last executing test programs: 2m8.311324999s ago: executing program 3 (id=2405): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f00000000c0), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24004001) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000000a0b04000000000000000002000000280004802400018009000100686173680000000014000280080007400000000108000240000000120900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = socket(0x1f, 0x5, 0xfffffff7) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5386}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x14010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) 2m7.787240115s ago: executing program 3 (id=2413): syz_emit_ethernet(0xb6, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa26ffffffffffff86dd6080000100803a0020010000000000000000000000000000ff02000000000000000000000000000000000000000000000120010000000000000000000000000001fe8000000000000000000000000000aafe800000000000000000000000000013010390787f00000060e1f588000762ff00000000000000000000000000000000000000000000000000000000000000017b010000004f873e"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c011}, 0x20000880) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000a873000071109600000000009500220000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m7.650408917s ago: executing program 3 (id=2416): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2m7.558811902s ago: executing program 3 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'veth0_to_hsr\x00', {'ip_vti0\x00'}, 0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 2m7.404919042s ago: executing program 3 (id=2420): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 2m7.336026233s ago: executing program 3 (id=2421): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40804}, 0x20004018) 1m52.291983654s ago: executing program 32 (id=2421): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40804}, 0x20004018) 1m4.915434606s ago: executing program 1 (id=3395): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000400)=0xc) socket$unix(0x1, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) 1m4.021095605s ago: executing program 1 (id=3410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x1d, &(0x7f00000000c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @jmp={0x5, 0x1, 0x0, 0x6, 0x5, 0x4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @device_b, @device_b}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) 1m3.227732062s ago: executing program 1 (id=3427): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x50, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x50) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1m2.959614189s ago: executing program 1 (id=3431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x8, 0xfd, 0x6}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300040000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'syzkaller0\x00', 0x200}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x8, 0xfd, 0x6}]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300040000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'syzkaller0\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) (async) 1m2.735243367s ago: executing program 1 (id=3437): r0 = socket(0x2d, 0x800, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xfffffffffffffffd) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000012c0)={0x2, 0x7c, "ede8f4ca8f8f970589f48f872a12f1d5691ef96bfa6ebc434e1f9f9ec06bc5ae05e0d98c406f8e0c92d60ae7b62d17940308731505abef171501ba76f5fd1958a66081d2683afdb7f9ec89111e44abe9305cd664fe0068461b2200692245a59006081101184589fb7930e024c724572f9cc0204434a410284b959094"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) gettid() gettid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x2009c058) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r9) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x1400000000, 0x7fffffffffffffff, 0x9, 0x1bdd, 0x8, 0x1, 0x100, 0x3, 0x40, 0xfffffffd, 0x0, 0xaade, 0x1c7e, 0x40}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000000180)={r12, 0x2}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) close(r0) 1m2.208290236s ago: executing program 1 (id=3442): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) unshare(0x20000400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000440)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r2 = accept(r1, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x64, 0x0, 0x414, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000090}, 0x840) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_police={0x8c, 0x4, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x4}}]]}, {0x21, 0x6, "3a6836d35246319e4732f34548d5e1bc9c63890c66a67c5a8a5dbd1928"}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xd4}}, 0x0) 47.189556255s ago: executing program 33 (id=3442): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) unshare(0x20000400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000440)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) r2 = accept(r1, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x64, 0x0, 0x414, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000090}, 0x840) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_police={0x8c, 0x4, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x4}}]]}, {0x21, 0x6, "3a6836d35246319e4732f34548d5e1bc9c63890c66a67c5a8a5dbd1928"}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xd4}}, 0x0) 1.929421802s ago: executing program 2 (id=4452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="c3aa0000004a6d8fd8c1f558c6947d009500000000000000eeb37a516c23c5c2fa70670bab5c607a6ade4f1b8b0b6e0bc919e8b830a7003c721f10494396642724a9b2f3b1742321b303588d4112d3c61c1f610d9cf3f299cd"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) splice(r0, 0x0, r5, 0x0, 0x47, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="c3aa0000004a6d8fd8c1f558c6947d009500000000000000eeb37a516c23c5c2fa70670bab5c607a6ade4f1b8b0b6e0bc919e8b830a7003c721f10494396642724a9b2f3b1742321b303588d4112d3c61c1f610d9cf3f299cd"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) splice(r0, 0x0, r5, 0x0, 0x47, 0x0) (async) 1.673380688s ago: executing program 2 (id=4458): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$tcp_mem(r2, &(0x7f0000000500)={0x8, 0x20, 0x5, 0x20, 0x2}, 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x97ffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000016", @ANYRES16=0x0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r5, @ANYBLOB="050029000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x20000000, 0x5}, 0x10}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) 1.598666275s ago: executing program 6 (id=4459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80102812}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x164, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x28, 0x8, "ef73b56cd3d5766e75f05aa8dc7b6db2e642970a8e2ecbdf9433633e8e7b2604d7a80d43"}, @NFTA_OBJ_USERDATA={0x91, 0x8, "8e5363da4857397d52ad97a6bec33585994cb47875b02cd3cc9b72e0c668db7833144646bb089f3608e572f1306b5b99661a69d69662804cf99935b08f94b14797a15d87457bdf1cb34446ab2527a172016b714e9ea59f6fbab9e710582bbb73db423ee7521e8f2be79589c489570f05e5a302f26f99991e544bbc24a8307ee0f39bf280cc6711b1a97ac8abdc"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "f451cf567099be776e3d5f699afd5f058754c7b5c7e06d15dd2c868438eaa3c2ed621fe27f29ea9b475d5f24d15b469086cfaf25c4ede1bb8ef1c90573de1c04dd8c097806fd1d7481e3ba6c5cc0aafd606c0ab23bb0bc76da29d496b64200da5483685852e9d2e7d836b021c156ba7cbeb04b5b6d3c6b5b9e"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1ec, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x19c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1fffc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71b9067}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}, @NFT_MSG_DELRULE={0x88, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x55, 0x7, 0x1, 0x0, "bda956d3cfcf8dbdd88fb87df3a1b3ac34c4a836487bdf75bc3e6c09ff23f5faef498f6aff7456aca9eab506cec76ccb2181ba2b26212c26f99ef1b4912a0fb65ccbc50d34cbc91f8689543af5f4237a3e"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x41c}, 0x1, 0x0, 0x0, 0x50}, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}}, 0x0) 1.512352677s ago: executing program 4 (id=4460): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket(0x10, 0x803, 0x0) r2 = gettid() r3 = getpid() sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000005a00000127bd7000ffdbdf2500080001000200000008000200", @ANYRES32=r2, @ANYBLOB="f647170800a90001761e2c79e6ff4b0cab419a00993708000100e66bd70ba670f9c685a5fba0bbe9fefa4d9447003870bb785ec70cd798b8e9b3c0bb939e1789cc9e2acdfb12b7925d32e51732a5a2503efa244ab76d53021bf176a89ba74f3538730185d9e3072ac2554d428f3a429851bc9e56e5b2b455f813b29bb7086c38457dc103abe0033cddf5422478b3e68c13419d5d5d6dd0dd779877bd13979a6d9c284824e60ea372add611a13037df7c4a52a590177a79446c0b857cd24de54946796cdb", @ANYRES32, @ANYBLOB="080001000200000008000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000200)=@ethtool_stats={0x1d, 0x4, [0x3, 0xe38, 0xf17, 0x8ed]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0xfffffb46, 0x4, {{0x20, 0x4, 0x0, 0x2, 0x80, 0x66, 0x0, 0xe8, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x10, 0xb7, 0x0, 0x3, [0xfffff800, 0x8, 0x1]}, @timestamp={0x44, 0xc, 0xb8, 0x0, 0x3, [0x0, 0xd52]}, @ssrr={0x89, 0xb, 0xb5, [@local, @local]}, @timestamp_addr={0x44, 0x44, 0x18, 0x1, 0xd, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7caa}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@empty, 0xc}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x2}, {@empty, 0x3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) 1.410408076s ago: executing program 6 (id=4463): r0 = socket$inet6(0x10, 0x3, 0x0) close(r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4200, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x800) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x0, @multicast1}}) 1.347563949s ago: executing program 2 (id=4464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x2100}}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001800dd8d26bd7000000000000200800017000006"], 0x1c}}, 0x8c0) 1.216319316s ago: executing program 4 (id=4467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}]}, 0x30}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0xa, 0x6, 0x107, 0x0, 0x0, {0xfecceba94d54d232, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080) r6 = socket(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, &(0x7f0000000200)}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000000c0)={0x0, 'xfrm0\x00', {0x3}, 0x7}) 1.216054298s ago: executing program 2 (id=4468): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) 1.177636543s ago: executing program 6 (id=4470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) 1.104345364s ago: executing program 0 (id=4471): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000220a01"], 0xc8}}, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.08602591s ago: executing program 4 (id=4472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000103afffe800000000091a3af52e309e2b900aa0000000000000000000000000000000186009078002d0600990900000b000000"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r0, 0xe0d, 0x5, 0x2}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000480)=0x6, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x105, @loopback}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x0, {[0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x20]}}, 0x5c) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000004c0)=0x6) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0xc8, 0x8, 0x1d0, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0x72a443585ff2798f, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x9f, {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2}, {0x3, 0x3, 0x1}, {0x1, 0x1, 0x4}, 0x5, 0x80002}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 1.066285641s ago: executing program 2 (id=4473): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r0, @ANYRESHEX=r2], 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 1.011209709s ago: executing program 6 (id=4475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x200, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1d8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52570463}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x3b, 0x6, "d40d740d9995ab564ae68a7c93be4e8eb55af1ed777713c2418a533df10458871d5dbd7547cfd9f4b1f144220d8b402c45e7868197e6dd"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x13, 0x6, "1d4484ce78cd72ddd2ff745bc9345a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2d8}, 0x1, 0x0, 0x0, 0x8011}, 0x4c085) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r1, &(0x7f0000000440)="d039e0add840d1e1d9e3cfe0db4a1cc56f399dac1224152cc571a4cb63c185a457366a5f5b05120b58352bf8b62e02dcf4de00551b490c19bdaa2d9d4afc2c9d9e2d7b278687d9e0a95ec7d97c91e5d3775debf502a3128cd6863794a43a51cbffe48dbd99b5170c1148b3c0d26deee028bb7e3aacb57e963584a51cb4974f215f3f9e893c5cc98c6c29d2aba87dd4ace4a83e6fa2c61fd2aa9d29553707f79716e197fffcabe049bc2b5c5d17e928e48ce3ded9216fe7ce70a0b05522fa1e612bcaf581da9225d5445a5929e5a5872149838c221912c273b6afd9d5fee91a4f6b3aad7777"}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x34}}, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) syz_init_net_socket$x25(0x9, 0x5, 0x4000000) 972.554742ms ago: executing program 0 (id=4476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x620b}, 0x0) 914.502302ms ago: executing program 5 (id=4477): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000a000000c000"/37], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 819.583508ms ago: executing program 5 (id=4478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @private2}]}, 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r5, 0x2b, 0x1, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40) 819.298795ms ago: executing program 0 (id=4479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@broadcast, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2000000000000, 0x0, 0x0, 0x3}, {}, 0x40}, 0x0, 0x5dfe}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0x104}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r0, 0x12504000) 791.584194ms ago: executing program 0 (id=4480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 778.463057ms ago: executing program 2 (id=4481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0xfffa, 0x4, 0x830a, 0x2, 0xfffffc50, 0x7, 0x5, 0x40, r3}, &(0x7f0000000080)=0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 648.226429ms ago: executing program 6 (id=4482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800070002000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x2, 0x8, 0x8}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0xfc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x45001}, 0x4000) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000095}, 0x10) 447.169821ms ago: executing program 5 (id=4483): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0x20, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r2, 0x4, 0x0, 0x6, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x5f, 0x30]}}, &(0x7f0000000180)=""/57, 0x35, 0x39}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x20, 0xba, 0x6, 0x6, 0x6001, r3, 0x9, '\x00', r7, r8, 0x1, 0x2, 0x2}, 0x50) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x6a4}}}}}}, 0x0) 439.903874ms ago: executing program 0 (id=4484): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x60, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x60}}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) 303.763554ms ago: executing program 4 (id=4485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000240001040000000009000000000000000600030081000000"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 300.211208ms ago: executing program 5 (id=4486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="43c00000880306001c0012800a00010069706fa0e9fe4f42cf69620d00000c000280060003000000000008000500d27e69a1ee3591eafe42b06aa86e7cd550d252eea35b905fa2d973fd37ec08273e071deba6ae3867b6d451551287787392f1bcfd66f3ad2681ea15f131822f60f672279eadf898888bc7", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x15, 0x0, 0x0) connect$inet(r5, &(0x7f0000000c80)={0x2, 0x4e20, @multicast2}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', r4, 0x0, 0xea, 0x8, 0x5, 0x4, @mcast1, @remote, 0x8, 0x8000, 0xb, 0x7ff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'erspan0\x00', r10, 0x40, 0x1, 0x5, 0x10001, {{0xa, 0x4, 0x1, 0x38, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp={0x44, 0x14, 0x30, 0x0, 0x8, [0xffff72fe, 0x80000000, 0x5, 0xb]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', r4, 0x2f, 0x2, 0x7, 0x7b, 0x81, @remote, @empty, 0x10, 0x10, 0x2, 0xffff}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xfc1a47ca5dc4917a}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x170, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40080}, 0x80c0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0xf8, 0x270, 0xffffffff, 0x1c8, 0x270, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, &(0x7f0000000080), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'wlan0\x00', 'ip6gretap0\x00', {}, {}, 0x88, 0x0, 0x10}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "52cd", 0x1}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xe, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @icmp_id=0x67, @gre_key=0x7ff}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff000000, 0x0, 'ip6tnl0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x73, 0x1, 0x80}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "b46d"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @remote, @gre_key=0x8, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @empty, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x21, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @broadcast, @loopback, @icmp_id=0x65, @icmp_id=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x88046080}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x88, r16, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x8044}, 0x4004) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r14, 0x10, 0x70bd27, 0x585, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10010840}, 0x10) 291.678174ms ago: executing program 6 (id=4487): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x5, @private=0xa010100}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 163.401325ms ago: executing program 4 (id=4488): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) socket(0x3, 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000009f0001000000000095e7ffffff0000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) 59.839118ms ago: executing program 5 (id=4489): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000001140)="62cd309cd5ceb7455eadb98a10eb786c9d61363a09aba8c9c0d3e8ecccd321882363307ee15c1a57a4fd96b9afcc206e536d5ce63cb84fe2b56f9531d689d9ea4d4a138d62bb51b0034deb063c61d6a9cd470ef3dd4e0a3171d6c25a9348a680a577b8b0b6a63d655480a484e9bfb67306ab923e373ef1ac60ffadad5565631d393e", 0x82) tee(r0, r7, 0x81, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xe) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0xc, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.kill\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 59.089137ms ago: executing program 0 (id=4490): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0xfffffffe, 0x4) 26.457878ms ago: executing program 5 (id=4491): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000140)=r1) 0s ago: executing program 4 (id=4492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x9, 0x2, 0x6, 0x2}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="feffffff00000000340012800e0001006e7036037273c300e70600"/39, @ANYRES64=r3], 0x5c}}, 0x40081) kernel console output (not intermixed with test programs): lmulticast mode [ 420.486950][T15041] __nla_validate_parse: 77 callbacks suppressed [ 420.486967][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 420.613102][T15048] tipc: Enabled bearer , priority 2 [ 420.627397][T15051] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2644'. [ 421.017465][T15076] tipc: Enabled bearer , priority 0 [ 421.025314][T15076] syzkaller0: entered promiscuous mode [ 421.030881][T15076] syzkaller0: entered allmulticast mode [ 421.042184][T15076] tipc: Enabling of bearer rejected, already enabled [ 421.053971][T15075] tipc: Resetting bearer [ 421.100839][T15075] tipc: Disabling bearer [ 421.255571][T15092] bridge0: port 3(veth0_to_bridge) entered blocking state [ 421.263015][T15092] bridge0: port 3(veth0_to_bridge) entered disabled state [ 421.270625][T15092] veth0_to_bridge: entered allmulticast mode [ 421.278921][T15092] veth0_to_bridge: entered promiscuous mode [ 421.610667][ T9456] tipc: Subscription rejected, illegal request [ 421.626187][T15114] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2652'. [ 421.628622][T15115] xt_l2tp: v2 doesn't support IP mode [ 421.681742][T15117] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 422.180788][T15159] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2666'. [ 422.237560][T15163] bond9: entered promiscuous mode [ 422.242630][T15163] bond9: entered allmulticast mode [ 422.253292][T15163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.317994][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 422.345348][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 422.369668][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 422.383640][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2670'. [ 422.501624][T15187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2673'. [ 422.620750][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2676'. [ 423.590099][T15257] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 423.603678][T15269] tipc: Enabling of bearer rejected, failed to enable media [ 424.095166][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.251913][T15279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.286568][T15279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.299454][T15279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.311462][T15279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.323186][T15279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.360231][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.367642][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.378528][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.402118][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.417415][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 425.502455][T15314] __nla_validate_parse: 6 callbacks suppressed [ 425.502471][T15314] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2704'. [ 425.526247][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2705'. [ 425.538375][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2705'. [ 425.619637][T15326] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 425.631825][T15326] netlink: 'syz.1.2708': attribute type 2 has an invalid length. [ 425.659874][T15326] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 425.726861][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2711'. [ 425.771260][T15336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.881017][T15346] netlink: 'syz.1.2713': attribute type 17 has an invalid length. [ 425.889146][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 425.914432][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2713'. [ 426.091203][T15360] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2716'. [ 426.135267][T15277] chnl_net:caif_netlink_parms(): no params data found [ 426.431480][T15277] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.443763][T15277] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.465180][T15277] bridge_slave_0: entered allmulticast mode [ 426.472900][T15277] bridge_slave_0: entered promiscuous mode [ 426.486645][T15277] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.495797][T15277] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.503471][T15277] bridge_slave_1: entered allmulticast mode [ 426.525504][T15277] bridge_slave_1: entered promiscuous mode [ 426.573980][T15388] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 426.575297][T15279] Bluetooth: hci5: command tx timeout [ 426.607173][T15389] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 426.679192][T15277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.707999][T15277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.835243][T15277] team0: Port device team_slave_0 added [ 426.851689][T15277] team0: Port device team_slave_1 added [ 426.855206][T15401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2728'. [ 426.918257][T15401] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2728'. [ 426.946290][T15401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2728'. [ 426.948010][T15277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.962354][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.991400][T15277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.018890][T15277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.042274][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.069735][T15277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.159102][T15415] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 427.206556][T15277] hsr_slave_0: entered promiscuous mode [ 427.221556][T15277] hsr_slave_1: entered promiscuous mode [ 427.236242][T15277] debugfs: 'hsr0' already exists in 'hsr' [ 427.255601][T15277] Cannot create hsr debugfs directory [ 427.367523][T15428] bond0: entered promiscuous mode [ 427.376275][T15428] batadv0: entered promiscuous mode [ 427.382808][T15428] debugfs: 'hsr1' already exists in 'hsr' [ 427.389436][T15428] Cannot create hsr debugfs directory [ 427.395722][T15428] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 427.407441][T15428] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 427.711677][T15277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.731996][T15277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.771231][T15277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.784797][T15277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.818034][T15450] IPv6: sit3: Disabled Multicast RS [ 427.824489][T15450] sit3: entered allmulticast mode [ 427.857571][T15446] 8021q: VLANs not supported on syzkaller1 [ 427.866390][T15446] syzkaller1: entered promiscuous mode [ 427.871980][T15446] syzkaller1: entered allmulticast mode [ 428.106595][T15277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.154726][T15277] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.188883][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.196100][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.220475][T15481] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.236690][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.243860][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.439352][T15498] sctp: [Deprecated]: syz.0.2754 (pid 15498) Use of int in max_burst socket option. [ 428.439352][T15498] Use struct sctp_assoc_value instead [ 428.471088][T15497] syzkaller0: entered promiscuous mode [ 428.483800][T15497] syzkaller0: entered allmulticast mode [ 428.656643][T15279] Bluetooth: hci5: command tx timeout [ 428.740018][T15519] sctp: [Deprecated]: syz.0.2758 (pid 15519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.740018][T15519] Use struct sctp_sack_info instead [ 428.803179][T15521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.969968][T15518] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 430.042973][T15277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.189801][T15550] macvlan0: entered promiscuous mode [ 430.587932][T15277] veth0_vlan: entered promiscuous mode [ 430.603258][T15277] veth1_vlan: entered promiscuous mode [ 430.647316][T15277] veth0_macvtap: entered promiscuous mode [ 430.658063][T15277] veth1_macvtap: entered promiscuous mode [ 430.680064][T15277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.697988][T15277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.711876][T15580] veth0: entered promiscuous mode [ 430.724842][ T3021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.734754][ T3021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.743834][T15279] Bluetooth: hci5: command tx timeout [ 430.752280][ T3021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.762015][ T3021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.806643][T15579] veth0: left promiscuous mode [ 430.852526][T15493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.863116][T15493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.891525][T15493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.901114][T15493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.030094][T15587] __nla_validate_parse: 10 callbacks suppressed [ 431.030112][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2696'. [ 431.115970][T15591] bond0: option ad_select: unable to set because the bond device is up [ 431.454318][T15600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2783'. [ 431.499004][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 431.499442][T15602] netlink: 'syz.4.2784': attribute type 1 has an invalid length. [ 431.543134][T15602] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2784'. [ 431.680527][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2786'. [ 431.698457][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.716728][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.725656][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.733696][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.741666][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.431171][T15645] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2794'. [ 432.680636][T15608] chnl_net:caif_netlink_parms(): no params data found [ 432.806590][T15669] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2800'. [ 432.815668][T15279] Bluetooth: hci5: command tx timeout [ 432.871530][T15608] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.879650][T15608] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.888351][T15608] bridge_slave_0: entered allmulticast mode [ 432.901578][T15608] bridge_slave_0: entered promiscuous mode [ 432.913835][T15608] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.921245][T15608] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.928837][T15608] bridge_slave_1: entered allmulticast mode [ 432.937097][T15608] bridge_slave_1: entered promiscuous mode [ 432.984344][T15608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.998957][T15608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.053465][T15608] team0: Port device team_slave_0 added [ 433.062558][T15608] team0: Port device team_slave_1 added [ 433.106853][T15608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.113945][T15608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.140668][T15608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.154199][T15608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.162081][T15608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.188612][T15608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.251540][T15608] hsr_slave_0: entered promiscuous mode [ 433.258406][T15608] hsr_slave_1: entered promiscuous mode [ 433.266983][T15608] debugfs: 'hsr0' already exists in 'hsr' [ 433.273136][T15608] Cannot create hsr debugfs directory [ 433.442794][T15608] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.454007][T15608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 433.464347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.474266][T15608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.498483][T15699] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 433.532676][T15608] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.543383][T15608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 433.553534][T15608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.614032][T15608] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.634044][T15608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 433.646859][T15608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.717423][T15608] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.727486][T15608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 433.737900][T15608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.775113][T15279] Bluetooth: hci3: command tx timeout [ 433.863288][T15684] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 433.903301][T15608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.968928][T15608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.022293][T15608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.052383][T15608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.072031][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2814'. [ 434.100526][T15716] syzkaller0: mtu greater than device maximum [ 434.272726][T15608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.332735][T15608] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.339813][T15744] netlink: 'syz.2.2821': attribute type 4 has an invalid length. [ 434.339833][T15744] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 434.339845][T15744] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2821'. [ 434.345332][T15744] nbd: couldn't find device at index 0 [ 434.377118][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.384312][ T9443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.396042][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.403231][ T9443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.441050][T15743] pimreg3: entered allmulticast mode [ 434.641042][T15759] tipc: Enabling of bearer rejected, already enabled [ 434.779799][T15608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.872870][T15608] veth0_vlan: entered promiscuous mode [ 434.880038][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2828'. [ 434.889067][T15608] veth1_vlan: entered promiscuous mode [ 434.978264][T15608] veth0_macvtap: entered promiscuous mode [ 435.012428][T15777] bond7: Removing last ns target with arp_interval on [ 435.059284][T15608] veth1_macvtap: entered promiscuous mode [ 435.091443][T15778] IPv6: addrconf: prefix option has invalid lifetime [ 435.096631][T15608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.112443][T15608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.125527][ T9443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.188274][ T9443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.247069][ T9443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.292248][ T9443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.346164][T15796] netlink: 'syz.0.2836': attribute type 4 has an invalid length. [ 435.492478][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.572364][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.592664][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.641641][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.650808][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.862034][T15279] Bluetooth: hci3: command tx timeout [ 436.053801][T15840] smc: net device gre0 applied user defined pnetid SYZ1 [ 436.062076][T15840] smc: net device gre0 erased user defined pnetid SYZ1 [ 436.329075][T15866] netlink: 'syz.5.2856': attribute type 5 has an invalid length. [ 436.356517][T15864] __nla_validate_parse: 3 callbacks suppressed [ 436.356534][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'. [ 436.458701][T15870] netlink: 294 bytes leftover after parsing attributes in process `syz.1.2857'. [ 436.492874][T15870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.546044][T15880] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2859'. [ 436.570301][T15880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2859'. [ 436.595463][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2861'. [ 436.653539][T15889] syzkaller0: entered promiscuous mode [ 436.659327][T15889] syzkaller0: entered allmulticast mode [ 436.741672][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2865'. [ 436.767302][T10284] IPVS: starting estimator thread 0... [ 436.806375][T15896] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.840035][T15890] bridge0: port 3(ipvlan2) entered blocking state [ 436.847797][T15890] bridge0: port 3(ipvlan2) entered disabled state [ 436.854367][T15890] ipvlan2: entered allmulticast mode [ 436.877094][T15898] IPVS: using max 32 ests per chain, 76800 per kthread [ 436.879371][T15890] bridge0: entered allmulticast mode [ 436.904659][T15890] ipvlan2: left allmulticast mode [ 436.910627][T15890] bridge0: left allmulticast mode [ 437.070472][T15910] xt_ipcomp: unknown flags 1D [ 437.444646][T15919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.573243][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2875'. [ 437.674279][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.685191][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.692994][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.702333][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.710045][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.937687][T15279] Bluetooth: hci3: command tx timeout [ 438.002539][T15935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2877'. [ 438.018069][T15935] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 438.385357][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2883'. [ 438.479550][T15952] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 438.498750][T15953] xt_policy: too many policy elements [ 438.520844][T15953] netlink: 'syz.0.2884': attribute type 1 has an invalid length. [ 438.554980][T15953] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2884'. [ 438.584624][T15928] chnl_net:caif_netlink_parms(): no params data found [ 439.175853][T15980] can: request_module (can-proto-0) failed. [ 439.182173][T15982] bond8: Removing last ns target with arp_interval on [ 439.191488][T15928] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.217770][T15928] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.235499][T15928] bridge_slave_0: entered allmulticast mode [ 439.286270][T15928] bridge_slave_0: entered promiscuous mode [ 439.354364][T15928] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.372171][T15928] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.380161][T15928] bridge_slave_1: entered allmulticast mode [ 439.390586][T15928] bridge_slave_1: entered promiscuous mode [ 439.438693][T16004] netlink: 'syz.5.2897': attribute type 7 has an invalid length. [ 439.567356][T15928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.627936][T15928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.666323][T16015] : renamed from bridge_slave_0 [ 439.731020][T15928] team0: Port device team_slave_0 added [ 439.755597][T15928] team0: Port device team_slave_1 added [ 439.776033][T15279] Bluetooth: hci6: command tx timeout [ 439.953225][T15928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.993573][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.029299][T15279] Bluetooth: hci3: command tx timeout [ 440.071982][T15928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.092095][T16035] bridge0: Device is already in use. [ 440.104172][T15928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.120039][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.131562][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.151397][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.216887][T15928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.379580][T15928] hsr_slave_0: entered promiscuous mode [ 440.410364][T15928] hsr_slave_1: entered promiscuous mode [ 440.420434][T15928] debugfs: 'hsr0' already exists in 'hsr' [ 440.426394][T15928] Cannot create hsr debugfs directory [ 440.651704][T16074] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20002 [ 440.667462][T16077] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 440.810019][T15928] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 440.936783][T15928] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 440.983745][T16094] netlink: 'syz.0.2924': attribute type 11 has an invalid length. [ 441.043127][T15928] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 441.146095][T15928] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 441.182789][T16102] gretap0: entered promiscuous mode [ 441.183671][T16109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.208387][T16102] batadv_slave_1: entered promiscuous mode [ 441.224533][T16102] batadv_slave_1: left promiscuous mode [ 441.231720][T16102] gretap0: left promiscuous mode [ 441.465841][T15928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.481381][T15928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.529842][T15928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.571915][T15928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.854961][T15279] Bluetooth: hci6: command tx timeout [ 441.966570][T15928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.100540][T15928] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.147345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.154532][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.198266][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.205496][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.233798][T16129] vlan2: entered promiscuous mode [ 442.243407][T16129] bridge0: entered promiscuous mode [ 442.251851][T16138] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20000 [ 442.660834][T16148] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.668572][T16148] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.733715][T16148] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 442.810288][T15928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.927349][T16167] bond8: option mode: invalid value (133) [ 442.947103][T16167] bond8 (unregistering): Released all slaves [ 443.117055][T16177] __nla_validate_parse: 17 callbacks suppressed [ 443.117073][T16177] netlink: 212260 bytes leftover after parsing attributes in process `syz.5.2945'. [ 443.449275][T16212] netlink: 'syz.2.2951': attribute type 12 has an invalid length. [ 443.456065][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 443.466518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.466719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.466898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.467082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.467268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.467461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.467643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.470761][T16212] netlink: 'syz.2.2951': attribute type 29 has an invalid length. [ 443.470779][T16212] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2951'. [ 443.470863][T16212] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 443.470878][T16212] netlink: 'syz.2.2951': attribute type 2 has an invalid length. [ 443.470890][T16212] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2951'. [ 443.642218][T15928] veth0_vlan: entered promiscuous mode [ 443.669798][T15928] veth1_vlan: entered promiscuous mode [ 443.741227][T15928] veth0_macvtap: entered promiscuous mode [ 443.766601][T15928] veth1_macvtap: entered promiscuous mode [ 443.860423][T16227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.882360][T16239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2957'. [ 443.937207][T15279] Bluetooth: hci6: command tx timeout [ 443.954064][T16228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.055141][T15928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.071899][T16239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2957'. [ 444.120334][T16244] syzkaller1: entered promiscuous mode [ 444.127473][T16244] syzkaller1: entered allmulticast mode [ 444.147020][T16249] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.2959'. [ 444.148938][T15928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.190414][ T9460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.216994][ T9460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.239121][ T9460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.273776][ T9460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.294591][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 444.313929][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2962'. [ 444.393865][T15490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.423116][T15490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.523210][T15490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.552436][T15490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.572449][T16269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2966'. [ 444.731919][T16277] tipc: Started in network mode [ 444.743405][T16277] tipc: Node identity baa831ca9dc1, cluster identity 4711 [ 444.761405][T16277] tipc: Enabled bearer , priority 0 [ 444.791680][T16284] syzkaller0: entered promiscuous mode [ 444.807297][T16284] syzkaller0: entered allmulticast mode [ 444.892759][T16287] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 444.978620][T16287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 445.014420][T16294] bond8: entered promiscuous mode [ 445.019968][T16294] bond8: entered allmulticast mode [ 445.031490][T16284] tipc: Resetting bearer [ 445.039171][T16277] tipc: Resetting bearer [ 445.087734][T16277] tipc: Disabling bearer [ 445.650305][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.661869][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.668454][T16323] net_ratelimit: 101 callbacks suppressed [ 445.668469][T16323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.691029][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.700389][T16324] netlink: 'syz.4.2985': attribute type 3 has an invalid length. [ 445.709769][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.724657][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.015799][T15279] Bluetooth: hci6: command tx timeout [ 446.257755][T16347] SET target dimension over the limit! [ 446.414163][T16320] chnl_net:caif_netlink_parms(): no params data found [ 446.620690][T16369] bridge0: entered promiscuous mode [ 446.631361][T16369] macsec1: entered promiscuous mode [ 446.641763][T16369] macsec1: entered allmulticast mode [ 446.650069][T16369] bridge0: entered allmulticast mode [ 446.657927][T16369] bridge0: port 3(macsec1) entered blocking state [ 446.666284][T16369] bridge0: port 3(macsec1) entered disabled state [ 446.692848][T16369] bridge0: left allmulticast mode [ 446.704037][T16369] bridge0: left promiscuous mode [ 446.759225][T16373] netlink: 'syz.0.3002': attribute type 3 has an invalid length. [ 446.773594][T16395] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 446.957059][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.964246][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.022011][T16320] bridge_slave_0: entered allmulticast mode [ 447.037631][T16320] bridge_slave_0: entered promiscuous mode [ 447.064062][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.083055][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.102851][T16320] bridge_slave_1: entered allmulticast mode [ 447.114534][T16320] bridge_slave_1: entered promiscuous mode [ 447.185837][T16421] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 447.254354][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.271745][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.283397][T16422] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 447.474475][T16320] team0: Port device team_slave_0 added [ 447.502945][T16320] team0: Port device team_slave_1 added [ 447.562619][T16444] netlink: 'syz.1.3018': attribute type 2 has an invalid length. [ 447.600622][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.611155][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.674464][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.693403][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.733606][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.766302][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.792355][T15279] Bluetooth: hci2: command tx timeout [ 447.840152][T16451] tipc: Started in network mode [ 447.849100][T16451] tipc: Node identity 0e0768096708, cluster identity 4711 [ 447.870727][T16451] tipc: Enabled bearer , priority 0 [ 447.959827][T16451] bond_slave_1: entered allmulticast mode [ 447.988110][T16467] netlink: 'syz.5.3028': attribute type 28 has an invalid length. [ 448.013571][T16471] netlink: 'syz.0.3029': attribute type 1 has an invalid length. [ 448.030933][T16467] netlink: 'syz.5.3028': attribute type 3 has an invalid length. [ 448.062884][T16451] tipc: Resetting bearer [ 448.070532][T16450] tipc: Disabling bearer [ 448.097933][T16320] hsr_slave_0: entered promiscuous mode [ 448.138999][T16320] hsr_slave_1: entered promiscuous mode [ 448.146775][T16320] debugfs: 'hsr0' already exists in 'hsr' [ 448.152578][T16320] Cannot create hsr debugfs directory [ 448.160071][T16476] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 448.176565][T16478] __nla_validate_parse: 13 callbacks suppressed [ 448.176580][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3031'. [ 448.303480][T16483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3032'. [ 448.337649][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 448.368812][T16483] netlink: 'syz.5.3032': attribute type 1 has an invalid length. [ 448.377223][T16483] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3032'. [ 448.616157][T16320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.627198][T16320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.640351][T16320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 448.866998][T16515] IPVS: length: 239 != 24 [ 449.203213][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 449.213027][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3042'. [ 449.222932][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3042'. [ 449.857776][T15279] Bluetooth: hci2: command tx timeout [ 450.286195][T16320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.296651][T16320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.307339][T16320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 450.331857][T16526] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3041'. [ 450.365746][T16530] validate_nla: 1 callbacks suppressed [ 450.365762][T16530] netlink: 'syz.1.3041': attribute type 1 has an invalid length. [ 450.385787][T16530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3041'. [ 450.447456][T16320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.468312][T16320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.479155][T16320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 450.659141][T16320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.676561][T16320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.693510][T16554] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 450.702369][T16320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 450.714087][T16556] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 450.761035][T16557] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3049'. [ 450.928535][T16563] netlink: 'syz.4.3050': attribute type 2 has an invalid length. [ 451.003549][T16320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.046457][T16320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.078615][T16320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.109089][T16320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.138489][T16576] netlink: 'syz.5.3056': attribute type 4 has an invalid length. [ 451.314071][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.358616][T16596] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 451.371789][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.404164][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.411358][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.431934][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.439055][ T9442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.546370][T16604] netlink: 'syz.5.3065': attribute type 1 has an invalid length. [ 451.708184][T16617] netlink: 'syz.0.3066': attribute type 1 has an invalid length. [ 451.757475][T16617] netlink: 'syz.0.3066': attribute type 1 has an invalid length. [ 451.766033][T16617] netlink: 'syz.0.3066': attribute type 1 has an invalid length. [ 451.862700][T16627] veth0: entered promiscuous mode [ 451.899688][T16626] veth0: left promiscuous mode [ 451.942192][T15279] Bluetooth: hci2: command tx timeout [ 452.021835][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.110870][T16320] veth0_vlan: entered promiscuous mode [ 452.130546][T16320] veth1_vlan: entered promiscuous mode [ 452.239141][T16320] veth0_macvtap: entered promiscuous mode [ 452.255443][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.260886][T16320] veth1_macvtap: entered promiscuous mode [ 452.312017][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.331489][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.356120][ T9455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.365055][ T9455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.374229][ T9455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.384158][ T9455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.951660][T16665] xt_hashlimit: size too large, truncated to 1048576 [ 453.071338][T16665] lo: entered promiscuous mode [ 453.076548][T16665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.193523][T16672] __nla_validate_parse: 4 callbacks suppressed [ 453.193540][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3080'. [ 453.201834][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.222323][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.236485][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3080'. [ 453.283819][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3080'. [ 453.306549][T16682] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 453.346640][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.376187][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.561532][T16701] syzkaller0: entered promiscuous mode [ 453.567916][T16701] syzkaller0: entered allmulticast mode [ 453.712538][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3090'. [ 453.734997][T16710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3090'. [ 453.795416][T16711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3090'. [ 453.838728][T16710] geneve2: entered promiscuous mode [ 453.843950][T16710] geneve2: entered allmulticast mode [ 453.886691][ T9448] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 453.915499][ T9448] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 453.924130][ T9448] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 453.943005][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3092'. [ 453.952530][ T9448] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 454.015300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.024053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.033851][T15279] Bluetooth: hci2: command tx timeout [ 454.103677][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3093'. [ 454.218328][T16721] syzkaller0: entered promiscuous mode [ 454.223939][T16721] syzkaller0: entered allmulticast mode [ 454.344042][T16730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3097'. [ 454.361373][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.371047][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.380452][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.389557][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.398032][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.418349][T16734] lo: left promiscuous mode [ 454.586489][T16734] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 454.607913][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'. [ 454.623980][T16746] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 455.282865][T16782] netlink: 'syz.2.3107': attribute type 11 has an invalid length. [ 455.767106][T16731] chnl_net:caif_netlink_parms(): no params data found [ 456.101692][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.119661][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.147944][T16731] bridge_slave_0: entered allmulticast mode [ 456.172584][T16731] bridge_slave_0: entered promiscuous mode [ 456.225591][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.263237][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.299022][T16731] bridge_slave_1: entered allmulticast mode [ 456.318904][T16731] bridge_slave_1: entered promiscuous mode [ 456.331720][T16839] validate_nla: 37 callbacks suppressed [ 456.331734][T16839] netlink: 'syz.5.3119': attribute type 29 has an invalid length. [ 456.372934][T16829] netlink: 'syz.5.3119': attribute type 29 has an invalid length. [ 456.415405][T15279] Bluetooth: hci1: command tx timeout [ 456.432271][T16850] tipc: Enabling of bearer rejected, failed to enable media [ 456.448844][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.466595][T16850] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.477993][T16847] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 456.486374][T16847] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 456.494359][T16847] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 456.495717][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.502226][T16847] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 456.519052][T16847] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 456.716893][T16731] team0: Port device team_slave_0 added [ 456.734741][T16731] team0: Port device team_slave_1 added [ 456.777388][T16863] netlink: 'syz.1.3128': attribute type 7 has an invalid length. [ 456.793913][T16863] netlink: 'syz.1.3128': attribute type 8 has an invalid length. [ 456.909204][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.927749][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.977935][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.990754][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.997934][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.045784][T16867] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 457.053627][T16867] netlink: 'syz.1.3130': attribute type 7 has an invalid length. [ 457.069845][T16867] netlink: 'syz.1.3130': attribute type 8 has an invalid length. [ 457.078751][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.092056][T16867] NCSI netlink: No device for ifindex 65584 [ 457.263772][T16731] hsr_slave_0: entered promiscuous mode [ 457.284485][T16731] hsr_slave_1: entered promiscuous mode [ 457.293213][T16731] debugfs: 'hsr0' already exists in 'hsr' [ 457.345408][T16731] Cannot create hsr debugfs directory [ 457.401481][T16891] bond1: ARP target 1.0.0.0 is already present [ 457.409671][T16891] bond1: option arp_ip_target: invalid value (1) [ 457.421128][T16891] bond1 (unregistering): Released all slaves [ 457.503414][T16894] syzkaller0: entered promiscuous mode [ 457.509903][T16894] syzkaller0: entered allmulticast mode [ 457.598346][T16913] netlink: 'syz.5.3143': attribute type 21 has an invalid length. [ 457.691917][T16913] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 457.709811][T16913] bond4 (unregistering): Released all slaves [ 457.736624][T16922] 0{X: renamed from gretap0 (while UP) [ 457.749524][T16922] 0{X: entered allmulticast mode [ 457.761838][T16923] netlink: 'syz.1.3147': attribute type 1 has an invalid length. [ 457.811760][T16924] 1{X: renamed from 30{X (while UP) [ 458.032684][T16932] netlink: 'syz.4.3149': attribute type 1 has an invalid length. [ 458.104446][T16932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.157684][T16934] bond1: (slave geneve3): making interface the new active one [ 458.171412][T16934] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 458.184786][ T9442] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 458.259209][T16952] bond2: option coupled_control: invalid value (52) [ 458.271688][T16952] bond2 (unregistering): Released all slaves [ 458.293919][ T9442] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 458.330890][ T9442] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 458.342205][ T9442] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 458.370375][T16962] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 458.418398][T16966] __nla_validate_parse: 17 callbacks suppressed [ 458.418414][T16966] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3156'. [ 458.496440][T15279] Bluetooth: hci1: command tx timeout [ 458.590351][T16970] tipc: Enabling of bearer rejected, failed to enable media [ 458.963011][T16731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.006842][T16731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.024533][T16731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.052814][T16731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.167872][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 459.308747][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.400057][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.416438][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 459.417378][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.432429][ T9442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.463823][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 459.492311][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.499476][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.515354][T17034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3170'. [ 460.042317][T17059] bond1 (unregistering): Released all slaves [ 460.066818][T17065] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.114323][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.115780][T17067] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3182'. [ 460.252679][T16731] veth0_vlan: entered promiscuous mode [ 460.287883][T16731] veth1_vlan: entered promiscuous mode [ 460.389238][T16731] veth0_macvtap: entered promiscuous mode [ 460.403043][T16731] veth1_macvtap: entered promiscuous mode [ 460.432834][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.450511][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.482346][ T9460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.518313][ T9460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.539489][ T9460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.551440][ T9460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.566123][T17098] net_ratelimit: 54 callbacks suppressed [ 460.566138][T17098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.590362][T15279] Bluetooth: hci1: command tx timeout [ 460.675425][ T5906] IPVS: starting estimator thread 0... [ 460.808272][T17104] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.863374][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.883020][T17109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3194'. [ 460.899478][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.050483][T17117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3199'. [ 461.065055][ T9442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.073033][ T9442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.390726][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 461.425509][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 461.446040][T17133] validate_nla: 3 callbacks suppressed [ 461.446055][T17133] netlink: 'syz.0.3204': attribute type 3 has an invalid length. [ 461.498357][T17138] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 461.728870][T17149] netlink: 'syz.2.3210': attribute type 1 has an invalid length. [ 462.043475][T17175] netlink: 'syz.1.3217': attribute type 10 has an invalid length. [ 462.147989][T17184] tap0: tun_chr_ioctl cmd 1074025672 [ 462.163308][T17184] tap0: ignored: set checksum disabled [ 462.204318][T17189] netlink: 'syz.1.3221': attribute type 3 has an invalid length. [ 462.392793][T17186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.393794][T17206] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.412529][T17208] : entered promiscuous mode [ 462.448999][T17207] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.489789][T17212] netlink: 'syz.1.3229': attribute type 2 has an invalid length. [ 462.653299][T17217] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 462.665449][T15279] Bluetooth: hci1: command tx timeout [ 462.695941][T17217] lo: entered allmulticast mode [ 463.220282][T17265] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 463.282104][T17265] netlink: 'syz.0.3242': attribute type 27 has an invalid length. [ 463.571747][T17285] bond0: entered promiscuous mode [ 463.591547][T17285] bond_slave_0: entered promiscuous mode [ 463.619482][T17285] bond_slave_1: entered promiscuous mode [ 463.681877][T17285] batadv0: entered promiscuous mode [ 463.705707][T17285] debugfs: 'hsr1' already exists in 'hsr' [ 463.734607][T17285] Cannot create hsr debugfs directory [ 463.775650][T17285] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 463.801649][T17285] bond0: left promiscuous mode [ 463.810072][T17285] bond_slave_0: left promiscuous mode [ 463.819715][T17285] bond_slave_1: left promiscuous mode [ 463.842692][T17285] batadv0: left promiscuous mode [ 464.048132][T17316] openvswitch: netlink: Flow actions attr not present in new flow. [ 464.053110][T17318] netlink: 'syz.2.3255': attribute type 10 has an invalid length. [ 464.088706][T17318] __nla_validate_parse: 12 callbacks suppressed [ 464.088723][T17318] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3255'. [ 464.171391][T17325] netlink: 'syz.1.3254': attribute type 58 has an invalid length. [ 464.195565][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3254'. [ 464.570281][T17344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3260'. [ 464.726564][T17349] tipc: Enabling not permitted [ 464.732173][T17349] tipc: Enabling of bearer rejected, failed to enable media [ 464.747936][T15279] Bluetooth: hci1: command tx timeout [ 464.937841][T17363] netlink: 'syz.1.3264': attribute type 4 has an invalid length. [ 465.004322][T17368] x_tables: duplicate underflow at hook 2 [ 465.128344][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.135993][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.317879][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'. [ 465.388341][T17388] tipc: Started in network mode [ 465.393292][T17388] tipc: Node identity e0000001, cluster identity 4711 [ 465.393434][T17392] netlink: 'syz.2.3270': attribute type 18 has an invalid length. [ 465.410452][T17392] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3270'. [ 465.421556][T17395] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3270'. [ 465.429860][T17388] tipc: Enabling of bearer rejected, failed to enable media [ 465.546626][ T985] IPVS: starting estimator thread 0... [ 465.555263][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3272'. [ 465.640326][T17402] IPVS: using max 29 ests per chain, 69600 per kthread [ 465.757961][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 466.089425][T17440] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3289'. [ 466.101318][T17440] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3289'. [ 466.654778][T17478] validate_nla: 3 callbacks suppressed [ 466.654795][T17478] netlink: 'syz.1.3299': attribute type 21 has an invalid length. [ 466.669671][T17478] sctp: [Deprecated]: syz.1.3299 (pid 17478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.669671][T17478] Use struct sctp_sack_info instead [ 466.889172][T17495] nbd: socks must be embedded in a SOCK_ITEM attr [ 466.917578][T17497] vlan2: entered allmulticast mode [ 466.942339][T17498] veth0_macvtap: left promiscuous mode [ 467.047386][T17505] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 467.081135][T17503] geneve2: left promiscuous mode [ 467.501121][T17535] netlink: 'syz.0.3318': attribute type 22 has an invalid length. [ 467.716058][T17546] syzkaller1: entered promiscuous mode [ 467.721655][T17546] syzkaller1: entered allmulticast mode [ 467.776817][T17554] netlink: 'syz.0.3324': attribute type 10 has an invalid length. [ 467.860037][T17554] team0: Port device geneve0 added [ 468.318782][T17579] netlink: 'syz.5.3331': attribute type 7 has an invalid length. [ 468.339213][T17574] nbd1: detected capacity change from 0 to 127 [ 468.353588][T15279] block nbd1: Receive control failed (result -32) [ 468.699130][T17600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.716844][T17602] netlink: 'syz.2.3338': attribute type 21 has an invalid length. [ 468.984356][T17570] team0 (unregistering): Port device team_slave_0 removed [ 469.013406][T17570] team0 (unregistering): Port device team_slave_1 removed [ 469.047674][T17570] team0 (unregistering): Port device geneve0 removed [ 469.404207][T17637] __nla_validate_parse: 13 callbacks suppressed [ 469.404225][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3347'. [ 469.427341][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3349'. [ 469.481366][T17641] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3349'. [ 469.522037][T17647] xt_socket: unknown flags 0xe4 [ 469.558795][T17644] syzkaller0: entered promiscuous mode [ 469.580882][T17644] syzkaller0: entered allmulticast mode [ 469.712942][T17664] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3356'. [ 470.213760][T17702] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 470.245302][T17702] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 470.269383][T17702] batadv_slave_1: entered promiscuous mode [ 470.284201][T17700] batadv_slave_1: left promiscuous mode [ 470.892810][T17752] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3382'. [ 470.940700][T17752] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3382'. [ 470.950798][T17752] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3382'. [ 470.985200][T17756] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3385'. [ 471.472468][T17786] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 471.516473][T17786] veth0_virt_wifi: entered allmulticast mode [ 471.532480][T17759] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 471.549289][T17786] team0: Port device veth0_virt_wifi added [ 471.883171][T17802] tipc: Started in network mode [ 471.896401][T17802] tipc: Node identity de15897918b2, cluster identity 4711 [ 471.914009][T17802] tipc: Enabled bearer , priority 0 [ 471.930797][T17802] syzkaller0: entered promiscuous mode [ 471.940250][T17802] syzkaller0: entered allmulticast mode [ 471.956732][T17802] tipc: Resetting bearer [ 471.987880][T17800] tipc: Resetting bearer [ 472.017142][T17800] tipc: Disabling bearer [ 472.180892][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3407'. [ 472.240055][T17825] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3402'. [ 472.364276][T17830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.427718][T17842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.570917][T17853] netlink: 'syz.5.3418': attribute type 10 has an invalid length. [ 472.732256][T17863] tipc: Enabled bearer , priority 10 [ 472.897406][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.904088][T17875] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 472.906152][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.024245][T17882] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 473.201915][T17895] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.222376][T17895] bond4: (slave lo): Enslaving as a backup interface with an up link [ 473.242234][T17895] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 473.289542][T17890] syzkaller0: entered promiscuous mode [ 473.296751][T17890] syzkaller0: entered allmulticast mode [ 473.790803][ T9446] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.805352][ T9446] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.814123][ T9446] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.823868][ T9446] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.846758][T17924] rose1: entered allmulticast mode [ 473.923579][T10284] tipc: Node number set to 661205450 [ 474.050325][T17929] batman_adv: batadv0: Adding interface: dummy0 [ 474.065150][T17929] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.154988][T17929] batman_adv: batadv0: Interface activated: dummy0 [ 474.219278][T17929] batadv0: mtu less than device minimum [ 474.230417][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.242477][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.254324][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.266185][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.278001][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.289817][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.301621][T17929] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 474.631481][T17955] netlink: 'syz.4.3445': attribute type 16 has an invalid length. [ 474.642913][T17955] netlink: 'syz.4.3445': attribute type 17 has an invalid length. [ 474.706105][T17950] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.724418][T17950] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.956639][T17968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.699792][T18014] netlink: 'syz.4.3462': attribute type 10 has an invalid length. [ 475.707787][T18014] __nla_validate_parse: 7 callbacks suppressed [ 475.707805][T18014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3462'. [ 475.723694][T18014] dummy0: entered promiscuous mode [ 475.729691][T18014] bridge0: port 3(dummy0) entered blocking state [ 475.756595][T18014] bridge0: port 3(dummy0) entered disabled state [ 475.763146][T18014] dummy0: entered allmulticast mode [ 475.779873][T18014] bridge0: port 3(dummy0) entered blocking state [ 475.781939][T18020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3465'. [ 475.786357][T18014] bridge0: port 3(dummy0) entered forwarding state [ 475.804048][T18023] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3465'. [ 475.950777][T18031] netlink: 'syz.2.3469': attribute type 83 has an invalid length. [ 475.985536][T18035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3471'. [ 476.309219][T18058] bond0: entered promiscuous mode [ 476.314302][T18058] bond_slave_0: entered promiscuous mode [ 476.320484][T18058] bond_slave_1: entered promiscuous mode [ 476.330216][T18058] batadv0: entered promiscuous mode [ 476.338377][T18058] debugfs: 'hsr1' already exists in 'hsr' [ 476.344217][T18058] Cannot create hsr debugfs directory [ 476.350494][T18058] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 476.362569][T18058] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 476.372644][T18058] bond0: left promiscuous mode [ 476.377687][T18058] bond_slave_0: left promiscuous mode [ 476.383533][T18058] bond_slave_1: left promiscuous mode [ 476.390435][T18058] batadv0: left promiscuous mode [ 476.572932][T18072] netlink: 'syz.2.3480': attribute type 16 has an invalid length. [ 476.590636][T18072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3480'. [ 476.689262][T18080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3481'. [ 476.951463][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3485'. [ 476.985500][T18104] ip6tnl1: entered promiscuous mode [ 477.202359][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3491'. [ 477.225840][T18114] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 477.235823][T18114] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 477.294680][T18118] netlink: 'syz.5.3492': attribute type 29 has an invalid length. [ 477.304396][T18118] netlink: 'syz.5.3492': attribute type 29 has an invalid length. [ 477.358589][T18127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.539065][T18134] ip6gre0: Master is either lo or non-ether device [ 477.550134][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3498'. [ 477.557810][T18138] ip6gre0: Master is either lo or non-ether device [ 477.643615][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 478.212083][T18177] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 478.270588][T18177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.303369][T18181] bond2: (slave gretap0): making interface the new active one [ 478.313299][T18181] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 478.559182][T18194] sctp: [Deprecated]: syz.0.3514 (pid 18194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.559182][T18194] Use struct sctp_sack_info instead [ 478.722058][T18203] netlink: 'syz.5.3517': attribute type 10 has an invalid length. [ 478.746905][T18203] bridge_slave_1: left allmulticast mode [ 478.752727][T18203] bridge_slave_1: left promiscuous mode [ 478.760781][T18203] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.784046][T18203] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 478.865343][T18208] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 478.909146][T18211] net_ratelimit: 13 callbacks suppressed [ 478.909403][T18211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.940819][T18214] syzkaller0: entered promiscuous mode [ 478.953739][T18219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.954904][T18214] syzkaller0: entered allmulticast mode [ 479.038661][T18223] netlink: 'syz.5.3524': attribute type 4 has an invalid length. [ 479.672392][T18269] netlink: 'syz.4.3535': attribute type 10 has an invalid length. [ 479.793537][T18277] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 480.098475][T18282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.191273][T18289] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 480.431768][T18301] netlink: 'syz.0.3544': attribute type 3 has an invalid length. [ 480.784754][T18316] 8021q: VLANs not supported on wg2 [ 480.787528][T18319] __nla_validate_parse: 13 callbacks suppressed [ 480.787544][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'. [ 480.791983][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 480.814709][T18316] Unsupported xt match [ 480.814729][T18316] unable to load match [ 480.870633][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3552'. [ 480.882763][T18321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.907294][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'. [ 481.002523][T18334] netlink: 'syz.5.3556': attribute type 1 has an invalid length. [ 481.012633][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3556'. [ 481.300167][T18358] netlink: 'syz.0.3563': attribute type 1 has an invalid length. [ 481.312155][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 481.322345][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 481.341669][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 481.348865][T18362] netlink: 'syz.5.3565': attribute type 1 has an invalid length. [ 481.382813][T18362] bond5: entered promiscuous mode [ 481.391389][T18362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.405421][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3565'. [ 481.414365][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3565'. [ 481.511222][T18370] tipc: Enabled bearer , priority 0 [ 481.519568][T18370] syzkaller0: entered promiscuous mode [ 481.526346][T18370] syzkaller0: entered allmulticast mode [ 481.536352][T18370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 481.562485][T18370] tipc: Resetting bearer [ 481.586567][T18369] tipc: Resetting bearer [ 481.608876][T18369] tipc: Disabling bearer [ 481.872209][T18391] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 481.888265][T18391] bond1 (unregistering): Released all slaves [ 481.929060][T18392] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 482.250606][T18421] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:20004 [ 483.476300][T18473] sctp: [Deprecated]: syz.5.3601 (pid 18473) Use of int in maxseg socket option. [ 483.476300][T18473] Use struct sctp_assoc_value instead [ 483.514776][T18473] bond4: (slave lo): Releasing backup interface [ 483.534340][T18473] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 483.560565][T18480] validate_nla: 1 callbacks suppressed [ 483.560581][T18480] netlink: 'syz.5.3601': attribute type 2 has an invalid length. [ 483.576944][T18480] netlink: 'syz.5.3601': attribute type 2 has an invalid length. [ 483.591012][T18473] bridge_slave_0: left allmulticast mode [ 483.598284][T18473] bridge_slave_0: left promiscuous mode [ 483.604044][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.622564][T18473] bond0: (slave bridge_slave_1): Releasing backup interface [ 483.637828][T18473] bond0: (slave bond_slave_0): Releasing backup interface [ 483.654380][T18473] bond0: (slave bond_slave_1): Releasing backup interface [ 483.681443][T18473] team0: Port device team_slave_0 removed [ 483.694571][T18473] team0: Port device team_slave_1 removed [ 483.705326][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.712748][T18473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.721963][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.730515][T18473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.739402][T18473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.830353][T18489] netlink: 'syz.0.3605': attribute type 1 has an invalid length. [ 484.163711][T18509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.202408][T18515] IPv6: sit1: Disabled Multicast RS [ 484.210782][T18515] sit1: entered allmulticast mode [ 484.548925][T18540] syzkaller1: entered promiscuous mode [ 484.554818][T18540] syzkaller1: entered allmulticast mode [ 484.698530][T18553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.767944][T18554] syzkaller1: entered promiscuous mode [ 484.775890][T18554] syzkaller1: entered allmulticast mode [ 485.482954][T18568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.521162][T18568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.882560][ T9445] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.894090][ T9445] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.903050][ T9445] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.912415][ T9445] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.051348][T18593] __nla_validate_parse: 18 callbacks suppressed [ 486.051366][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3632'. [ 486.168628][T18602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.410774][T18622] netlink: 'syz.5.3643': attribute type 12 has an invalid length. [ 486.430016][T18623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3642'. [ 486.612133][T18637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3646'. [ 486.651109][T18639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3647'. [ 486.844071][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3651'. [ 487.528542][T18690] bridge1: entered promiscuous mode [ 487.533800][T18690] bridge1: entered allmulticast mode [ 487.930719][T18718] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3668'. [ 488.056910][T18733] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 488.116656][T18733] bond2: entered promiscuous mode [ 488.121723][T18733] bond2: entered allmulticast mode [ 488.124474][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3672'. [ 488.131234][T18733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.296499][T18745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3677'. [ 488.539512][T18773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3684'. [ 488.776176][T18791] syzkaller0: entered promiscuous mode [ 488.792306][T18791] syzkaller0: entered allmulticast mode [ 488.914635][T18801] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3693'. [ 488.964539][T18801] bond6: Removing last ns target with arp_interval on [ 488.986452][T18806] wlan0 speed is unknown, defaulting to 1000 [ 489.142361][T18811] syzkaller1: entered promiscuous mode [ 489.178867][T18811] syzkaller1: entered allmulticast mode [ 489.427087][T18832] syzkaller0: entered promiscuous mode [ 489.440520][T18832] syzkaller0: entered allmulticast mode [ 489.490508][T18840] netlink: 'syz.0.3704': attribute type 3 has an invalid length. [ 489.833576][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.843868][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.852199][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.862282][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.874259][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.995795][T18873] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 490.181765][T18880] syzkaller0: entered promiscuous mode [ 490.199553][T18880] syzkaller0: entered allmulticast mode [ 490.566852][T18891] netlink: 'syz.4.3715': attribute type 16 has an invalid length. [ 490.671427][T18901] netlink: 'syz.5.3720': attribute type 21 has an invalid length. [ 490.844045][T18864] chnl_net:caif_netlink_parms(): no params data found [ 490.965172][T18922] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.086638][T18922] __nla_validate_parse: 8 callbacks suppressed [ 491.086656][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 491.220838][T18864] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.236761][T18864] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.244092][T18864] bridge_slave_0: entered allmulticast mode [ 491.261848][T18864] bridge_slave_0: entered promiscuous mode [ 491.316765][T18864] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.323964][T18864] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.350963][T18864] bridge_slave_1: entered allmulticast mode [ 491.367488][T18864] bridge_slave_1: entered promiscuous mode [ 491.483797][T18864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.497701][T18864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.586178][T18864] team0: Port device team_slave_0 added [ 491.603356][T18864] team0: Port device team_slave_1 added [ 491.699724][T18864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.712103][T18864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.739713][T18864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.808794][T18864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.826580][T18864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.829293][T18977] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3736'. [ 491.893178][T18864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.939018][T15279] Bluetooth: hci4: command tx timeout [ 491.952939][T18980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'. [ 491.986826][T18982] xt_l2tp: v2 doesn't support IP mode [ 492.016414][T18983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3739'. [ 492.044542][T18864] hsr_slave_0: entered promiscuous mode [ 492.054083][T18864] hsr_slave_1: entered promiscuous mode [ 492.097080][T18864] debugfs: 'hsr0' already exists in 'hsr' [ 492.102833][T18864] Cannot create hsr debugfs directory [ 492.196427][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'. [ 492.308504][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3742'. [ 492.421527][T19007] netlink: 'syz.4.3745': attribute type 10 has an invalid length. [ 492.457200][T19007] bridge0: port 3(dummy0) entered disabled state [ 492.464216][T19007] dummy0: left allmulticast mode [ 492.473253][T19010] netlink: 'syz.4.3745': attribute type 2 has an invalid length. [ 492.487736][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 492.502764][T19007] dummy0: left promiscuous mode [ 492.508183][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'. [ 492.522936][T19007] bridge0: port 3(dummy0) entered disabled state [ 492.539524][T19007] team0: Port device dummy0 added [ 492.644109][T19018] netlink: 'syz.5.3750': attribute type 58 has an invalid length. [ 492.656490][T19018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3750'. [ 492.679841][T18864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.690608][T19020] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3751'. [ 492.694700][T18864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.712346][T18864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.732256][T18864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.819597][T19032] netlink: 'syz.0.3753': attribute type 24 has an invalid length. [ 492.837084][T19031] netlink: 'syz.5.3754': attribute type 5 has an invalid length. [ 492.891628][T19031] netlink: 'syz.5.3754': attribute type 5 has an invalid length. [ 492.901421][ T9455] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.918201][ T9455] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.938897][ T9455] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.949150][T19034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.980222][ T9455] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.033834][T18864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.076250][T18864] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.095739][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.102902][ T9446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.149929][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.157124][ T9446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.596374][T19069] ipt_ECN: cannot use operation on non-tcp rule [ 493.693896][T18864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.016866][T15279] Bluetooth: hci4: command tx timeout [ 494.212544][T19100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.236736][T19100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.353626][T18864] veth0_vlan: entered promiscuous mode [ 494.436002][T19100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.448599][T19100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.494409][T18864] veth1_vlan: entered promiscuous mode [ 494.557126][T19100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.568082][T19100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.622152][T19132] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 494.633827][T19138] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 494.663624][T19100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.676287][T19100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.697021][T19132] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 494.698350][T19138] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 494.732612][T18864] veth0_macvtap: entered promiscuous mode [ 494.740364][T19145] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 494.769936][T18864] veth1_macvtap: entered promiscuous mode [ 494.846917][ T3551] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.860312][ T3551] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.874110][T19145] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 494.883943][T18864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.897385][T18864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.921979][ T9448] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.930892][ T9448] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.999315][ T9448] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.008105][ T9448] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.028082][ T9448] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.047817][ T9448] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.082266][ T9448] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.107852][ T9448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.141896][ T9448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.161942][ T9448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.453434][T19174] syzkaller1: entered promiscuous mode [ 495.475489][T19174] syzkaller1: entered allmulticast mode [ 495.490783][ T9446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.507367][ T9446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.623568][ T9460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.641870][ T9460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.862679][T19189] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 495.896047][T19189] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 496.095954][T15279] Bluetooth: hci4: command tx timeout [ 496.099621][T19203] netlink: 'syz.0.3800': attribute type 1 has an invalid length. [ 496.267779][T19216] __nla_validate_parse: 15 callbacks suppressed [ 496.278584][T19220] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3806'. [ 496.283193][T19216] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3803'. [ 496.323206][T19215] x_tables: duplicate underflow at hook 2 [ 496.384481][T19229] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3807'. [ 496.667140][T19247] netlink: 'syz.0.3813': attribute type 1 has an invalid length. [ 496.681139][T19247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.738091][T19247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.793722][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'. [ 496.814196][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3820'. [ 496.840289][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'. [ 497.083490][T19275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3824'. [ 497.110823][T19275] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.119176][T19284] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3826'. [ 497.394684][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3832'. [ 497.461232][T19305] netlink: 'syz.6.3835': attribute type 8 has an invalid length. [ 497.486080][T19305] netlink: 'syz.6.3835': attribute type 1 has an invalid length. [ 497.493927][T19305] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3835'. [ 497.519396][T19312] netlink: zone id is out of range [ 497.531600][T19312] netlink: zone id is out of range [ 497.541721][T19312] netlink: zone id is out of range [ 497.554490][T19312] netlink: zone id is out of range [ 497.560621][T19312] netlink: zone id is out of range [ 497.566967][T19312] netlink: zone id is out of range [ 497.572251][T19312] netlink: zone id is out of range [ 497.579282][T19312] netlink: zone id is out of range [ 497.584589][T19312] netlink: zone id is out of range [ 498.176891][T15279] Bluetooth: hci4: command tx timeout [ 498.299507][T19351] syz.5.3846 uses old SIOCAX25GETINFO [ 498.777492][T19376] nbd: nbd2 already in use [ 498.911259][T19386] rdma_op ffff8880415259f0 conn xmit_rdma 0000000000000000 [ 499.909961][T19456] validate_nla: 5 callbacks suppressed [ 499.909979][T19456] netlink: 'syz.6.3876': attribute type 1 has an invalid length. [ 500.373008][T19478] veth0_to_bond: entered allmulticast mode [ 500.648385][T19493] ksmbd: Unknown IPC event: 3, ignore. [ 500.793324][T19504] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 500.820575][T19503] netlink: 'syz.2.3891': attribute type 2 has an invalid length. [ 501.070760][T19518] netlink: 'syz.2.3896': attribute type 29 has an invalid length. [ 501.079314][T19518] netlink: 'syz.2.3896': attribute type 29 has an invalid length. [ 501.383961][T19548] netlink: 'syz.5.3906': attribute type 21 has an invalid length. [ 501.402759][T19548] __nla_validate_parse: 21 callbacks suppressed [ 501.402775][T19548] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3906'. [ 501.434566][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 501.451476][T19550] dummy0: entered promiscuous mode [ 501.454383][T19548] netlink: 61 bytes leftover after parsing attributes in process `syz.5.3906'. [ 501.539610][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.580770][T19565] pim6reg: entered allmulticast mode [ 501.599372][T19557] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3906'. [ 501.628935][T19557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3906'. [ 501.741879][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3913'. [ 501.810623][T19573] netlink: 'syz.4.3912': attribute type 12 has an invalid length. [ 501.822031][T19573] netlink: 'syz.4.3912': attribute type 29 has an invalid length. [ 501.841936][T19573] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3912'. [ 501.862284][T19573] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3912'. [ 502.043628][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'. [ 502.255413][ C0] net_ratelimit: 118 callbacks suppressed [ 502.255432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.270120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.371991][T19620] ip6t_srh: unknown srh match flags 5F28 [ 502.447709][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3927'. [ 502.487248][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.498421][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.512702][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.521987][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.738618][T19654] delete_channel: no stack [ 502.838308][T19661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.847040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.868221][T19663] openvswitch: netlink: Message has 4 unknown bytes. [ 503.061282][T10282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.465423][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.474566][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.489314][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.854167][T19723] veth1_to_bond: entered allmulticast mode [ 503.908854][T19723] bond0: (slave bond_slave_1): Releasing backup interface [ 503.971803][T19723] veth1_to_bond (unregistering): left allmulticast mode [ 504.064384][T19731] macsec2: entered promiscuous mode [ 504.087852][T19731] macsec2: entered allmulticast mode [ 504.093645][T19731] bond8: (slave macsec2): Error -34 calling dev_set_mtu [ 504.125355][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.586170][T19776] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 505.141698][T19815] bond4: Unable to set up delay as MII monitoring is disabled [ 505.187307][T19815] bond4 (unregistering): Released all slaves [ 505.366053][T19822] team0: Port device team_slave_0 removed [ 505.657523][T19850] netlink: 'syz.0.3991': attribute type 10 has an invalid length. [ 505.719352][T19853] FAULT_INJECTION: forcing a failure. [ 505.719352][T19853] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 505.784098][T19853] CPU: 1 UID: 0 PID: 19853 Comm: syz.2.3993 Not tainted syzkaller #0 PREEMPT(full) [ 505.784122][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 505.784140][T19853] Call Trace: [ 505.784151][T19853] [ 505.784159][T19853] dump_stack_lvl+0x189/0x250 [ 505.784182][T19853] ? __pfx____ratelimit+0x10/0x10 [ 505.784203][T19853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.784221][T19853] ? __pfx__printk+0x10/0x10 [ 505.784242][T19853] ? __might_fault+0xb0/0x130 [ 505.784273][T19853] should_fail_ex+0x414/0x560 [ 505.784297][T19853] _copy_from_user+0x2d/0xb0 [ 505.784320][T19853] ___sys_sendmsg+0x158/0x2a0 [ 505.784347][T19853] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.784377][T19853] ? rcu_read_lock_any_held+0xb3/0x120 [ 505.784424][T19853] ? __fget_files+0x2a/0x420 [ 505.784438][T19853] ? __fget_files+0x3a0/0x420 [ 505.784471][T19853] __x64_sys_sendmsg+0x19b/0x260 [ 505.784498][T19853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.784530][T19853] ? __pfx_ksys_write+0x10/0x10 [ 505.784555][T19853] ? do_syscall_64+0xbe/0xf80 [ 505.784579][T19853] do_syscall_64+0xfa/0xf80 [ 505.784600][T19853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.784616][T19853] ? clear_bhb_loop+0x60/0xb0 [ 505.784636][T19853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.784652][T19853] RIP: 0033:0x7f2c3bf8f749 [ 505.784671][T19853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.784686][T19853] RSP: 002b:00007f2c3a1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.784710][T19853] RAX: ffffffffffffffda RBX: 00007f2c3c1e5fa0 RCX: 00007f2c3bf8f749 [ 505.784723][T19853] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 505.784733][T19853] RBP: 00007f2c3a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 505.784744][T19853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.784754][T19853] R13: 00007f2c3c1e6038 R14: 00007f2c3c1e5fa0 R15: 00007ffd4546cd88 [ 505.784784][T19853] [ 506.125176][T19869] vlan2: entered promiscuous mode [ 506.148000][T19869] bridge0: entered promiscuous mode [ 506.278231][T19882] netlink: 'syz.2.4004': attribute type 1 has an invalid length. [ 506.380319][T19892] sctp: [Deprecated]: syz.5.4006 (pid 19892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.380319][T19892] Use struct sctp_sack_info instead [ 506.503650][T19904] FAULT_INJECTION: forcing a failure. [ 506.503650][T19904] name failslab, interval 1, probability 0, space 0, times 1 [ 506.547530][T19904] CPU: 1 UID: 0 PID: 19904 Comm: syz.6.4010 Not tainted syzkaller #0 PREEMPT(full) [ 506.547553][T19904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.547563][T19904] Call Trace: [ 506.547570][T19904] [ 506.547578][T19904] dump_stack_lvl+0x189/0x250 [ 506.547600][T19904] ? __pfx____ratelimit+0x10/0x10 [ 506.547621][T19904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.547638][T19904] ? __pfx__printk+0x10/0x10 [ 506.547664][T19904] ? __pfx___might_resched+0x10/0x10 [ 506.547686][T19904] should_fail_ex+0x414/0x560 [ 506.547709][T19904] should_failslab+0xa8/0x100 [ 506.547734][T19904] __kmalloc_noprof+0xcb/0x800 [ 506.547753][T19904] ? rds_message_alloc+0x47/0x1f0 [ 506.547775][T19904] rds_message_alloc+0x47/0x1f0 [ 506.547792][T19904] rds_sendmsg+0xb11/0x1f00 [ 506.547820][T19904] ? aa_sk_perm+0x15f/0x920 [ 506.547846][T19904] ? __pfx_rds_sendmsg+0x10/0x10 [ 506.547861][T19904] ? aa_sk_perm+0x7ee/0x920 [ 506.547886][T19904] ? __lock_acquire+0x6b6/0x2cf0 [ 506.547902][T19904] ? __pfx_aa_sk_perm+0x10/0x10 [ 506.547922][T19904] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 506.547947][T19904] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.547964][T19904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.547984][T19904] ? __pfx_rds_sendmsg+0x10/0x10 [ 506.548003][T19904] __sock_sendmsg+0x21c/0x270 [ 506.548026][T19904] ____sys_sendmsg+0x505/0x820 [ 506.548056][T19904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.548088][T19904] ? import_iovec+0x74/0xa0 [ 506.548113][T19904] ___sys_sendmsg+0x21f/0x2a0 [ 506.548139][T19904] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.548170][T19904] ? rcu_read_lock_any_held+0xb3/0x120 [ 506.548216][T19904] ? __fget_files+0x2a/0x420 [ 506.548231][T19904] ? __fget_files+0x3a0/0x420 [ 506.548256][T19904] __x64_sys_sendmsg+0x19b/0x260 [ 506.548283][T19904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.548315][T19904] ? __pfx_ksys_write+0x10/0x10 [ 506.548339][T19904] ? do_syscall_64+0xbe/0xf80 [ 506.548364][T19904] do_syscall_64+0xfa/0xf80 [ 506.548384][T19904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.548401][T19904] ? clear_bhb_loop+0x60/0xb0 [ 506.548430][T19904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.548446][T19904] RIP: 0033:0x7f227978f749 [ 506.548460][T19904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.548475][T19904] RSP: 002b:00007f227a665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.548493][T19904] RAX: ffffffffffffffda RBX: 00007f22799e5fa0 RCX: 00007f227978f749 [ 506.548505][T19904] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 506.548516][T19904] RBP: 00007f227a665090 R08: 0000000000000000 R09: 0000000000000000 [ 506.548526][T19904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.548536][T19904] R13: 00007f22799e6038 R14: 00007f22799e5fa0 R15: 00007fff89f21808 [ 506.548566][T19904] [ 507.059032][T19921] netlink: 'syz.4.4017': attribute type 83 has an invalid length. [ 507.158477][T19921] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 507.257285][T19939] xt_TCPMSS: Only works on TCP SYN packets [ 507.273675][T19939] __nla_validate_parse: 19 callbacks suppressed [ 507.273691][T19939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4020'. [ 507.314480][T19939] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4020'. [ 507.357731][T19941] netlink: 'syz.5.4021': attribute type 1 has an invalid length. [ 507.380031][T19941] syzkaller0: entered promiscuous mode [ 507.400765][T19941] syzkaller0: entered allmulticast mode [ 507.934288][T19977] sctp: [Deprecated]: syz.2.4031 (pid 19977) Use of int in maxseg socket option. [ 507.934288][T19977] Use struct sctp_assoc_value instead [ 507.953765][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4029'. [ 507.979912][T19980] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4029'. [ 507.981627][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 508.022882][T19981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4032'. [ 508.069127][T19977] : entered promiscuous mode [ 508.192939][T19981] netlink: 211792 bytes leftover after parsing attributes in process `syz.4.4032'. [ 508.247327][T19984] tipc: Enabled bearer , priority 0 [ 508.265240][T19984] syzkaller0: entered promiscuous mode [ 508.272171][T19984] syzkaller0: entered allmulticast mode [ 508.293815][T19984] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 508.398474][T19992] 1{X: left allmulticast mode [ 508.427166][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4033'. [ 508.456244][T19994] FAULT_INJECTION: forcing a failure. [ 508.456244][T19994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.488679][T19994] CPU: 0 UID: 0 PID: 19994 Comm: syz.4.4037 Not tainted syzkaller #0 PREEMPT(full) [ 508.488702][T19994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.488713][T19994] Call Trace: [ 508.488719][T19994] [ 508.488727][T19994] dump_stack_lvl+0x189/0x250 [ 508.488749][T19994] ? __pfx____ratelimit+0x10/0x10 [ 508.488770][T19994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.488787][T19994] ? __pfx__printk+0x10/0x10 [ 508.488821][T19994] should_fail_ex+0x414/0x560 [ 508.488845][T19994] _copy_to_user+0x31/0xb0 [ 508.488869][T19994] simple_read_from_buffer+0xe1/0x170 [ 508.488897][T19994] proc_fail_nth_read+0x1b3/0x220 [ 508.488922][T19994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.488946][T19994] ? rw_verify_area+0x2a6/0x4d0 [ 508.488963][T19994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.488986][T19994] vfs_read+0x200/0xa30 [ 508.489004][T19994] ? fdget_pos+0x247/0x320 [ 508.489024][T19994] ? __pfx___mutex_lock+0x10/0x10 [ 508.489044][T19994] ? __pfx_vfs_read+0x10/0x10 [ 508.489065][T19994] ? __fget_files+0x2a/0x420 [ 508.489084][T19994] ? __fget_files+0x3a0/0x420 [ 508.489097][T19994] ? __fget_files+0x2a/0x420 [ 508.489122][T19994] ksys_read+0x145/0x250 [ 508.489144][T19994] ? __pfx_ksys_read+0x10/0x10 [ 508.489167][T19994] ? do_syscall_64+0xbe/0xf80 [ 508.489192][T19994] do_syscall_64+0xfa/0xf80 [ 508.489212][T19994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.489236][T19994] ? clear_bhb_loop+0x60/0xb0 [ 508.489257][T19994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.489273][T19994] RIP: 0033:0x7f52d198e15c [ 508.489288][T19994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 508.489301][T19994] RSP: 002b:00007f52d28e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.489317][T19994] RAX: ffffffffffffffda RBX: 00007f52d1be5fa0 RCX: 00007f52d198e15c [ 508.489329][T19994] RDX: 000000000000000f RSI: 00007f52d28e80a0 RDI: 0000000000000005 [ 508.489338][T19994] RBP: 00007f52d28e8090 R08: 0000000000000000 R09: 0000000000000000 [ 508.489348][T19994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.489358][T19994] R13: 00007f52d1be6038 R14: 00007f52d1be5fa0 R15: 00007ffc32e93b68 [ 508.489385][T19994] [ 508.505529][T19984] tipc: Resetting bearer [ 508.771267][T19982] tipc: Resetting bearer [ 508.897503][T19982] tipc: Disabling bearer [ 509.069614][T20036] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4048'. [ 509.658930][T20082] net_ratelimit: 6 callbacks suppressed [ 509.658947][T20082] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 509.696869][T20082] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4059'. [ 509.748154][T20086] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 509.948599][T20097] sit1: entered promiscuous mode [ 509.953582][T20097] sit1: entered allmulticast mode [ 510.056093][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.302857][T20121] netlink: 'syz.0.4075': attribute type 1 has an invalid length. [ 510.363596][T20121] bond4: entered promiscuous mode [ 510.373376][T20121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.439840][T20121] bond4: (slave bridge2): making interface the new active one [ 510.447565][T20121] bridge2: entered promiscuous mode [ 510.455702][T20121] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 510.487439][T20130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.738113][T20147] sctp: [Deprecated]: syz.4.4084 (pid 20147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.738113][T20147] Use struct sctp_sack_info instead [ 511.722675][T20193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.778132][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.291354][T20211] __nla_validate_parse: 12 callbacks suppressed [ 512.291371][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4103'. [ 512.685522][T20235] xt_nat: multiple ranges no longer supported [ 512.748253][T20241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4111'. [ 512.760504][T20241] C: renamed from lo (while UP) [ 512.772969][T20241] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 512.797760][T20241] netlink: 284 bytes leftover after parsing attributes in process `syz.5.4111'. [ 512.836240][T20241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4111'. [ 512.914192][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4113'. [ 513.137306][T15279] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 513.164227][T20261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4118'. [ 513.279234][T20267] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4119'. [ 513.432266][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 513.515762][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4121'. [ 513.547585][T20273] bond3: option xmit_hash_policy: invalid value (64) [ 513.572249][T20273] bond3 (unregistering): Released all slaves [ 513.672344][T20289] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 513.715071][T20290] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 513.882083][T20307] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4128'. [ 513.904276][T20309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.274337][T20330] tipc: Enabling of bearer rejected, failed to enable media [ 514.423137][T20336] syzkaller0: entered promiscuous mode [ 514.450214][T20336] syzkaller0: entered allmulticast mode [ 514.696538][T20353] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 514.712778][T20353] bond5 (unregistering): Released all slaves [ 514.965958][T20368] netlink: 'syz.2.4144': attribute type 2 has an invalid length. [ 515.090152][T20379] x_tables: duplicate underflow at hook 1 [ 515.288526][T20386] x_tables: duplicate underflow at hook 2 [ 516.441661][T20402] netlink: 'syz.4.4156': attribute type 1 has an invalid length. [ 517.072688][T20446] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 517.439661][T20465] openvswitch: netlink: IP tunnel dst address not specified [ 517.557590][T20476] __nla_validate_parse: 14 callbacks suppressed [ 517.557607][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4181'. [ 517.614270][T20476] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 517.617309][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4183'. [ 517.627697][T20476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4181'. [ 517.661822][T20483] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 517.703710][T20483] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4182'. [ 517.736036][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 517.813014][T20495] netlink: 'syz.4.4186': attribute type 2 has an invalid length. [ 517.847427][T20485] sctp: [Deprecated]: syz.2.4184 (pid 20485) Use of int in maxseg socket option. [ 517.847427][T20485] Use struct sctp_assoc_value instead [ 517.858845][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 517.873009][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 518.005819][T20507] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 518.101003][T20518] batman_adv: batadv0: Interface deactivated: dummy0 [ 518.118402][T20518] batman_adv: batadv0: Removing interface: dummy0 [ 518.164103][T20526] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4196'. [ 518.203227][T20518] bridge_slave_0: left allmulticast mode [ 518.209236][T20518] bridge_slave_0: left promiscuous mode [ 518.215968][T20518] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.241178][T20518] bridge_slave_1: left allmulticast mode [ 518.247511][T20518] bridge_slave_1: left promiscuous mode [ 518.254157][T20518] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.290584][T20518] bond0: (slave bond_slave_0): Releasing backup interface [ 518.307737][T20518] bond0: (slave bond_slave_1): Releasing backup interface [ 518.324808][T20518] team0: Port device team_slave_0 removed [ 518.343631][T20518] team0: Port device team_slave_1 removed [ 518.356585][T20518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.368169][T20518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.379033][T20518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.389994][T20518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.404283][T20518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.590411][T20546] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 518.661078][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4204'. [ 518.728524][T20555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4206'. [ 519.316236][T20595] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 519.354384][T20597] syzkaller0: entered promiscuous mode [ 519.363282][T20597] syzkaller0: entered allmulticast mode [ 519.436808][T20604] bond5: (slave ip6gretap1): making interface the new active one [ 519.446123][T20604] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 521.393582][T20670] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 521.683914][T20687] syzkaller0: entered promiscuous mode [ 521.699431][T20687] syzkaller0: entered allmulticast mode [ 521.718577][T20687] tipc: Enabled bearer , priority 0 [ 521.779292][T20687] bond9: option all_slaves_active: invalid value (222) [ 521.788839][T20687] bond9 (unregistering): Released all slaves [ 521.878381][T20686] tipc: Resetting bearer [ 521.912650][T20686] tipc: Disabling bearer [ 521.947355][T20702] netlink: 'syz.6.4240': attribute type 12 has an invalid length. [ 522.385957][T20733] bond6: Removing last ns target with arp_interval on [ 522.566138][T20746] __nla_validate_parse: 9 callbacks suppressed [ 522.566154][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4252'. [ 522.657362][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'. [ 522.685489][T20751] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4254'. [ 523.003713][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4263'. [ 523.020228][T20767] bond5: option mode: invalid value (133) [ 523.121505][T20767] bond5 (unregistering): Released all slaves [ 523.369805][T20796] sit0: entered promiscuous mode [ 523.402795][T20796] netlink: 'syz.6.4271': attribute type 1 has an invalid length. [ 523.411271][T20796] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4271'. [ 523.444564][T20796] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4271'. [ 523.608697][T20818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4273'. [ 524.306420][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4276'. [ 524.318194][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4276'. [ 524.345221][ T9460] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.353961][ T9460] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.375084][ T9460] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.418874][ T9460] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.459370][T20841] netlink: 'syz.2.4278': attribute type 10 has an invalid length. [ 524.475334][T20841] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4278'. [ 524.489250][T20843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.500499][T20841] team0: entered promiscuous mode [ 524.508099][T20841] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.525677][T20841] bridge0: port 1(team0) entered blocking state [ 524.546256][T20841] bridge0: port 1(team0) entered disabled state [ 524.558278][T20841] team0: entered allmulticast mode [ 524.602045][T20841] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 524.640046][T20840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.843176][T20871] netlink: 'syz.6.4289': attribute type 1 has an invalid length. [ 524.907911][T20868] hsr_slave_1 (unregistering): left promiscuous mode [ 524.970581][T20871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.006893][T20874] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 525.017271][T20874] team0: Device macvtap1 is already an upper device of the team interface [ 525.054090][T20893] netlink: 'syz.4.4295': attribute type 13 has an invalid length. [ 525.068110][T20894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.109401][T20884] veth3: entered promiscuous mode [ 525.138014][T20884] bond2: (slave veth3): Enslaving as an active interface with a down link [ 525.140336][T20898] openvswitch: netlink: IP tunnel dst address not specified [ 525.156742][T20893] veth0_macvtap: left promiscuous mode [ 525.166110][T20893] macvtap0: entered allmulticast mode [ 525.191961][T20893] macvtap0: refused to change device tx_queue_len [ 525.289192][T20905] Bluetooth: MGMT ver 1.23 [ 525.728166][T20942] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 525.789368][T20947] netlink: 'syz.5.4313': attribute type 142 has an invalid length. [ 525.827969][T20933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.838286][T20949] lo: left allmulticast mode [ 526.018590][T20957] lok: renamed from lo [ 526.470955][T21002] ip6tnl2: entered promiscuous mode [ 526.480325][T10282] IPVS: starting estimator thread 0... [ 526.591213][T21010] netlink: 'syz.0.4333': attribute type 13 has an invalid length. [ 526.617122][T21008] IPVS: using max 53 ests per chain, 127200 per kthread [ 526.641041][T21016] netlink: 'syz.4.4332': attribute type 3 has an invalid length. [ 526.805209][T21010] netlink: 'syz.0.4333': attribute type 13 has an invalid length. [ 526.964507][T21041] syzkaller0: entered promiscuous mode [ 526.972080][T21041] syzkaller0: entered allmulticast mode [ 527.373413][ T9447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.405200][T21068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.420528][ T9447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.450114][ T9447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.546756][ T9447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.690129][T21083] __nla_validate_parse: 14 callbacks suppressed [ 527.690147][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4354'. [ 527.709749][T21084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.725909][T21080] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4353'. [ 527.768928][T21080] --map-set only usable from mangle table [ 528.182215][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4361'. [ 528.232733][T21114] netlink: 'syz.4.4362': attribute type 16 has an invalid length. [ 528.285044][T21114] netlink: 'syz.4.4362': attribute type 3 has an invalid length. [ 528.316914][T21114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4362'. [ 528.333921][T21116] netlink: 'syz.0.4364': attribute type 9 has an invalid length. [ 528.401266][T21121] SET target dimension over the limit! [ 528.422160][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4363'. [ 528.447447][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4367'. [ 528.798329][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4371'. [ 530.268859][T21169] syz.2.4376 (21169) used obsolete PPPIOCDETACH ioctl [ 530.395472][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4381'. [ 530.498856][T21197] netlink: 'syz.0.4383': attribute type 13 has an invalid length. [ 530.544061][T21197] macvtap0: entered allmulticast mode [ 530.552763][T21197] macvtap0: refused to change device tx_queue_len [ 530.576062][T21196] x_tables: duplicate underflow at hook 4 [ 530.633009][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4386'. [ 530.737923][T21209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4388'. [ 530.904162][T21222] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 531.003957][T21226] syzkaller0: entered promiscuous mode [ 531.011770][T21226] syzkaller0: entered allmulticast mode [ 531.081356][T21228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.093678][T21228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.107329][T21228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 531.122771][T21228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 531.153641][T21235] syzkaller0: entered promiscuous mode [ 531.159991][T21235] syzkaller0: entered allmulticast mode [ 531.234423][T21228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.247837][T21228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.275755][T21228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 531.287863][T21228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 531.426983][T21228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.469911][T21228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.496332][T21228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 531.525130][T21228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 531.722345][T21228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.733049][T21228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.775489][T21228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 531.795519][T21228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 531.892291][T21264] netlink: 'syz.5.4404': attribute type 4 has an invalid length. [ 531.925585][T21264] `: renamed from bond0 (while UP) [ 531.950027][T21264] netlink: zone id is out of range [ 531.964960][T21264] netlink: del zone limit has 4 unknown bytes [ 532.009967][ T9460] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.027756][ T9460] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.055555][ T9460] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 532.078990][ T9460] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 532.130967][ T9460] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.140421][ T9460] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.151073][ T9460] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 532.162474][ T9460] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 532.214646][ T9460] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.239274][T21273] netlink: 'syz.0.4407': attribute type 1 has an invalid length. [ 532.264691][ T9460] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.285022][ T9460] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 532.303324][ T9460] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 532.323552][ T9460] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.343252][ T9460] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.361791][ T9460] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 532.381289][ T9460] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 532.540314][T21293] netlink: 'syz.2.4414': attribute type 2 has an invalid length. [ 532.595207][T21296] vlan1: entered allmulticast mode [ 532.600434][T21296] gretap0: entered allmulticast mode [ 532.871746][T21317] tipc: Started in network mode [ 532.879638][T21317] tipc: Node identity 7e990dfe674e, cluster identity 4711 [ 532.901182][T21317] tipc: Enabled bearer , priority 0 [ 532.913949][T21317] syzkaller0: entered promiscuous mode [ 532.920643][T21320] netlink: 'syz.6.4422': attribute type 10 has an invalid length. [ 532.937471][T21317] syzkaller0: entered allmulticast mode [ 532.957946][T21322] __nla_validate_parse: 6 callbacks suppressed [ 532.957960][T21322] netlink: 71 bytes leftover after parsing attributes in process `syz.6.4422'. [ 532.980345][T21326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'. [ 532.986892][T21317] tipc: Resetting bearer [ 533.002388][T21326] geneve3: entered promiscuous mode [ 533.035707][T21320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.065859][T21320] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 533.088555][T21317] tipc: Resetting bearer [ 533.146083][T21317] tipc: Disabling bearer [ 533.263638][T21344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4427'. [ 533.483349][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4435'. [ 533.638409][T21372] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4437'. [ 533.678434][T21372] vlan3: entered allmulticast mode [ 533.684198][T21372] erspan0: entered allmulticast mode [ 533.692814][T21376] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4437'. [ 533.722925][T21374] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 533.857719][T21387] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4441'. [ 533.920835][T21390] netlink: 'syz.0.4443': attribute type 11 has an invalid length. [ 533.939399][T21390] netlink: 'syz.0.4443': attribute type 4 has an invalid length. [ 533.956928][T21390] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.4443'. [ 533.959051][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4444'. [ 534.080938][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'. [ 534.237995][T21412] netlink: 'syz.0.4449': attribute type 1 has an invalid length. [ 534.274920][T21412] netlink: 'syz.0.4449': attribute type 11 has an invalid length. [ 534.436493][T21423] netlink: 'syz.4.4454': attribute type 1 has an invalid length. [ 534.987086][T21466] lo: Caught tx_queue_len zero misconfig [ 535.049829][T21469] veth1_macvtap: left promiscuous mode [ 535.076339][T21473] netlink: 'syz.2.4468': attribute type 4 has an invalid length. [ 535.088080][T21476] netlink: 'syz.6.4470': attribute type 1 has an invalid length. [ 535.099127][T21472] 8021q: VLANs not supported on xfrm0 [ 535.209207][T21482] netlink: 'syz.5.4474': attribute type 1 has an invalid length. [ 535.306770][T21486] netlink: 'syz.2.4473': attribute type 21 has an invalid length. [ 535.384660][T21486] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 535.492468][T21500] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 535.508149][T21500] bond10 (unregistering): Released all slaves [ 535.547718][T21511] netlink: 'syz.2.4481': attribute type 12 has an invalid length. [ 535.600615][T21480] Cannot find set identified by id 65534 to match [ 535.623421][T21511] bond5: option primary_reselect: invalid value (255) [ 535.632602][T21511] bond5 (unregistering): Released all slaves [ 535.853247][T21519] bond10: (slave gretap2): making interface the new active one [ 535.862445][T21519] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 535.882562][T21522] ip6tnl0: Caught tx_queue_len zero misconfig [ 536.346661][T21549] : entered promiscuous mode [ 536.413058][T21552] gretap0: entered promiscuous mode [ 536.444443][T21552] batadv_slave_1: entered promiscuous mode [ 536.454811][T21552] debugfs: 'hsr1' already exists in 'hsr' [ 536.472397][T21552] Cannot create hsr debugfs directory [ 549.699712][T15279] Bluetooth: hci5: command 0x0406 tx timeout [ 559.136392][ T31] INFO: task kworker/u8:22:9438 blocked for more than 143 seconds. [ 559.144422][ T31] Not tainted syzkaller #0 [ 559.149571][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.158736][ T31] task:kworker/u8:22 state:D stack:25272 pid:9438 tgid:9438 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 559.170835][ T31] Workqueue: netns cleanup_net [ 559.175972][ T31] Call Trace: [ 559.179254][ T31] [ 559.182174][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 559.187308][ T31] ? __pfx___schedule+0x10/0x10 [ 559.192689][ T31] ? schedule+0x91/0x360 [ 559.197647][ T31] schedule+0x165/0x360 [ 559.201955][ T31] schedule_preempt_disabled+0x13/0x30 [ 559.207582][ T31] __mutex_lock+0x7e6/0x1350 [ 559.212199][ T31] ? __mutex_lock+0x5bb/0x1350 [ 559.234707][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 559.240264][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 559.245386][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 559.251566][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 559.259411][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 559.264646][ T31] ? _raw_spin_unlock+0x28/0x50 [ 559.269621][ T31] rdma_dev_change_netns+0x39/0x300 [ 559.275765][ T31] rdma_dev_exit_net+0x203/0x340 [ 559.281656][ T31] ? __pfx___might_resched+0x10/0x10 [ 559.287895][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 559.293369][ T31] ? net_generic+0x1e/0x240 [ 559.354933][ T31] ? mutex_is_locked+0x17/0x50 [ 559.359740][ T31] ? rtnl_is_locked+0x15/0x20 [ 559.364430][ T31] ops_undo_list+0x49a/0x990 [ 559.395063][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 559.400743][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 559.415347][ T31] cleanup_net+0x4d8/0x7a0 [ 559.419799][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 559.424748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.444873][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 559.450618][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 559.474877][ T31] process_scheduled_works+0xad1/0x1770 [ 559.480526][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.486564][ T31] worker_thread+0x8a0/0xda0 [ 559.491172][ T31] ? __kthread_parkme+0x7b/0x200 [ 559.511659][ T31] kthread+0x711/0x8a0 [ 559.515869][ T31] ? __pfx_worker_thread+0x10/0x10 [ 559.520991][ T31] ? __pfx_kthread+0x10/0x10 [ 559.544861][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.550088][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 559.565006][ T31] ? __pfx_kthread+0x10/0x10 [ 559.569622][ T31] ret_from_fork+0x599/0xb30 [ 559.574221][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 559.594931][ T31] ? __switch_to_asm+0x39/0x70 [ 559.599722][ T31] ? __switch_to_asm+0x33/0x70 [ 559.604491][ T31] ? __pfx_kthread+0x10/0x10 [ 559.624858][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.629647][ T31] [ 559.632678][ T31] INFO: task syz.3.2421:14298 blocked for more than 143 seconds. [ 559.650132][ T31] Not tainted syzkaller #0 [ 559.655105][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.663797][ T31] task:syz.3.2421 state:D stack:23880 pid:14298 tgid:14297 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 559.676384][ T31] Call Trace: [ 559.679674][ T31] [ 559.682605][ T31] __schedule+0x14bc/0x5000 [ 559.687198][ T31] ? __pfx___schedule+0x10/0x10 [ 559.692069][ T31] ? schedule+0x91/0x360 [ 559.698878][ T31] schedule+0x165/0x360 [ 559.703060][ T31] schedule_timeout+0x9a/0x270 [ 559.708083][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 559.714143][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.720353][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 559.725741][ T31] ? wait_for_completion+0x267/0x5d0 [ 559.731055][ T31] wait_for_completion+0x2bf/0x5d0 [ 559.736421][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 559.742035][ T31] ? disable_device+0x137/0x320 [ 559.746902][ T31] ? remove_client_context+0xc0/0x1e0 [ 559.752255][ T31] disable_device+0x1c6/0x320 [ 559.757230][ T31] ? __pfx_disable_device+0x10/0x10 [ 559.762447][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 559.768052][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 559.773929][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 559.780049][ T31] nldev_dellink+0x2d1/0x320 [ 559.784648][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 559.789914][ T31] ? apparmor_capable+0x137/0x1a0 [ 559.795229][ T31] ? bpf_lsm_capable+0x9/0x20 [ 559.799910][ T31] ? security_capable+0x7e/0x2e0 [ 559.805065][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 559.810205][ T31] rdma_nl_rcv+0x6ae/0x980 [ 559.815215][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 559.820175][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.825938][ T31] netlink_unicast+0x82f/0x9e0 [ 559.830750][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 559.836244][ T31] ? netlink_sendmsg+0x642/0xb30 [ 559.841183][ T31] ? skb_put+0x11b/0x210 [ 559.845474][ T31] netlink_sendmsg+0x805/0xb30 [ 559.850240][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.856429][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 559.861377][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.866844][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.872131][ T31] __sock_sendmsg+0x21c/0x270 [ 559.876839][ T31] ____sys_sendmsg+0x505/0x820 [ 559.881593][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.887126][ T31] ? import_iovec+0x74/0xa0 [ 559.891618][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 559.896396][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.901594][ T31] ? futex_wait+0x285/0x360 [ 559.906129][ T31] ? __fget_files+0x2a/0x420 [ 559.910699][ T31] ? __fget_files+0x3a0/0x420 [ 559.916237][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 559.921195][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.926681][ T31] ? do_syscall_64+0xbe/0xf80 [ 559.931362][ T31] do_syscall_64+0xfa/0xf80 [ 559.936085][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.942162][ T31] ? clear_bhb_loop+0x60/0xb0 [ 559.947357][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.953266][ T31] RIP: 0033:0x7f437bd8f749 [ 559.957711][ T31] RSP: 002b:00007f437cc0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.966176][ T31] RAX: ffffffffffffffda RBX: 00007f437bfe5fa0 RCX: 00007f437bd8f749 [ 559.974147][ T31] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 559.982383][ T31] RBP: 00007f437be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 559.990403][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.998410][ T31] R13: 00007f437bfe6038 R14: 00007f437bfe5fa0 R15: 00007ffd910a3a78 [ 560.006749][ T31] [ 560.024851][ T31] [ 560.024851][ T31] Showing all locks held in the system: [ 560.035385][ T31] 2 locks held by ksoftirqd/1/23: [ 560.040441][ T31] 1 lock held by khungtaskd/31: [ 560.085640][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 560.115024][ T31] 2 locks held by getty/5603: [ 560.120571][ T31] #0: ffff8880348640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 560.144867][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 560.166565][ T31] 4 locks held by kworker/u8:22/9438: [ 560.171949][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 560.221932][ T31] #1: ffffc9000c60fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 560.264867][ T31] #2: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 560.274262][ T31] #3: ffff888064eac700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 560.324920][ T31] 2 locks held by kworker/0:11/10282: [ 560.330319][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 560.377359][ T31] #1: ffffc90003e4fb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 560.394854][ T31] 2 locks held by syz.3.2421/14298: [ 560.400095][ T31] #0: ffffffff99befc98 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 560.423777][ T31] #1: ffff888064eac700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 560.439845][ T31] 3 locks held by syz-executor/15277: [ 560.446015][ T31] #0: ffff8880804acec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 560.456410][ T31] #1: ffff8880804ac0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 560.466223][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 560.476866][ T31] 3 locks held by syz-executor/15928: [ 560.482224][ T31] #0: ffff88805eb88ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 560.492271][ T31] #1: ffff88805eb880c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 560.503471][ T31] #2: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 560.514747][ T31] 3 locks held by syz-executor/16320: [ 560.520196][ T31] #0: ffff88805a0d4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 560.530614][ T31] #1: ffff88805a0d40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 560.540953][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 560.551252][ T31] 3 locks held by syz-executor/16731: [ 560.556694][ T31] #0: ffff888021b74ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 560.566965][ T31] #1: ffff888021b740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 560.576838][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 560.587031][ T31] 2 locks held by syz.1.3442/17948: [ 560.592223][ T31] #0: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 560.602073][ T31] #1: ffff888064eac700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 560.613593][ T31] 5 locks held by syz-executor/18864: [ 560.619108][ T31] #0: ffff88804e70cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 560.629441][ T31] #1: ffff88804e70c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 560.639606][ T31] #2: ffffffff8f467308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 560.649676][ T31] #3: ffff888066025b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 560.659499][ T31] #4: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 560.670520][ T31] 2 locks held by kworker/0:0/19165: [ 560.675866][ T31] #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 560.686220][ T31] #1: ffff8880b8824448 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 560.695243][ T31] [ 560.699937][ T31] ============================================= [ 560.699937][ T31] [ 560.712381][ T31] NMI backtrace for cpu 1 [ 560.712397][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.712414][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.712424][ T31] Call Trace: [ 560.712431][ T31] [ 560.712438][ T31] dump_stack_lvl+0x189/0x250 [ 560.712462][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.712478][ T31] ? __pfx__printk+0x10/0x10 [ 560.712511][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 560.712531][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 560.712550][ T31] ? __pfx__printk+0x10/0x10 [ 560.712576][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.712601][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 560.712621][ T31] watchdog+0xf3c/0xf80 [ 560.712644][ T31] ? watchdog+0x1e2/0xf80 [ 560.712669][ T31] kthread+0x711/0x8a0 [ 560.712690][ T31] ? __pfx_watchdog+0x10/0x10 [ 560.712707][ T31] ? __pfx_kthread+0x10/0x10 [ 560.712727][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.712745][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 560.712763][ T31] ? __pfx_kthread+0x10/0x10 [ 560.712782][ T31] ret_from_fork+0x599/0xb30 [ 560.712808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 560.712840][ T31] ? __switch_to_asm+0x39/0x70 [ 560.712858][ T31] ? __switch_to_asm+0x33/0x70 [ 560.712874][ T31] ? __pfx_kthread+0x10/0x10 [ 560.712894][ T31] ret_from_fork_asm+0x1a/0x30 [ 560.712929][ T31] [ 560.712937][ T31] Sending NMI from CPU 1 to CPUs 0: [ 560.860678][ C0] NMI backtrace for cpu 0 [ 560.860692][ C0] CPU: 0 UID: 0 PID: 9448 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(full) [ 560.860712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.860723][ C0] Workqueue: events_unbound toggle_allocation_gate [ 560.860749][ C0] RIP: 0010:pick_task_fair+0x24e/0x2a0 [ 560.860769][ C0] Code: 0f b6 04 28 84 c0 74 12 44 89 e1 80 e1 07 38 c1 7c 08 4c 89 e7 e8 72 1d 93 00 40 b5 01 41 f6 04 24 01 0f 85 72 fe ff ff eb 9d <31> c0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0d 19 b8 09 cc [ 560.860783][ C0] RSP: 0018:ffffc900030674a0 EFLAGS: 00000046 [ 560.860796][ C0] RAX: 0000000000000000 RBX: ffff8880b883a890 RCX: 1ffff11017107675 [ 560.860808][ C0] RDX: ffffc900030678a0 RSI: 1ffff1101710750d RDI: ffff8880b883a7c0 [ 560.860820][ C0] RBP: ffff8880b883b480 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 560.860832][ C0] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffff8880b883a7c0 [ 560.860844][ C0] R13: dffffc0000000000 R14: 1ffff11017107512 R15: dffffc0000000000 [ 560.860857][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 560.860870][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.860882][ C0] CR2: 0000562f2fd1c468 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 560.860896][ C0] Call Trace: [ 560.860902][ C0] [ 560.860913][ C0] pick_next_task_fair+0x17f/0x2130 [ 560.860932][ C0] ? update_load_avg+0xfaa/0x1870 [ 560.860972][ C0] __pick_next_task+0xeb/0x480 [ 560.860996][ C0] __schedule+0x7b4/0x5000 [ 560.861021][ C0] ? do_raw_spin_lock+0x121/0x290 [ 560.861046][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 560.861065][ C0] ? __pfx___schedule+0x10/0x10 [ 560.861089][ C0] ? schedule+0x91/0x360 [ 560.861108][ C0] schedule+0x165/0x360 [ 560.861126][ C0] toggle_allocation_gate+0x159/0x240 [ 560.861148][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 560.861169][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 560.861193][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 560.861216][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 560.861240][ C0] process_scheduled_works+0xad1/0x1770 [ 560.861276][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.861313][ C0] worker_thread+0x8a0/0xda0 [ 560.861335][ C0] ? __kthread_parkme+0x7b/0x200 [ 560.861356][ C0] kthread+0x711/0x8a0 [ 560.861376][ C0] ? __pfx_worker_thread+0x10/0x10 [ 560.861391][ C0] ? __pfx_kthread+0x10/0x10 [ 560.861410][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.861427][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 560.861445][ C0] ? __pfx_kthread+0x10/0x10 [ 560.861463][ C0] ret_from_fork+0x599/0xb30 [ 560.861487][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 560.861514][ C0] ? __switch_to_asm+0x39/0x70 [ 560.861532][ C0] ? __switch_to_asm+0x33/0x70 [ 560.861548][ C0] ? __pfx_kthread+0x10/0x10 [ 560.861567][ C0] ret_from_fork_asm+0x1a/0x30 [ 560.861594][ C0]