last executing test programs: 28.695321907s ago: executing program 3 (id=2750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000080)='i', 0xfffffffffffffeb4}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r4, 0x0, 0x0, 0x4}, 0x20) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) sendmsg$sock(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r2, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af8348974", 0x2a, 0x4004001, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) 3.375222752s ago: executing program 3 (id=2764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 3.370912966s ago: executing program 4 (id=2765): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x301}, 0x28) 3.161375922s ago: executing program 4 (id=2768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', 0x1}, 0x18) 3.06711968s ago: executing program 4 (id=2769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b500", "b70800", "1d1cbe23", "b51788ba0584eb23"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b500", "b70800", "1d1cbe23", "b51788ba0584eb23"}, 0x28) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000180)={&(0x7f0000000140)=[{&(0x7f0000000000)="4eb33ea0407410c5a6fa32cfd4e6ee29404cfbf2ae23ee282e57190a523cf727daeaa2274fea5edd41315baaea83bb1259e9174beb51404ecff176924e16", 0x3e}, {&(0x7f00000000c0)="9a8953d618ad978daf9bf4095675be744ea0f6306db5b69e1a645863ad5b91323868dd45866455b576d8cfff", 0x2c}], 0x2, 0xd, 0x0, 0x5fc1, 0x8, 0x100000001, 0x1, 0xffff8000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) (async) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0xf3a, 0x0) (async) splice(r0, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000200)={0x9, 0x11, 0x7, 0x7, 0x2, 0xfffd}) 2.94851287s ago: executing program 3 (id=2770): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70000000, 0x2e}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x87}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000300)="0c98612a169079196fd5b78974047d8862fae53a8ff2c27a836faca35a8f4f0336d23e06be5766985bc3e2b4eb403b204f95396af2d70bdd94ab81c535f73e1a70938221922ecf1bb039926f1f9dbf909000c5a03e971fcd056990097b87e7770fc7a7951296c97801acd3550651b264dbd519aaa69e8fd9f9db0760903d7358e3d34a4547a392af7992ac75d35bd39ffd8b687630b92b80bbd14ae8d087148dae3c8c") (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 2.693108953s ago: executing program 0 (id=2773): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x48) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300)=0x254, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 2.656503165s ago: executing program 3 (id=2774): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x2000800) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x8, 0xf1d, 0x10000, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x3502, 0x2803033ce1469a39, 0x1, 0xd0, 0x5, 0x3, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.539217683s ago: executing program 2 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000f1ff00000000c224f733f96d91d5c92601e28bd5f697578e85d8ad0e5000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x44011}, 0x0) 2.420824297s ago: executing program 0 (id=2777): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000200)=""/17, 0x11}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000baf56c251e83b769ffffffffffffff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pK \x00'}, 0x6d) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) writev(r2, &(0x7f0000002a00)=[{&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="7293693777581874b2b38f51a6cb289136cd058e34660067370a9cc599019f0750f7100d7e59566dfbf0e4d1dee5a6ff1cd6d334bda0bda42a1be0827d48668630dd376edc5984cd4393993dc9ad9e1632bee17f09410a454de5f6acf6336452907a9c6b7ddffc2c05a5ba2d1de3446b3de163aa1d612bdcda73658920fb4eb7821e5b8eb29aec3eb1c0800badbb044a0bc888f04efc2a56155f701cd9b102fa5622dde6e3d1427f80efb53962e1e69d9ba1d767da2244f46b07f9bb24b31f4bd0eff50310d4975483219f3f5af68e51d6c36a93e3ce12", 0xd7}], 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) 2.307267934s ago: executing program 2 (id=2778): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001100)=""/263, 0x107}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/123, 0x7b}], 0x7}}], 0x1, 0x40, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/'], 0x20) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r7) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="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", 0x2a2}], 0x1) 2.176788576s ago: executing program 0 (id=2780): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x10, 0xc59b, 0xff, {{0x13, 0x4, 0x3, 0x9, 0x4c, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x15, 0x0, 0x7, [0x18000, 0xfffffffb, 0xa, 0x80, 0x200, 0xfee, 0x17d8, 0xfffffffe, 0x5]}, @ssrr={0x89, 0xb, 0xe2, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5, 0x7, r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8, 0x80, 0x80000001, 0x7, {{0x13, 0x4, 0x1, 0x11, 0x4c, 0x68, 0x0, 0xea, 0x29, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xb, 0x48, [@private=0xa010101, @multicast1]}, @timestamp={0x44, 0x2c, 0x98, 0x0, 0x7, [0x71, 0x7, 0xfffffff8, 0x5, 0xf, 0x1, 0x1, 0x2, 0x6, 0x1000]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xa8, 0x1, 0x4c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @private1, 0x1, 0x8, 0x890, 0x80000001}}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4, {0x7, 0x0, 0x0, r11}}, 0x18}}, 0x20000010) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200030000000800030000ffff0008000400", @ANYRES32=r13, @ANYBLOB="2800038008000100010000100a0002007a112251445500000800030000000000080004"], 0x7c}}, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r17, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a80)={&(0x7f00000006c0)={0x13a8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x109c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "5e3c9d8403dc783642218f30b34832f445b06b90fd3c136e69d3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x54, 0x4, "47e539f27eea9f104478d94988f52a91858d8669fa696c01ef18e6447def6168e411f03f6bd3d171937f8cc28ef6fb1832f36bb343c201b3180ffa15a98319c1869da2e850d458ea08f5550e42d18a20"}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "b9eb033afb"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6bc}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\x19\\]{+][:+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x21}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.{!.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "4521251d3f2ff043257443"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '[)%\'.@]^%.,(^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf509c663}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x304}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "ca7a6f83bad8e8d490e9b4e0976bcc4ede0c9cc78b66e1e3982f354f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "ac8416c1f6fd63b4372527e7473a2d3ee8b07f0d8c0c436e8dd545"}]}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r18, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.126449613s ago: executing program 3 (id=2781): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f00000012c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) 2.020353642s ago: executing program 1 (id=2782): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) shutdown(r1, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) (async, rerun: 32) listen(r4, 0x0) (async, rerun: 32) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={r5, r6/1000+60000}, 0x10) (async) accept4(r4, 0x0, 0x0, 0x80800) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffd}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x158}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) shutdown(r4, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1.933044075s ago: executing program 4 (id=2783): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700"], 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x400, 0xc11d, 0x6, 0x6000}, {0x4, 0x3, 0x800, 0x101, 0x524d, 0x4}, 0x5, 0x0, 0x1520}}]}}]}, 0x58}}, 0x0) recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) 1.54344021s ago: executing program 1 (id=2784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000400)) r2 = socket(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005640), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f00000057c0)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005780)={&(0x7f00000056c0)={0xac, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_IE={0x85, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x3}, 0xc, 0xc0, @device_a, 0x3, 0x78000000, 0xc}}, @fast_bss_trans={0x37, 0x5d, {0x4, 0x1, "b8c83bcfeca9e07d4c4ab8528e307794", "570609b2ade7b08cbb40ef7fbb563d45715bb3372e664c25796bf4d48b0f78d3", "17d3a1857a650085b942659a98d148408b46fc53a5afd18920174dee3e5996ce", [{0x1, 0x9, "2a241fe8186f2e83a4"}]}}, @gcr_ga={0xbd, 0x6}, @random={0x3, 0x1, '5'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x20080) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) bind$can_raw(r4, &(0x7f0000000380), 0x10) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x5, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x7}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10}, 0x94) recvmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)=""/105, 0x69}], 0x5, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x1a2) 1.162629689s ago: executing program 0 (id=2785): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f0000000340)=[{r1, 0x4}, {r2, 0x1481}], 0x2, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.069110188s ago: executing program 1 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000184200000600000000000000002e0000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.066842474s ago: executing program 2 (id=2787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40000001000010400400000000000000000ffff", @ANYRES32=r4, @ANYRES8=r0], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8000, 0x7, 0x9, 0x4, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x64, 0x0, 0x3, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000070000000000200000000300000007000000cb53b2f5a800000005000000010000060400000008000000fcffffff00ab5ea85bf094ae3000"], &(0x7f00000003c0)=""/92, 0x3b, 0x5c, 0x0, 0x0, 0x10000}, 0x28) (async) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0xa, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000002}}}}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x28, r9, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfffd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x3, 0x31a, 0xe8000000, 0x0, r5, 0x8, '\x00', r6, r7, 0x1, 0x5, 0x4, 0xb}, 0x50) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 993.073556ms ago: executing program 2 (id=2788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01e1ff0001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x2044}, 0x880) 883.381557ms ago: executing program 4 (id=2789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[{0x10, 0x1, 0xdda1}], 0x10}, 0x20000000) socket$kcm(0x2, 0xd, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x44) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0xc009, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 664.921148ms ago: executing program 1 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x48, r2, 0x91b, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2004c048) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x94}, 0x4000800) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 635.71135ms ago: executing program 0 (id=2791): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @local}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @loopback}, &(0x7f0000000300)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2a8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0xf9, 0x1, 0x7fffffff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1254}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="0800080000210600cdfd2f00400045a3002800630000401190780a010104ffffffff4e264e2000149078e20900000000000097ef8515"], 0x36) select(0x40, &(0x7f0000000040)={0xe, 0x3, 0x7f, 0x9, 0xc, 0xffffffffffff5957, 0x4, 0x8}, &(0x7f0000000080)={0x1, 0x2, 0x4a3d3078, 0x9, 0xcc, 0x8fab, 0x9, 0x10}, &(0x7f00000000c0)={0x5, 0xb93, 0x7ff, 0x10, 0x6, 0x7, 0x3, 0xba2c}, &(0x7f0000000100)={0x77359400}) 336.657759ms ago: executing program 2 (id=2792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bc28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xffff}, {0xffff, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x800}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 176.585406ms ago: executing program 1 (id=2793): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="230003000100ef", 0x7) 172.758909ms ago: executing program 4 (id=2794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="940a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="940a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x44}}, 0x0) (async) 117.943107ms ago: executing program 3 (id=2795): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000100)="4650ef3feec6db502a600878746458086d1a3e20e5e4b541368671a47a7c01096c7cdec3036e4e7f0dce56e3e8a5a1f75a80ae2fd0db1ae957163f2c01ede7a7f66d8c8f7bd2dc3a952416e72220d2e2304bd72abda5b1a5dad54bf47c4ca110ac5ff22de8531a1b442e883bed0199882fe1179eaf365e4f9388e4cee19e7784cc7a74afd904d5e5e830e512deafbe1e31b98d526c8298b6eec0fa2420175d6684d34e3b0f09ade4583b25aaad75c2ba57d286049c988225908f13730b5062d9b3544cfd7bbf2ef4815f7e08960276d57597250379225bdb55632618e58f", 0xde}, {&(0x7f0000000300)="03bcf5a86783f9ffb3701fa2088968c2f92ba27d34737329dbf9392a0a553761bb8112c7a399c38ac8e3b4a28777691c5f209245bfca24d9c623ff7629fc902d0d38f89f0ed88eac3a2ab8630329cb309a6ddcd12c41202dc381c1b3e36b91ab9ce1e10759d56644254f1298a3cfccdb9bfc51634a6bc20715f9ceb8be7a36637eb92c2edad65447151a3f86e2abf40790b19199a19c999349d1955d272ed724df22e61190b7d174af88f733a5", 0xad}, {&(0x7f0000000540)="038773b7c18f3197762ad838f459612692b4a756b0d97a69024bb2af25448071179fbd93f09028e5032b40dcf9f3adec86cca063e2b2a92fde788dc26c0868bdb973a86bf13052e4f4e3cb3c0cfe55480c603f11a667d419abb81a608e3bd04a6986f8bef75610c0fc35e0dd3f491494e8f1a2d92b6706df42428254e0653796814c5747b215ed9cf10501d38b3123d5b3d2134be8f079320f78ef55df41883f90c2bc94268f88f1cee533f4290159cfc830464d5e65d74b64a1d22f16941fa845d55363fba7991d80066d075781161dcbdaea183e9a95230f8d6e3311c7e750a29e9f11e31b0ddab9ba94bb88ec1770", 0xf0}], 0x3, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x3, 0x5}, @timestamp={0x44, 0x1c, 0x87, 0x0, 0x2, [0x4, 0x0, 0xfb89, 0x9, 0xf2, 0x7]}, @end, @rr={0x7, 0xf, 0x97, [@broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x1c, 0x42, 0x3, 0x1, [{@empty, 0x925}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x80000000}]}, @timestamp_addr={0x44, 0x2c, 0x9a, 0x1, 0x9, [{@local}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@remote, 0x9}, {@private=0xa010100, 0x133a}]}]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x75, 0x0, 0x7, [0x6, 0xc2a8, 0x8, 0x800, 0x598, 0x5]}, @timestamp_addr={0x44, 0xc, 0x4b, 0x1, 0x8, [{@multicast2, 0x1}]}, @cipso={0x86, 0x63, 0x3, [{0x1, 0x5, "721d98"}, {0x5, 0xb, "e141084e6ce9abe09d"}, {0x5, 0xe, "4b9892be3437c7742cb4e728"}, {0x2, 0x9, "033a4f7c170a73"}, {0x2, 0xb, "225c9dca6af47eaaa9"}, {0x0, 0x11, "ad46a01f27049c406f4da501b0ea36"}, {0x2, 0x12, "e0ffcea7e1d86ba6200f3c726e8eaea1"}, {0x2, 0x3, '}'}, {0x0, 0x5, "c57efe"}]}, @lsrr={0x83, 0xb, 0x14, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ssrr={0x89, 0x17, 0xcd, [@empty, @loopback, @remote, @multicast2, @rand_addr=0x64010101]}, @noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0x7, "f19d7bdcf1"}, {0x7, 0x7, "5811f54462"}, {0x5, 0x7, "c7869326ac"}]}]}}}], 0x180}}], 0x1, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r5) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) shutdown(r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x803, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000100)="4650ef3feec6db502a600878746458086d1a3e20e5e4b541368671a47a7c01096c7cdec3036e4e7f0dce56e3e8a5a1f75a80ae2fd0db1ae957163f2c01ede7a7f66d8c8f7bd2dc3a952416e72220d2e2304bd72abda5b1a5dad54bf47c4ca110ac5ff22de8531a1b442e883bed0199882fe1179eaf365e4f9388e4cee19e7784cc7a74afd904d5e5e830e512deafbe1e31b98d526c8298b6eec0fa2420175d6684d34e3b0f09ade4583b25aaad75c2ba57d286049c988225908f13730b5062d9b3544cfd7bbf2ef4815f7e08960276d57597250379225bdb55632618e58f", 0xde}, {&(0x7f0000000300)="03bcf5a86783f9ffb3701fa2088968c2f92ba27d34737329dbf9392a0a553761bb8112c7a399c38ac8e3b4a28777691c5f209245bfca24d9c623ff7629fc902d0d38f89f0ed88eac3a2ab8630329cb309a6ddcd12c41202dc381c1b3e36b91ab9ce1e10759d56644254f1298a3cfccdb9bfc51634a6bc20715f9ceb8be7a36637eb92c2edad65447151a3f86e2abf40790b19199a19c999349d1955d272ed724df22e61190b7d174af88f733a5", 0xad}, {&(0x7f0000000540)="038773b7c18f3197762ad838f459612692b4a756b0d97a69024bb2af25448071179fbd93f09028e5032b40dcf9f3adec86cca063e2b2a92fde788dc26c0868bdb973a86bf13052e4f4e3cb3c0cfe55480c603f11a667d419abb81a608e3bd04a6986f8bef75610c0fc35e0dd3f491494e8f1a2d92b6706df42428254e0653796814c5747b215ed9cf10501d38b3123d5b3d2134be8f079320f78ef55df41883f90c2bc94268f88f1cee533f4290159cfc830464d5e65d74b64a1d22f16941fa845d55363fba7991d80066d075781161dcbdaea183e9a95230f8d6e3311c7e750a29e9f11e31b0ddab9ba94bb88ec1770", 0xf0}], 0x3, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x3, 0x5}, @timestamp={0x44, 0x1c, 0x87, 0x0, 0x2, [0x4, 0x0, 0xfb89, 0x9, 0xf2, 0x7]}, @end, @rr={0x7, 0xf, 0x97, [@broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x1c, 0x42, 0x3, 0x1, [{@empty, 0x925}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x80000000}]}, @timestamp_addr={0x44, 0x2c, 0x9a, 0x1, 0x9, [{@local}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@remote, 0x9}, {@private=0xa010100, 0x133a}]}]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x75, 0x0, 0x7, [0x6, 0xc2a8, 0x8, 0x800, 0x598, 0x5]}, @timestamp_addr={0x44, 0xc, 0x4b, 0x1, 0x8, [{@multicast2, 0x1}]}, @cipso={0x86, 0x63, 0x3, [{0x1, 0x5, "721d98"}, {0x5, 0xb, "e141084e6ce9abe09d"}, {0x5, 0xe, "4b9892be3437c7742cb4e728"}, {0x2, 0x9, "033a4f7c170a73"}, {0x2, 0xb, "225c9dca6af47eaaa9"}, {0x0, 0x11, "ad46a01f27049c406f4da501b0ea36"}, {0x2, 0x12, "e0ffcea7e1d86ba6200f3c726e8eaea1"}, {0x2, 0x3, '}'}, {0x0, 0x5, "c57efe"}]}, @lsrr={0x83, 0xb, 0x14, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ssrr={0x89, 0x17, 0xcd, [@empty, @loopback, @remote, @multicast2, @rand_addr=0x64010101]}, @noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x1, 0x7, "f19d7bdcf1"}, {0x7, 0x7, "5811f54462"}, {0x5, 0x7, "c7869326ac"}]}]}}}], 0x180}}], 0x1, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) (async) socket$kcm(0x2b, 0x1, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) close(r5) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) shutdown(r0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) (async) 4.535088ms ago: executing program 2 (id=2796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r7, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000040)={r8, 0x8001}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000040)={r8, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}}, 0x8, 0x3ff, 0x2, 0x863, 0x53923e4a071c83c5, 0x2, 0x1}, 0x9c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000410007000000007fffffffff017c0000040042800c001080"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.897261ms ago: executing program 1 (id=2797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 0s ago: executing program 0 (id=2798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000020000000052a716af506c86cb64093cfb0000000000000000000000000c000780080008000000a5e779887958f1a0b60c738082e8dc00000500010006000000050005000200400005040400000000000900020073797a31000000001100030068617368"], 0x58}}, 0x24000044) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r1}, 0x20) sendto(r1, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128015000100697036746e6c00000c00028008000100", @ANYRES32=0x0, @ANYBLOB="080004137e0000001073fa01d4b03068224b1361c47fbab5bcaae91c5f51804546f3df3fe82c16693cd489c50072e8058be015b6a847acb4474c72b17021f8ea83a2b482642e2875e314115cb8197fa2ae3e20a05d8221bb21edeb831b6f22d6"], 0x44}, 0x9}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000100)="c6c338ccccf44d8c11c07116dbbe4fbd9238d601633fd1f06439a5efb49eeaa715c85836c81542b429d2d36d04eca3be873a75f4bafecc17ac8383bf4d43756dea0b18466f5b5b606616bb5712aa433730ae907754c0dae29ef6e19eebf48c6ad5b681c32945b08be450733ec4f2557b0c3634f56468dbb01f45869545f71cd295380bc946c384d05b8a042dfa9e9ce8eb6906ca23bb2027b32a8195c9b0de746a3a8e8b0b06c3f445", &(0x7f0000000280)=""/173, 0x4}, 0x20) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.4.721'. [ 135.412348][ T8513] veth0_to_bridge: left promiscuous mode [ 135.415536][ T8564] openvswitch: netlink: IPv4 tun info is not correct [ 135.646453][ T8567] xfrm1: entered allmulticast mode [ 135.751875][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'. [ 136.049357][ T8612] sctp: [Deprecated]: syz.0.736 (pid 8612) Use of int in maxseg socket option. [ 136.049357][ T8612] Use struct sctp_assoc_value instead [ 136.081684][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 136.341884][ T8629] vlan2: entered allmulticast mode [ 136.427913][ T8635] validate_nla: 7 callbacks suppressed [ 136.433612][ T8635] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 136.482954][ T8640] xt_ecn: cannot match TCP bits for non-tcp packets [ 136.524939][ T8635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.574762][ T8636] bond2: entered allmulticast mode [ 136.575156][ T8636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.682468][ T8643] bond3: (slave veth3): Enslaving as an active interface with a down link [ 136.696838][ T8658] Bluetooth: MGMT ver 1.23 [ 136.714567][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 136.725179][ T8635] bond3: (slave batadv1): making interface the new active one [ 136.735973][ T8635] batadv1: entered promiscuous mode [ 136.742559][ T8635] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 136.996787][ T8674] team0: entered promiscuous mode [ 136.996839][ T8674] team_slave_0: entered promiscuous mode [ 136.997315][ T8674] team_slave_1: entered promiscuous mode [ 137.270859][ T8693] netlink: 'syz.3.755': attribute type 4 has an invalid length. [ 137.658118][ T8722] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 137.678983][ T8722] bond3: option mode: invalid value (9) [ 137.685841][ T8722] bond3 (unregistering): Released all slaves [ 139.788037][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.826810][ T8664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.097280][ T8737] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 140.224329][ T8737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.351412][ T8743] bond3: (slave gretap0): making interface the new active one [ 140.374563][ T8743] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 140.498160][ T8752] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 140.516247][ T8752] bond3 (unregistering): Released all slaves [ 141.092058][ T8782] netlink: 'syz.0.780': attribute type 83 has an invalid length. [ 141.953725][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880599f4000: rx timeout, send abort [ 142.066174][ T8851] __nla_validate_parse: 6 callbacks suppressed [ 142.074560][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.793'. [ 142.240808][ T8858] bond3: option min_links: invalid value (18446744073709551614) [ 142.240851][ T8858] bond3: option min_links: allowed values 0 - 2147483647 [ 142.259479][ T8858] bond3 (unregistering): Released all slaves [ 142.453789][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880599f4000: abort rx timeout. Force session deactivation [ 142.454018][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059397400: rx timeout, send abort [ 142.608141][ T8863] bond3: option min_links: invalid value (18446744073709551614) [ 142.616039][ T8863] bond3: option min_links: allowed values 0 - 2147483647 [ 142.631816][ T8863] bond3 (unregistering): Released all slaves [ 142.785948][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 142.942299][ T8892] sctp: [Deprecated]: syz.2.803 (pid 8892) Use of int in max_burst socket option. [ 142.942299][ T8892] Use struct sctp_assoc_value instead [ 142.957323][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059397400: abort rx timeout. Force session deactivation [ 143.059120][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 143.107116][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.330174][ T8929] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.339279][ T8911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.879856][ T8939] netlink: 'syz.4.812': attribute type 2 has an invalid length. [ 144.067793][ T8959] tipc: Started in network mode [ 144.067836][ T8959] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 144.082439][ T8959] tipc: Enabled bearer , priority 10 [ 144.150717][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 144.153737][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 144.290732][ T8975] netlink: 232 bytes leftover after parsing attributes in process `syz.4.822'. [ 144.306436][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 144.329686][ T8963] bond3: entered promiscuous mode [ 144.330790][ T8963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.211048][ T10] tipc: Node number set to 4269801491 [ 145.282844][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 145.298330][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 145.405877][ T9022] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 145.410726][ T9022] veth1_macvtap: left promiscuous mode [ 145.410749][ T9022] macsec0: entered promiscuous mode [ 147.868148][ T59] batadv1: left promiscuous mode [ 155.157642][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.700961][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 169.710401][ T9033] nbd: must specify a size in bytes for the device [ 169.711837][ T9035] netlink: 48 bytes leftover after parsing attributes in process `syz.2.838'. [ 169.765197][ T9035] netlink: 8183 bytes leftover after parsing attributes in process `syz.2.838'. [ 170.059546][ T9057] netlink: 'syz.1.845': attribute type 97 has an invalid length. [ 170.059575][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 170.060475][ T9057] netlink: 'syz.1.845': attribute type 97 has an invalid length. [ 170.060490][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 170.078537][ T9058] netlink: 'syz.1.845': attribute type 11 has an invalid length. [ 170.133757][ T9061] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 170.157235][ T9061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.166754][ T9061] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 172.666678][ T9027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.146953][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 173.341143][ T9098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'. [ 173.462946][ T9102] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 173.503802][ T9113] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 173.755950][ T9130] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.862'. [ 173.835990][ T9132] tipc: Enabling of bearer rejected, failed to enable media [ 174.074054][ T9135] syz.4.865 (9135) used greatest stack depth: 17888 bytes left [ 174.187280][ T9140] bond0: option miimon: invalid value (18446744071829782528) [ 174.195767][ T9140] bond0: option miimon: allowed values 0 - 2147483647 [ 174.344416][ T9160] erspan0: entered promiscuous mode [ 174.371961][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 174.593917][ T5617] Bluetooth: hci4: link tx timeout [ 174.601046][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.603924][ T5617] Bluetooth: hci4: link tx timeout [ 174.603938][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.612646][ T5617] Bluetooth: hci4: link tx timeout [ 174.612661][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.612681][ T5617] Bluetooth: hci4: link tx timeout [ 174.612690][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.612900][ T5617] Bluetooth: hci4: link tx timeout [ 174.612911][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.612930][ T5617] Bluetooth: hci4: link tx timeout [ 174.612938][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.613002][ T5617] Bluetooth: hci4: link tx timeout [ 174.613012][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.613029][ T5617] Bluetooth: hci4: link tx timeout [ 174.613038][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.613088][ T5617] Bluetooth: hci4: link tx timeout [ 174.613098][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.613138][ T5617] Bluetooth: hci4: link tx timeout [ 174.613147][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.617196][ T9166] syzkaller0: entered promiscuous mode [ 174.617213][ T9166] syzkaller0: entered allmulticast mode [ 174.618849][ T5617] Bluetooth: hci4: link tx timeout [ 174.618862][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.628285][ T5617] Bluetooth: hci4: link tx timeout [ 174.628299][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.629305][ T5617] Bluetooth: hci4: link tx timeout [ 174.629319][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.629340][ T5617] Bluetooth: hci4: link tx timeout [ 174.629349][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.629367][ T5617] Bluetooth: hci4: link tx timeout [ 174.629376][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.629970][ T5617] Bluetooth: hci4: link tx timeout [ 174.629989][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.635194][ T5617] Bluetooth: hci4: link tx timeout [ 174.635208][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.635229][ T5617] Bluetooth: hci4: link tx timeout [ 174.635238][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.635255][ T5617] Bluetooth: hci4: link tx timeout [ 174.635264][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.635325][ T5617] Bluetooth: hci4: link tx timeout [ 174.635334][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.635352][ T5617] Bluetooth: hci4: link tx timeout [ 174.635360][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.643169][ T5617] Bluetooth: hci4: link tx timeout [ 174.643183][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.927963][ T9186] netlink: 'syz.0.876': attribute type 10 has an invalid length. [ 174.930209][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.931274][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.931307][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.931336][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.994134][ T9189] netlink: 'syz.1.875': attribute type 2 has an invalid length. [ 175.022236][ T9189] netlink: 'syz.1.875': attribute type 2 has an invalid length. [ 175.032158][ T9186] team0: Port device dummy0 added [ 175.366842][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 175.399030][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.429329][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.429561][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.429768][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.429968][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.430174][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.430382][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.435988][ T9212] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 175.564315][ T9230] ip_tables: iptables: counters copy to user failed while replacing table [ 175.877962][ T9238] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 175.877996][ T9238] netlink: 'syz.2.886': attribute type 7 has an invalid length. [ 175.878024][ T9238] netlink: 208 bytes leftover after parsing attributes in process `syz.2.886'. [ 175.878057][ T9238] NCSI netlink: No device for ifindex 65584 [ 175.905035][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 176.051492][ T9239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.224017][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 176.224067][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 176.254141][ T9259] geneve2: entered promiscuous mode [ 176.260709][ T9259] geneve2: entered allmulticast mode [ 176.549924][ T9278] veth5: entered promiscuous mode [ 176.558434][ T9278] veth5: entered allmulticast mode [ 176.563149][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 176.667618][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 176.680352][ T9284] netlink: 84 bytes leftover after parsing attributes in process `syz.0.898'. [ 176.680398][ T9284] netlink: 84 bytes leftover after parsing attributes in process `syz.0.898'. [ 177.941678][ T9331] netlink: 80 bytes leftover after parsing attributes in process `syz.0.906'. [ 179.409297][ T9271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.654067][ T9353] bridge3: entered allmulticast mode [ 179.674013][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 179.674279][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 180.052288][ T9377] sch_fq: defrate 0 ignored. [ 180.211820][ T9385] : entered promiscuous mode [ 180.507356][ T9404] validate_nla: 7 callbacks suppressed [ 180.510279][ T9404] netlink: 'syz.0.927': attribute type 21 has an invalid length. [ 180.510326][ T9404] __nla_validate_parse: 1 callbacks suppressed [ 180.510337][ T9404] netlink: 156 bytes leftover after parsing attributes in process `syz.0.927'. [ 180.592213][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 180.599670][ T9410] syzkaller1: entered promiscuous mode [ 180.599689][ T9410] syzkaller1: entered allmulticast mode [ 180.625282][ T9414] netlink: 'syz.2.931': attribute type 3 has an invalid length. [ 180.625316][ T9414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.931'. [ 180.639698][ T9410] Bluetooth: hci0: unsupported parameter 5161 [ 180.639716][ T9410] Bluetooth: hci0: unsupported parameter 8192 [ 180.639726][ T9410] Bluetooth: hci0: unsupported parameter 5161 [ 180.639736][ T9410] Bluetooth: hci0: unsupported parameter 8192 [ 180.781891][ T9418] netlink: 'syz.0.932': attribute type 21 has an invalid length. [ 180.791041][ T9418] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.057745][ T9435] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 181.057787][ T9435] netlink: 208 bytes leftover after parsing attributes in process `syz.1.937'. [ 181.068068][ T9436] team0: Device gtp0 is up. Set it down before adding it as a team port [ 181.095828][ T9435] netlink: 'syz.1.937': attribute type 11 has an invalid length. [ 181.140581][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 181.140623][ T9436] block nbd1: Unsupported socket: should be TCP or UNIX. [ 181.438324][ T9455] netlink: 240 bytes leftover after parsing attributes in process `syz.3.944'. [ 181.749686][ T9477] netlink: 'syz.1.951': attribute type 1 has an invalid length. [ 181.918753][ T9484] Unsupported ieee802154 address type: 0 [ 181.935517][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 181.935729][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 181.935921][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 181.936094][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 182.266430][ T9507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.301447][ T9511] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 182.310145][ T9511] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 182.390365][ T9517] pim6reg527: entered allmulticast mode [ 182.414777][ T9521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.833640][ T9542] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 182.849654][ T9542] bond3: (slave veth0_to_bond): Releasing backup interface [ 182.883690][ T9542] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 183.131898][ T9571] netlink: 'syz.3.976': attribute type 6 has an invalid length. [ 183.154168][ T9567] netlink: 'syz.1.979': attribute type 15 has an invalid length. [ 183.824228][ T9558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.843691][ T9591] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§% [ 186.245027][ T9702] __nla_validate_parse: 66 callbacks suppressed [ 186.245072][ T9702] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1018'. [ 186.397925][ T9710] validate_nla: 1 callbacks suppressed [ 186.397974][ T9710] netlink: 'syz.3.1019': attribute type 4 has an invalid length. [ 186.397991][ T9710] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1019'. [ 186.402068][ T9710] netlink: 'syz.3.1019': attribute type 4 has an invalid length. [ 186.402083][ T9710] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1019'. [ 186.509131][ T9718] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.517638][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.598477][ T9722] netlink: 5428 bytes leftover after parsing attributes in process `syz.2.1026'. [ 186.608413][ T9722] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 186.621759][ T9720] geneve3: entered allmulticast mode [ 186.650196][ T9725] netlink: 'syz.3.1024': attribute type 28 has an invalid length. [ 186.658671][ T9725] netlink: 'syz.3.1024': attribute type 3 has an invalid length. [ 186.666759][ T9725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1024'. [ 186.674020][ T9726] netlink: 'syz.4.1025': attribute type 8 has an invalid length. [ 186.810250][ T9733] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 186.810477][ T9733] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 186.810660][ T9733] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 186.810860][ T9733] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 186.811045][ T9733] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 186.811338][ T9736] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 187.437953][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 187.492871][ T9769] Bluetooth: MGMT ver 1.23 [ 187.723697][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'. [ 187.857256][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 187.867503][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 188.021733][ T9812] Bluetooth: MGMT ver 1.23 [ 188.029038][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 188.727369][ T9848] C: entered allmulticast mode [ 188.740806][ T9847] C: left allmulticast mode [ 189.281388][ T9884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.300229][ T9884] bond4: entered promiscuous mode [ 189.300263][ T9884] bond4: entered allmulticast mode [ 189.352958][ T9884] macvlan2: entered promiscuous mode [ 189.352995][ T9884] macvlan2: entered allmulticast mode [ 189.373540][ T9884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.425672][ T9894] vlan0: entered promiscuous mode [ 189.526757][ T9910] macvlan2: entered promiscuous mode [ 189.526810][ T9910] macvlan2: entered allmulticast mode [ 189.548997][ T9910] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.061344][ T9947] syzkaller0: entered promiscuous mode [ 190.061386][ T9947] syzkaller0: entered allmulticast mode [ 190.072545][ T9954] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 190.073802][ T9952] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 190.190693][ T9956] bond4: (slave bond_slave_0): Device is not our slave [ 190.190742][ T9956] bond4: option active_slave: invalid value (bond_slave_0) [ 190.547158][ T9956] bond4 (unregistering): Released all slaves [ 191.105441][ T9994] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 191.123278][ T9998] sock: sock_timestamping_bind_phc: sock not bind to device [ 191.155952][ T9999] v: renamed from veth0_vlan (while UP) [ 191.312147][ T9999] __nla_validate_parse: 16 callbacks suppressed [ 191.312205][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'. [ 191.336119][T10008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.503715][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 191.588303][T10019] bond5: entered promiscuous mode [ 191.588732][T10019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.603189][T10022] batman_adv: batadv0: Adding interface: veth0 [ 191.603204][T10022] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.603229][T10022] batman_adv: batadv0: Interface activated: veth0 [ 191.806106][T10022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1106'. [ 191.806147][T10022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.806338][T10022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.810052][T10022] batman_adv: batadv0: Interface deactivated: veth0 [ 191.810071][T10022] batman_adv: batadv0: Removing interface: veth0 [ 191.885186][T10023] ip6gretap1: entered allmulticast mode [ 191.901453][T10023] ip6gretap1: entered promiscuous mode [ 191.908264][T10023] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.306299][T10065] Bluetooth: hci0: unsupported parameter 5134 [ 192.306349][T10065] Bluetooth: hci0: unsupported parameter 8192 [ 192.306934][T10065] Bluetooth: hci0: unsupported parameter 5134 [ 192.307141][T10065] Bluetooth: hci0: unsupported parameter 8192 [ 192.556704][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1120'. [ 192.658369][T10073] syzkaller0: entered promiscuous mode [ 192.664065][T10073] syzkaller0: entered allmulticast mode [ 196.277735][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.277808][T10084] Bluetooth: hci1: command 0x0406 tx timeout [ 196.277839][T10084] Bluetooth: hci0: command 0x0406 tx timeout [ 196.279677][T10084] Bluetooth: hci2: command 0x0406 tx timeout [ 217.164523][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'. [ 217.423275][T10115] validate_nla: 9 callbacks suppressed [ 217.430924][T10115] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 217.510184][T10122] netlink: 'syz.0.1135': attribute type 12 has an invalid length. [ 217.518270][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 217.533950][T10122] netlink: 'syz.0.1135': attribute type 12 has an invalid length. [ 217.543064][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 217.649586][T10128] veth1_macvtap: left promiscuous mode [ 217.683418][T10131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.934056][T10147] --map-set only usable from mangle table [ 217.948545][T10147] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1142'. [ 217.950929][T10149] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1142'. [ 218.182597][T10162] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1145'. [ 218.502376][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 218.505274][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 218.842706][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 218.882416][ T5279] veth1_macvtap: entered promiscuous mode [ 218.942006][T10199] bond4: entered promiscuous mode [ 218.948342][T10199] bond4: entered allmulticast mode [ 219.046738][T10202] macsec1: entered promiscuous mode [ 219.052391][T10202] hsr0: entered promiscuous mode [ 219.217297][T10219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1159'. [ 219.553847][T10239] netlink: 'syz.2.1165': attribute type 4 has an invalid length. [ 219.560242][T10239] netlink: 'syz.2.1165': attribute type 30 has an invalid length. [ 220.122705][T10259] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 220.464932][T10267] xt_CT: No such helper "netbios-ns" [ 220.485542][T10259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.949139][T10294] netlink: 'syz.1.1173': attribute type 15 has an invalid length. [ 221.015979][T10294] netlink: 'syz.1.1173': attribute type 15 has an invalid length. [ 221.017704][ T50] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 221.017748][ T50] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 221.017779][ T50] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 221.017809][ T50] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 221.365288][T10310] Bluetooth: ISO socket layer initialized [ 221.391419][ T5616] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 221.816021][T10324] can: request_module (can-proto-3) failed. [ 222.744426][T10358] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 222.919778][T10362] netlink: NAT attribute has 8 unknown bytes [ 222.919834][T10362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.932281][T10363] __nla_validate_parse: 16 callbacks suppressed [ 222.932320][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1191'. [ 223.197227][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'. [ 223.385229][T10371] netlink: 'syz.3.1195': attribute type 9 has an invalid length. [ 224.202740][T10402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.603924][T10386] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.730481][T10391] bridge_slave_0: left promiscuous mode [ 224.737351][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.761958][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1199'. [ 224.774581][T10391] bridge_slave_1: left allmulticast mode [ 224.780842][T10391] bridge_slave_1: left promiscuous mode [ 224.787152][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.815296][T10391] bond0: (slave bond_slave_0): Releasing backup interface [ 224.835442][T10391] bond0: (slave bond_slave_1): Releasing backup interface [ 224.863538][T10391] team_slave_0: left allmulticast mode [ 224.880011][T10391] team0: Port device team_slave_0 removed [ 224.895084][T10391] team_slave_1: left allmulticast mode [ 224.913515][T10391] team0: Port device team_slave_1 removed [ 224.923967][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.933284][T10391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.945421][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.955399][T10391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.965575][T10391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.253149][T10404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.574221][T10451] netlink: 'syz.1.1212': attribute type 11 has an invalid length. [ 227.626351][T10455] openvswitch: netlink: IP tunnel dst address not specified [ 227.980705][T10475] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1218'. [ 227.981672][T10475] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1218'. [ 227.981774][T10475] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1218'. [ 228.384723][T10491] Cannot find add_set index 0 as target [ 230.848607][T10464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.280718][T10519] netlink: 'syz.1.1232': attribute type 10 has an invalid length. [ 231.334488][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 231.334600][T10518] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1232'. [ 231.354793][T10514] syzkaller0: entered promiscuous mode [ 231.355212][T10514] syzkaller0: entered allmulticast mode [ 231.382804][T10520] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 231.384427][T10520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1233'. [ 231.384623][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 231.468942][T10521] syzkaller0: entered promiscuous mode [ 231.475291][T10521] syzkaller0: entered allmulticast mode [ 232.390348][T10554] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 232.416646][T10554] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 232.498994][T10556] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1240'. [ 232.627356][T10556] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1240'. [ 233.363444][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 233.389000][T10582] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1246'. [ 233.460231][T10585] netlink: 'syz.0.1247': attribute type 1 has an invalid length. [ 233.918016][T10585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.257288][T10610] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 234.274108][T10612] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 234.293533][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 234.303246][T10612] openvswitch: netlink: Flow key attr not present in new flow. [ 234.324979][T10598] syzkaller0: entered promiscuous mode [ 234.332107][T10598] syzkaller0: entered allmulticast mode [ 234.348202][T10617] erspan1: entered allmulticast mode [ 234.499915][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 234.500148][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 234.861340][T10629] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 234.861768][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 234.915685][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 237.166744][T10610] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 237.587533][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.589349][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.156721][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.117706][ T59] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.117756][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.117810][ T59] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.117837][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.117873][ T59] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.117899][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.117935][ T59] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.117960][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.184525][T10631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 239.184547][T10631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 239.184562][T10631] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1254'. [ 239.536482][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1256'. [ 239.547849][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 239.869769][T10679] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 240.420735][T10682] bridge0: port 3(syz_tun) entered blocking state [ 240.421407][T10682] bridge0: port 3(syz_tun) entered disabled state [ 240.421757][T10682] syz_tun: entered allmulticast mode [ 240.457520][T10682] syz_tun: entered promiscuous mode [ 240.955327][T10710] block nbd1: server does not support multiple connections per device. [ 240.990202][T10710] block nbd1: shutting down sockets [ 241.104631][T10704] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.105435][T10704] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.313341][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 241.377795][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 241.379835][T10704] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 241.477143][T10728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1269'. [ 241.506735][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 241.534587][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 242.044507][T10753] tipc: Started in network mode [ 242.044554][T10753] tipc: Node identity ac14140f, cluster identity 4711 [ 242.064899][T10753] tipc: New replicast peer: 255.255.255.255 [ 242.065500][T10753] tipc: Enabled bearer , priority 10 [ 243.177546][ T5615] tipc: Node number set to 2886997007 [ 243.429748][T10813] netlink: 'syz.0.1287': attribute type 12 has an invalid length. [ 243.532244][T10811] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 243.885246][T10825] netlink: 'syz.1.1289': attribute type 16 has an invalid length. [ 243.885283][T10825] netlink: 'syz.1.1289': attribute type 2 has an invalid length. [ 243.904015][T10825] netlink: Unknown conntrack attr (type=12294, max=9) [ 243.911317][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.113501][T10821] lo speed is unknown, defaulting to 1000 [ 244.343298][T10820] lo speed is unknown, defaulting to 1000 [ 244.493021][T10847] netlink: 'syz.3.1297': attribute type 25 has an invalid length. [ 244.588407][T10846] __nla_validate_parse: 4 callbacks suppressed [ 244.588638][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 244.747107][T10855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.439674][T10884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1302'. [ 246.154584][T10896] syz_tun: entered promiscuous mode [ 246.233038][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1305'. [ 246.238967][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1304'. [ 246.876923][T10923] openvswitch: netlink: Flow key attribute not present in set flow. [ 247.038221][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 247.096245][T10931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.150419][T10931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.167270][T10931] bond0 (unregistering): Released all slaves [ 248.592699][T10997] nbd: must specify an index to disconnect [ 248.645338][ T30] lo speed is unknown, defaulting to 1000 [ 248.981229][T11015] netlink: 'syz.2.1333': attribute type 5 has an invalid length. [ 249.268209][T11021] netlink: 628 bytes leftover after parsing attributes in process `syz.4.1334'. [ 249.268437][T11021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1334'. [ 249.313829][T11032] sctp: [Deprecated]: syz.2.1336 (pid 11032) Use of int in maxseg socket option. [ 249.313829][T11032] Use struct sctp_assoc_value instead [ 249.449588][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 249.472239][T11037] netlink: 'syz.3.1335': attribute type 28 has an invalid length. [ 249.472276][T11037] netlink: 'syz.3.1335': attribute type 3 has an invalid length. [ 249.472303][T11037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1335'. [ 249.655464][T11045] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1337'. [ 250.320829][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'. [ 250.632494][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 250.632542][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 250.870591][T11088] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1347'. [ 250.889815][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 250.902576][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1338'. [ 251.480282][T11098] netlink: 'syz.4.1349': attribute type 10 has an invalid length. [ 251.480741][T11098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.741185][T11107] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1349'. [ 251.797370][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 252.607085][T11135] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1357'. [ 252.625066][T11135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.689643][T11136] set match dimension is over the limit! [ 252.998728][T11159] openvswitch: netlink: Duplicate or invalid key (type 0). [ 253.081184][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.379008][T11139] sit2: entered promiscuous mode [ 253.387178][T11139] sit2: entered allmulticast mode [ 253.800944][T11185] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20004 [ 254.482990][T11208] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.892190][T11231] netlink: Conntrack attr has 4 unknown bytes [ 254.895518][T11231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.918231][T11231] No such timeout policy "syz0" [ 255.382777][T11238] __nla_validate_parse: 3 callbacks suppressed [ 255.382821][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 255.591523][T11250] syzkaller0: entered promiscuous mode [ 255.591561][T11250] syzkaller0: entered allmulticast mode [ 255.631522][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.171912][T11270] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2849332686/2849332688 [ 256.172136][T11270] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2849332686/2849332687 [ 256.207760][T11270] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2849332686/2849332688 [ 256.207985][T11270] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2849332686/2849332687 [ 256.314834][T11274] bridge5: entered allmulticast mode [ 256.526237][T11286] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 256.703312][T11292] sctp: [Deprecated]: syz.3.1391 (pid 11292) Use of int in max_burst socket option deprecated. [ 256.703312][T11292] Use struct sctp_assoc_value instead [ 256.725690][T11292] netlink: 'syz.3.1391': attribute type 21 has an invalid length. [ 256.725798][T11292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 256.890956][T11286] bond7: entered promiscuous mode [ 256.899481][T11286] bond7: entered allmulticast mode [ 256.907382][T11286] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.941528][T11288] erspan1: entered allmulticast mode [ 256.964789][T11288] bond7: (slave erspan1): making interface the new active one [ 256.976336][T11288] erspan1: entered promiscuous mode [ 256.984548][T11288] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 258.047444][T11343] netlink: 'syz.4.1401': attribute type 21 has an invalid length. [ 258.114495][T11346] netlink: 'syz.2.1400': attribute type 29 has an invalid length. [ 261.369372][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 261.441549][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 261.466084][T11393] veth1_macvtap: left promiscuous mode [ 261.466302][T11393] macsec0: entered promiscuous mode [ 261.570684][T11400] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 261.579023][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 261.661270][T11402] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1412'. [ 261.762646][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.791581][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 261.796478][T11398] macvlan2: entered promiscuous mode [ 261.800195][T11398] macvlan2: entered allmulticast mode [ 261.808343][T11410] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 261.808843][T11409] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 261.809267][T11398] bond0: entered allmulticast mode [ 261.809926][T11398] bond0: entered promiscuous mode [ 261.815570][T11398] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 261.828052][T11398] team0: Port device macvlan2 added [ 261.860960][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 261.887840][ T1148] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.887902][ T1148] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.887959][ T1148] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.887994][ T1148] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.117993][T11413] bond0: (slave veth0_to_bond): Releasing backup interface [ 262.155141][T11423] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 262.232686][T11410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.267203][T11414] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 262.432830][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 262.450917][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 262.566179][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 262.576952][T11445] nbd: couldn't find a device at index 458752 [ 262.640732][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 262.640772][T11448] nbd: couldn't find a device at index 458752 [ 263.184427][T11471] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 263.219390][T11473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 263.378764][T11484] netlink: 'syz.1.1430': attribute type 2 has an invalid length. [ 263.448415][T11492] syzkaller0: entered promiscuous mode [ 263.455888][T11492] syzkaller0: entered allmulticast mode [ 264.313025][T11520] veth1_to_bond: entered allmulticast mode [ 264.332639][T11518] syzkaller1: entered promiscuous mode [ 264.332677][T11518] syzkaller1: entered allmulticast mode [ 264.344415][T11519] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 264.593334][T11530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.631464][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.652349][T11516] veth1_to_bond: left allmulticast mode [ 265.493465][T11538] syzkaller0: entered promiscuous mode [ 265.493858][T11538] syzkaller0: entered allmulticast mode [ 266.240321][T11568] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 266.240620][T11568] gretap2: entered promiscuous mode [ 266.241072][T11568] gretap2: entered allmulticast mode [ 267.068023][T11593] __nla_validate_parse: 10 callbacks suppressed [ 267.068075][T11593] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1459'. [ 268.612863][T11658] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 268.722248][T11664] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1478'. [ 268.733981][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 268.734209][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 268.754641][T11664] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1478'. [ 268.841196][T11658] bond7: entered promiscuous mode [ 268.842044][T11658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.204932][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 269.727386][T11702] syzkaller1: entered promiscuous mode [ 269.736799][T11702] syzkaller1: entered allmulticast mode [ 270.094978][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.485361][T11740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1492'. [ 270.757678][ T5616] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 270.862951][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 270.881332][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 270.891356][T11753] syzkaller0: left promiscuous mode [ 270.896705][T11753] syzkaller0: left allmulticast mode [ 271.431245][T11773] erspan0: entered promiscuous mode [ 271.676801][T11752] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 272.118807][T11797] Bluetooth: hci0: unsupported parameter 5135 [ 272.119041][T11797] Bluetooth: hci0: unsupported parameter 8192 [ 272.119271][T11797] Bluetooth: hci0: unsupported parameter 5135 [ 272.119479][T11797] Bluetooth: hci0: unsupported parameter 8192 [ 272.149544][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 272.358581][T11807] netlink: 'syz.3.1509': attribute type 33 has an invalid length. [ 272.617226][T11815] openvswitch: netlink: IP tunnel dst address not specified [ 272.617657][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.708693][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1513'. [ 272.920370][T11830] vlan0: entered promiscuous mode [ 272.920600][T11830] vlan0: entered allmulticast mode [ 272.920642][T11830] veth0_vlan: entered allmulticast mode [ 272.987667][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 273.183603][T11850] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 273.400008][T11850] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.528625][T11859] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.1523'. [ 273.540699][T11859] netlink: 'syz.0.1523': attribute type 2 has an invalid length. [ 273.611519][T11861] macvlan2: entered promiscuous mode [ 273.611922][T11861] macvlan2: entered allmulticast mode [ 273.612800][T11861] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 273.876744][T11868] macvlan2: entered promiscuous mode [ 273.883444][T11868] macvlan2: entered allmulticast mode [ 273.890648][T11868] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 274.410138][T11900] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 274.418544][T11900] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1537'. [ 274.430647][T11900] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 274.445471][T11902] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 274.558725][T11908] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 274.567188][T11908] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1537'. [ 274.576455][T11908] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 275.159304][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 275.181891][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 275.590927][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1544'. [ 275.674308][T11931] netlink: 'syz.4.1544': attribute type 11 has an invalid length. [ 275.782083][T11946] xt_socket: unknown flags 0xe4 [ 275.962795][T11950] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 276.000739][T11950] bond6: (slave veth0_to_bond): Releasing backup interface [ 276.061893][T11950] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 277.074232][T12001] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1559'. [ 277.228955][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 277.282429][T12005] netlink: 'syz.0.1561': attribute type 12 has an invalid length. [ 277.282467][T12005] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 277.282499][T12005] netlink: 460 bytes leftover after parsing attributes in process `syz.0.1561'. [ 277.519491][T12014] netlink: 'syz.4.1563': attribute type 3 has an invalid length. [ 277.521338][T12014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1563'. [ 278.047836][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1567'. [ 278.048073][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1567'. [ 278.227771][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1569'. [ 278.269359][T12052] syzkaller0: entered promiscuous mode [ 278.275095][T12052] syzkaller0: entered allmulticast mode [ 278.402190][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 278.402238][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 278.410576][T11820] IPVS: starting estimator thread 0... [ 278.519543][T12064] IPVS: using max 39 ests per chain, 93600 per kthread [ 278.960280][T12078] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 279.113910][T12079] can: request_module (can-proto-4) failed. [ 279.712893][T12097] openvswitch: netlink: Unknown nsh attribute 0 [ 279.729126][T12096] openvswitch: netlink: Unknown nsh attribute 0 [ 280.592939][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 281.813678][T12078] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 281.882138][T12082] veth3: entered allmulticast mode [ 282.328581][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 282.391078][T12139] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1589'. [ 282.443856][T12137] syz_tun: left allmulticast mode [ 282.449814][T12137] syz_tun: left promiscuous mode [ 282.450078][T12137] bridge0: port 3(syz_tun) entered disabled state [ 282.478711][T12137] bridge_slave_1: left allmulticast mode [ 282.483257][T12137] bridge_slave_1: left promiscuous mode [ 282.484173][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.536902][T12137] bridge_slave_0: left allmulticast mode [ 282.538013][T12137] bridge_slave_0: left promiscuous mode [ 282.542235][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.754434][T12120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.767289][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 282.928366][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 282.928849][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 282.981429][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 283.220635][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 283.233815][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 283.486702][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 283.500743][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 283.988047][T12198] netlink: 'syz.2.1597': attribute type 4 has an invalid length. [ 283.997330][T12193] netlink: 'syz.4.1598': attribute type 8 has an invalid length. [ 283.997381][T12193] netlink: 'syz.4.1598': attribute type 3 has an invalid length. [ 283.997397][T12193] netlink: 'syz.4.1598': attribute type 4 has an invalid length. [ 284.038624][T12186] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.585189][T12194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.612160][T12194] bond6: (slave bond0): making interface the new active one [ 284.627281][T12194] bond6: (slave bond0): Enslaving as an active interface with an up link [ 284.703330][T12198] .`: renamed from bond0 (while UP) [ 284.874278][T12160] netlink: 'syz.0.1592': attribute type 12 has an invalid length. [ 284.874517][T12160] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 284.874725][T12160] netlink: 'syz.0.1592': attribute type 2 has an invalid length. [ 284.916515][T11819] bond6: (slave .`): link status definitely down, disabling slave [ 284.941133][T11819] bond6: now running without any active interface! [ 285.064660][T12211] lo speed is unknown, defaulting to 1000 [ 285.887630][T12244] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 285.935686][T12248] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 286.720106][T12267] syzkaller0: entered promiscuous mode [ 286.725901][T12267] syzkaller0: entered allmulticast mode [ 286.797708][T12274] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 286.937379][T12287] vlan1: entered allmulticast mode [ 286.944131][T12287] veth0_vlan: entered allmulticast mode [ 287.221403][T12299] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 287.455759][T12305] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 288.697403][T12342] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 288.782742][T12342] bond4: entered promiscuous mode [ 288.790547][T12342] bond4: entered allmulticast mode [ 288.797987][T12342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.839321][T12346] erspan2: entered allmulticast mode [ 288.863600][T12346] bond4: (slave erspan2): making interface the new active one [ 288.864598][T12346] erspan2: entered promiscuous mode [ 288.882394][T12346] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 289.108064][T12353] __nla_validate_parse: 6 callbacks suppressed [ 289.114523][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 291.122224][T12325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.315782][T12384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.930780][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 292.357887][T12396] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1648'. [ 292.378393][T12402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1648'. [ 292.695554][T12414] ip_vti0: entered promiscuous mode [ 292.701283][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 292.755467][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 293.040934][T12422] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 293.116771][T12422] bond8: entered promiscuous mode [ 293.125179][T12422] bond8: entered allmulticast mode [ 293.130976][T12422] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.159148][T12426] wlan0 speed is unknown, defaulting to 1000 [ 293.230654][T12426] wlan0 speed is unknown, defaulting to 1000 [ 293.231693][T12426] wlan0 speed is unknown, defaulting to 1000 [ 293.232598][T12426] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 293.232626][T12426] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 293.232662][T12426] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 293.278299][T12424] netlink: 'syz.1.1659': attribute type 10 has an invalid length. [ 293.286909][T12426] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 293.309190][T12424] team0: Port device dummy0 added [ 293.398256][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 293.409871][T12426] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 293.627203][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1662'. [ 294.169876][T12454] xt_bpf: check failed: parse error [ 294.184221][T12455] xt_bpf: check failed: parse error [ 296.078901][T12426] wlan0 speed is unknown, defaulting to 1000 [ 296.089577][T12445] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 296.160006][T12426] wlan0 speed is unknown, defaulting to 1000 [ 296.185484][T12426] wlan0 speed is unknown, defaulting to 1000 [ 296.225780][T12426] wlan0 speed is unknown, defaulting to 1000 [ 296.291711][T12426] wlan0 speed is unknown, defaulting to 1000 [ 296.558946][T12468] netlink: 'syz.3.1668': attribute type 6 has an invalid length. [ 296.583812][T12469] xt_l2tp: invalid flags combination: 0 [ 297.272754][T12486] mac80211_hwsim hwsim16 ÿ: renamed from wlan1 [ 297.629610][T12505] netlink: 'syz.4.1680': attribute type 1 has an invalid length. [ 297.683554][T12503] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 297.769109][T12505] bond5: entered promiscuous mode [ 297.780740][T12505] bond5: entered allmulticast mode [ 297.781152][T12505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.824200][ T31] audit: type=1804 audit(1788552349.669:5): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1681" name="/newroot/349/cgroup.controllers" dev="tmpfs" ino=1795 res=1 errno=0 [ 297.824454][ T31] audit: type=1800 audit(1788552349.669:6): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1681" name="cgroup.controllers" dev="tmpfs" ino=1795 res=0 errno=0 [ 299.324053][T12570] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 299.513502][T12570] bond9: entered promiscuous mode [ 299.513561][T12570] bond9: entered allmulticast mode [ 299.513973][T12570] 8021q: adding VLAN 0 to HW filter on device bond9 [ 299.588995][T12572] erspan1: entered allmulticast mode [ 299.602480][T12572] bond9: (slave erspan1): making interface the new active one [ 299.618477][T12572] erspan1: entered promiscuous mode [ 299.625331][T12572] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 299.661347][T12580] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1702'. [ 299.670619][T12580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.842884][T12591] gretap1: entered promiscuous mode [ 299.854529][T12591] batman_adv: batadv0: Adding interface: gretap1 [ 299.862829][T12591] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.890239][T12591] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 300.284043][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 300.284096][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 300.359674][T12607] x_tables: duplicate underflow at hook 1 [ 300.382177][T12608] netlink: 'syz.0.1708': attribute type 5 has an invalid length. [ 300.501808][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 300.515484][T12613] netlink: 'syz.1.1711': attribute type 7 has an invalid length. [ 301.152183][T12638] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 301.365073][T12638] bond7: entered promiscuous mode [ 301.374025][T12638] bond7: entered allmulticast mode [ 301.387732][T12638] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.400140][T12646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1718'. [ 301.503262][T12641] erspan1: entered allmulticast mode [ 301.531859][T12641] bond7: (slave erspan1): making interface the new active one [ 301.545227][T12641] erspan1: entered promiscuous mode [ 301.563270][T12641] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 302.033270][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 302.134925][T12662] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 302.150475][T12676] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 302.442916][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 302.879562][T12699] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 302.984862][T12708] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 303.075292][T12699] bond6: entered promiscuous mode [ 303.075749][T12699] bond6: entered allmulticast mode [ 303.078015][T12699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.188002][T12708] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 303.294156][T12717] netlink: zone id is out of range [ 303.320155][T12717] netlink: zone id is out of range [ 303.320210][T12717] netlink: zone id is out of range [ 303.320230][T12717] netlink: zone id is out of range [ 303.320300][T12717] netlink: zone id is out of range [ 303.320311][T12717] netlink: zone id is out of range [ 303.320322][T12717] netlink: zone id is out of range [ 303.320333][T12717] netlink: zone id is out of range [ 303.438772][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 303.551304][T12732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1741'. [ 303.585995][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 303.652539][T12732] bond0: (slave bond_slave_0): Releasing backup interface [ 303.730115][T12732] bond_slave_0: entered promiscuous mode [ 303.736004][T12732] bond_slave_0: entered allmulticast mode [ 304.632629][T12780] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 304.741274][T12780] bond8: entered promiscuous mode [ 304.748516][T12780] bond8: entered allmulticast mode [ 304.757258][T12780] 8021q: adding VLAN 0 to HW filter on device bond8 [ 304.829083][T12785] erspan1: entered allmulticast mode [ 304.852280][T12785] bond8: (slave erspan1): making interface the new active one [ 304.861318][T12785] erspan1: entered promiscuous mode [ 304.873926][T12785] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 304.981440][T12789] tipc: Started in network mode [ 304.986676][T12789] tipc: Node identity 6a7b711cc221, cluster identity 4711 [ 304.994635][T12789] tipc: Enabled bearer , priority 0 [ 305.146245][T12789] syzkaller0: entered promiscuous mode [ 305.151989][T12789] syzkaller0: entered allmulticast mode [ 305.158489][T12789] tipc: Resetting bearer [ 305.332356][T12788] tipc: Resetting bearer [ 305.433250][T12806] __nla_validate_parse: 2 callbacks suppressed [ 305.442030][T12806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1758'. [ 305.541573][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1758'. [ 306.543671][T12820] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 308.643284][T12788] tipc: Disabling bearer [ 308.698416][T12822] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 308.700696][T12814] syzkaller0: entered promiscuous mode [ 308.701128][T12814] syzkaller0: entered allmulticast mode [ 308.709298][ T5615] tipc: Node number set to 2824499484 [ 309.153151][T12862] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 309.310617][T12862] bond9: entered promiscuous mode [ 309.315914][T12862] bond9: entered allmulticast mode [ 309.321924][T12862] 8021q: adding VLAN 0 to HW filter on device bond9 [ 309.471268][T12877] net_ratelimit: 31 callbacks suppressed [ 309.477577][T12877] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 312.430739][T12872] netlink: 'syz.0.1771': attribute type 2 has an invalid length. [ 312.675876][T12892] Unsupported ieee802154 address type: 0 [ 313.337077][T12916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.453923][T12926] netlink: 'syz.0.1783': attribute type 3 has an invalid length. [ 313.763320][T12922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.040777][ T31] audit: type=1804 audit(1788552365.889:7): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1789" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1819 res=1 errno=0 [ 314.067663][ T31] audit: type=1800 audit(1788552365.919:8): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1789" name="cgroup.controllers" dev="tmpfs" ino=1819 res=0 errno=0 [ 314.670287][T12969] lo speed is unknown, defaulting to 1000 [ 314.685938][T12969] wlan0 speed is unknown, defaulting to 1000 [ 315.342482][T13001] tap0: tun_chr_ioctl cmd 1074025672 [ 315.342906][T13001] tap0: ignored: set checksum disabled [ 315.369039][T13003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.152468][T13014] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1805'. [ 316.163032][T13014] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1805'. [ 316.277902][T11819] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.278347][T11819] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.342569][T13019] netlink: 'syz.3.1807': attribute type 39 has an invalid length. [ 317.709444][T12979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.007242][T13030] nbd: must specify a size in bytes for the device [ 318.060447][T13036] nbd: must specify a size in bytes for the device [ 318.322505][T13044] netlink: 'syz.3.1814': attribute type 4 has an invalid length. [ 318.323315][T13043] netlink: 'syz.3.1814': attribute type 4 has an invalid length. [ 318.641455][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1816'. [ 318.731426][T13057] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1819'. [ 318.998874][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 318.999120][T13065] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1821'. [ 319.048502][T13065] geneve2: entered promiscuous mode [ 319.048910][T13065] geneve2: entered allmulticast mode [ 319.060256][T13071] x_tables: duplicate underflow at hook 4 [ 319.539226][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.648250][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 319.833839][T13105] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 319.853430][T13105] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 320.060081][T13110] batman_adv: batadv0: Interface deactivated: veth0 [ 320.066970][T13110] batman_adv: batadv0: Removing interface: veth0 [ 320.080714][T13110] ¾x9ÿ: left allmulticast mode [ 320.085717][T13110] ¾x9ÿ: left promiscuous mode [ 320.092223][T13110] bridge0: port 1(1¾x9ÿ) entered disabled state [ 320.165584][T13110] bridge_slave_1: left allmulticast mode [ 320.173613][T13110] bridge_slave_1: left promiscuous mode [ 320.179338][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.214054][T13110] team_slave_0: left promiscuous mode [ 320.242450][T13110] team0: Port device team_slave_0 removed [ 320.264631][T13110] team_slave_1: left promiscuous mode [ 320.296339][T13110] team0: Port device team_slave_1 removed [ 320.311335][T13110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.322822][T13110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.339177][T13110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.730295][T13130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1836'. [ 320.868230][T13139] bond0: option ad_select: unable to set because the bond device is up [ 321.013883][T13139] netlink: 'syz.4.1839': attribute type 2 has an invalid length. [ 321.446208][T13161] netlink: zone id is out of range [ 321.446239][T13161] netlink: zone id is out of range [ 321.446263][T13161] netlink: zone id is out of range [ 321.446274][T13161] netlink: zone id is out of range [ 321.446285][T13161] netlink: zone id is out of range [ 321.446296][T13161] netlink: del zone limit has 4 unknown bytes [ 322.031551][T13182] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1850'. [ 322.658935][T13194] gretap0: entered promiscuous mode [ 322.677831][T13194] vlan3: entered promiscuous mode [ 323.074788][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 323.177651][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1862'. [ 323.554101][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 323.554142][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 323.603553][T13235] openvswitch: netlink: Missing key (keys=40, expected=100) [ 324.002678][T13243] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1867'. [ 324.102156][T13243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.151684][T13245] netlink: Setting conntrack mark requires 'commit' flag. [ 324.151916][T13245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.592220][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 324.738451][T11822] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.738501][T11822] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.738558][T11822] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.738585][T11822] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.738620][T11822] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.738653][T11822] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.738688][T11822] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.738714][T11822] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.077334][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 325.167149][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.228371][T13276] xt_hashlimit: size too large, truncated to 1048576 [ 325.649581][T13297] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 325.765237][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 326.561873][T13337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.697843][T13334] netlink: 'syz.3.1894': attribute type 4 has an invalid length. [ 326.738789][T13340] netlink: 'syz.3.1894': attribute type 4 has an invalid length. [ 326.823810][T13344] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 327.322324][T13369] __nla_validate_parse: 6 callbacks suppressed [ 327.322367][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.351792][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.369549][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.386026][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.396844][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.410211][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.425434][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.520970][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.546863][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 327.566749][T13369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1900'. [ 328.219208][T13391] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 328.256103][T13391] tipc: Enabling of bearer rejected, media not registered [ 328.312489][T13396] openvswitch: netlink: Missing key (keys=50, expected=80) [ 329.825776][T13455] netlink: 'syz.2.1926': attribute type 2 has an invalid length. [ 329.850952][T13452] netlink: 'syz.0.1925': attribute type 12 has an invalid length. [ 329.866980][T13455] macvlan0: entered promiscuous mode [ 330.083994][T13472] netlink: 'syz.1.1928': attribute type 9 has an invalid length. [ 330.385719][T13487] syzkaller0: entered promiscuous mode [ 330.386157][T13487] syzkaller0: entered allmulticast mode [ 330.728485][T13496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.032071][ T31] audit: type=1800 audit(1788552382.879:9): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1938" name="memory.events" dev="tmpfs" ino=1981 res=0 errno=0 [ 331.061925][ T31] audit: type=1804 audit(1788552382.909:10): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1938" name="/newroot/386/memory.events" dev="tmpfs" ino=1981 res=1 errno=0 [ 331.070430][T13506] netlink: 'syz.0.1938': attribute type 10 has an invalid length. [ 331.163980][T13506] geneve2: entered promiscuous mode [ 331.172523][T13506] geneve2: entered allmulticast mode [ 331.188641][T11820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.189238][T11820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.189271][T11820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.189301][T11820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.236614][T13515] netlink: 'syz.1.1940': attribute type 3 has an invalid length. [ 331.285849][T13518] xt_hashlimit: size too large, truncated to 1048576 [ 331.860434][T13540] openvswitch: netlink: Duplicate or invalid key (type 0). [ 331.888450][T13542] openvswitch: netlink: Duplicate or invalid key (type 0). [ 331.936619][T13545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.362718][T13558] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 332.623648][T13558] bond10: entered promiscuous mode [ 332.623702][T13558] bond10: entered allmulticast mode [ 332.642989][T13558] 8021q: adding VLAN 0 to HW filter on device bond10 [ 333.253732][T13577] tipc: Enabling of bearer rejected, already enabled [ 333.305752][T13577] __nla_validate_parse: 44 callbacks suppressed [ 333.305798][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 333.339544][T13577] ksmbd: Unknown IPC event: 1, ignore. [ 333.499673][T13591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.518475][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.531218][T13593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.810949][T13605] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 333.850165][T13605] bond9: entered promiscuous mode [ 333.850219][T13605] bond9: entered allmulticast mode [ 333.850698][T13605] 8021q: adding VLAN 0 to HW filter on device bond9 [ 334.517396][T13617] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 334.520503][T13617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1968'. [ 334.980400][T13648] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 336.014165][ T4933] Bluetooth: hci4: link tx timeout [ 336.014384][ T4933] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 337.535627][T13649] bond0: (slave veth0_to_bond): Releasing backup interface [ 337.610981][T13649] bond11: (slave veth0_to_bond): making interface the new active one [ 337.620615][T13649] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 337.630803][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 337.674442][T13667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'. [ 337.702560][T13672] netlink: 'syz.2.1976': attribute type 15 has an invalid length. [ 337.702598][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1976'. [ 337.726583][T13653] macvlan2: entered promiscuous mode [ 337.726604][T13653] macvlan2: entered allmulticast mode [ 337.727165][T13653] bond11: entered promiscuous mode [ 337.727178][T13653] veth0_to_bond: entered promiscuous mode [ 337.763543][T13653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.775918][T13653] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 337.783822][T13653] bond11: left promiscuous mode [ 337.783855][T13653] veth0_to_bond: left promiscuous mode [ 337.831094][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 337.831130][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 338.028331][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 338.204704][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 338.956918][T13705] pim6reg: entered allmulticast mode [ 339.024805][T13705] pim6reg: left allmulticast mode [ 339.213985][T13714] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 339.293645][T13714] bond10: entered promiscuous mode [ 339.295237][T13714] bond10: entered allmulticast mode [ 339.305222][T13714] 8021q: adding VLAN 0 to HW filter on device bond10 [ 339.891783][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 339.904640][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 339.960297][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 339.960510][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 340.927056][T13773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.676936][T13763] syzkaller0: entered promiscuous mode [ 342.676976][T13763] syzkaller0: entered allmulticast mode [ 342.701718][T13769] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 343.181607][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'. [ 343.329334][T13785] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.431093][T13802] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 343.451089][T13796] bond11: entered promiscuous mode [ 343.451124][T13796] bond11: entered allmulticast mode [ 343.539290][T13800] macvlan2: entered promiscuous mode [ 343.539741][T13800] macvlan2: entered allmulticast mode [ 343.550007][T13800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.025457][T13820] netlink: 'syz.1.2005': attribute type 61 has an invalid length. [ 344.066207][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 344.258933][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 344.401724][T13835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2009'. [ 344.511375][T13838] netlink: 'syz.4.2010': attribute type 1 has an invalid length. [ 344.569062][T13838] bond7: entered promiscuous mode [ 344.576112][T13838] bond7: entered allmulticast mode [ 344.583716][T13838] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.819994][T13855] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2013'. [ 348.001474][T13890] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 348.019858][T13906] 8021q: VLANs not supported on ip6_vti0 [ 348.422448][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'. [ 348.472325][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 349.514063][T13947] can: request_module (can-proto-0) failed. [ 349.783668][T13968] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 349.887723][T13968] bond8: entered promiscuous mode [ 349.887782][T13968] bond8: entered allmulticast mode [ 349.888173][T13968] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.168266][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 350.520925][T13995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.022702][T14020] netlink: 'syz.2.2044': attribute type 2 has an invalid length. [ 351.319577][T14029] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 351.695253][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 351.860194][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803157bc00: rx timeout, send abort [ 352.360748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6a9000: rx timeout, send abort [ 352.360804][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803157bc00: abort rx timeout. Force session deactivation [ 352.865265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6a9000: abort rx timeout. Force session deactivation [ 353.693896][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2042'. [ 353.705602][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2042'. [ 354.550682][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 354.561721][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 354.777856][T14076] syzkaller0: entered promiscuous mode [ 354.777906][T14076] syzkaller0: entered allmulticast mode [ 355.310210][T14090] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 355.510648][T14090] bond12: entered promiscuous mode [ 355.526141][T14090] bond12: entered allmulticast mode [ 355.526588][T14090] 8021q: adding VLAN 0 to HW filter on device bond12 [ 355.637065][T14106] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 356.701199][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 356.941034][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 357.223069][T14155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2068'. [ 357.223113][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 359.503110][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2066'. [ 359.515589][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 359.525297][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 360.602865][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2080'. [ 360.992360][T14233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2084'. [ 361.018287][T14233] netlink: 'syz.4.2084': attribute type 32 has an invalid length. [ 361.018522][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 361.170481][T14233] bond9: Setting coupled_control to off (0) [ 363.650919][T14215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.660564][T14219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.729761][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 363.938142][T14258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2090'. [ 364.388583][T14276] sctp: [Deprecated]: syz.1.2095 (pid 14276) Use of int in maxseg socket option. [ 364.388583][T14276] Use struct sctp_assoc_value instead [ 364.953426][T14302] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2102'. [ 365.046910][T14302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2102'. [ 365.047151][T14302] nbd: couldn't find a device at index 458752 [ 365.262859][T14316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.360857][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 365.496271][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2104'. [ 365.887863][T14342] tipc: Enabled bearer , priority 0 [ 365.897745][T14342] syzkaller0: entered promiscuous mode [ 365.897780][T14342] syzkaller0: entered allmulticast mode [ 365.929690][T14342] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 366.013280][T14342] netlink: 'syz.4.2110': attribute type 11 has an invalid length. [ 366.013318][T14342] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2110'. [ 366.322531][T14342] tipc: Resetting bearer [ 366.346097][T14361] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2113'. [ 366.384860][T14340] tipc: Resetting bearer [ 366.563641][T14340] tipc: Disabling bearer [ 366.792618][T14366] netlink: 'syz.0.2114': attribute type 11 has an invalid length. [ 366.924059][T14365] bond11: option resend_igmp: invalid value (32767) [ 366.932238][T14365] bond11: option resend_igmp: allowed values 0 - 255 [ 367.052074][T14365] bond11 (unregistering): Released all slaves [ 367.336921][T14400] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 367.612295][T14412] xt_limit: Overflow, try lower: 536871034/0 [ 367.774684][T14421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2126'. [ 368.176668][T14437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2132'. [ 368.477133][T14455] syzkaller0: entered promiscuous mode [ 368.477172][T14455] syzkaller0: entered allmulticast mode [ 368.571860][T14455] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.572347][T14455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.572359][T14455] IPv6: NLM_F_CREATE should be set when creating new route [ 368.682473][T14464] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.720952][T14461] openvswitch: netlink: Actions may not be safe on all matching packets [ 368.768878][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 368.778238][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 370.130930][T14511] netlink: 'syz.1.2152': attribute type 7 has an invalid length. [ 370.141082][T14511] __nla_validate_parse: 5 callbacks suppressed [ 370.147601][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2152'. [ 370.156845][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 370.215613][T14516] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 370.340716][T14518] netlink: 'syz.4.2153': attribute type 10 has an invalid length. [ 370.348877][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2153'. [ 370.454178][T14516] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.519381][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'. [ 370.519613][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 370.587792][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 370.674934][T14532] macvtap1: entered promiscuous mode [ 370.680723][T14532] macvtap1: entered allmulticast mode [ 370.686604][T14532] veth1_vlan: entered allmulticast mode [ 370.726253][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 371.296879][T14554] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.404794][T14556] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 371.865468][T14583] netlink: 'syz.1.2174': attribute type 17 has an invalid length. [ 371.865503][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 371.865541][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'. [ 372.003188][T14583] gretap0: entered promiscuous mode [ 372.031726][T14583] gretap0: left promiscuous mode [ 372.456654][T14611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2183'. [ 372.468988][T14584] lo speed is unknown, defaulting to 1000 [ 372.571946][T14605] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 372.603392][T14605] bond12 (unregistering): Released all slaves [ 372.826252][T14612] syzkaller0: entered promiscuous mode [ 372.836920][T14612] syzkaller0: entered allmulticast mode [ 372.851099][T14584] wlan0 speed is unknown, defaulting to 1000 [ 373.027443][T14637] netlink: 'syz.1.2187': attribute type 21 has an invalid length. [ 373.160165][T14642] netlink: 'syz.3.2188': attribute type 2 has an invalid length. [ 376.812977][T14699] __nla_validate_parse: 3 callbacks suppressed [ 376.813020][T14699] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2203'. [ 376.856498][T14694] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2200'. [ 376.866832][T14700] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2200'. [ 376.879384][T14699] 0ªî{X¹¦: entered promiscuous mode [ 376.879795][T14699] 0ªî{X¹¦: left allmulticast mode [ 377.002755][T14694] batman_adv: batadv0: Adding interface: veth0 [ 377.002970][T14694] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.013664][T14694] batman_adv: batadv0: Interface activated: veth0 [ 377.066210][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2200'. [ 377.066450][T14700] batman_adv: batadv0: Interface deactivated: veth0 [ 377.066652][T14700] batman_adv: batadv0: Removing interface: veth0 [ 377.068738][T14694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2200'. [ 377.274762][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 378.000344][T14734] tipc: Enabled bearer , priority 0 [ 378.000747][T14733] tipc: Enabling of bearer rejected, already enabled [ 378.108307][T14737] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 378.399518][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 378.693578][T14770] netlink: 'syz.0.2220': attribute type 2 has an invalid length. [ 378.693791][T14770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2220'. [ 378.808181][T14776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2221'. [ 378.884359][T14780] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2223'. [ 379.083101][T14790] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 379.525471][T14810] raw_sendmsg: syz.1.2231 forgot to set AF_INET. Fix it! [ 379.820257][T14806] netlink: 'syz.4.2232': attribute type 2 has an invalid length. [ 382.039093][T14886] __nla_validate_parse: 1 callbacks suppressed [ 382.049935][T14886] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2252'. [ 382.055875][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'. [ 382.081436][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 382.190114][T14891] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 382.209096][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'. [ 382.494234][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 382.494281][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 382.494348][T14904] vlan0: entered promiscuous mode [ 382.595439][T14908] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2258'. [ 382.623843][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 382.624066][T14904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2260'. [ 382.624084][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 382.625255][T14908] tipc: Invalid UDP bearer configuration [ 382.625292][T14908] tipc: Enabling of bearer rejected, failed to enable media [ 382.627889][T14908] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 382.628102][T14908] macsec0: left promiscuous mode [ 382.634242][T14908] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 382.710849][T14904] tipc: Enabling of bearer rejected, failed to enable media [ 383.041137][T14925] ip6t_srh: unknown srh invflags 4000 [ 383.624283][T14948] xt_cgroup: invalid path, errno=-2 [ 383.637685][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.664000][T14988] SET target dimension over the limit! [ 384.667703][ T31] audit: type=1804 audit(1788552436.509:11): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2283" name="/newroot/440/cgroup.controllers" dev="tmpfs" ino=2258 res=1 errno=0 [ 384.668408][ T31] audit: type=1800 audit(1788552436.509:12): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2283" name="cgroup.controllers" dev="tmpfs" ino=2258 res=0 errno=0 [ 384.671556][T14987] SET target dimension over the limit! [ 385.007279][T15001] openvswitch: netlink: Message has 8 unknown bytes. [ 385.007329][T15001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.495338][T15017] sctp: [Deprecated]: syz.3.2291 (pid 15017) Use of int in maxseg socket option. [ 385.495338][T15017] Use struct sctp_assoc_value instead [ 386.376622][T15055] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 386.376845][T15055] netlink: 'syz.2.2305': attribute type 3 has an invalid length. [ 386.663839][T15084] sctp: [Deprecated]: syz.0.2311 (pid 15084) Use of int in max_burst socket option. [ 386.663839][T15084] Use struct sctp_assoc_value instead [ 387.391375][T15103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.885005][T15122] __nla_validate_parse: 17 callbacks suppressed [ 387.885059][T15122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2320'. [ 388.196330][T15130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2322'. [ 388.255883][T15127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.272161][T15134] xt_TCPMSS: Only works on TCP SYN packets [ 391.762439][T15185] veth1_to_bond: entered allmulticast mode [ 391.777914][T15188] veth1_to_bond: left allmulticast mode [ 392.299577][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 392.394023][T15220] nbd: illegal input index -1 [ 392.464704][T15227] team0: Device ipvlan0 failed to register rx_handler [ 392.659117][T15233] hsr0: entered allmulticast mode [ 392.665211][T15233] hsr_slave_0: entered allmulticast mode [ 392.672891][T15233] hsr_slave_1: entered allmulticast mode [ 392.843621][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 393.325610][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 393.397237][T15256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 393.654565][T15274] netlink: 'syz.1.2351': attribute type 21 has an invalid length. [ 393.655193][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2351'. [ 393.889028][T15283] xt_recent: Unsupported userspace flags (000000b1) [ 394.780917][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 394.797269][T15322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.806860][T15322] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2365'. [ 395.080928][T15328] netlink: 'syz.4.2366': attribute type 39 has an invalid length. [ 395.201124][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 395.201171][T15336] netlink: 'syz.0.2368': attribute type 9 has an invalid length. [ 395.201199][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2368'. [ 395.201831][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 395.201855][T15336] netlink: 'syz.0.2368': attribute type 9 has an invalid length. [ 395.201870][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2368'. [ 395.274134][T15336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'. [ 395.824369][T15329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.448752][T15373] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.448803][T15373] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.562658][T15382] ip_tables: iptables: counters copy to user failed while replacing table [ 396.567821][ T255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.777605][T15388] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 397.001995][T15395] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.560269][T15419] syzkaller0: mtu less than device minimum [ 397.564606][T15419] syzkaller0: left promiscuous mode [ 397.564809][T15419] syzkaller0: left allmulticast mode [ 397.877063][T15426] set match dimension is over the limit! [ 398.013274][T15430] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 398.212586][T15426] xt_l2tp: v2 sid > 0xffff: 1114112 [ 398.401007][T15450] __nla_validate_parse: 9 callbacks suppressed [ 398.401255][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 398.734029][T15457] tunl0: entered promiscuous mode [ 398.734199][T15457] netlink: 'syz.1.2396': attribute type 3 has an invalid length. [ 398.734229][T15457] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2396'. [ 398.782735][T15457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2396'. [ 398.967864][T15467] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.967902][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.967928][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.967943][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.967957][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.967971][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 398.967985][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 399.622222][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.514357][T15551] netlink: 'syz.1.2410': attribute type 29 has an invalid length. [ 401.099114][T15564] bond12 (unregistering): Released all slaves [ 401.820767][T15601] geneve0: entered allmulticast mode [ 401.881107][T15604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.471318][T15657] netlink: 'syz.0.2434': attribute type 32 has an invalid length. [ 403.471535][T15657] __nla_validate_parse: 9 callbacks suppressed [ 403.471548][T15657] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2434'. [ 403.504900][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 404.248868][T15704] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 404.396083][T15704] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.424745][T15704] bond13 (unregistering): Released all slaves [ 404.739699][T15718] geneve4: entered promiscuous mode [ 404.746731][T15718] geneve4: entered allmulticast mode [ 404.755735][T11819] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 404.755970][T11819] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 404.765269][T11820] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 404.944053][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2443'. [ 405.762281][T15742] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2447'. [ 406.295438][T15773] netlink: 'syz.1.2456': attribute type 32 has an invalid length. [ 406.320536][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2455'. [ 406.405613][T15776] IPVS: length: 226 != 24 [ 406.436070][T15774] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2455'. [ 406.436303][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 406.816735][T15794] netlink: set zone limit has 4 unknown bytes [ 406.817348][T15794] netlink: set zone limit has 4 unknown bytes [ 406.854288][T15794] netlink: set zone limit has 4 unknown bytes [ 406.861525][T15794] netlink: set zone limit has 4 unknown bytes [ 406.870336][T15794] netlink: set zone limit has 4 unknown bytes [ 406.879739][T15794] netlink: set zone limit has 4 unknown bytes [ 406.942867][T15788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2457'. [ 407.159809][ T4933] block nbd1: Receive control failed (result -32) [ 407.405779][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 407.554462][T15823] bond11: option packets_per_slave: invalid value (18446744073709551615) [ 407.563795][T15823] bond11: option packets_per_slave: allowed values 0 - 65535 [ 407.611949][T15823] bond11 (unregistering): Released all slaves [ 408.106593][T15845] macvlan2: entered promiscuous mode [ 408.113851][T15845] macvlan2: entered allmulticast mode [ 408.122981][T15845] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 409.143966][T15888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2478'. [ 409.337929][T15900] netlink: 'syz.1.2480': attribute type 4 has an invalid length. [ 409.795106][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 409.990971][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 410.243172][T15936] ÿÿÿÿÿÿ: renamed from vlan1 [ 410.775694][T15961] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 411.070723][T15976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2501'. [ 411.232975][T15976] bond12: entered promiscuous mode [ 411.233400][T15976] bond12: entered allmulticast mode [ 411.238557][T15976] 8021q: adding VLAN 0 to HW filter on device bond12 [ 411.664366][T16000] netlink: 'syz.3.2506': attribute type 27 has an invalid length. [ 411.703686][T16000] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.2506'. [ 411.716104][T16000] netlink: 'syz.3.2506': attribute type 2 has an invalid length. [ 411.849250][T16006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.158462][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 412.171328][T16005] lo speed is unknown, defaulting to 1000 [ 412.184725][T16005] wlan0 speed is unknown, defaulting to 1000 [ 412.264366][T16016] xt_limit: Overflow, try lower: 536871034/0 [ 412.325515][T16016] bridge_slave_1: left allmulticast mode [ 412.335352][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.351990][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 412.369490][T16016] bridge_slave_0: left allmulticast mode [ 412.375338][T16016] bridge_slave_0: left promiscuous mode [ 412.381230][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.855375][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2513'. [ 412.874197][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2513'. [ 412.936365][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2514'. [ 412.946353][T16039] openvswitch: netlink: Key type 13575 is out of range max 32 [ 413.377070][T16056] netlink: 'syz.0.2516': attribute type 14 has an invalid length. [ 413.404895][T16055] netlink: 'syz.0.2516': attribute type 14 has an invalid length. [ 413.642122][T16062] lo speed is unknown, defaulting to 1000 [ 413.654017][T16062] wlan0 speed is unknown, defaulting to 1000 [ 413.726308][T16065] syzkaller0: entered promiscuous mode [ 413.733737][T16065] syzkaller0: entered allmulticast mode [ 413.998184][T16077] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 414.643201][T16094] __nla_validate_parse: 3 callbacks suppressed [ 414.651345][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2527'. [ 415.106839][T16116] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 415.180933][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 415.306372][T16120] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 415.332278][T16120] bond11 (unregistering): Released all slaves [ 415.445785][T16128] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 415.459575][T16128] bond11 (unregistering): Released all slaves [ 415.488881][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 415.749776][T16147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2541'. [ 415.806947][T16147] bond0: ARP target 8.4.0.0 is already present [ 415.807169][T16147] bond0: option arp_ip_target: invalid value (1032) [ 416.086059][T16154] netlink: 'syz.4.2542': attribute type 6 has an invalid length. [ 416.385009][T16166] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 416.498653][T16164] lo speed is unknown, defaulting to 1000 [ 416.521273][T16164] wlan0 speed is unknown, defaulting to 1000 [ 416.913560][T16189] syzkaller0: entered promiscuous mode [ 416.920087][T16189] syzkaller0: entered allmulticast mode [ 418.025198][T16217] IPv6: NLM_F_REPLACE set, but no existing node found! [ 418.040700][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 418.175319][T16222] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2565'. [ 418.240162][T16228] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2563'. [ 418.240202][T16228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2563'. [ 418.503585][T16233] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2566'. [ 419.110812][T16244] xt_l2tp: missing protocol rule (udp|l2tpip) [ 419.425514][T16259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.659219][ T4933] block nbd2: Receive control failed (result -32) [ 419.669875][ T5616] block nbd2: Receive control failed (result -32) [ 420.146039][T16287] Cannot find set identified by id 4 to match [ 420.658467][T16301] netlink: 'syz.3.2587': attribute type 4 has an invalid length. [ 421.512603][T16345] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2597'. [ 421.528446][T16346] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 421.536901][T16346] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 421.545350][T16346] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2597'. [ 421.555122][T16346] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 421.555137][T16346] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 421.555148][T16346] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2597'. [ 421.555271][T16346] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 421.555284][T16346] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 421.555295][T16346] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2597'. [ 421.612455][T16346] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 421.612682][T16346] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 421.612695][T16346] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2597'. [ 421.653326][T16345] team0: Port device dummy0 removed [ 421.830946][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'. [ 422.507926][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 422.528191][T16385] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 422.537593][T16382] xt_ecn: cannot match TCP bits for non-tcp packets [ 422.538668][T16385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.539856][T16385] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2608'. [ 422.626240][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 422.635934][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 422.831585][T16397] netlink: 'syz.4.2611': attribute type 14 has an invalid length. [ 423.159524][T16412] bond0: option miimon: invalid value (18446744071829782528) [ 423.159565][T16412] bond0: option miimon: allowed values 0 - 2147483647 [ 423.593109][T16424] openvswitch: netlink: IP tunnel dst address not specified [ 424.757164][T16448] 8021q: adding VLAN 0 to HW filter on device bond10 [ 424.975786][T16470] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003 [ 425.078287][T16471] blkio.reset_stats is deprecated [ 425.290593][T11820] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9e [ 425.513641][T16490] FAULT_INJECTION: forcing a failure. [ 425.513641][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.527364][T16490] CPU: 1 UID: 0 PID: 16490 Comm: syz.0.2644 Not tainted syzkaller #0 PREEMPT(full) [ 425.527391][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.527411][T16490] Call Trace: [ 425.527422][T16490] [ 425.527430][T16490] dump_stack_lvl+0xe8/0x150 [ 425.527462][T16490] should_fail_ex+0x410/0x560 [ 425.527496][T16490] _copy_from_user+0x2d/0xb0 [ 425.527517][T16490] ___sys_sendmsg+0x1c6/0x360 [ 425.527545][T16490] ? __lock_acquire+0x6df/0x2e50 [ 425.527567][T16490] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.527592][T16490] ? kstrtouint+0x6e/0xe0 [ 425.527642][T16490] ? __fget_files+0x2a/0x420 [ 425.527665][T16490] ? __fget_files+0x3a2/0x420 [ 425.527698][T16490] __sys_sendmmsg+0x273/0x4d0 [ 425.527724][T16490] ? __pfx___sys_sendmmsg+0x10/0x10 [ 425.527754][T16490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 425.527795][T16490] ? ksys_write+0x242/0x270 [ 425.527823][T16490] ? __pfx_ksys_write+0x10/0x10 [ 425.527855][T16490] __x64_sys_sendmmsg+0xa0/0xc0 [ 425.527877][T16490] do_syscall_64+0x166/0x520 [ 425.527903][T16490] ? trace_irq_disable+0x3b/0x140 [ 425.527920][T16490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.527939][T16490] ? clear_bhb_loop+0x70/0xc0 [ 425.527962][T16490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.527980][T16490] RIP: 0033:0x7ff50fb9e159 [ 425.528003][T16490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.528019][T16490] RSP: 002b:00007ff510983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.528043][T16490] RAX: ffffffffffffffda RBX: 00007ff50fe26090 RCX: 00007ff50fb9e159 [ 425.528057][T16490] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000003 [ 425.528069][T16490] RBP: 00007ff510983090 R08: 0000000000000000 R09: 0000000000000000 [ 425.528081][T16490] R10: 0000000004000001 R11: 0000000000000246 R12: 0000000000000001 [ 425.528092][T16490] R13: 00007ff50fe26128 R14: 00007ff50fe26090 R15: 00007ffdb1a6b658 [ 425.528123][T16490] [ 425.836845][T16489] bond13: entered promiscuous mode [ 425.843986][T16489] 8021q: adding VLAN 0 to HW filter on device bond13 [ 425.894977][T16500] 8021q: adding VLAN 0 to HW filter on device bond13 [ 425.903942][T16500] bond13: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 425.914991][T16500] bond13: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 425.951548][T16500] bond13: (slave ip6gre2): making interface the new active one [ 425.960008][T16500] ip6gre2: entered promiscuous mode [ 425.979050][T16500] bond13: (slave ip6gre2): Enslaving as an active interface with an up link [ 426.080733][T16498] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 426.089752][T16498] bond13: option packets_per_slave: allowed values 0 - 65535 [ 426.103686][T16498] bond13 (unregistering): Released all slaves [ 426.134216][T16504] validate_nla: 4 callbacks suppressed [ 426.141224][T16504] netlink: 'syz.3.2648': attribute type 97 has an invalid length. [ 426.158585][T16504] netlink: 'syz.3.2648': attribute type 97 has an invalid length. [ 426.805762][T16523] __nla_validate_parse: 11 callbacks suppressed [ 426.806003][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 426.806223][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 427.143635][T16528] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 427.363453][T16545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2663'. [ 427.947476][T16566] syzkaller0: entered promiscuous mode [ 427.949261][T16566] syzkaller0: entered allmulticast mode [ 427.987360][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989374][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989429][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989443][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989456][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989469][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989482][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989493][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989503][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989513][T16566] tc action pedit offset must be on 32 bit boundaries [ 427.989536][T16566] 0: reclassify loop, rule prio 0, protocol 800 [ 428.111032][T16576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.169749][T16575] bond11: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 428.178976][T16575] bond11: entered allmulticast mode [ 428.228042][T16583] sctp: [Deprecated]: syz.1.2675 (pid 16583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.228042][T16583] Use struct sctp_sack_info instead [ 428.263108][T16575] bridge6: entered promiscuous mode [ 428.477665][T16592] FAULT_INJECTION: forcing a failure. [ 428.477665][T16592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.493456][T16592] CPU: 1 UID: 0 PID: 16592 Comm: syz.3.2678 Not tainted syzkaller #0 PREEMPT(full) [ 428.493483][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.493494][T16592] Call Trace: [ 428.493504][T16592] [ 428.493513][T16592] dump_stack_lvl+0xe8/0x150 [ 428.493545][T16592] should_fail_ex+0x410/0x560 [ 428.493581][T16592] _copy_from_user+0x2d/0xb0 [ 428.493604][T16592] kstrtouint_from_user+0xd6/0x180 [ 428.493635][T16592] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 428.493672][T16592] ? lock_acquire+0x115/0x350 [ 428.493697][T16592] proc_fail_nth_write+0x8e/0x210 [ 428.493726][T16592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 428.493763][T16592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 428.493791][T16592] vfs_write+0x296/0xba0 [ 428.493826][T16592] ? __pfx_vfs_write+0x10/0x10 [ 428.493855][T16592] ? __fget_files+0x2a/0x420 [ 428.493884][T16592] ? __fget_files+0x3a2/0x420 [ 428.493908][T16592] ? __fget_files+0x2a/0x420 [ 428.493941][T16592] ksys_write+0x150/0x270 [ 428.493970][T16592] ? __pfx_ksys_write+0x10/0x10 [ 428.494008][T16592] do_syscall_64+0x166/0x520 [ 428.494035][T16592] ? trace_irq_disable+0x3b/0x140 [ 428.494053][T16592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.494073][T16592] ? clear_bhb_loop+0x70/0xc0 [ 428.494097][T16592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.494117][T16592] RIP: 0033:0x7f4c6035e98e [ 428.494135][T16592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.494152][T16592] RSP: 002b:00007f4c61352fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.494174][T16592] RAX: ffffffffffffffda RBX: 00007f4c613536c0 RCX: 00007f4c6035e98e [ 428.494188][T16592] RDX: 0000000000000001 RSI: 00007f4c613530a0 RDI: 0000000000000004 [ 428.494201][T16592] RBP: 00007f4c61353090 R08: 0000000000000000 R09: 0000000000000000 [ 428.494214][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.494229][T16592] R13: 00007f4c60626038 R14: 00007f4c60625fa0 R15: 00007ffc9850c0e8 [ 428.494270][T16592] [ 430.170334][T16619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2685'. [ 430.404019][T16628] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2687'. [ 430.873184][T16568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.084462][T16631] lo speed is unknown, defaulting to 1000 [ 431.102002][T16631] wlan0 speed is unknown, defaulting to 1000 [ 431.132090][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 431.227672][T16637] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2691'. [ 431.347006][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2689'. [ 431.468332][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2694'. [ 431.594737][T16653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2694'. [ 431.943465][T16670] veth0: entered promiscuous mode [ 432.014282][T16672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2699'. [ 432.147074][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 432.174143][T16683] macvlan0: left promiscuous mode [ 432.186944][T16683] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 432.188000][T16683] netlink: 'syz.2.2702': attribute type 2 has an invalid length. [ 432.623343][T16697] netlink: 'syz.1.2705': attribute type 10 has an invalid length. [ 432.710896][T16700] netlink: 'syz.1.2705': attribute type 10 has an invalid length. [ 433.238104][T16697] bond11: (slave veth0_to_bond): Releasing active interface [ 433.438026][T16669] veth0: left promiscuous mode [ 433.548441][T16710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2708'. [ 433.548490][T16710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2708'. [ 433.578168][T16710] gretap1: entered promiscuous mode [ 433.583594][T16710] gretap1: entered allmulticast mode [ 433.810438][T16725] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2711'. [ 435.099984][T16677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.407125][T16733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2713'. [ 435.409350][T16729] syzkaller1: entered promiscuous mode [ 435.409557][T16729] syzkaller1: entered allmulticast mode [ 435.432981][T16729] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 435.476710][T16733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2713'. [ 435.549756][T16736] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 436.143266][T16752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2719'. [ 436.158273][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2723'. [ 436.217127][T16769] bond14 (unregistering): Released all slaves [ 436.687655][T16795] netlink: 'syz.1.2731': attribute type 6 has an invalid length. [ 437.973373][T16825] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 438.502824][T16833] netlink: 'syz.1.2739': attribute type 39 has an invalid length. [ 438.673695][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'. [ 438.741740][T16837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2740'. [ 438.754237][T16837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2740'. [ 438.901453][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 438.921534][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 439.033181][T16760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.381900][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 439.402016][T16857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2748'. [ 439.784138][T10818] tipc: Subscription rejected, illegal request [ 439.814897][T16871] xt_MASQUERADE: bad rangesize 2147483646 [ 439.824012][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 439.940934][T16875] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 439.943183][T16869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.079886][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805af00800: rx timeout, send abort [ 441.080128][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805af00800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.334048][T16891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.094962][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2761'. [ 465.135219][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2767'. [ 465.145979][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 465.320568][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2766'. [ 465.320612][T16981] block nbd3: Unsupported socket: should be TCP or UNIX. [ 465.758155][T16996] netlink: 'syz.0.2773': attribute type 29 has an invalid length. [ 466.190569][T17013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2779'. [ 466.283263][T17011] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2778'. [ 466.617099][T17035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2783'. [ 466.633832][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 466.810395][T17038] netlink: 'syz.4.2783': attribute type 10 has an invalid length. [ 467.030507][T17037] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 467.070131][T17038] veth0_macvtap: left promiscuous mode [ 467.077940][T17038] team0: Device veth0_macvtap failed to register rx_handler [ 467.234551][T17045] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2787'. [ 467.364459][T17053] batman_adv: batadv0: Adding interface: veth0 [ 467.370938][T17053] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.396553][T17053] batman_adv: batadv0: Interface activated: veth0 [ 467.552810][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2788'. [ 467.553036][T17053] batman_adv: batadv0: Interface deactivated: veth0 [ 467.553253][T17053] batman_adv: batadv0: Removing interface: veth0 [ 468.142344][T17074] netlink: 'syz.2.2792': attribute type 83 has an invalid length. [ 468.366123][T17089] ------------[ cut here ]------------ [ 468.366155][T17089] verifier bug: backtracking misuse [ 468.366192][T17089] WARNING: kernel/bpf/backtrack.c:819 at bpf_mark_chain_precision+0x5c90/0x7c20, CPU#1: syz.1.2797/17089 [ 468.392055][T17089] Modules linked in: [ 468.396004][T17089] CPU: 1 UID: 0 PID: 17089 Comm: syz.1.2797 Not tainted syzkaller #0 PREEMPT(full) [ 468.405576][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.415748][T17089] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 468.422463][T17089] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 468.443333][T17089] RSP: 0018:ffffc9000a927220 EFLAGS: 00010283 [ 468.450455][T17089] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 468.458678][T17089] RDX: ffffc9000e981000 RSI: 00000000000044d9 RDI: ffffffff907e1490 [ 468.466718][T17089] RBP: 0000000000000003 R08: ffff888029538000 R09: 0000000000000003 [ 468.475395][T17089] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888029501850 [ 468.483504][T17089] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 468.491795][T17089] FS: 00007fe2066ff6c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 468.500909][T17089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.507590][T17089] CR2: 00007fff399d2cd0 CR3: 000000002a4de000 CR4: 00000000003526f0 [ 468.515612][T17089] Call Trace: [ 468.519085][T17089] [ 468.522160][T17089] ? update_loop_inline_state+0x22a/0x610 [ 468.528083][T17089] do_check_insn+0x12c6d/0x17d70 [ 468.533099][T17089] ? __pfx_do_check_insn+0x10/0x10 [ 468.538360][T17089] ? verbose+0x11d/0x1a0 [ 468.542666][T17089] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 468.548664][T17089] ? __pfx_verbose+0x10/0x10 [ 468.553307][T17089] ? bpf_vlog_reset+0x2aa/0x340 [ 468.558328][T17089] ? print_insn_state+0x106/0x170 [ 468.563429][T17089] do_check_common+0x3c19/0x5d30 [ 468.568809][T17089] ? __pfx_do_check_common+0x10/0x10 [ 468.574160][T17089] ? __pfx_verbose+0x10/0x10 [ 468.578831][T17089] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 468.584707][T17089] bpf_check+0x2639/0x2e10 [ 468.589287][T17089] ? ktime_get_with_offset+0x93/0x2d0 [ 468.594759][T17089] ? __pfx_bpf_check+0x10/0x10 [ 468.599641][T17089] ? bpf_obj_name_cpy+0x194/0x1e0 [ 468.604729][T17089] bpf_prog_load+0x14d6/0x1c20 [ 468.609592][T17089] ? __pfx_bpf_prog_load+0x10/0x10 [ 468.614778][T17089] __sys_bpf+0xd0d/0xd90 [ 468.619103][T17089] ? __pfx___sys_bpf+0x10/0x10 [ 468.623914][T17089] ? do_futex+0x3e7/0x4e0 [ 468.628439][T17089] ? rcu_is_watching+0x16/0xb0 [ 468.633265][T17089] __x64_sys_bpf+0xba/0xd0 [ 468.637766][T17089] do_syscall_64+0x166/0x520 [ 468.642546][T17089] ? trace_irq_disable+0x3b/0x140 [ 468.647680][T17089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.653820][T17089] ? clear_bhb_loop+0x70/0xc0 [ 468.658604][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.664543][T17089] RIP: 0033:0x7fe20579e159 [ 468.669612][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.689387][T17089] RSP: 002b:00007fe2066ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.697898][T17089] RAX: ffffffffffffffda RBX: 00007fe205a25fa0 RCX: 00007fe20579e159 [ 468.705929][T17089] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 468.714076][T17089] RBP: 00007fe205835024 R08: 0000000000000000 R09: 0000000000000000 [ 468.722155][T17089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.730196][T17089] R13: 00007fe205a26038 R14: 00007fe205a25fa0 R15: 00007ffc0e62d758 [ 468.738300][T17089] [ 468.741378][T17089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 468.748665][T17089] CPU: 1 UID: 0 PID: 17089 Comm: syz.1.2797 Not tainted syzkaller #0 PREEMPT(full) [ 468.758035][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.768091][T17089] Call Trace: [ 468.771376][T17089] [ 468.774308][T17089] vpanic+0x56d/0xa60 [ 468.778356][T17089] ? __pfx__printk+0x10/0x10 [ 468.782961][T17089] ? __pfx_vpanic+0x10/0x10 [ 468.787475][T17089] ? is_bpf_text_address+0x292/0x2b0 [ 468.792770][T17089] ? is_bpf_text_address+0x26/0x2b0 [ 468.797981][T17089] panic+0xc5/0xd0 [ 468.801710][T17089] ? __pfx_panic+0x10/0x10 [ 468.806139][T17089] __warn+0x315/0x4c0 [ 468.810119][T17089] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 468.816009][T17089] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 468.821889][T17089] __report_bug+0x276/0x570 [ 468.826517][T17089] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 468.832400][T17089] ? __pfx___report_bug+0x10/0x10 [ 468.837419][T17089] ? number+0xc60/0xed0 [ 468.841613][T17089] ? __pfx_number+0x10/0x10 [ 468.846110][T17089] report_bug_entry+0x19b/0x290 [ 468.850955][T17089] ? bpf_mark_chain_precision+0x5c90/0x7c20 [ 468.856835][T17089] ? bpf_mark_chain_precision+0x5c95/0x7c20 [ 468.862716][T17089] handle_bug+0xce/0x200 [ 468.866949][T17089] exc_invalid_op+0x1a/0x50 [ 468.871439][T17089] asm_exc_invalid_op+0x1a/0x20 [ 468.876282][T17089] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20 [ 468.882770][T17089] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16 [ 468.902367][T17089] RSP: 0018:ffffc9000a927220 EFLAGS: 00010283 [ 468.908420][T17089] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000 [ 468.916375][T17089] RDX: ffffc9000e981000 RSI: 00000000000044d9 RDI: ffffffff907e1490 [ 468.924332][T17089] RBP: 0000000000000003 R08: ffff888029538000 R09: 0000000000000003 [ 468.932296][T17089] R10: 0000000000000007 R11: 0000000000000002 R12: ffff888029501850 [ 468.940251][T17089] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 468.948217][T17089] ? bpf_mark_chain_precision+0x5c89/0x7c20 [ 468.954125][T17089] ? update_loop_inline_state+0x22a/0x610 [ 468.959837][T17089] do_check_insn+0x12c6d/0x17d70 [ 468.964788][T17089] ? __pfx_do_check_insn+0x10/0x10 [ 468.969912][T17089] ? verbose+0x11d/0x1a0 [ 468.974147][T17089] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 468.980038][T17089] ? __pfx_verbose+0x10/0x10 [ 468.984625][T17089] ? bpf_vlog_reset+0x2aa/0x340 [ 468.989471][T17089] ? print_insn_state+0x106/0x170 [ 468.994482][T17089] do_check_common+0x3c19/0x5d30 [ 468.999438][T17089] ? __pfx_do_check_common+0x10/0x10 [ 469.004712][T17089] ? __pfx_verbose+0x10/0x10 [ 469.009292][T17089] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 469.015100][T17089] bpf_check+0x2639/0x2e10 [ 469.019523][T17089] ? ktime_get_with_offset+0x93/0x2d0 [ 469.024891][T17089] ? __pfx_bpf_check+0x10/0x10 [ 469.029645][T17089] ? bpf_obj_name_cpy+0x194/0x1e0 [ 469.034664][T17089] bpf_prog_load+0x14d6/0x1c20 [ 469.039427][T17089] ? __pfx_bpf_prog_load+0x10/0x10 [ 469.044544][T17089] __sys_bpf+0xd0d/0xd90 [ 469.048783][T17089] ? __pfx___sys_bpf+0x10/0x10 [ 469.053537][T17089] ? do_futex+0x3e7/0x4e0 [ 469.057881][T17089] ? rcu_is_watching+0x16/0xb0 [ 469.062640][T17089] __x64_sys_bpf+0xba/0xd0 [ 469.067044][T17089] do_syscall_64+0x166/0x520 [ 469.071626][T17089] ? trace_irq_disable+0x3b/0x140 [ 469.076638][T17089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.082696][T17089] ? clear_bhb_loop+0x70/0xc0 [ 469.087363][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.093242][T17089] RIP: 0033:0x7fe20579e159 [ 469.097649][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.117247][T17089] RSP: 002b:00007fe2066ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.125647][T17089] RAX: ffffffffffffffda RBX: 00007fe205a25fa0 RCX: 00007fe20579e159 [ 469.133605][T17089] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 469.141561][T17089] RBP: 00007fe205835024 R08: 0000000000000000 R09: 0000000000000000 [ 469.149516][T17089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.157473][T17089] R13: 00007fe205a26038 R14: 00007fe205a25fa0 R15: 00007ffc0e62d758 [ 469.165448][T17089] [ 469.168722][T17089] Kernel Offset: disabled [ 469.173036][T17089] Rebooting in 86400 seconds..