14, 0x55, "7e7825ff884515f497398089918f1eed"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20044800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xffffff1e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffc}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) kernel console output (not intermixed with test programs): r on device bond0 [ 796.301866][ T6281] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.331801][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.339030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.377603][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.384805][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.541002][ T6428] tipc: Enabling of bearer rejected, failed to enable media [ 796.820651][ T6443] 0: reclassify loop, rule prio 0, protocol 800 [ 796.905445][ T6448] netlink: 'syz.2.9016': attribute type 1 has an invalid length. [ 796.966022][ T6455] netlink: 196 bytes leftover after parsing attributes in process `syz.3.9019'. [ 797.008297][ T6448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 797.059337][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.094569][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9018'. [ 797.193271][ T6281] veth0_vlan: entered promiscuous mode [ 797.246235][ T6281] veth1_vlan: entered promiscuous mode [ 797.357440][ T6471] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9025'. [ 797.377530][ T6281] veth0_macvtap: entered promiscuous mode [ 797.420272][ T6281] veth1_macvtap: entered promiscuous mode [ 797.432493][ T6473] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.9023'. [ 797.503909][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.532524][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.564791][ T6320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.584581][ T6320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.617806][ T6320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.623944][ T6485] netlink: 300 bytes leftover after parsing attributes in process `syz.4.9029'. [ 797.645783][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9029'. [ 797.655344][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9029'. [ 797.664785][ T6320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.688822][ T6485] syzkaller0: entered promiscuous mode [ 797.694334][ T6485] syzkaller0: entered allmulticast mode [ 797.719743][ T6485] netlink: 'syz.4.9029': attribute type 21 has an invalid length. [ 797.723451][ T6487] netlink: 'syz.2.9030': attribute type 1 has an invalid length. [ 797.737597][ T6487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9030'. [ 797.853481][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.865976][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.876445][ T6286] Bluetooth: hci1: command tx timeout [ 797.938997][ T6490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9031'. [ 797.964686][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.977270][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.500301][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.515907][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.526162][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.545708][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.557625][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.718238][ T6523] syzkaller0: entered promiscuous mode [ 798.746359][ T6523] syzkaller0: entered allmulticast mode [ 798.811251][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.818985][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.177281][ T6514] ip6_vti0 speed is unknown, defaulting to 1000 [ 799.193534][ T6533] can: request_module (can-proto-0) failed. [ 799.538910][ T6555] netlink: 'syz.1.9048': attribute type 10 has an invalid length. [ 799.699149][ T6514] lo speed is unknown, defaulting to 1000 [ 799.707547][ T6569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.760565][ T6572] xt_hashlimit: overflow, try lower: 3/0 [ 799.907130][ T6578] Bluetooth: MGMT ver 1.23 [ 799.956898][ T6286] Bluetooth: hci1: command tx timeout [ 800.105822][ T6585] batman_adv: batadv0: Adding interface: dummy0 [ 800.119071][ T6585] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.148017][ T6585] batman_adv: batadv0: Interface activated: dummy0 [ 800.197113][ T6585] batadv0: mtu less than device minimum [ 800.213351][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.225432][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.237204][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.248906][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.260691][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.272426][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.284104][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.295915][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.307662][ T6585] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.571249][ T6579] lec:lec_atm_close: lec0: Shut down! [ 800.677187][ T6286] Bluetooth: hci0: command tx timeout [ 800.732241][ T6514] chnl_net:caif_netlink_parms(): no params data found [ 800.901869][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.919951][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.936048][ T6514] bridge_slave_0: entered allmulticast mode [ 800.943965][ T6514] bridge_slave_0: entered promiscuous mode [ 800.953240][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.960705][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.968739][ T6514] bridge_slave_1: entered allmulticast mode [ 800.977234][ T6514] bridge_slave_1: entered promiscuous mode [ 801.072757][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.110319][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.188669][ T6514] team0: Port device team_slave_0 added [ 801.221138][ T6514] team0: Port device team_slave_1 added [ 801.227204][ T6635] __nla_validate_parse: 5 callbacks suppressed [ 801.227222][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9070'. [ 801.293801][ T6635] bond1: Invalid ad_actor_system MAC address. [ 801.303016][ T6635] bond1: option ad_actor_system: invalid value (1) [ 801.312057][ T6635] bond1 (unregistering): Released all slaves [ 801.389951][ T6638] netlink: 'syz.0.9071': attribute type 29 has an invalid length. [ 801.405439][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9071'. [ 801.476371][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.483387][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.536068][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.550584][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.557975][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.585012][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.646948][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9075'. [ 801.681711][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9076'. [ 801.692863][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9076'. [ 801.775644][ T6514] hsr_slave_0: entered promiscuous mode [ 801.782494][ T6514] hsr_slave_1: entered promiscuous mode [ 801.799729][ T6514] debugfs: 'hsr0' already exists in 'hsr' [ 801.806608][ T6514] Cannot create hsr debugfs directory [ 801.814639][ T6658] mac80211_hwsim hwsim64 syzkaller0: left promiscuous mode [ 801.828160][ T6658] mac80211_hwsim hwsim64 syzkaller0: left allmulticast mode [ 801.877893][ T6658] netlink: 'syz.3.9078': attribute type 1 has an invalid length. [ 801.897086][ T6658] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9078'. [ 802.202147][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9085'. [ 802.299191][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9087'. [ 802.336502][ T6679] IPv6: sit2: Disabled Multicast RS [ 802.343053][ T6679] sit2: entered allmulticast mode [ 802.756080][ T6286] Bluetooth: hci0: command tx timeout [ 802.791835][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9095'. [ 803.042703][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9095'. [ 803.119706][ T6719] erspan0: entered promiscuous mode [ 804.836197][ T6286] Bluetooth: hci0: command tx timeout [ 805.556627][ T6691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.566488][ T6699] netlink: 'syz.3.9093': attribute type 2 has an invalid length. [ 805.578549][ T6514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 805.612382][ T6514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 805.676665][ T6514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 805.718728][ T6514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 805.874998][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 805.883099][ C0] lec:lec_tx_timeout: lec0 [ 805.924632][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.968423][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.010827][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.018043][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.090281][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.097521][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.207015][ T6772] netlink: 'syz.4.9109': attribute type 64 has an invalid length. [ 806.503887][ T6792] __nla_validate_parse: 4 callbacks suppressed [ 806.503926][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9113'. [ 806.553559][ T6792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9113'. [ 806.562438][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.629147][ T6794] netlink: 348 bytes leftover after parsing attributes in process `syz.4.9115'. [ 806.651812][ T6514] veth0_vlan: entered promiscuous mode [ 806.668708][ T6514] veth1_vlan: entered promiscuous mode [ 806.733692][ T6798] netlink: 'syz.3.9116': attribute type 1 has an invalid length. [ 806.744659][ T6514] veth0_macvtap: entered promiscuous mode [ 806.760470][ T6514] veth1_macvtap: entered promiscuous mode [ 806.797511][ T6798] 8021q: adding VLAN 0 to HW filter on device bond14 [ 806.834327][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.873405][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.890994][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9116'. [ 806.915817][ T6286] Bluetooth: hci0: command tx timeout [ 806.940568][ T6320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.954488][ T6804] erspan0: entered allmulticast mode [ 806.972677][ T6320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.984152][ T6320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.033647][ T6320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.205649][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.213720][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.313467][ T6821] x_tables: duplicate underflow at hook 1 [ 808.683814][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 810.106966][ T6812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.204445][ T6316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.224226][ T6316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.363986][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9129'. [ 810.414331][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9132'. [ 810.437864][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9130'. [ 810.500297][ T6854] netlink: 'syz.3.9131': attribute type 4 has an invalid length. [ 810.520174][ T6862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9133'. [ 810.529886][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9131'. [ 810.548342][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9132'. [ 810.954077][ T6882] netlink: 'syz.1.9140': attribute type 12 has an invalid length. [ 810.981577][ T6882] netlink: 'syz.1.9140': attribute type 29 has an invalid length. [ 811.004508][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 811.014597][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 811.023658][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 811.059603][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 811.086719][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 811.189145][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.265667][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.281956][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.300336][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.638067][ T6906] netlink: 'syz.1.9142': attribute type 1 has an invalid length. [ 811.667530][ T6906] __nla_validate_parse: 3 callbacks suppressed [ 811.667550][ T6906] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9142'. [ 811.739713][ T6907] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 811.920651][ T6917] netlink: 'syz.0.9143': attribute type 9 has an invalid length. [ 811.932507][ T6917] netlink: 'syz.0.9143': attribute type 6 has an invalid length. [ 812.172282][ T6934] netlink: 'syz.4.9148': attribute type 1 has an invalid length. [ 812.183895][ T6320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 812.220929][ T6883] ip6_vti0 speed is unknown, defaulting to 1000 [ 812.252365][ T6934] bond10: entered promiscuous mode [ 812.262415][ T6934] 8021q: adding VLAN 0 to HW filter on device bond10 [ 812.350083][ T6320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 812.551074][ T6320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 812.656048][ T6960] sctp: [Deprecated]: syz.2.9155 (pid 6960) Use of int in maxseg socket option. [ 812.656048][ T6960] Use struct sctp_assoc_value instead [ 812.684154][ T6320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 812.736157][ T6883] lo speed is unknown, defaulting to 1000 [ 812.756545][ T6966] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 812.829836][ T6966] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 812.840272][ T6966] gretap1: entered promiscuous mode [ 812.865270][ T6966] gretap1: entered allmulticast mode [ 813.142142][ T6972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.164197][ T51] Bluetooth: hci4: command tx timeout [ 813.185309][ T6316] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.313714][ T6972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.388420][ T307] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.411819][ T307] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.425733][ T7001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9164'. [ 813.437765][ T7001] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9164'. [ 813.460113][ T7001] netlink: 'syz.0.9164': attribute type 6 has an invalid length. [ 813.468764][ T7001] netlink: 'syz.0.9164': attribute type 5 has an invalid length. [ 813.522319][ T7001] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9164'. [ 813.527193][ T7005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9165'. [ 813.559106][ T6972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.577764][ T7000] tc_dump_action: action bad kind [ 813.650568][ T307] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.875125][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.883238][ C0] lec:lec_tx_timeout: lec0 [ 814.133669][ T6320] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 814.178983][ T6320] dvmrp0 (unregistering): left allmulticast mode [ 814.235354][ T6320] bridge0 (unregistering): left allmulticast mode [ 814.367936][ T6320] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 814.376820][ T6320] bridge3 (unregistering): left promiscuous mode [ 814.835431][ T6320] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 814.845953][ T6320] bond0 (unregistering): Released all slaves [ 814.858439][ T6320] bond1 (unregistering): (slave veth5): Releasing active interface [ 814.870530][ T6320] bond1 (unregistering): Released all slaves [ 814.885336][ T6320] bond2 (unregistering): Released all slaves [ 814.899668][ T6320] bond3 (unregistering): Released all slaves [ 814.914058][ T6320] bond4 (unregistering): Released all slaves [ 814.937034][ T6320] bond5 (unregistering): (slave lo): Releasing backup interface [ 814.950774][ T6320] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 814.964416][ T6320] bond5 (unregistering): Released all slaves [ 814.982645][ T6320] bond6 (unregistering): Released all slaves [ 814.998753][ T6320] bond7 (unregistering): Released all slaves [ 815.021003][ T6320] bond8 (unregistering): (slave veth7): Releasing active interface [ 815.033460][ T6320] bond8 (unregistering): Released all slaves [ 815.048407][ T6320] bond9 (unregistering): Released all slaves [ 815.062706][ T6320] bond10 (unregistering): Released all slaves [ 815.080044][ T6320] bond11 (unregistering): (slave vcan1): Releasing backup interface [ 815.092230][ T6320] bond11 (unregistering): Released all slaves [ 815.107998][ T6320] bond12 (unregistering): Released all slaves [ 815.123611][ T6320] bond13 (unregistering): Released all slaves [ 815.138762][ T6320] bond14 (unregistering): Released all slaves [ 815.181336][ T6972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.235347][ T51] Bluetooth: hci4: command tx timeout [ 815.442614][ T7041] nftables ruleset with unbound chain [ 815.789868][ T7056] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 815.814391][ T6322] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.847457][ T6322] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.889955][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 815.953800][ T24] hid-generic 0005:0003:0008.0001: unknown main item tag 0x5 [ 815.967827][ T24] hid-generic 0005:0003:0008.0001: item fetching failed at offset 1/9 [ 815.977385][ T24] hid-generic 0005:0003:0008.0001: probe with driver hid-generic failed with error -22 [ 816.000294][ T6322] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.026714][ T7069] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 816.206947][ T302] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.423824][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.482006][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.510536][ T6883] bridge_slave_0: entered allmulticast mode [ 816.548182][ T6883] bridge_slave_0: entered promiscuous mode [ 816.570603][ T7103] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9185'. [ 816.616052][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.624999][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.652738][ T6883] bridge_slave_1: entered allmulticast mode [ 816.688344][ T6883] bridge_slave_1: entered promiscuous mode [ 816.806539][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.812933][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc03c00: rx timeout, send abort [ 816.831426][ T7111] x_tables: duplicate underflow at hook 1 [ 816.862986][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.872702][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9188'. [ 816.908871][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9188'. [ 816.975868][ T6883] team0: Port device team_slave_0 added [ 816.998956][ T6883] team0: Port device team_slave_1 added [ 817.177646][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.184658][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.252737][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.276586][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.283584][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.313030][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc02000: rx timeout, send abort [ 817.323888][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc03c00: abort rx timeout. Force session deactivation [ 817.335202][ T51] Bluetooth: hci4: command tx timeout [ 817.341533][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.430982][ T6883] hsr_slave_0: entered promiscuous mode [ 817.447922][ T6883] hsr_slave_1: entered promiscuous mode [ 817.454404][ T6883] debugfs: 'hsr0' already exists in 'hsr' [ 817.460454][ T6883] Cannot create hsr debugfs directory [ 817.522488][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9194'. [ 817.590030][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9194'. [ 817.611343][ T7143] net_ratelimit: 12 callbacks suppressed [ 817.611361][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.809366][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805736a000: rx timeout, send abort [ 817.818790][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805736a000: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 817.823434][ T7158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9196'. [ 817.839234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bc02000: abort rx timeout. Force session deactivation [ 818.014118][ T6883] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.146511][ T6883] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.278930][ T6883] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.441860][ T6883] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.395201][ T51] Bluetooth: hci4: command tx timeout [ 820.706128][ T7150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.729983][ T6883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 820.805036][ T6883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 820.846298][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9208'. [ 820.874294][ T6883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 820.892833][ T6883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 820.900732][ T7259] netlink: 'syz.2.9208': attribute type 1 has an invalid length. [ 820.926231][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9208'. [ 820.936641][ T7263] syzkaller0: entered promiscuous mode [ 820.942159][ T7263] syzkaller0: entered allmulticast mode [ 820.977212][ T7263] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9211'. [ 820.988302][ T7263] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9211'. [ 821.039819][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9209'. [ 821.068496][ T7277] x9: renamed from bridge_slave_0 (while UP) [ 821.209860][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.217720][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.227365][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.246866][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.260225][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.289481][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.320152][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.347923][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.369022][ T7296] netlink: 'syz.1.9216': attribute type 11 has an invalid length. [ 821.369664][ T7291] openvswitch: netlink: Missing key (keys=40, expected=100) [ 821.391149][ T7296] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 821.475694][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.483078][ C0] bridge0: topology change detected, propagating [ 821.489958][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.497237][ C0] bridge0: topology change detected, propagating [ 821.564057][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.647061][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.673052][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.680255][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.728919][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.736125][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.254398][ T7333] __nla_validate_parse: 38 callbacks suppressed [ 822.254423][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9228'. [ 822.281963][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9228'. [ 822.450079][ T7344] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9230'. [ 822.513419][ T7347] tipc: Started in network mode [ 822.528228][ T7347] tipc: Node identity 865edeb387f2, cluster identity 4711 [ 822.536214][ T7347] tipc: Enabled bearer , priority 0 [ 822.564728][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.628207][ T7347] tipc: Disabling bearer [ 822.669173][ T7358] netlink: 'syz.2.9235': attribute type 1 has an invalid length. [ 822.749476][ T6883] veth0_vlan: entered promiscuous mode [ 822.824320][ T6883] veth1_vlan: entered promiscuous mode [ 822.907379][ T7374] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9239'. [ 822.941392][ T6883] veth0_macvtap: entered promiscuous mode [ 822.949277][ T7375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9239'. [ 822.981152][ T6883] veth1_macvtap: entered promiscuous mode [ 823.032595][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.069488][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.183797][ T302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.217647][ T302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.263461][ T7389] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9242'. [ 823.282721][ T302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.295463][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9243'. [ 823.343349][ T302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.397457][ T7388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 823.570147][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.598093][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.622035][ T7357] lec:lec_atm_close: lec0: Shut down! [ 823.705611][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.730179][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.757097][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9247'. [ 823.855378][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9247'. [ 823.892005][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9247'. [ 824.463846][ T6286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 824.474273][ T6286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 824.484108][ T6286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 824.492752][ T6286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 824.502130][ T6286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 825.064690][ T7448] syzkaller1: entered promiscuous mode [ 825.076229][ T7448] syzkaller1: entered allmulticast mode [ 825.350883][ T7425] ip6_vti0 speed is unknown, defaulting to 1000 [ 825.456099][ T7466] netlink: 'syz.1.9266': attribute type 21 has an invalid length. [ 825.522241][ T7466] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 825.568733][ T7466] bond1 (unregistering): Released all slaves [ 825.843913][ T7425] lo speed is unknown, defaulting to 1000 [ 826.583749][ T7512] netlink: 'syz.0.9283': attribute type 1 has an invalid length. [ 826.595635][ T6286] Bluetooth: hci5: command tx timeout [ 826.737595][ T7512] bond7: entered promiscuous mode [ 826.745298][ T7512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 826.806995][ T7518] bond7: (slave bridge7): making interface the new active one [ 826.827576][ T7518] bridge7: entered promiscuous mode [ 826.868779][ T7518] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 826.963284][ T7522] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 826.992338][ T7512] macvlan2: entered promiscuous mode [ 827.006558][ T7512] macvlan2: entered allmulticast mode [ 827.016544][ T7512] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 827.236947][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 827.270392][ T7544] __nla_validate_parse: 6 callbacks suppressed [ 827.270412][ T7544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9292'. [ 827.310645][ T7548] netlink: 'syz.3.9293': attribute type 1 has an invalid length. [ 827.321930][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9293'. [ 827.333268][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9293'. [ 827.346221][ T7548] netlink: 'syz.3.9293': attribute type 2 has an invalid length. [ 827.374992][ T7548] netlink: 'syz.3.9293': attribute type 2 has an invalid length. [ 827.393555][ T7548] netlink: 'syz.3.9293': attribute type 2 has an invalid length. [ 827.626782][ T7529] ip6_vti0 speed is unknown, defaulting to 1000 [ 827.720867][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.760808][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.788334][ T7425] bridge_slave_0: entered allmulticast mode [ 827.803879][ T7425] bridge_slave_0: entered promiscuous mode [ 827.816309][ T7575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9300'. [ 827.830611][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.838542][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.846274][ T7425] bridge_slave_1: entered allmulticast mode [ 827.854406][ T7425] bridge_slave_1: entered promiscuous mode [ 827.984045][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.004414][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9302'. [ 828.033990][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.180489][ T7529] lo speed is unknown, defaulting to 1000 [ 828.308462][ T7425] team0: Port device team_slave_0 added [ 828.319227][ T7593] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9305'. [ 828.330064][ T7593] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 828.340780][ T7593] syzkaller0: entered promiscuous mode [ 828.348405][ T7593] syzkaller0: entered allmulticast mode [ 828.360589][ T7425] team0: Port device team_slave_1 added [ 828.426495][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.434185][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.465708][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.503005][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.511275][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.526882][ T7600] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 828.541109][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.596387][ T7596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 828.612327][ T7425] hsr_slave_0: entered promiscuous mode [ 828.622619][ T7425] hsr_slave_1: entered promiscuous mode [ 828.659321][ T7425] debugfs: 'hsr0' already exists in 'hsr' [ 828.672232][ T7425] Cannot create hsr debugfs directory [ 828.678522][ T51] Bluetooth: hci5: command tx timeout [ 828.915450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 828.923516][ C0] lec:lec_tx_timeout: lec0 [ 828.997921][ T5901] net_ratelimit: 24 callbacks suppressed [ 828.997942][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.014368][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.171754][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.230809][ T7629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9313'. [ 829.595268][ T7637] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9315'. [ 829.796492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.036121][T17387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.078366][ T7656] netlink: 'syz.1.9319': attribute type 1 has an invalid length. [ 830.098527][ T7656] netlink: 'syz.1.9319': attribute type 7 has an invalid length. [ 830.111803][ T7656] netlink: 'syz.1.9319': attribute type 8 has an invalid length. [ 830.127115][ T7656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9319'. [ 830.239564][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9322'. [ 830.251034][ T7666] SET target dimension over the limit! [ 830.341608][ T7669] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 830.403325][ T7425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 830.469359][ T7425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 830.496669][ T7425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 830.534479][ T7678] IPv6: Can't replace route, no match found [ 830.544405][ T7425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 830.575918][ T7680] team0: Device gtp0 is up. Set it down before adding it as a team port [ 830.607457][ T7683] No such timeout policy "syz0" [ 830.765325][ T51] Bluetooth: hci5: command tx timeout [ 830.958624][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.007778][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.086272][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.104394][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.111608][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.120750][ T7720] xt_recent: Unsupported userspace flags (000000b1) [ 831.159029][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.166256][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.237935][ T7724] netlink: 'syz.2.9338': attribute type 4 has an invalid length. [ 831.308995][ T7732] x_tables: duplicate underflow at hook 2 [ 831.437665][ T7739] openvswitch: netlink: Message has 8 unknown bytes. [ 831.497820][ T7724] netlink: 'syz.2.9338': attribute type 4 has an invalid length. [ 831.699023][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.026542][ T7760] openvswitch: netlink: Key type 132 is out of range max 32 [ 832.035642][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.084184][ T7760] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 832.115581][T17387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.558202][ T7425] veth0_vlan: entered promiscuous mode [ 832.610529][ T7425] veth1_vlan: entered promiscuous mode [ 832.679984][ T7794] __nla_validate_parse: 10 callbacks suppressed [ 832.680004][ T7794] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9356'. [ 832.729428][ T7425] veth0_macvtap: entered promiscuous mode [ 832.771685][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9356'. [ 832.772346][ T7425] veth1_macvtap: entered promiscuous mode [ 832.846774][ T51] Bluetooth: hci5: command tx timeout [ 832.873705][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.887048][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.956840][ T6325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.967522][ T6325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.006301][ T6325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.107921][ T6325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.290263][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9364'. [ 833.309748][ T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.351921][ T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.384248][ T7828] netlink: 'syz.2.9367': attribute type 11 has an invalid length. [ 833.394876][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9367'. [ 833.468410][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.492075][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.539008][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.572793][ T7836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.590359][ T7835] netlink: 'syz.0.9370': attribute type 1 has an invalid length. [ 833.604217][ T7835] netlink: 'syz.0.9370': attribute type 1 has an invalid length. [ 833.631162][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.668413][ T7843] netlink: 'syz.4.9250': attribute type 61 has an invalid length. [ 833.688695][ T7836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.797685][ T7847] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9373'. [ 833.891021][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9374'. [ 833.924645][ T7850] : entered promiscuous mode [ 833.973752][ T7852] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9375'. [ 833.980908][ T7821] ip6_vti0 speed is unknown, defaulting to 1000 [ 834.023568][ T7852] net_ratelimit: 9 callbacks suppressed [ 834.023587][ T7852] netlink: ct family unspecified [ 834.043554][ T7855] netlink: 'syz.3.9376': attribute type 83 has an invalid length. [ 834.198789][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.338681][ T7872] vlan2: entered allmulticast mode [ 834.344341][ T7872] bond0: entered allmulticast mode [ 834.356242][ T7875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9380'. [ 834.364676][ T7872] bond_slave_0: entered allmulticast mode [ 834.370416][ T7875] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9380'. [ 834.383932][ T7876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9381'. [ 834.392992][ T7872] bond_slave_1: entered allmulticast mode [ 834.428312][ T7877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.479778][ T7877] bond_slave_0: left allmulticast mode [ 834.490731][ T7877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.514637][ T7877] bond_slave_1: left allmulticast mode [ 834.532778][ T7877] bond0 (unregistering): Released all slaves [ 834.650273][ T7821] lo speed is unknown, defaulting to 1000 [ 834.748712][ T7892] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 834.759796][ T7892] syzkaller0: entered promiscuous mode [ 834.773163][ T7892] syzkaller0: entered allmulticast mode [ 835.075217][T22802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.128177][ T7912] netlink: 'syz.2.9390': attribute type 13 has an invalid length. [ 835.185668][ T7912] netlink: 'syz.2.9390': attribute type 17 has an invalid length. [ 835.235862][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.380484][ T7912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.619491][ T7938] netlink: 'syz.0.9398': attribute type 1 has an invalid length. [ 835.677307][ T7945] lo: entered promiscuous mode [ 835.683591][ T7946] netlink: 'syz.4.9399': attribute type 4 has an invalid length. [ 835.714618][ T7945] tunl0: entered promiscuous mode [ 835.743139][ T7949] netlink: 'syz.4.9399': attribute type 4 has an invalid length. [ 835.798154][ T7945] gre0: entered promiscuous mode [ 835.956179][ T7945] gretap0: entered promiscuous mode [ 836.100205][ T6286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.119723][ T6286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.135136][ T6286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 836.153645][ T6286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 836.166466][ T6286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 836.237660][ T7945] ip_vti0: entered promiscuous mode [ 836.974914][ T7987] bridge2: entered promiscuous mode [ 837.021109][ T7987] bond1: (slave bridge2): making interface the new active one [ 837.041232][ T7987] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 837.056739][ T7957] ip6_vti0 speed is unknown, defaulting to 1000 [ 837.230847][ T8000] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 837.293179][ T8000] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 837.364731][ T7996] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 837.418365][ T8004] bond1: (slave gretap1): making interface the new active one [ 837.441310][ T8004] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 837.473287][ T7957] lo speed is unknown, defaulting to 1000 [ 837.532053][ T7996] macvlan2: entered promiscuous mode [ 837.540188][ T7996] macvlan2: entered allmulticast mode [ 837.600838][ T7996] bond1: entered promiscuous mode [ 837.636140][ T7996] gretap1: entered promiscuous mode [ 837.642218][ T7996] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 837.670518][ T7996] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 837.690016][ T8026] __nla_validate_parse: 9 callbacks suppressed [ 837.690035][ T8026] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9426'. [ 837.727395][ T7996] bond1: left promiscuous mode [ 837.732394][ T7996] gretap1: left promiscuous mode [ 837.737489][ T8027] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9426'. [ 837.857926][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.882422][ T8036] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9428'. [ 837.926129][ T8034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9428'. [ 838.031896][ T8046] veth0: entered promiscuous mode [ 838.141329][ T8046] veth0: left promiscuous mode [ 838.177646][ T8051] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 838.196094][ T6286] Bluetooth: hci3: command tx timeout [ 838.204483][ T8051] bond0 (unregistering): Released all slaves [ 838.416310][ T8058] xt_CT: No such helper "snmp_trap" [ 838.708525][ T7957] chnl_net:caif_netlink_parms(): no params data found [ 838.846840][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.854160][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.862883][ T7957] bridge_slave_0: entered allmulticast mode [ 838.871986][ T7957] bridge_slave_0: entered promiscuous mode [ 838.883531][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.893688][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.901550][ T7957] bridge_slave_1: entered allmulticast mode [ 838.911111][ T7957] bridge_slave_1: entered promiscuous mode [ 838.965761][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.988377][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.117930][ T7957] team0: Port device team_slave_0 added [ 839.137363][ T7957] team0: Port device team_slave_1 added [ 839.609541][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.622198][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.649565][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.666105][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.673177][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.702035][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.795948][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9450'. [ 839.846093][ T7957] hsr_slave_0: entered promiscuous mode [ 839.861282][ T7957] hsr_slave_1: entered promiscuous mode [ 839.876523][ T7957] debugfs: 'hsr0' already exists in 'hsr' [ 839.889701][ T7957] Cannot create hsr debugfs directory [ 839.923369][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9452'. [ 840.122273][ T8134] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9455'. [ 840.160892][ T8137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9455'. [ 840.255578][ T8144] validate_nla: 10 callbacks suppressed [ 840.255599][ T8144] netlink: 'syz.4.9459': attribute type 9 has an invalid length. [ 840.277799][ T6286] Bluetooth: hci3: command tx timeout [ 842.357584][ T6286] Bluetooth: hci3: command tx timeout [ 842.483729][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9457'. [ 842.493859][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9457'. [ 842.503316][ T8152] netlink: 'syz.1.9457': attribute type 4 has an invalid length. [ 842.552120][ T7957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.564683][ T7957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.588549][ T8136] ip6_vti0 speed is unknown, defaulting to 1000 [ 842.719747][ T7957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.741196][ T7957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.947863][ T7957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.964042][ T7957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.988237][ T8183] xt_hashlimit: size too large, truncated to 1048576 [ 843.174298][ T7957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.186836][ T7957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.226326][ T8136] lo speed is unknown, defaulting to 1000 [ 843.316515][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9471'. [ 843.331021][ T8191] netlink: 'syz.3.9471': attribute type 21 has an invalid length. [ 843.355509][ T8192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.377586][ T8191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9471'. [ 843.462061][ T8196] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9472'. [ 843.603652][ T7957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 843.630225][ T7957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 843.662199][ T8201] netlink: 'syz.3.9474': attribute type 24 has an invalid length. [ 843.664189][ T7957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 843.699531][ T8200] syzkaller0: entered promiscuous mode [ 843.705336][ T8200] syzkaller0: entered allmulticast mode [ 843.712772][ T7957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 843.822085][ T8208] syzkaller0: entered promiscuous mode [ 843.828197][ T8208] syzkaller0: entered allmulticast mode [ 844.021856][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.060014][ T8187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.064455][ T7957] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.082151][ T8213] xt_connbytes: Forcing CT accounting to be enabled [ 844.097156][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.104364][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.130482][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.137665][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.435334][ T6286] Bluetooth: hci3: command tx timeout [ 844.504450][ T8221] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 844.578592][ T8221] pim6reg527: entered allmulticast mode [ 844.629502][ T7957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.786829][ T7957] veth0_vlan: entered promiscuous mode [ 844.833669][ T7957] veth1_vlan: entered promiscuous mode [ 844.929404][ T7957] veth0_macvtap: entered promiscuous mode [ 844.940802][ T7957] veth1_macvtap: entered promiscuous mode [ 844.962167][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.108349][ T8240] netlink: zone id is out of range [ 845.117403][ T8240] netlink: del zone limit has 4 unknown bytes [ 845.743440][ T7957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.782151][ T8251] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 845.794008][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9486'. [ 845.830071][T16848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.858752][T16848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.872419][T16848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.922529][T16848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.101419][ T8259] tipc: Started in network mode [ 846.107418][ T8259] tipc: Node identity ac14140f, cluster identity 4711 [ 846.114494][ T8259] tipc: New replicast peer: 255.255.255.255 [ 846.122706][ T8259] tipc: Enabled bearer , priority 10 [ 846.137778][ T6325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.147579][ T6325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.249612][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.272362][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.582879][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9497'. [ 846.631856][ T8284] netlink: 'syz.2.9498': attribute type 4 has an invalid length. [ 846.798328][ T8293] syzkaller1: entered promiscuous mode [ 846.803886][ T8293] syzkaller1: entered allmulticast mode [ 846.829825][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9503'. [ 846.843248][ T8301] Bluetooth: MGMT ver 1.23 [ 847.017102][ T8313] ipt_rpfilter: unknown options [ 847.087274][ T8318] IPVS: length: 239 != 24 [ 847.094681][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9509'. [ 847.159529][ T8316] netlink: 'syz.4.9508': attribute type 1 has an invalid length. [ 847.236128][T22802] tipc: Node number set to 2886997007 [ 847.314592][ T8326] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 847.330795][ T8326] bond2 (unregistering): Released all slaves [ 847.352701][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9513'. [ 847.369172][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9513'. [ 847.379823][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9513'. [ 847.880105][ T8359] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 847.932525][ T8359] bridge2: entered promiscuous mode [ 847.979815][ T8359] bridge2: entered allmulticast mode [ 848.024497][ T8359] team0: Port device bridge2 added [ 848.132960][ T8376] syzkaller1: entered allmulticast mode [ 850.740712][ T8348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.910693][ T8388] __nla_validate_parse: 2 callbacks suppressed [ 850.910712][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9530'. [ 851.170215][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9536'. [ 851.210821][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9538'. [ 851.246441][ T8412] bond2: Removing last ns target with arp_interval on [ 851.262914][ T8414] gtp0: entered promiscuous mode [ 851.271824][ T8414] gtp0: entered allmulticast mode [ 851.278291][ T8418] openvswitch: netlink: Message has 8 unknown bytes. [ 851.307704][ T8418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.465679][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9541'. [ 851.502606][ T8428] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 851.524260][ T8428] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9541'. [ 851.662289][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.669943][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.765747][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.784117][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.944087][ T6322] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.965503][ T6322] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.974535][ T6322] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.033146][ T6322] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.178451][ T8461] IPv6: sit1: Disabled Multicast RS [ 852.186963][ T8461] sit1: entered allmulticast mode [ 852.297255][ T29] audit: type=1800 audit(1772434085.159:12): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9554" name="memory.events" dev="tmpfs" ino=74 res=0 errno=0 [ 852.321499][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9554'. [ 852.360892][ T29] audit: type=1804 audit(1772434085.229:13): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9554" name="/newroot/11/memory.events" dev="tmpfs" ino=74 res=1 errno=0 [ 852.452224][ T8471] syzkaller0: entered promiscuous mode [ 852.458373][ T8471] syzkaller0: entered allmulticast mode [ 852.564755][ T8489] bond0: option ad_select: unable to set because the bond device is up [ 852.709916][ T8496] netlink: 'syz.4.9561': attribute type 1 has an invalid length. [ 852.718749][ T8496] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9561'. [ 852.759853][ T8951] lec:lec_start_xmit: lec0:No lecd attached [ 852.978980][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9564'. [ 853.192221][ T8521] netem: change failed [ 853.293812][ T8531] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9570'. [ 853.338462][ T8531] 8021q: VLANs not supported on caif0 [ 853.481698][ T8539] netlink: 'syz.3.9572': attribute type 10 has an invalid length. [ 853.489889][ T8539] bridge_slave_1: left allmulticast mode [ 853.501954][ T8539] bridge_slave_1: left promiscuous mode [ 853.509652][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.544198][ T8539] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 853.563505][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9574'. [ 854.007727][ T8571] netlink: 'syz.3.9581': attribute type 11 has an invalid length. [ 854.053303][ T8580] bridge_slave_0: left allmulticast mode [ 854.063274][ T8580] bridge_slave_0: left promiscuous mode [ 854.072426][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.119498][ T8580] bridge_slave_1: left allmulticast mode [ 854.126329][ T8580] bridge_slave_1: left promiscuous mode [ 854.132152][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.174261][ T8580] bond0: (slave bond_slave_0): Releasing backup interface [ 854.190148][ T8580] bond0: (slave bond_slave_1): Releasing backup interface [ 854.218322][ T8580] team0: Port device team_slave_0 removed [ 854.239091][ T8580] team0: Port device team_slave_1 removed [ 854.256399][ T8580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 854.316923][ T8581] macvlan1: entered allmulticast mode [ 854.342542][ T8589] veth1_vlan: entered allmulticast mode [ 854.352978][ T8589] macvlan1: entered promiscuous mode [ 857.641448][ T8606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.663695][ T8629] __nla_validate_parse: 12 callbacks suppressed [ 857.663716][ T8629] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9598'. [ 857.859012][ T8650] netlink: 'syz.3.9603': attribute type 1 has an invalid length. [ 857.875129][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 857.883257][ C0] lec:lec_tx_timeout: lec0 [ 857.912454][ T8653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9604'. [ 857.937347][ T8661] Cannot find del_set index 0 as target [ 857.946705][ T8653] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9604'. [ 857.983481][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9604'. [ 858.046935][ T8666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 858.170201][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9611'. [ 858.236367][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9610'. [ 858.251645][ T8677] netlink: 'syz.3.9611': attribute type 11 has an invalid length. [ 858.396229][ T8689] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.9613'. [ 858.432512][ T8689] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 858.736014][ T8691] netlink: 'syz.1.9614': attribute type 4 has an invalid length. [ 858.784683][ T8695] xt_hashlimit: max too large, truncated to 1048576 [ 858.975527][ T8711] syzkaller0: entered promiscuous mode [ 858.981289][ T8711] syzkaller0: entered allmulticast mode [ 859.031548][ T8719] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9619'. [ 859.075624][ T8719] openvswitch: netlink: Flow actions attr not present in new flow. [ 859.238988][ T8730] Cannot find add_set index 46338 as target [ 859.260198][ T8725] syzkaller1: entered promiscuous mode [ 859.267204][ T8725] syzkaller1: entered allmulticast mode [ 859.314725][ T8731] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9624'. [ 859.325346][ T8730] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 859.345064][ T8734] netlink: 'syz.3.9625': attribute type 1 has an invalid length. [ 859.352839][ T8734] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9625'. [ 859.369009][ T8731] syzkaller0: entered promiscuous mode [ 859.375280][ T8731] syzkaller0: entered allmulticast mode [ 859.525074][ T8739] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 859.857727][ T8757] syzkaller0: entered promiscuous mode [ 859.873485][ T8757] syzkaller0: entered allmulticast mode [ 860.244181][ T8772] netlink: 'syz.3.9635': attribute type 2 has an invalid length. [ 860.914009][ T8801] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 861.372864][ T8815] lo: entered allmulticast mode [ 861.391801][ T8813] netlink: 'syz.1.9646': attribute type 1 has an invalid length. [ 861.838043][ T8844] openvswitch: netlink: EtherType 53b is less than min 600 [ 862.153169][ T8854] netlink: 'syz.1.9656': attribute type 1 has an invalid length. [ 862.262113][ T8868] netlink: 'syz.2.9658': attribute type 1 has an invalid length. [ 862.425304][ T8868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 862.540882][ T8875] bond1: (slave gretap1): making interface the new active one [ 862.573229][ T8875] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 862.796570][ T8887] syzkaller1: entered promiscuous mode [ 862.815988][ T8887] syzkaller1: entered allmulticast mode [ 863.785635][ T8947] netlink: 'syz.3.9679': attribute type 29 has an invalid length. [ 863.817869][ T8947] netlink: 'syz.3.9679': attribute type 29 has an invalid length. [ 863.912586][ T8954] __nla_validate_parse: 16 callbacks suppressed [ 863.912606][ T8954] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9682'. [ 863.949472][ T8954] bridge_slave_1: default FDB implementation only supports local addresses [ 863.988644][ T8897] ip6_vti0 speed is unknown, defaulting to 1000 [ 864.132421][ T8965] openvswitch: netlink: EtherType 53b is less than min 600 [ 864.209730][ T8965] netlink: 'syz.1.9685': attribute type 1 has an invalid length. [ 864.265064][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9685'. [ 864.370580][ T8973] syzkaller0: entered promiscuous mode [ 864.389785][ T8973] syzkaller0: entered allmulticast mode [ 864.518924][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9689'. [ 864.539448][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9689'. [ 864.586871][ T307] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.615945][ T307] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.624749][ T307] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.662207][ T307] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.707200][ T8985] openvswitch: netlink: Multiple metadata blocks provided [ 864.719337][ T8985] lo: Caught tx_queue_len zero misconfig [ 864.769384][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9692'. [ 865.010964][ T8900] ip6_vti0 speed is unknown, defaulting to 1000 [ 865.019670][ T8897] lo speed is unknown, defaulting to 1000 [ 865.171272][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9697'. [ 865.309629][ T9008] bond1: entered promiscuous mode [ 865.340299][ T9008] bond1: entered allmulticast mode [ 865.346420][ T9008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.673848][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9703'. [ 865.965170][ T8900] lo speed is unknown, defaulting to 1000 [ 866.097191][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9708'. [ 866.222950][ T9056] netlink: 'syz.4.9710': attribute type 1 has an invalid length. [ 866.231770][ T9056] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9710'. [ 866.246094][ T9056] netlink: 658 bytes leftover after parsing attributes in process `syz.4.9710'. [ 867.094381][ T9106] netlink: 'syz.1.9724': attribute type 1 has an invalid length. [ 867.114967][ T9106] netlink: 'syz.1.9724': attribute type 3 has an invalid length. [ 867.161585][ T9096] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 867.209525][ T9096] bond2 (unregistering): Released all slaves [ 867.529026][ T9127] netlink: 'syz.4.9730': attribute type 11 has an invalid length. [ 867.597019][ T9128] netlink: 'syz.3.9732': attribute type 10 has an invalid length. [ 867.618023][ T9128] team0: Device vxcan1 is of different type [ 868.338026][ T9138] syzkaller0: entered promiscuous mode [ 868.343593][ T9138] syzkaller0: entered allmulticast mode [ 869.745661][ T9164] __nla_validate_parse: 9 callbacks suppressed [ 869.745681][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9739'. [ 870.126131][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 870.784123][ T9164] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 870.884004][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9740'. [ 871.224031][ T9186] geneve2: entered promiscuous mode [ 871.275096][ T6322] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 49582 - 0 [ 871.283981][ T6322] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 49582 - 0 [ 871.318772][ T6322] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 49582 - 0 [ 871.344585][ T6322] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 49582 - 0 [ 871.459010][ T9171] ip6_vti0 speed is unknown, defaulting to 1000 [ 871.465381][ T9201] netlink: 'syz.1.9749': attribute type 39 has an invalid length. [ 871.583478][ T9208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9752'. [ 871.645306][ T9211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9749'. [ 871.784402][ T9220] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 871.814442][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9754'. [ 871.846704][ T9224] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9755'. [ 872.009923][ T9235] ip6t_srh: unknown srh match flags 4000 [ 872.145828][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9760'. [ 872.347189][ T9171] lo speed is unknown, defaulting to 1000 [ 872.354255][ T9176] ip6_vti0 speed is unknown, defaulting to 1000 [ 872.506424][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9766'. [ 872.578341][ T9256] tc_dump_action: action bad kind [ 872.598378][ T9256] netlink: 'syz.4.9766': attribute type 16 has an invalid length. [ 872.641639][ T9256] netlink: 'syz.4.9766': attribute type 17 has an invalid length. [ 872.783285][ T9256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 873.089356][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9770'. [ 873.154345][ T9176] lo speed is unknown, defaulting to 1000 [ 873.347976][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9776'. [ 873.932760][ T9326] netlink: 'syz.2.9785': attribute type 1 has an invalid length. [ 874.459017][ T9361] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 874.733991][ T9355] team1: entered promiscuous mode [ 874.739467][ T9355] team1: entered allmulticast mode [ 874.936956][ T9380] __nla_validate_parse: 10 callbacks suppressed [ 874.936977][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9796'. [ 875.008458][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9798'. [ 875.506775][ T9408] netlink: 'syz.1.9805': attribute type 1 has an invalid length. [ 875.524768][ T9412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9804'. [ 875.535231][ T9408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9805'. [ 875.619206][ T9418] netlink: 'syz.1.9805': attribute type 1 has an invalid length. [ 875.665178][ T9418] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9805'. [ 875.695579][ T9418] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR [ 875.875808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.892194][ C0] lec:lec_tx_timeout: lec0 [ 875.958151][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9812'. [ 875.968970][ T9437] rdma_rxe: rxe_newlink: failed to add lo [ 876.081035][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9813'. [ 876.139796][ T9449] netlink: 'syz.3.9813': attribute type 1 has an invalid length. [ 876.160238][ T9449] netlink: 'syz.3.9813': attribute type 1 has an invalid length. [ 876.169059][ T9449] netlink: 'syz.3.9813': attribute type 1 has an invalid length. [ 876.178083][ T9449] netlink: 'syz.3.9813': attribute type 1 has an invalid length. [ 876.271538][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 876.305126][ T9440] team0: Port device batadv2 added [ 876.456557][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9817'. [ 876.635761][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9821'. [ 876.656625][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9821'. [ 876.802688][ T9474] sctp: [Deprecated]: syz.2.9825 (pid 9474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 876.802688][ T9474] Use struct sctp_sack_info instead [ 876.950157][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.958004][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.100399][ T9495] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3256880469/3256880470 [ 877.160064][ T9495] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3256880469/3256880470 [ 877.550848][ T9526] validate_nla: 1 callbacks suppressed [ 877.550869][ T9526] netlink: 'syz.2.9837': attribute type 32 has an invalid length. [ 877.671045][ T9526] bond2: Setting coupled_control to off (0) [ 878.495813][ T9585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.794527][T17387] IPVS: starting estimator thread 0... [ 878.801128][ T9602] netlink: 'syz.2.9859': attribute type 1 has an invalid length. [ 878.885716][ T9608] IPVS: using max 27 ests per chain, 64800 per kthread [ 879.096673][ T9624] netlink: 'syz.2.9863': attribute type 1 has an invalid length. [ 879.130506][ T9624] netlink: 'syz.2.9863': attribute type 4 has an invalid length. [ 879.201197][ T9630] unsupported nla_type 33542 [ 879.260536][ T9626] Unsupported ieee802154 address type: 0 [ 879.287684][ T9640] IPv6: NLM_F_REPLACE set, but no existing node found! [ 879.722755][ T9651] IPVS: Scheduler module ip_vs_sip not found [ 879.817238][ T9676] netlink: 'syz.4.9876': attribute type 30 has an invalid length. [ 879.882782][ T9676] bond0: option arp_missed_max: invalid value (0) [ 879.890467][ T9676] bond0: option arp_missed_max: allowed values 1 - 255 [ 879.899594][ T9676] bond0 (unregistering): Released all slaves [ 880.396486][ T9710] netlink: 'syz.4.9885': attribute type 10 has an invalid length. [ 880.546336][ T9725] __nla_validate_parse: 14 callbacks suppressed [ 880.546355][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9889'. [ 880.886112][ T9741] syzkaller0: entered promiscuous mode [ 880.891653][ T9741] syzkaller0: entered allmulticast mode [ 881.135301][ T9765] ip6gre1: entered promiscuous mode [ 881.207282][ T9773] netlink: 'syz.0.9901': attribute type 3 has an invalid length. [ 881.293574][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9904'. [ 881.593266][ T9801] netlink: 138 bytes leftover after parsing attributes in process `syz.2.9912'. [ 881.787852][ T9824] netlink: 'syz.1.9914': attribute type 16 has an invalid length. [ 881.875917][ T9824] netlink: 'syz.1.9914': attribute type 17 has an invalid length. [ 882.032062][ T9824] lo: left promiscuous mode [ 882.088478][ T9824] tunl0: left promiscuous mode [ 882.119790][ T9824] gre0: left promiscuous mode [ 882.171026][ T9824] gretap0: left promiscuous mode [ 882.183582][ T9824] ip_vti0: left promiscuous mode [ 882.219673][ T9824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.238985][ T9840] netlink: 252 bytes leftover after parsing attributes in process `syz.2.9921'. [ 882.309153][ T9848] tipc: Started in network mode [ 882.314999][ T9848] tipc: Node identity a203f41ddfbc, cluster identity 4711 [ 882.337923][ T9848] tipc: Enabled bearer , priority 0 [ 882.412089][ T9845] syzkaller0: MTU too low for tipc bearer [ 882.419522][ T9845] tipc: Disabling bearer [ 882.468569][ T9854] netlink: 'syz.4.9924': attribute type 1 has an invalid length. [ 882.491753][ T9854] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 882.540107][ T9859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.603076][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9925'. [ 882.623634][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9925'. [ 882.779618][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 882.806253][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 882.837777][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 882.859895][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 882.888755][ T9873] netlink: 'syz.3.9928': attribute type 2 has an invalid length. [ 882.908819][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 882.938510][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 882.998204][ T9878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.022819][ T9872] netlink: 'syz.3.9928': attribute type 29 has an invalid length. [ 883.146397][ T9878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.158871][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9932'. [ 883.317719][ T9878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.393866][ T9906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9939'. [ 883.491528][ T9878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.611596][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9942'. [ 883.651841][ T9916] mac80211_hwsim hwsim92 wlan1: Caught tx_queue_len zero misconfig [ 884.205998][ T9947] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9948'. [ 885.763003][ T302] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.876586][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.899400][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.976161][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.122196][ T9976] openvswitch: netlink: IP tunnel dst address not specified [ 886.136739][ T9977] netlink: 'syz.2.9958': attribute type 23 has an invalid length. [ 886.157620][ T9979] netlink: 'syz.0.9957': attribute type 24 has an invalid length. [ 886.247479][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9959'. [ 886.259832][ T9984] IPv6: NLM_F_CREATE should be specified when creating new route [ 886.425036][ T9989] x9: renamed from bridge_slave_0 [ 886.538775][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9963'. [ 886.763414][T10020] sctp: [Deprecated]: syz.4.9969 (pid 10020) Use of int in max_burst socket option. [ 886.763414][T10020] Use struct sctp_assoc_value instead [ 886.789814][T10020] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 886.814679][T10026] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9972'. [ 886.992023][T10041] veth1_macvtap: left promiscuous mode [ 887.045423][T10034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 887.355609][T10052] block nbd1: not configured, cannot reconfigure [ 887.513093][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.609823][T10062] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 887.812362][T10062] bond2 (unregistering): Released all slaves [ 887.908818][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.937180][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.056010][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.212027][T10098] syzkaller0: entered promiscuous mode [ 888.222047][T10098] syzkaller0: entered allmulticast mode [ 888.610990][T10110] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 888.673914][T10116] validate_nla: 2 callbacks suppressed [ 888.673929][T10116] netlink: 'syz.2.9991': attribute type 11 has an invalid length. [ 888.699115][T10110] bond0: (slave lo): Enslaving as an active interface with an up link [ 888.729961][T10116] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9991'. [ 888.740806][T10110] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 888.759464][T10120] syz_tun: entered allmulticast mode [ 888.767824][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9992'. [ 888.791682][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9992'. [ 888.811759][T10120] vlan2: entered allmulticast mode [ 888.824688][T10120] bond0: entered allmulticast mode [ 888.834642][T10120] bond_slave_0: entered allmulticast mode [ 888.866153][T10120] bond_slave_1: entered allmulticast mode [ 888.871070][T10121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9992'. [ 888.945552][T10121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.962167][T10123] netlink: 'syz.2.9994': attribute type 4 has an invalid length. [ 888.973423][T10121] bond_slave_0: left allmulticast mode [ 888.984336][T10123] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9994'. [ 889.005408][T10121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.026255][T10121] bond_slave_1: left allmulticast mode [ 889.033569][T10121] bond0 (unregistering): Released all slaves [ 889.288323][T10146] syzkaller0: entered promiscuous mode [ 889.304088][T10146] syzkaller0: entered allmulticast mode [ 889.383629][T10149] syzkaller1: entered promiscuous mode [ 889.390717][T10149] syzkaller1: entered allmulticast mode [ 889.419465][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10001'. [ 889.461060][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10001'. [ 889.487043][T10155] syzkaller0: entered promiscuous mode [ 889.492589][T10155] syzkaller0: entered allmulticast mode [ 889.801773][T10177] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 890.461241][T10217] bond2: entered allmulticast mode [ 890.586192][T10233] veth5: entered promiscuous mode [ 890.743066][T10244] openvswitch: netlink: IP tunnel dst address not specified [ 890.782830][T10249] netlink: 'syz.3.10034': attribute type 21 has an invalid length. [ 890.806084][T10254] netlink: 'syz.3.10034': attribute type 21 has an invalid length. [ 890.991702][T10268] syzkaller1: entered promiscuous mode [ 891.011641][T10268] syzkaller1: entered allmulticast mode [ 891.021454][T10268] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 891.031259][T10268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.113678][T16848] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.134747][T16848] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.160198][T10276] bridge0: port 1(gretap0) entered blocking state [ 891.197157][T10276] bridge0: port 1(gretap0) entered disabled state [ 891.203910][T10276] gretap0: entered allmulticast mode [ 891.229187][T10279] netlink: 'syz.1.10043': attribute type 83 has an invalid length. [ 891.250223][T10276] gretap0: entered promiscuous mode [ 891.267409][T10276] bridge0: port 1(gretap0) entered blocking state [ 891.274087][T10276] bridge0: port 1(gretap0) entered forwarding state [ 891.292333][T16848] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.301702][T16848] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.408138][T10285] netlink: 'syz.2.10046': attribute type 11 has an invalid length. [ 891.420611][T10285] netlink: 'syz.2.10046': attribute type 4 has an invalid length. [ 891.429065][T10285] __nla_validate_parse: 15 callbacks suppressed [ 891.429099][T10285] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.10046'. [ 891.577705][T10295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.646298][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10050'. [ 891.769051][T10307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10053'. [ 891.845857][T10314] netlink: 'syz.4.10055': attribute type 1 has an invalid length. [ 891.941115][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10058'. [ 891.978224][T10323] bond1: (slave bridge1): making interface the new active one [ 891.988794][T10323] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 892.156190][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10060'. [ 892.185405][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10062'. [ 892.240490][T10338] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10062'. [ 892.324557][T10350] bridge0: entered allmulticast mode [ 892.568618][T10360] sock: sock_timestamping_bind_phc: sock not bind to device [ 892.590503][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10065'. [ 892.611341][T10366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10065'. [ 892.678915][T10373] "syz.4.10066" (10373) uses obsolete ecb(arc4) skcipher [ 892.772141][T10377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10070'. [ 892.844024][T10381] openvswitch: netlink: IP tunnel dst address not specified [ 893.059991][T10397] netlink: 'syz.3.10078': attribute type 10 has an invalid length. [ 893.072990][T10397] netlink: 'syz.3.10078': attribute type 4 has an invalid length. [ 893.955820][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.963645][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.036024][T10395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.058232][T10395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.190420][ T6322] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.207882][ T6322] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.228383][ T6322] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.242773][ T6322] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.301235][ T6322] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.326026][ T6322] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.350102][ T6322] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.370485][T10414] netlink: 'syz.2.10081': attribute type 1 has an invalid length. [ 894.381664][ T6322] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.393071][T10416] netlink: 'syz.3.10082': attribute type 1 has an invalid length. [ 894.493815][T10422] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 894.542513][T10421] geneve2: entered promiscuous mode [ 894.640047][T10429] syzkaller1: entered promiscuous mode [ 894.646276][T10429] syzkaller1: entered allmulticast mode [ 894.687545][T10426] dvmrp0: entered allmulticast mode [ 895.660153][T10495] xt_time: unknown flags 0xf4 [ 895.775419][T10497] netlink: 'syz.1.10106': attribute type 14 has an invalid length. [ 895.947099][T10518] netlink: 'syz.3.10111': attribute type 4 has an invalid length. [ 895.974218][T10518] netlink: 'syz.3.10111': attribute type 4 has an invalid length. [ 896.229681][T10535] tunl0: Caught tx_queue_len zero misconfig [ 896.343097][T10548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 896.351378][T10548] netlink: 'syz.1.10120': attribute type 21 has an invalid length. [ 896.492768][T10555] __nla_validate_parse: 12 callbacks suppressed [ 896.492790][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10123'. [ 896.515767][T10556] netlink: 'syz.0.10124': attribute type 1 has an invalid length. [ 896.566039][T10556] bond4: entered promiscuous mode [ 896.571480][T10556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.583559][T10558] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10125'. [ 896.584470][T10560] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.10122'. [ 896.643319][T10556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 896.664006][T10556] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 896.679237][T10556] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 896.692145][T10556] bond4: (slave vti0): making interface the new active one [ 896.700716][T10556] vti0: entered promiscuous mode [ 896.709016][T10556] bond4: (slave vti0): Enslaving as an active interface with an up link [ 897.191520][T10608] netlink: 'syz.1.10135': attribute type 1 has an invalid length. [ 897.277928][T10608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.342660][T10611] vlan2: entered promiscuous mode [ 897.380835][T10611] bond0: entered promiscuous mode [ 897.435109][T10611] vlan2: entered allmulticast mode [ 897.436788][T10608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10135'. [ 897.440291][T10611] bond0: entered allmulticast mode [ 897.509680][T10608] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 897.521982][T10608] bond0: (slave batadv2): making interface the new active one [ 897.530101][T10608] batadv2: entered promiscuous mode [ 897.546425][T10608] batadv2: entered allmulticast mode [ 897.573589][T10608] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 897.694437][T10630] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10140'. [ 897.753957][T10622] syzkaller0: entered promiscuous mode [ 897.766357][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10140'. [ 897.815642][T10622] syzkaller0: entered allmulticast mode [ 897.824557][T10633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.941718][T10646] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.10144'. [ 898.150872][T10660] netlink: 'syz.1.10145': attribute type 4 has an invalid length. [ 898.179370][T10660] netlink: 'syz.1.10145': attribute type 1 has an invalid length. [ 898.224862][T10660] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10145'. [ 898.343779][T10669] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10149'. [ 900.078971][T10649] gtp0: entered promiscuous mode [ 900.084125][T10649] gtp0: entered allmulticast mode [ 900.465419][T10685] syzkaller0: entered promiscuous mode [ 900.475192][T10685] syzkaller0: entered allmulticast mode [ 900.560734][T10669] ip6_vti0 speed is unknown, defaulting to 1000 [ 900.573125][T10689] 9o+4: renamed from lo (while UP) [ 900.715306][T10693] syzkaller0: entered promiscuous mode [ 900.727743][T10693] syzkaller0: entered allmulticast mode [ 900.747931][T10693] tipc: Started in network mode [ 900.753052][T10693] tipc: Node identity 9e1d546b0a73, cluster identity 4711 [ 900.773422][T10693] tipc: Enabled bearer , priority 0 [ 901.002848][T10669] lo speed is unknown, defaulting to 1000 [ 901.053545][T10707] netlink: 'syz.1.10161': attribute type 1 has an invalid length. [ 901.102289][T10707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.246473][T10709] bond4: (slave veth3): Enslaving as an active interface with a down link [ 901.313278][T10707] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 901.365939][T10717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10166'. [ 901.446008][T10690] tipc: Resetting bearer [ 901.544247][T10690] tipc: Disabling bearer [ 901.704629][T10737] netlink: 'syz.1.10169': attribute type 4 has an invalid length. [ 901.761389][T10739] netlink: 'syz.1.10169': attribute type 4 has an invalid length. [ 901.831329][T10747] netlink: 'syz.4.10173': attribute type 4 has an invalid length. [ 902.079977][T10761] xt_cgroup: path and classid specified [ 902.132453][T10765] openvswitch: netlink: Key 6 has unexpected len 17 expected 2 [ 902.204644][T10771] openvswitch: netlink: Key 6 has unexpected len 17 expected 2 [ 902.704651][T10796] __nla_validate_parse: 3 callbacks suppressed [ 902.704672][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10186'. [ 902.810550][T10796] syzkaller0: entered promiscuous mode [ 902.816928][T10796] syzkaller0: entered allmulticast mode [ 903.100336][T10829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10193'. [ 903.144629][ T9] IPVS: starting estimator thread 0... [ 903.258810][T10830] IPVS: using max 30 ests per chain, 72000 per kthread [ 903.703912][T10836] openvswitch: netlink: IP tunnel dst address not specified [ 903.793535][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10195'. [ 903.813059][T10838] IPv6: NLM_F_REPLACE set, but no existing node found! [ 904.917917][T10829] gretap0: entered promiscuous mode [ 904.925261][T10829] debugfs: 'hsr1' already exists in 'hsr' [ 904.931398][T10829] Cannot create hsr debugfs directory [ 904.937916][T10829] hsr1: entered promiscuous mode [ 904.945614][T10839] tipc: Enabling of bearer rejected, failed to enable media [ 905.072094][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10196'. [ 905.221896][T10858] netlink: 'syz.1.10201': attribute type 1 has an invalid length. [ 905.426455][T10872] syzkaller0: entered promiscuous mode [ 905.431987][T10872] syzkaller0: entered allmulticast mode [ 905.687262][T10889] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10211'. [ 905.722673][T10893] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10213'. [ 905.741305][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10212'. [ 905.744078][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10211'. [ 905.758337][T10893] netlink: 'syz.3.10213': attribute type 1 has an invalid length. [ 905.787381][T10895] syz_tun: entered promiscuous mode [ 905.793879][T10895] macvtap1: entered promiscuous mode [ 905.831695][T10893] bond2: entered promiscuous mode [ 905.839571][T10893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.879172][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10213'. [ 905.901667][T10893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 905.909208][T10893] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 905.921400][T10893] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 905.935310][T10893] bond2: (slave vcan1): making interface the new active one [ 905.942856][T10893] vcan1: entered promiscuous mode [ 905.957757][T10893] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 906.033667][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10216'. [ 906.161767][T10918] bond0: Master is either lo or non-ether device [ 906.314285][T10927] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 906.949569][T10972] block nbd1: Unsupported socket: should be TCP or UNIX. [ 907.058060][T10964] IPv6: NLM_F_REPLACE set, but no existing node found! [ 907.368900][T10988] Unsupported ieee802154 address type: 0 [ 907.444281][T10987] gtp0: left promiscuous mode [ 907.463914][T10987] gtp0: left allmulticast mode [ 907.495671][T10987] bond1: left promiscuous mode [ 907.510075][T10987] bond1: left allmulticast mode [ 907.521011][T10987] bond2: left allmulticast mode [ 907.548695][T10987] bond4: left promiscuous mode [ 907.553523][T10987] vti0: left promiscuous mode [ 907.768414][T11005] __nla_validate_parse: 2 callbacks suppressed [ 907.768435][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10241'. [ 907.804517][T11006] netlink: 'syz.1.10242': attribute type 21 has an invalid length. [ 907.829710][T11005] IPVS: Error connecting to the multicast addr [ 907.836652][T11006] IPv6: NLM_F_CREATE should be specified when creating new route [ 907.844537][T11006] netlink: 'syz.1.10242': attribute type 1 has an invalid length. [ 907.984595][T11017] bridge0: port 2(wlan0) entered blocking state [ 907.991923][T11017] bridge0: port 2(wlan0) entered disabled state [ 908.007063][T11017] mac80211_hwsim hwsim88 wlan0: entered allmulticast mode [ 908.033553][T11017] mac80211_hwsim hwsim88 wlan0: entered promiscuous mode [ 908.080194][T11017] bridge0: port 2(wlan0) entered blocking state [ 908.086713][T11017] bridge0: port 2(wlan0) entered forwarding state [ 908.838024][T11060] nbd: nbd0 already in use [ 908.910813][T11069] IPv6: syztnl2: Disabled Multicast RS [ 908.947754][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10257'. [ 908.986049][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10257'. [ 909.008138][T11071] IPVS: length: 126 != 24 [ 909.016295][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10257'. [ 909.136934][T11085] xt_hashlimit: size too large, truncated to 1048576 [ 909.599369][T11103] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10268'. [ 910.235745][T11136] netlink: 'syz.1.10279': attribute type 29 has an invalid length. [ 910.256749][T11136] netlink: 'syz.1.10279': attribute type 29 has an invalid length. [ 910.536645][T11143] netlink: 'syz.4.10281': attribute type 4 has an invalid length. [ 910.851257][T11160] syzkaller1: entered promiscuous mode [ 910.873695][T11160] syzkaller1: entered allmulticast mode [ 910.942661][T11168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10289'. [ 911.044135][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10289'. [ 911.189863][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10289'. [ 911.474492][T11186] netlink: 'syz.0.10294': attribute type 44 has an invalid length. [ 911.579700][T11196] netlink: 'syz.4.10297': attribute type 28 has an invalid length. [ 911.589507][T11196] netlink: 'syz.4.10297': attribute type 3 has an invalid length. [ 911.597857][T11196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10297'. [ 911.740232][T11204] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.10296'. [ 912.394300][T11243] tipc: Started in network mode [ 912.413510][T11243] tipc: Node identity , cluster identity 9 [ 912.437855][T11243] tipc: Failed to obtain node identity [ 912.443404][T11243] tipc: Enabling of bearer rejected, failed to enable media [ 912.902997][T11283] __nla_validate_parse: 2 callbacks suppressed [ 912.903015][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10320'. [ 913.007619][T11915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.597182][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 914.815546][T11314] delete_channel: no stack [ 914.853044][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10326'. [ 914.887369][T11316] netlink: 'syz.3.10326': attribute type 1 has an invalid length. [ 914.898587][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10327'. [ 914.911992][T11316] netlink: 'syz.3.10326': attribute type 2 has an invalid length. [ 914.925997][ T6316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.950719][T22802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.962293][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.172581][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10331'. [ 915.443579][T11367] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 915.706772][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10342'. [ 915.719425][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10342'. [ 915.730636][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10342'. [ 915.863633][T11393] netlink: 'syz.3.10344': attribute type 10 has an invalid length. [ 915.978022][T11398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.987428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.161984][T11401] netlink: 'syz.3.10346': attribute type 33 has an invalid length. [ 916.192169][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10349'. [ 916.262076][T11401] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 916.279221][T11401] bond3 (unregistering): Released all slaves [ 916.597723][T11424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.945669][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10362'. [ 916.956484][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10362'. [ 917.146282][ T8951] lec:lec_start_xmit: lec0:No lecd attached [ 917.177083][T11463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.777897][T11496] team0: Device gtp1 is up. Set it down before adding it as a team port [ 918.054064][T11516] __nla_validate_parse: 4 callbacks suppressed [ 918.054083][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10382'. [ 918.088856][T11516] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 918.132802][T11516] openvswitch: netlink: Multiple metadata blocks provided [ 918.197056][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.209738][T11521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.232931][T11521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.243768][T11521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.274899][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 918.329000][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10384'. [ 918.357515][T11526] netlink: 'syz.3.10386': attribute type 1 has an invalid length. [ 918.396456][T11526] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10386'. [ 918.432314][T11526] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10386'. [ 918.466966][T11535] netlink: 'syz.3.10386': attribute type 9 has an invalid length. [ 918.601333][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10391'. [ 918.697671][T11551] 8021q: VLANs not supported on bond0 [ 918.716102][T11551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10393'. [ 918.740120][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10395'. [ 918.801495][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10394'. [ 918.835475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.844605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.861558][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10396'. [ 918.907178][T11563] xt_hashlimit: size too large, truncated to 1048576 [ 918.972889][T11571] netlink: 'syz.0.10396': attribute type 1 has an invalid length. [ 919.078217][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10401'. [ 919.146101][T11575] netlink: 'syz.1.10401': attribute type 1 has an invalid length. [ 919.253240][T11583] tipc: Enabled bearer , priority 0 [ 919.265910][T11583] syzkaller0: entered promiscuous mode [ 919.271566][T11583] syzkaller0: entered allmulticast mode [ 919.315643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.338190][T11582] tipc: Resetting bearer [ 919.396338][T11582] tipc: Disabling bearer [ 919.635266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.643742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.652124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.660881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.691333][T11605] netlink: 'syz.1.10409': attribute type 1 has an invalid length. [ 919.834239][T11611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.812128][T11670] netlink: 'syz.4.10430': attribute type 8 has an invalid length. [ 921.052035][T11684] syzkaller0: entered promiscuous mode [ 921.072516][T11684] syzkaller0: entered allmulticast mode [ 921.214259][T11694] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 921.235055][T11694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 921.276146][T11694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 921.352880][ T6316] batman_adv: batadv2: MLD Querier appeared [ 921.400803][ T6316] batman_adv: batadv1: MLD Querier appeared [ 921.442835][T11717] netlink: 'syz.3.10443': attribute type 11 has an invalid length. [ 921.613542][T11724] veth1_macvtap: renamed from macvlan0 [ 921.655995][T11725] syzkaller0: entered promiscuous mode [ 921.661746][T11725] syzkaller0: entered allmulticast mode [ 921.912884][T11731] bond2: entered promiscuous mode [ 921.942969][T11731] macvlan0: entered promiscuous mode [ 921.949598][T11731] macvlan0: entered allmulticast mode [ 921.957236][T11731] bond2: (slave macvlan0): Opening slave failed [ 922.431416][T11765] x_tables: duplicate entry at hook 1 [ 922.575268][T11769] pimreg: entered allmulticast mode [ 922.790992][T11778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.812455][T11779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.914901][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 922.923076][ C0] lec:lec_tx_timeout: lec0 [ 923.307509][T11804] netlink: 'syz.1.10465': attribute type 30 has an invalid length. [ 923.469166][T11813] atomic_op ffff8880a4ebb198 conn xmit_atomic 0000000000000000 [ 923.509045][T11813] __nla_validate_parse: 12 callbacks suppressed [ 923.509068][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10467'. [ 923.604596][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10468'. [ 923.667883][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10467'. [ 923.862533][T11830] netlink: 288 bytes leftover after parsing attributes in process `syz.3.10472'. [ 924.424599][T11864] net_ratelimit: 8 callbacks suppressed [ 924.424619][T11864] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 924.436199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.617258][T11877] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10482'. [ 924.680408][T11877] netlink: Conntrack attr has 3 unknown bytes [ 924.786542][T11886] Unsupported ieee802154 address type: 0 [ 924.819974][T11891] openvswitch: netlink: IP tunnel dst address not specified [ 924.974503][T11899] Cannot find del_set index 49151 as target [ 924.992956][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10487'. [ 925.161048][ T306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.733073][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10491'. [ 926.753766][T11898] netlink: 'syz.0.10487': attribute type 1 has an invalid length. [ 926.866006][T11931] netlink: 666 bytes leftover after parsing attributes in process `syz.1.10493'. [ 926.950702][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10494'. [ 927.069695][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10497'. [ 927.173278][T11952] netlink: 'syz.1.10498': attribute type 64 has an invalid length. [ 927.454606][T11959] netlink: 'syz.1.10501': attribute type 33 has an invalid length. [ 927.611587][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.618980][T11962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.626549][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.633710][T11962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.700177][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.759867][T11962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 927.801129][T11962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 927.941691][T11980] netlink: 'syz.3.10505': attribute type 3 has an invalid length. [ 928.343322][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 928.806782][T12003] policy can only be matched on NF_INET_PRE_ROUTING [ 928.806815][T12003] unable to load match [ 928.831799][T12005] sctp: [Deprecated]: syz.2.10513 (pid 12005) Use of int in max_burst socket option deprecated. [ 928.831799][T12005] Use struct sctp_assoc_value instead [ 928.934958][T12006] x_tables: duplicate underflow at hook 1 [ 928.957130][T12011] __nla_validate_parse: 4 callbacks suppressed [ 928.957152][T12011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10515'. [ 928.980821][T12012] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10516'. [ 928.992387][T12012] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10516'. [ 929.004032][T12012] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10516'. [ 929.023588][T11980] ip6_vti0 speed is unknown, defaulting to 1000 [ 929.154060][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10517'. [ 929.234319][T11980] lo speed is unknown, defaulting to 1000 [ 929.250051][T12019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.330788][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10519'. [ 929.356359][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10519'. [ 929.555146][T12011] siw: device registration error -23 [ 929.692337][T12032] sctp: [Deprecated]: syz.1.10523 (pid 12032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 929.692337][T12032] Use struct sctp_sack_info instead [ 929.741689][T12039] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10522'. [ 929.753801][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10524'. [ 929.774145][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10522'. [ 930.173900][T12068] netlink: 'syz.2.10529': attribute type 1 has an invalid length. [ 930.276481][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.538910][T12077] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 930.921742][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.011796][T12110] openvswitch: netlink: IP tunnel dst address not specified [ 931.568750][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 932.207218][T12190] netlink: 'syz.1.10565': attribute type 1 has an invalid length. [ 932.323559][T12197] netlink: 'syz.0.10566': attribute type 1 has an invalid length. [ 932.342119][T12197] netlink: 'syz.0.10566': attribute type 3 has an invalid length. [ 932.351113][T12197] NCSI netlink: No device for ifindex 813332851 [ 932.427797][T12162] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.462475][T12201] netlink: 'syz.1.10568': attribute type 1 has an invalid length. [ 932.480914][T12201] netlink: 'syz.1.10568': attribute type 4 has an invalid length. [ 932.755026][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 932.912800][T12162] lo speed is unknown, defaulting to 1000 [ 933.046494][T12235] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 933.068132][T12235] team0: Port device batadv3 added [ 933.273066][T12248] Bluetooth: MGMT ver 1.23 [ 933.290997][T12248] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 933.305930][T12250] netlink: 'syz.1.10583': attribute type 10 has an invalid length. [ 933.333429][T12250] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 933.353846][T12250] batman_adv: batadv0: Adding interface: netdevsim0 [ 933.361726][T12252] openvswitch: netlink: Flow key attr not present in new flow. [ 933.393503][T12250] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.441393][T12250] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 933.487923][T12261] netlink: 'syz.1.10583': attribute type 10 has an invalid length. [ 933.500850][T12261] batman_adv: batadv0: Interface deactivated: dummy0 [ 933.520755][T12261] batman_adv: batadv0: Removing interface: dummy0 [ 933.542591][T12261] team0: Port device dummy0 added [ 933.599766][T12266] syzkaller0: entered promiscuous mode [ 933.624392][T12266] syzkaller0: entered allmulticast mode [ 933.967633][ T6286] Bluetooth: hci3: command 0x0405 tx timeout [ 934.061170][T12281] bond3: entered promiscuous mode [ 934.076269][T12281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 934.176030][T12301] syzkaller0: entered promiscuous mode [ 934.181813][T12301] syzkaller0: entered allmulticast mode [ 934.508093][T12319] netlink: 'syz.0.10603': attribute type 2 has an invalid length. [ 934.672113][T12326] macvtap1: entered promiscuous mode [ 934.681883][T12326] macvtap1: entered allmulticast mode [ 934.690664][T12326] veth1_vlan: entered allmulticast mode [ 934.755946][T11915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.800832][T12327] macvtap2: entered promiscuous mode [ 934.807828][T12327] macvtap2: entered allmulticast mode [ 935.053000][T12348] netlink: 'syz.3.10611': attribute type 3 has an invalid length. [ 935.553273][T12359] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 935.598561][T12364] ip6tnl0: Caught tx_queue_len zero misconfig [ 935.667943][T12369] __nla_validate_parse: 17 callbacks suppressed [ 935.667970][T12369] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10615'. [ 936.035798][ T6322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.914932][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 936.923082][ C0] lec:lec_tx_timeout: lec0 [ 937.504344][T12319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.042635][T12441] Unsupported ieee802154 address type: 0 [ 938.683596][T12482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.693167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.698154][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10645'. [ 938.744007][T12482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.746301][T12484] veth3: entered allmulticast mode [ 938.758559][ T6322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.996744][T12490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.043319][T12480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.052330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.141556][T12437] ip6_vti0 speed is unknown, defaulting to 1000 [ 939.223605][T12506] syzkaller1: entered promiscuous mode [ 939.230320][T12506] syzkaller1: entered allmulticast mode [ 939.274184][T12510] netlink: 516 bytes leftover after parsing attributes in process `syz.1.10651'. [ 939.288744][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10650'. [ 939.335841][T12506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10650'. [ 939.345789][T12513] netlink: 'syz.0.10652': attribute type 12 has an invalid length. [ 939.354180][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10650'. [ 939.376198][T12513] netlink: 'syz.0.10652': attribute type 29 has an invalid length. [ 939.384138][T12513] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10652'. [ 939.445301][T12513] netlink: 59 bytes leftover after parsing attributes in process `syz.0.10652'. [ 939.506732][T12525] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10655'. [ 939.540871][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10655'. [ 939.772236][T12437] lo speed is unknown, defaulting to 1000 [ 940.195758][T12554] xfrm1: entered promiscuous mode [ 940.200878][T12554] xfrm1: entered allmulticast mode [ 940.426087][T12570] veth0_to_bridge: entered promiscuous mode [ 940.497779][T12569] veth0_to_bridge: left promiscuous mode [ 940.523375][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.600604][T12578] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 940.766295][T12587] tipc: Enabled bearer , priority 2 [ 941.149515][T12606] __nla_validate_parse: 3 callbacks suppressed [ 941.149536][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10679'. [ 941.168763][T12604] netlink: 'syz.0.10678': attribute type 1 has an invalid length. [ 941.234034][T12606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10679'. [ 941.285285][T12606] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 941.382953][T12619] batadv_slave_0: entered promiscuous mode [ 941.405569][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10683'. [ 941.450307][T12618] batadv_slave_0: left promiscuous mode [ 941.797689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.816738][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.826247][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.943582][ T9] tipc: Node number set to 2490258539 [ 941.963767][T12653] netlink: 'syz.2.10690': attribute type 4 has an invalid length. [ 941.988327][T12659] netlink: 'syz.4.10693': attribute type 1 has an invalid length. [ 941.999813][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10693'. [ 942.009434][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10693'. [ 942.021152][T12656] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10694'. [ 942.035405][T12656] openvswitch: netlink: Flow key attr not present in new flow. [ 942.163625][T12655] netem: incorrect ge model size [ 942.174991][T12655] netem: change failed [ 942.186116][T12659] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 942.352979][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10701'. [ 942.435617][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 942.581643][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10704'. [ 942.637690][T12687] : renamed from veth1_vlan [ 942.652833][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.664952][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.702592][T12704] netlink: 'syz.4.10706': attribute type 9 has an invalid length. [ 942.722471][T12704] netlink: 'syz.4.10706': attribute type 11 has an invalid length. [ 942.757712][T12704] netlink: 'syz.4.10706': attribute type 12 has an invalid length. [ 942.766419][T12700] netlink: 'syz.4.10706': attribute type 13 has an invalid length. [ 942.803725][T12704] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.10706'. [ 942.818997][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10706'. [ 942.860400][T12709] netlink: 'syz.1.10707': attribute type 30 has an invalid length. [ 943.626444][T12761] bond3 (unregistering): Released all slaves [ 943.884599][T12762] syzkaller0: entered promiscuous mode [ 943.898681][T12782] sctp: [Deprecated]: syz.3.10726 (pid 12782) Use of int in maxseg socket option. [ 943.898681][T12782] Use struct sctp_assoc_value instead [ 943.914495][T12762] syzkaller0: entered allmulticast mode [ 943.936318][T12782] ip_vti0: entered promiscuous mode [ 946.115338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.140320][T12817] validate_nla: 4 callbacks suppressed [ 946.140340][T12817] netlink: 'syz.2.10736': attribute type 1 has an invalid length. [ 946.142780][T12813] syzkaller0: entered promiscuous mode [ 946.169507][T12817] netlink: 'syz.2.10736': attribute type 3 has an invalid length. [ 946.179939][T12817] __nla_validate_parse: 14 callbacks suppressed [ 946.179959][T12817] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10736'. [ 946.199593][T12817] NCSI netlink: No device for ifindex 813332851 [ 946.211712][T12813] syzkaller0: entered allmulticast mode [ 946.251726][T12813] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10735'. [ 946.670802][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10742'. [ 946.682675][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10742'. [ 946.835373][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10743'. [ 946.920065][T12857] syzkaller0: entered promiscuous mode [ 946.934951][T12857] syzkaller0: entered allmulticast mode [ 946.988980][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10747'. [ 947.066634][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10747'. [ 947.339233][T12874] bond5: entered promiscuous mode [ 947.350081][T12874] bond5: entered allmulticast mode [ 947.366132][T12874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 947.555929][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.622272][T12900] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10757'. [ 947.973065][T12923] vlan3: entered promiscuous mode [ 947.984694][T12923] bridge0: entered promiscuous mode [ 948.170324][T12940] netlink: 'syz.2.10767': attribute type 13 has an invalid length. [ 948.170324][T12939] netlink: 'syz.2.10767': attribute type 13 has an invalid length. [ 948.847117][T17387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.867477][T12983] 9o+4: entered allmulticast mode [ 948.995877][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 949.305689][T13005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10782'. [ 949.704664][T13022] delete_channel: no stack [ 949.767846][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10787'. [ 950.116023][T13042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.353409][T13061] sctp: [Deprecated]: syz.1.10798 (pid 13061) Use of int in max_burst socket option. [ 950.353409][T13061] Use struct sctp_assoc_value instead [ 950.509412][T13068] xt_l2tp: v2 tid > 0xffff: 1114244 [ 950.628554][T13073] openvswitch: netlink: Flow key attr not present in new flow. [ 950.755536][T13083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 951.139415][T13112] netlink: 'syz.2.10815': attribute type 29 has an invalid length. [ 951.148514][T13112] netlink: 'syz.2.10815': attribute type 29 has an invalid length. [ 951.202962][T13112] bond4: (slave erspan0): Device is not bonding slave [ 951.214027][T13112] bond4: option active_slave: invalid value (erspan0) [ 951.225521][T13112] bond4 (unregistering): Released all slaves [ 951.288349][T13124] __nla_validate_parse: 11 callbacks suppressed [ 951.288369][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10818'. [ 951.307096][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10818'. [ 951.401012][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.464113][T13133] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 951.473234][T13133] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 951.482145][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10821'. [ 951.734341][T13150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10827'. [ 951.819343][T13152] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10828'. [ 951.997839][T13169] PKCS7: Unknown OID: [4] (bad) [ 952.002904][T13169] PKCS7: Only support pkcs7_signedData type [ 952.039151][T22802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.108279][T13171] lo: Caught tx_queue_len zero misconfig [ 952.131504][T13171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10833'. [ 952.266362][T13180] sctp: [Deprecated]: syz.3.10836 (pid 13180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 952.266362][T13180] Use struct sctp_sack_info instead [ 952.572348][T13197] netlink: 'syz.0.10842': attribute type 1 has an invalid length. [ 952.642173][T13194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 952.670722][T13197] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 952.682355][ T306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.856362][T13211] 9o+4: Caught tx_queue_len zero misconfig [ 952.867076][T13212] syzkaller0: entered promiscuous mode [ 952.873209][T13212] syzkaller0: entered allmulticast mode [ 952.874580][T13211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.040619][T13224] sctp: [Deprecated]: syz.4.10847 (pid 13224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 953.040619][T13224] Use struct sctp_sack_info instead [ 953.209094][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10853'. [ 953.245786][T13234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10853'. [ 953.470189][T13256] netlink: 444 bytes leftover after parsing attributes in process `syz.1.10857'. [ 953.490052][T13257] netlink: 'syz.4.10856': attribute type 17 has an invalid length. [ 953.515718][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10856'. [ 953.790217][T13272] 9o+4: renamed from lo (while UP) [ 954.114987][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 954.536623][T13303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 954.696362][T13311] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 955.295992][T13353] ip6gre0: entered promiscuous mode [ 955.316227][ T6320] unregister_netdevice: waiting for bond5 to become free. Usage count = 2 [ 958.436502][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.995014][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 961.638143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.918017][T11915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.565211][ T306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog