last executing test programs: 1m41.859743807s ago: executing program 3 (id=6609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/79, 0x4f, 0x0, &(0x7f00000005c0)=""/124, 0x7c}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x6, 0x5, 0x9, 0x7ff}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xc1, &(0x7f0000000280)=""/193, 0x40f00, 0x20, '\x00', r2, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x6, 0x7fff, 0x3}, 0x10, r3, r4, 0x3, &(0x7f00000007c0)=[0x1, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x1, 0x0, 0x1}, {0x5, 0x3, 0x7, 0xa}, {0x3, 0x2, 0x6, 0x3}], 0x10, 0x6c4}, 0x94) 1m41.596641116s ago: executing program 3 (id=6612): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6010104000380600000000000000000000bbfe8000000000000000000000000000aa00004e22780af7d4b95a65dcd9e635dc0b1ee9c7c13fec5bd4ef4ff2854f3ea7ae1d0198b3e69778f169a740480ffcecf7e033af54d962b6a9983b9a695ebcf31e970d01b7edcde7d88efe4783a9000000007b43c8c9865edd7e772be157581f1ea9796363731a16092558d82bf4014c37c0f293988871caaf2cb67939f1c85cdb7ccb52a32503710aec9160b799955d80718e1f6f31ed5150a7f8ee82d26dc3a547b8b1e6ab271da02179dfb34faf5d88df824b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4c200009078000013126cc800000000000000000000000000000105111fad1e0aa040ac1e0101000c000000"], 0x0) 1m41.433136011s ago: executing program 3 (id=6615): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x10, 0x5, 0x6, {{0xc, 0x4, 0x1, 0x9, 0x30, 0x68, 0x0, 0x2, 0x29, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0xb, 0xd7, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}]}, @generic={0x7, 0x11, "cb384fe8f116bbfb366364c1241fd0"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1m41.346630736s ago: executing program 4 (id=6617): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa44a912d3f233eee, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000080)) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000300)={'ip_vti0\x00', 0x100}) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f848f2d9d821ed1252d9d07528f34a99834b03cfd97490432bb034fcee718fabc6ecc444e4894f8ed2e72c1f072d61e41eef", 0x32}, {&(0x7f0000000100)="b5ed6213d57ef35fa825d79f4293601f2c0cddf1037aff3bcaebab46b94a5d4b788da6825210a4ed5f819e0d5ec580ee71835062", 0x34}, {&(0x7f0000000140)="38d95c1f08d3c4af23c32f3b8ccde5585ca52bd5fb720f162634cdac0d82f081153c9301e5af5c6c901bbd9648aaf3d44ec2f19d01e5dbedbef0000bd258036e8c29c7907d30bf408c4d379a", 0x4c}], 0x3, 0x5, 0x4) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x5c}}, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f0000000000)) 1m41.285100753s ago: executing program 3 (id=6618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x7, 0x1, &(0x7f0000000280)='\x00', 0xe, 0x0, 0x458, 0x58, 0x3, 0x3, 0x5, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000002c0)={@none, 0x1}) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x10, 0x2d, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic="8e"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) (async) sendmmsg$unix(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) (async) close(r4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 1m41.116282357s ago: executing program 4 (id=6620): syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 1m40.958453131s ago: executing program 3 (id=6621): socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000800)={'syzkaller0\x00', 0x7101}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000009c0)=r3) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000000)="80d26f1fc05d30e0ab76d7341b4f8683e78a11afefbba82bf10b000000000000ad52fde3b17987f2fee3504da7be47c6a715db8fef38cadaba3cdd3f480b353a70274193dfbef6d46cca86e204e70234a783a80129472ef3973ade5d71bba156287077c65f46b156cb843448b9e4ae", 0xa1, 0x20008445, &(0x7f00000000c0)={0x11, 0x16, r5, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2e, 0x0, 0x1, 0xd6f}, 0x28) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000580), 0x12) 1m40.791913207s ago: executing program 4 (id=6623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_tracing={0x1d, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) 1m40.640376273s ago: executing program 0 (id=6624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) (async) 1m40.510822301s ago: executing program 1 (id=6625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000030528bd700000071f0000000000", @ANYRES32=0x0, @ANYBLOB="0000000016380000140012800800010067726500080002800400120008000a00", @ANYRES32=r4], 0x3c}}, 0x440b0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x0, 0x5}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf41, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) 1m40.338878882s ago: executing program 0 (id=6626): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) recvfrom$inet(r1, &(0x7f0000000240)=""/60, 0x3c, 0x80000100, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1m35.792824987s ago: executing program 2 (id=6627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0xe04, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r1, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000640), 0x20000328) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\x00', 0x10001, &(0x7f00000000c0)={@_ha_fsid={[0x2]}, {0x9, 0x71d, 0x9, 0x6}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x2}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004055}, 0x811) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0xe04, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x40}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet(r1, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000640), 0x20000328) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\x00', 0x10001, &(0x7f00000000c0)={@_ha_fsid={[0x2]}, {0x9, 0x71d, 0x9, 0x6}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x2}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004055}, 0x811) (async) 1m31.600741147s ago: executing program 2 (id=6628): mmap(&(0x7f000071a000/0x2000)=nil, 0x2000, 0x2000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="3c000000100037040000008000000000000000008e6772fa336c66386f61cadb932698cd0ebed0f918ef8171cc10d764e1cd96f91e882e88aa1b5c09f9a07eb886c11af71fd3caf40ccb65f2fdcdc00087e496dcf8ba75b8251e90df8c2d18a86db0c103c0777e0d815a2a11c16591aad24a605f00cc2c9267bbc69f753867", @ANYRES32=0x0, @ANYBLOB="830405000000000014001400626f6e645f736c6176655f300000000005002100c8000000"], 0x3c}, 0x1, 0x0, 0x0, 0x240c8000}, 0x81) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)=ANY=[], 0x20) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) (async) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000011) (async) sendmsg$kcm(r1, &(0x7f0000001400)={&(0x7f0000001440)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async) pread64(r0, &(0x7f00000000c0)=""/4102, 0x1006, 0x3) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000001340)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x10000, 0x10, 0x5, 0x0, 0xf]}, &(0x7f00000013c0)=0x78) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x4, [{0xf, 0x5, 0x3}, {0x8, 0x3, 0x7}, {0x6, 0x3, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x80000000}, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000019c0)={'ip_vti0\x00', &(0x7f0000001980)={'gretap0\x00', 0x0, 0x10, 0x10, 0xb, 0x6, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0xfa, 0x29, 0x0, @local, @multicast1, {[@ssrr={0x89, 0xb, 0x52, [@local, @remote]}]}}}}}) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f00000017c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000001c40)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001d00)=ANY=[@ANYBLOB="030000000000000002000001e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cccbdcecba758b24f2bb2ddd4bcf1dc600000000000000000000000000000000000000010000000100000002004e21ac1e010100"/272], 0x110) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000001b80)={0x0, 0x7fffffff}, &(0x7f0000001bc0)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="180000000200000000000000ff7f0000180000000500000000007f00080000008520000003000000185100000800000000000000000000009500000000000000"], &(0x7f0000001840)='syzkaller\x00', 0x7, 0xf0, &(0x7f0000001880)=""/240, 0x40f00, 0x11, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000001a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0xc, 0x6, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r0, r3], 0x0, 0x10, 0x8}, 0x94) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001640)=0x14) sendmsg$nl_route(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) (async) sendmsg$nl_route(r9, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001c00)=ANY=[@ANYBLOB="20000020bd7000ffdbdf3d000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x3, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 1m29.463569367s ago: executing program 0 (id=6629): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}) 1m29.316211847s ago: executing program 2 (id=6630): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000) socket$inet(0x2, 0x3, 0x2) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x8000) (async) socket$inet(0x2, 0x3, 0x2) (async) close(0x3) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) (async) 1m29.285510941s ago: executing program 0 (id=6631): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000500)={0x22f8}, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_emit_ethernet(0x8e, &(0x7f0000000a80)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006fe250b2c2e9f65000000000000000000000000000000000000000000000000000000000000000000a00000000000000200100"/400], 0xe1e571d2193a0e72) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r6, &(0x7f0000000700)="ca", &(0x7f0000000900)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000940)={r6, &(0x7f0000000980), &(0x7f00000009c0)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a00)={r6, &(0x7f0000000a40)='t'}, 0x20) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) close(0x4) 1m29.133386445s ago: executing program 2 (id=6632): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e4", 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090) sendto(r0, &(0x7f00000006c0)="8d13", 0x2, 0x4000041, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000700)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000800)="3890b6a3ed67f337e608ddfe8780", 0xe, 0x30008091, 0x0, 0x0) 1m29.028019819s ago: executing program 4 (id=6633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x8004) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) nanosleep(&(0x7f0000000340)={r3, r4+10000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x20, 0xd, 0xa, 0x609, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400040d0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000880)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) listen(r0, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r11, 0x0, 0x16, 0x0, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r6, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0xc, '\x00', r13}, 0x50) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) close(r12) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x11, 0x0, 0x2}}}}}}}, 0x0) 1m29.006356384s ago: executing program 2 (id=6634): syz_emit_ethernet(0xb2, &(0x7f0000001600)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000381001b000800461000a0006600000b02907800000000e00000014444b7210a010101000000010a01010200000000ac141443000009430000000000000a7dac1e000100000005ffffffff00000fff7f000001000000037f0000010000000494040000443cf673e00000020000002bac14140e00000003e0000002fffffff7ac141429000000800000000000006bfbac1414aa80000000ac1414bb0000000211ff907864010102"], 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000001380)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000001380)=ANY=[], 0x38) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r6, 0xff, 0x3, &(0x7f0000001400)="7c73c6e9", 0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3d, 0x0, &(0x7f00000013c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="114353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r8, 0x1, 0x7, 0x6, @local}, 0x14) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r9, 0x0, 0x5, 0xc7, &(0x7f0000000100)="1d5af9e0f6", &(0x7f0000000140)=""/199, 0x0, 0x0, 0x1000, 0x5c, &(0x7f0000000240)="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", &(0x7f0000001240)="071bc844db3632abd0020a01c3c23f7f887c86f2e706509470524e659fdc5c3dfa9fecf062e6fab376cd914208922ddfc512a2364deb4f2f69d331da4e11b97e0b9c9b238b03c1fe11ae91d5de1297fdcc50622ac6df73fe30ad6c19", 0x4, 0x0, 0x1}, 0x50) 1m28.502412064s ago: executing program 0 (id=6635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf250000000051b6f31bf472f15d4e87152d65532d358c08207473d17fc3b78b23aea67736a0801eaedb0af47ebdd82ee2", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c40)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="080088f700000200"], 0xfce) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0xffffffffffffff97, 0x10, &(0x7f0000001280), 0xffffffffffffffc2}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001400)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000006401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14140400"/400], 0x190) recvmsg(r0, &(0x7f0000001c00)={&(0x7f0000001700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001780)=""/213, 0xd5}, {&(0x7f0000001880)=""/63, 0x3f}, {&(0x7f00000018c0)=""/25, 0x19}, {&(0x7f0000001900)=""/204, 0xcc}, {&(0x7f0000001a00)=""/191, 0xbf}], 0x5, &(0x7f0000001b40)=""/162, 0xa2}, 0x2) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000015c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e3100007b3b27"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$inet6_tcp(0xa, 0x1, 0x0) 1m27.968156521s ago: executing program 2 (id=6636): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1c, 0xfffffffffffffffe}, {0x2, 0x59}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8888}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8, 0x7, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffff001, 0x3}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000340)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x8, 0xa, 0x34, @remote, @mcast2, 0x10, 0x1, 0x3, 0xb7}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0xbc, r7, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x24000014) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 1m27.785227818s ago: executing program 3 (id=6637): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r1, 0x0, 0xff40) write$ppp(r1, &(0x7f0000000100)="8fe8", 0x2) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x200, 0x4) setsockopt(r0, 0x11b, 0x9, 0x0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newae={0x5c, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1m25.923401593s ago: executing program 1 (id=6638): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) (async) syz_emit_ethernet(0x20e, &(0x7f0000000440)={@link_local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@tcp={0x9, 0x6, "71e211", 0x16a, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x2e, 0x18, '\x00', [@generic={0xfa, 0x5d, "e02eeae460e786e0c150836adfc0f12dce8ee19afd22ec04b81e17536a3ce73188faaf212ce9541536bcdc30cb4ebaf9e359e56b3bcc9a1a21a868b83a183615aa1e65b8efecf6a8189ac16e03b0c61b5d6ebaa26b8c6f7d1ab2266249"}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x49, 0x2, [0xffffffffffffffff, 0x4, 0x6a35, 0x1, 0x9, 0x86, 0x5, 0x5]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}, @hopopts={0x8, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xb, 0x4, [0x3489]}}]}, @routing={0xff, 0x2, 0x1, 0x3, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x6c, 0x0, 0x1, 0x5}, @srh={0x67, 0x4, 0x4, 0x1000000000000073, 0x1, 0x40, 0x8eb, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0xc2, 0x400, 0x0, 0x2, {[@mptcp=@generic={0x80, 0x7, "90b258e811"}, @timestamp={0x8, 0xa, 0x0, 0x4}, @exp_smc={0xfe, 0x6}]}}, {"e5e49bbb1edf"}}}}, @ipv4=@tcp={{0xe, 0x4, 0x3, 0x5, 0x4c, 0x68, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0xd3, [@local, @local, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @local, @remote, @local]}]}}, {{0x4e23, 0x4621, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}}}]}, "37700f7a3296bff4"}}}}}, 0x0) (async) socket$inet6(0xa, 0x3, 0x3c) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x2c}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) (async) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000001800100000008800900000f39bb3d621f664f95000000000000159bcc3df7cfe47a9f41508be7b89fdd8cdb001d580eb0c2fa712a2be27113ff7fd82c111bdc77dfeea114708cc209647124992832a6e20297063ad49231"], 0x24}, 0x1, 0x620b}, 0x0) 1m25.539977627s ago: executing program 1 (id=6639): pselect6(0x40, &(0x7f0000000040)={0xb, 0x9822, 0x5, 0x3a32, 0x2, 0x7, 0x8, 0x8}, &(0x7f0000000080)={0x8000000000000001, 0x0, 0x10, 0x7, 0x8, 0x5, 0x1, 0x51e}, &(0x7f0000000100)={0xdc, 0x4, 0x6, 0x7fe, 0x3, 0x8, 0x8000000000000000, 0x5}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x100, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) (async) recvfrom(r0, 0x0, 0x0, 0x40002040, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000400), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x1800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000020000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000180003000000000000000000000000e4feff000002"], 0xf8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x45a, 0x4) 1m25.477204817s ago: executing program 1 (id=6640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000140), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000020900010073797a30000000000900030073797a32"], 0x80}}, 0x0) 1m25.370162748s ago: executing program 1 (id=6641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0xb, 0x6, 0x201}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001400188008000140000000000800004000000000240001801400018008000100e000000108000200e00000010c00028005000100"], 0x50}}, 0x0) (async, rerun: 32) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) (rerun: 32) close(r3) 1m25.132348188s ago: executing program 4 (id=6642): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000540), 0x4) r1 = socket(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="c80000004200010002000000000000000201000042420000500001"], 0xc8}}, 0x0) (async) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) (async) r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x2f, 0x0, &(0x7f00000003c0)) (async) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000080)="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") (async) connect$nfc_raw(r1, &(0x7f0000000400)={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800060000000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9}, 0x90) 1m25.131919155s ago: executing program 1 (id=6643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x402, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) 1m25.039614765s ago: executing program 4 (id=6644): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be09", 0xd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090) sendto(r0, &(0x7f00000006c0)="8d13", 0x2, 0x4000041, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000700)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000800)="3890b6a3ed67f337e608ddfe8780", 0xe, 0x30008091, 0x0, 0x0) 1m16.311530328s ago: executing program 0 (id=6645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000200)=""/4102, &(0x7f0000001240)=0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x7, 0x3, &(0x7f0000001400)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb2}}, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0xf}, 0x94) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f00000012c0)={&(0x7f0000001480)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)="56ae", 0x2}], 0x1, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001280)="99ce7c53ce704b4fe05a0d1198d9a4d3", 0x10) 0s ago: executing program 32 (id=6636): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1c, 0xfffffffffffffffe}, {0x2, 0x59}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8888}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8, 0x7, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffff001, 0x3}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000340)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) close(r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x8, 0xa, 0x34, @remote, @mcast2, 0x10, 0x1, 0x3, 0xb7}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0xbc, r7, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x24000014) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) kernel console output (not intermixed with test programs): :syzkaller0>, priority 0 [ 512.213519][T25326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5050'. [ 512.351678][T25345] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5054'. [ 512.498978][T25356] openvswitch: netlink: EtherType 547 is less than min 600 [ 512.524188][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5056'. [ 512.549547][T25356] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5056'. [ 512.642527][T25362] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 512.943324][T25379] netlink: 'syz.3.5062': attribute type 2 has an invalid length. [ 513.059721][T25393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5060'. [ 513.106367][T25389] x_tables: unsorted underflow at hook 3 [ 513.123894][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 513.168635][T25404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5067'. [ 513.168667][T25404] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5067'. [ 513.196408][T25404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.513608][T25428] sctp: [Deprecated]: syz.3.5076 (pid 25428) Use of int in maxseg socket option. [ 513.513608][T25428] Use struct sctp_assoc_value instead [ 513.562312][T25436] netlink: 'syz.2.5077': attribute type 18 has an invalid length. [ 513.683618][T25440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 513.961842][T25465] bridge0: left allmulticast mode [ 513.968766][T25468] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 513.971723][T25468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.998104][T25465] bridge0: entered allmulticast mode [ 514.891807][T25527] ip6t_hbh: too many supported opts specified [ 514.970102][T25527] syzkaller0: entered allmulticast mode [ 514.986168][ T7645] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.986211][ T7645] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.986243][ T7645] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.986272][ T7645] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.020220][T25543] gretap0: left promiscuous mode [ 516.540574][T25591] bond16: entered allmulticast mode [ 516.541041][T25591] 8021q: adding VLAN 0 to HW filter on device bond16 [ 516.650138][T25609] x_tables: duplicate underflow at hook 2 [ 516.651168][T25609] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.870007][T25624] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.904671][T25626] netlink: zone id is out of range [ 516.912776][T25626] __nla_validate_parse: 14 callbacks suppressed [ 516.912821][T25626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5127'. [ 517.022793][T25619] smc: net device lo applied user defined pnetid SYZ0 [ 517.025081][T25619] smc: smcd device lo applied user defined pnetid SYZ0 [ 517.049090][T25630] syzkaller0: entered promiscuous mode [ 517.049111][T25630] syzkaller0: entered allmulticast mode [ 517.115818][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.116249][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.116520][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.116792][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.133388][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.133689][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.133945][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.134232][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.201950][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5131'. [ 517.859186][T25664] hsr0: left promiscuous mode [ 517.859210][T25664] hsr0: entered allmulticast mode [ 517.859222][T25664] hsr_slave_0: entered allmulticast mode [ 517.859236][T25664] hsr_slave_1: entered allmulticast mode [ 518.003751][T25676] siw: device registration error -23 [ 518.046818][T25673] netlink: 'syz.4.5144': attribute type 7 has an invalid length. [ 518.046839][T25673] netlink: 'syz.4.5144': attribute type 8 has an invalid length. [ 518.052016][T25674] netlink: 'syz.4.5144': attribute type 7 has an invalid length. [ 518.052034][T25674] netlink: 'syz.4.5144': attribute type 8 has an invalid length. [ 518.734445][T25735] ip_tables: iptables: counters copy to user failed while replacing table [ 518.763768][T25739] syzkaller0: left promiscuous mode [ 518.763842][T25739] syzkaller0: left allmulticast mode [ 519.112137][T25760] vxlan: RTM_NEWNEIGH with invalid state 0x10 [ 519.521511][T25795] netlink: 'syz.0.5175': attribute type 11 has an invalid length. [ 519.530137][T25798] bond17: option lp_interval: invalid value (0) [ 519.530158][T25798] bond17: option lp_interval: allowed values 1 - 2147483647 [ 519.552300][T25798] bond17 (unregistering): Released all slaves [ 520.260707][T25852] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 520.584410][T25879] bridge_slave_1: entered allmulticast mode [ 520.607963][T25881] xt_TCPMSS: Only works on TCP SYN packets [ 520.743206][T25887] ip_tables: iptables: counters copy to user failed while replacing table [ 520.783313][T25895] netlink: 'syz.1.5203': attribute type 29 has an invalid length. [ 520.841592][T25900] ip_tables: iptables: counters copy to user failed while replacing table [ 521.163088][T25915] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 521.175771][T25918] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 521.184142][T25918] netlink: 'syz.3.5212': attribute type 2 has an invalid length. [ 521.184165][T25918] nbd: couldn't find a device at index -2147221500 [ 521.188672][T25918] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 521.415141][T25924] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 521.501542][T25940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 521.782984][T25955] tunl0: entered promiscuous mode [ 521.790658][T25955] netlink: 'syz.0.5225': attribute type 3 has an invalid length. [ 521.929867][T25965] syzkaller0: left promiscuous mode [ 521.929887][T25965] syzkaller0: left allmulticast mode [ 522.530714][T26031] __nla_validate_parse: 27 callbacks suppressed [ 522.530736][T26031] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5238'. [ 522.530750][T26031] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5238'. [ 522.530768][T26031] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5238'. [ 522.783726][T26041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5242'. [ 523.070856][T26052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5244'. [ 523.580576][T26078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5254'. [ 523.593943][T26078] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5254'. [ 523.929918][T26098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5261'. [ 524.133299][T26104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5264'. [ 524.241098][T26115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5267'. [ 524.244079][T26115] netlink: 'syz.3.5267': attribute type 4 has an invalid length. [ 524.272379][T26119] netlink: 'syz.3.5267': attribute type 4 has an invalid length. [ 524.602167][T26147] macvtap0: entered allmulticast mode [ 524.602188][T26147] veth0_macvtap: entered allmulticast mode [ 524.829782][T26161] ip6gre0: entered promiscuous mode [ 524.829805][T26161] ip6gre0: entered allmulticast mode [ 525.068949][T26171] ip_tables: iptables: counters copy to user failed while replacing table [ 525.179580][T26177] netlink: 'syz.2.5286': attribute type 1 has an invalid length. [ 525.197969][T26177] batman_adv: batadv0: Adding interface: syz_tun [ 525.197988][T26177] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.198151][T26177] batman_adv: batadv0: Interface activated: syz_tun [ 525.331473][T26190] No such timeout policy "syz1" [ 525.792224][T26207] ip6t_hbh: too many supported opts specified [ 526.296037][T26230] ip_tables: iptables: counters copy to user failed while replacing table [ 527.376846][T26266] wireguard1: entered promiscuous mode [ 527.489181][T26273] macvlan0: left promiscuous mode [ 527.626718][T26286] __nla_validate_parse: 12 callbacks suppressed [ 527.626739][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5312'. [ 527.626763][T26286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5312'. [ 528.002923][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5315'. [ 528.032218][T26299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5316'. [ 528.076731][T26295] netlink: 'syz.4.5315': attribute type 10 has an invalid length. [ 528.109767][T26295] syzkaller1: entered allmulticast mode [ 528.312812][T26304] Cannot find del_set index 3 as target [ 528.552627][T26315] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 528.813630][T26322] bond17: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 528.833895][T26322] bond17 (unregistering): Released all slaves [ 528.884044][T26330] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 529.446082][T26354] ip_tables: iptables: counters copy to user failed while replacing table [ 529.477427][T26354] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5331'. [ 529.619592][T26359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5334'. [ 530.043405][T26376] xt_l2tp: missing protocol rule (udp|l2tpip) [ 530.052454][T26376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5339'. [ 530.305627][T26386] xt_NETMAP: bad rangesize 37. [ 530.331804][T26383] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5342'. [ 530.373578][T26386] tipc: Enabling of bearer rejected, failed to enable media [ 530.410101][T26390] ip_tables: iptables: counters copy to user failed while replacing table [ 530.782130][T26397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5346'. [ 531.017995][T26405] rxe_eth0 speed is unknown, defaulting to 1000 [ 531.047332][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5349'. [ 531.047494][T26407] hsr_slave_0: left promiscuous mode [ 531.050305][T26407] hsr_slave_1: left promiscuous mode [ 531.385042][T26414] netlink: 'syz.2.5352': attribute type 1 has an invalid length. [ 531.566499][T26405] wg1 speed is unknown, defaulting to 1000 [ 531.858839][T26431] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 532.227946][T26440] ip_tables: iptables: counters copy to user failed while replacing table [ 532.479220][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.479373][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.479517][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.479652][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.479811][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.479944][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.480064][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.480190][T26463] netlink: 'syz.2.5367': attribute type 83 has an invalid length. [ 532.737671][T26461] __nla_validate_parse: 5 callbacks suppressed [ 532.737689][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.737796][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.737896][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.738711][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.738811][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.738905][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.739004][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.739129][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.739224][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.739326][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 532.953406][T26475] ip6t_REJECT: ECHOREPLY is not supported [ 532.987692][T26479] ip6t_REJECT: ECHOREPLY is not supported [ 533.118189][T26484] validate_nla: 25 callbacks suppressed [ 533.118210][T26484] netlink: 'syz.2.5371': attribute type 10 has an invalid length. [ 533.118236][T26484] dummy0: left promiscuous mode [ 533.162081][T26484] dummy0: entered promiscuous mode [ 533.176808][T26484] team0: Port device dummy0 added [ 533.400829][T26493] xt_hashlimit: size too large, truncated to 1048576 [ 533.724131][T26510] syz_tun: entered allmulticast mode [ 533.757594][T26509] syz_tun: left allmulticast mode [ 534.362504][T26539] Cannot find add_set index 4 as target [ 535.035519][T26575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.192666][T26584] syzkaller0: left promiscuous mode [ 535.192687][T26584] syzkaller0: left allmulticast mode [ 535.217324][T26584] tipc: Resetting bearer [ 535.335000][T26592] netlink: 'syz.0.5398': attribute type 11 has an invalid length. [ 535.467339][T26584] tipc: Disabling bearer [ 535.506946][T26012] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.506990][T26012] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.507020][T26012] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.515646][T26012] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.954509][T26611] netlink: 'syz.3.5404': attribute type 62 has an invalid length. [ 536.990610][T26616] infiniband syz0: set down [ 536.990711][T26616] infiniband syz0: added bond_slave_1 [ 537.026093][T26616] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 537.026131][T26616] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 537.026167][T26616] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 537.082785][T26616] RDS/IB: syz0: added [ 537.082839][T26616] smc: adding ib device syz0 with port count 1 [ 537.082859][T26616] smc: ib device syz0 port 1 has no pnetid [ 537.119524][T26665] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 537.429527][T26671] openvswitch: netlink: Tunnel attr 229 out of range max 16 [ 537.643191][T26678] netlink: 'syz.2.5420': attribute type 2 has an invalid length. [ 537.643217][T26678] netlink: 'syz.2.5420': attribute type 2 has an invalid length. [ 537.702861][T26677] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 537.720997][T26677] 1ªî{X¹¦: left promiscuous mode [ 537.721019][T26677] 1ªî{X¹¦: entered allmulticast mode [ 537.724351][T26677] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 537.798458][T26681] __nla_validate_parse: 38 callbacks suppressed [ 537.798488][T26681] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5421'. [ 538.073766][T26688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5423'. [ 538.265540][T26690] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 538.265566][T26690] bond10: option packets_per_slave: allowed values 0 - 65535 [ 538.297662][T26690] bond10 (unregistering): Released all slaves [ 538.331070][T26694] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 538.731016][T26706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5429'. [ 538.860107][T26711] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 539.290188][T26729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5435'. [ 540.530573][T26759] netlink: 'syz.2.5443': attribute type 5 has an invalid length. [ 540.530595][T26759] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5443'. [ 540.564426][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.606485][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.606637][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.606783][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.606915][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.607049][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.607201][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.607338][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 540.607469][T26759] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 541.042504][T26766] x_tables: duplicate underflow at hook 1 [ 541.674351][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5451'. [ 541.692909][T26782] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5451'. [ 541.692932][T26782] nbd: illegal input index 65508 [ 542.015510][ T30] audit: type=1800 audit(1793096741.967:47): pid=26807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5457" name="memory.events" dev="tmpfs" ino=2316 res=0 errno=-22 [ 542.466917][ T7646] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.466962][ T7646] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.466994][ T7646] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.467023][ T7646] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.706979][T26840] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 543.213851][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5474'. [ 543.319147][T26858] vlan2: entered allmulticast mode [ 543.319168][T26858] bond0: entered allmulticast mode [ 543.388802][T26861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 543.439182][T26863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5477'. [ 543.685318][T26873] syzkaller0: entered promiscuous mode [ 543.685341][T26873] syzkaller0: entered allmulticast mode [ 543.838295][T26881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5481'. [ 544.014114][T26881] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 544.093036][T26881] batman_adv: batadv0: Removing interface: syzkaller0 [ 544.137564][T10205] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.137777][T10205] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.137941][T10205] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.138030][T10205] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.464911][T26903] ip6t_hbh: Not strict - not implemented [ 544.760264][T26913] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5490'. [ 545.141930][T26932] set match dimension is over the limit! [ 545.379019][T26943] tipc: Can't bind to reserved service type 0 [ 545.721237][T26958] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 545.776679][T26967] validate_nla: 24 callbacks suppressed [ 545.776697][T26967] netlink: 'syz.3.5505': attribute type 1 has an invalid length. [ 545.828616][T26969] GUP no longer grows the stack in syz.4.5504 (26969): 200000003000-20000000a000 (200000001000) [ 545.828652][T26969] CPU: 0 UID: 0 PID: 26969 Comm: syz.4.5504 Not tainted syzkaller #0 PREEMPT(full) [ 545.828696][T26969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 545.828720][T26969] Call Trace: [ 545.828729][T26969] [ 545.828737][T26969] dump_stack_lvl+0xe8/0x150 [ 545.828817][T26969] __get_user_pages+0x23b1/0x2750 [ 545.828872][T26969] ? lock_acquire+0x115/0x350 [ 545.828927][T26969] ? __gup_longterm_locked+0xcb2/0x16f0 [ 545.828956][T26969] __gup_longterm_locked+0xe24/0x16f0 [ 545.829010][T26969] gup_fast_fallback+0x1d92/0x20e0 [ 545.829065][T26969] ? __pfx_gup_fast_fallback+0x10/0x10 [ 545.829089][T26969] ? is_valid_gup_args+0x11f/0x200 [ 545.829122][T26969] ? get_user_pages_fast+0x4d/0xb0 [ 545.829144][T26969] __iov_iter_get_pages_alloc+0x378/0xa40 [ 545.829202][T26969] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 545.829245][T26969] ? __fget_files+0x2a/0x420 [ 545.829276][T26969] iov_iter_get_pages2+0x5e/0xa0 [ 545.829305][T26969] __se_sys_vmsplice+0x844/0x16f0 [ 545.829347][T26969] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 545.829371][T26969] ? __pfx_futex_wait+0x10/0x10 [ 545.829498][T26969] do_syscall_64+0x166/0x520 [ 545.829542][T26969] ? trace_irq_disable+0x3b/0x140 [ 545.829568][T26969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.829601][T26969] ? clear_bhb_loop+0x70/0xc0 [ 545.829625][T26969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.829644][T26969] RIP: 0033:0x7f918af9f559 [ 545.829663][T26969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.829679][T26969] RSP: 002b:00007f918be34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 545.829701][T26969] RAX: ffffffffffffffda RBX: 00007f918b226090 RCX: 00007f918af9f559 [ 545.829715][T26969] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000006 [ 545.829727][T26969] RBP: 00007f918b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 545.829739][T26969] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 545.829750][T26969] R13: 00007f918b226128 R14: 00007f918b226090 R15: 00007fff4c9366d8 [ 545.829784][T26969] [ 546.371463][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5510'. [ 546.453187][T26994] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5512'. [ 547.187522][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187559][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187583][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187606][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187629][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187652][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187674][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187697][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187720][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187742][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187765][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187792][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187814][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187836][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187858][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187880][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187901][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187922][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187944][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187968][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.187990][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188034][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188059][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188082][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188105][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188128][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188151][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188174][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188206][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188229][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.188252][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.214219][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.214254][T27044] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20002 [ 547.216851][T27042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5521'. [ 547.280613][T27051] netlink: 'syz.0.5522': attribute type 1 has an invalid length. [ 547.280632][T27051] netlink: 'syz.0.5522': attribute type 1 has an invalid length. [ 547.347595][T27049] netlink: 3584 bytes leftover after parsing attributes in process `syz.1.5524'. [ 547.580586][T27063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5529'. [ 547.580613][T27063] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.5529'. [ 547.649754][T27070] x_tables: duplicate underflow at hook 2 [ 547.662600][T27070] openvswitch: netlink: Flow key attr not present in new flow. [ 548.075188][T27095] syzkaller0: entered promiscuous mode [ 548.075296][T27095] syzkaller0: entered allmulticast mode [ 548.258004][T27109] batman_adv: batadv0: Interface deactivated: syz_tun [ 548.258054][T27109] batman_adv: batadv0: Removing interface: syz_tun [ 548.261629][T27109] dummy0: left promiscuous mode [ 548.290660][T27109] team0: Port device dummy0 removed [ 548.291170][T27109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.422026][T27115] __nla_validate_parse: 3 callbacks suppressed [ 548.422047][T27115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5544'. [ 548.422072][T27115] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5544'. [ 548.579855][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5548'. [ 548.594345][T27134] ip6t_ah: unknown flags 5 [ 548.760616][T27141] ip6t_ah: unknown flags 5 [ 549.390359][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 549.423180][T27174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5557'. [ 549.498072][T27183] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 549.550143][T27185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5561'. [ 549.569555][T27188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5559'. [ 549.598289][T27188] macvtap1: entered promiscuous mode [ 549.598311][T27188] hsr0: entered promiscuous mode [ 549.598621][T27188] macvtap1: entered allmulticast mode [ 549.598635][T27188] hsr0: entered allmulticast mode [ 549.598647][T27188] hsr_slave_0: entered allmulticast mode [ 549.598661][T27188] hsr_slave_1: entered allmulticast mode [ 549.734083][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5563'. [ 549.856060][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5563'. [ 550.031613][T27213] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 550.150172][T27223] netlink: 'syz.2.5572': attribute type 1 has an invalid length. [ 550.150195][T27223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5572'. [ 550.258382][T27228] netlink: 'syz.2.5574': attribute type 1 has an invalid length. [ 550.334579][T27228] 8021q: adding VLAN 0 to HW filter on device bond18 [ 550.354442][T27228] bond17: (slave bond18): making interface the new active one [ 550.354960][T27228] bond17: (slave bond18): Enslaving as an active interface with an up link [ 550.564141][T27253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.564159][T27253] IPv6: NLM_F_CREATE should be set when creating new route [ 550.564198][T27253] IPv6: NLM_F_CREATE should be set when creating new route [ 550.564222][T27253] IPv6: NLM_F_CREATE should be set when creating new route [ 550.564861][T27253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.866873][T27268] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 550.866949][T27268] syzkaller1: Refused to change device type [ 551.156566][T27284] syzkaller0: entered promiscuous mode [ 551.156589][T27284] syzkaller0: entered allmulticast mode [ 551.283966][T27291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.294017][T27291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.294903][T27291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.320563][T27291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.324119][T27291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.379666][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.380043][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.380337][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.381152][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.381759][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.556928][T27299] netlink: 'syz.4.5594': attribute type 1 has an invalid length. [ 551.712252][T27299] bond6: entered promiscuous mode [ 551.712739][T27299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 551.889657][T27299] bond6: (slave bridge29): making interface the new active one [ 551.889681][T27299] bridge29: entered promiscuous mode [ 551.891044][T27299] bond6: (slave bridge29): Enslaving as an active interface with an up link [ 552.288217][T27290] rxe_eth0 speed is unknown, defaulting to 1000 [ 552.651124][T27290] wg1 speed is unknown, defaulting to 1000 [ 552.748204][T27340] syz_tun: entered promiscuous mode [ 552.870069][T27340] syz_tun: left promiscuous mode [ 553.445425][T27291] Bluetooth: hci4: command tx timeout [ 553.822358][T27381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.834273][T27290] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.834650][T27290] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.834873][T27290] bridge_slave_0: entered allmulticast mode [ 553.839121][T27290] bridge_slave_0: entered promiscuous mode [ 553.843582][T27290] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.843687][T27290] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.843811][T27290] bridge_slave_1: entered allmulticast mode [ 553.851434][T27290] bridge_slave_1: entered promiscuous mode [ 553.970460][T27290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.987467][T27290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.051292][T27290] team0: Port device team_slave_0 added [ 554.054823][T27290] team0: Port device team_slave_1 added [ 554.107851][T27290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.107868][T27290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.107892][T27290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.112791][T27290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.112806][T27290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.112827][T27290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.283659][T27290] hsr_slave_0: entered promiscuous mode [ 554.288505][T27290] hsr_slave_1: entered promiscuous mode [ 554.289231][T27290] debugfs: 'hsr0' already exists in 'hsr' [ 554.289250][T27290] Cannot create hsr debugfs directory [ 554.385510][T27394] __nla_validate_parse: 8 callbacks suppressed [ 554.385535][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.385768][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.386377][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.386578][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.386771][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.386967][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.399124][T27399] netlink: 'syz.4.5620': attribute type 1 has an invalid length. [ 554.417257][T27398] openvswitch: netlink: IPv6 tunnel dst address is zero [ 554.456366][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.456652][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.456916][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.484672][T27403] netlink: 'syz.4.5620': attribute type 62 has an invalid length. [ 554.507889][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5618'. [ 554.608680][T27410] openvswitch: netlink: IPv6 tunnel dst address is zero [ 555.043207][T27429] bond10 (unregistering): Released all slaves [ 555.390626][T27458] xt_cluster: node mask cannot exceed total number of nodes [ 555.425949][T27290] bond0: (slave netdevsim1): Releasing backup interface [ 555.533629][T27291] Bluetooth: hci4: command tx timeout [ 556.124555][T27490] syzkaller0: entered promiscuous mode [ 556.124580][T27490] syzkaller0: entered allmulticast mode [ 557.131106][T27521] netlink: 'syz.4.5642': attribute type 1 has an invalid length. [ 557.615378][T27291] Bluetooth: hci4: command tx timeout [ 558.183883][T27290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 558.203535][T27290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.218602][T27290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 558.236402][T27290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.240745][T27290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 558.286720][T27290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.289295][T27290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 558.328820][T27290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.511086][T27290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.581343][T27551] openvswitch: netlink: Message has 4 unknown bytes. [ 558.628358][T27551] ipvlan0: left allmulticast mode [ 558.628382][T27551] veth0_vlan: left allmulticast mode [ 558.671314][T27551] team0: Device ipvlan0 failed to register rx_handler [ 558.786229][T27290] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.800833][T26007] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.800942][T26007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.832544][T27560] sctp: [Deprecated]: syz.3.5650 (pid 27560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.832544][T27560] Use struct sctp_sack_info instead [ 558.882825][T26007] IPVS: starting estimator thread 0... [ 558.884707][T27556] bond7: Removing last ns target with arp_interval on [ 558.955067][T26007] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.955234][T26007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.970861][T27561] IPVS: using max 29 ests per chain, 69600 per kthread [ 559.141532][T27572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.167650][T27572] macvlan1: entered promiscuous mode [ 559.167672][T27572] macvlan1: entered allmulticast mode [ 559.169672][T27572] bond5: entered allmulticast mode [ 559.169752][T27572] bond5: entered promiscuous mode [ 559.173199][T27572] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 559.212869][T27572] team0: Port device macvlan1 added [ 559.495504][T27588] __nla_validate_parse: 67 callbacks suppressed [ 559.495523][T27588] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5657'. [ 559.685367][T27291] Bluetooth: hci4: command tx timeout [ 559.809561][T27601] pim6reg: entered allmulticast mode [ 560.003973][T27610] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5663'. [ 560.113700][T27608] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 560.135560][T27608] bond8 (unregistering): Released all slaves [ 560.250200][T27612] batman_adv: batadv0: Adding interface: syz_tun [ 560.250219][T27612] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.250249][T27612] batman_adv: batadv0: Interface activated: syz_tun [ 560.309837][T27608] netlink: 'syz.4.5662': attribute type 5 has an invalid length. [ 560.314207][T27606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.399839][T27624] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 560.462638][T27631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.519111][T27290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.563757][T27290] veth0_vlan: entered promiscuous mode [ 560.580505][T27290] veth1_vlan: entered promiscuous mode [ 560.627873][T27290] veth0_macvtap: entered promiscuous mode [ 560.633986][T27290] veth1_macvtap: entered promiscuous mode [ 560.661736][T27290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.681570][T27290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.698814][T26007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.698852][T26007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.716485][T26011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.716602][T26011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.855079][T26011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.857277][T26011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.941165][T26011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.941185][T26011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.964099][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5672'. [ 561.272998][T26006] IPVS: starting estimator thread 0... [ 561.357150][T27661] IPVS: using max 29 ests per chain, 69600 per kthread [ 561.470545][T27668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5679'. [ 561.538230][T27668] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.578007][T27668] bridge_slave_0 (unregistering): left allmulticast mode [ 561.578035][T27668] bridge_slave_0 (unregistering): left promiscuous mode [ 561.578117][T27668] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.634214][T27670] syzkaller0: left promiscuous mode [ 561.634239][T27670] syzkaller0: left allmulticast mode [ 561.634283][T27674] netlink: 'syz.0.5680': attribute type 1 has an invalid length. [ 561.784431][T27674] bond6: (slave gretap2): making interface the new active one [ 561.793397][T27674] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 561.826495][T27677] macvlan3: entered promiscuous mode [ 561.826515][T27677] macvlan3: entered allmulticast mode [ 561.827164][T27677] bond6: entered promiscuous mode [ 561.827179][T27677] gretap2: entered promiscuous mode [ 561.834883][T27677] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 561.840970][T27677] bond6: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 561.841137][T27677] bond6: left promiscuous mode [ 561.841151][T27677] gretap2: left promiscuous mode [ 562.146948][T27693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5683'. [ 562.316981][T27705] netlink: 'syz.2.5687': attribute type 29 has an invalid length. [ 562.317004][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5687'. [ 562.317462][T27705] netlink: 'syz.2.5687': attribute type 29 has an invalid length. [ 562.317478][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5687'. [ 562.357536][T27705] Bluetooth: hci0: unsupported parameter 5135 [ 562.357558][T27705] Bluetooth: hci0: unsupported parameter 8192 [ 562.357570][T27705] Bluetooth: hci0: unsupported parameter 5135 [ 562.357581][T27705] Bluetooth: hci0: unsupported parameter 8192 [ 562.384395][T27707] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 562.384931][T27707] team0: Device ipvlan3 is already an upper device of the team interface [ 562.444614][T27713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5688'. [ 562.477984][T27709] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 562.478586][T27709] team0: Device ipvlan3 is already an upper device of the team interface [ 562.570449][T27719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5691'. [ 562.585708][T27719] netlink: 'syz.0.5691': attribute type 4 has an invalid length. [ 562.585996][T27720] netlink: 'syz.0.5691': attribute type 4 has an invalid length. [ 562.618126][T27719] openvswitch: netlink: Key type 31 is not supported [ 562.638070][T27723] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5689'. [ 563.082680][T27751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.639558][T27780] xt_cgroup: path and classid specified [ 563.643705][T27780] Bluetooth: hci0: unsupported parameter 5135 [ 563.643724][T27780] Bluetooth: hci0: unsupported parameter 8192 [ 563.643736][T27780] Bluetooth: hci0: unsupported parameter 5135 [ 563.643747][T27780] Bluetooth: hci0: unsupported parameter 8192 [ 563.653568][T27780] netlink: 'syz.4.5709': attribute type 1 has an invalid length. [ 563.714802][T27780] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.783168][T27786] bond8: (slave gretap2): making interface the new active one [ 563.793962][T27786] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 563.976549][T27797] tipc: Started in network mode [ 563.976580][T27797] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 563.976823][T27797] tipc: Enabled bearer , priority 10 [ 564.884771][T27851] __nla_validate_parse: 1 callbacks suppressed [ 564.884790][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5728'. [ 564.989261][T11547] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 564.990333][T27851] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 565.104889][T11547] tipc: Node number set to 10070698 [ 565.421851][T27867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5734'. [ 565.421943][T27867] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 565.626383][T27881] netlink: 'syz.4.5737': attribute type 1 has an invalid length. [ 565.758890][T27881] syzkaller0: entered promiscuous mode [ 565.758928][T27881] syzkaller0: entered allmulticast mode [ 565.858624][T27888] netlink: 'syz.0.5741': attribute type 1 has an invalid length. [ 565.982143][T27895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5742'. [ 566.054599][T27898] x_tables: duplicate underflow at hook 3 [ 566.126077][T27900] netlink: 'syz.0.5745': attribute type 28 has an invalid length. [ 566.126099][T27900] netlink: 'syz.0.5745': attribute type 3 has an invalid length. [ 566.126110][T27900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5745'. [ 566.292355][T27915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5751'. [ 566.316805][T27919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5751'. [ 566.427339][T27934] ip6t_rt: too many addresses specified [ 566.442792][T27928] batman_adv: batadv0: Adding interface: ipvlan3 [ 566.442810][T27928] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.442837][T27928] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 566.621409][T27936] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 566.624514][T27936] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.712556][T27940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5758'. [ 566.936268][T27967] xt_bpf: check failed: parse error [ 567.054254][T27969] netlink: 'syz.0.5766': attribute type 1 has an invalid length. [ 568.257701][T28030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5776'. [ 568.257742][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5776'. [ 568.508694][T28038] IPVS: Unknown mcast interface: macvlan1 [ 568.867034][T28017] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 568.975403][T28056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5783'. [ 569.527612][T28079] tipc: Invalid UDP bearer configuration [ 569.527657][T28079] tipc: Enabling of bearer rejected, failed to enable media [ 569.649313][T28080] syzkaller0: entered promiscuous mode [ 569.649337][T28080] syzkaller0: entered allmulticast mode [ 570.632468][ T30] audit: type=1107 audit(1793096770.577:48): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 572.758447][T28100] __nla_validate_parse: 1 callbacks suppressed [ 572.758464][T28100] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5795'. [ 572.758496][T28100] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5795'. [ 572.923635][T28124] netlink: 'syz.4.5801': attribute type 1 has an invalid length. [ 572.994103][T28124] 8021q: adding VLAN 0 to HW filter on device bond9 [ 573.034592][T28130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5801'. [ 573.251059][T28149] netlink: 'syz.2.5806': attribute type 3 has an invalid length. [ 573.337228][T28146] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5805'. [ 573.474201][T28154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5807'. [ 573.503489][T28154] veth12: entered promiscuous mode [ 573.503513][T28154] veth12: entered allmulticast mode [ 573.557028][T28157] lo: entered promiscuous mode [ 573.573844][T28157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.602872][T28159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.693958][T28168] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5811'. [ 573.698733][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698754][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698766][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698778][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698789][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698800][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698811][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698822][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698834][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698844][T28160] tc action pedit unable to extract header offset for header type (0x5) [ 573.698867][T28160] 0: reclassify loop, rule prio 0, protocol 800 [ 573.747663][T28160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5809'. [ 573.852202][T28173] vlan2: entered promiscuous mode [ 573.852461][T28173] vlan2: entered allmulticast mode [ 574.091888][T28185] veth1_macvtap: left promiscuous mode [ 574.091916][T28185] macsec0: entered allmulticast mode [ 574.109330][T28185] veth1_macvtap: entered promiscuous mode [ 574.109351][T28185] veth1_macvtap: entered allmulticast mode [ 574.109510][T28185] macsec0: left allmulticast mode [ 574.109522][T28185] veth1_macvtap: left allmulticast mode [ 574.115047][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5815'. [ 574.115076][T28185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5815'. [ 574.176127][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5815'. [ 574.189202][T28190] team0: entered promiscuous mode [ 574.189222][T28190] team_slave_0: entered promiscuous mode [ 574.189422][T28190] team_slave_1: entered promiscuous mode [ 574.189583][T28190] dummy0: entered promiscuous mode [ 574.195086][T28190] team0: Cannot enslave team device to itself [ 574.205595][T26006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.205643][T26006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.205770][T26006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.205803][T26006] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.318233][T28194] netlink: 'syz.2.5818': attribute type 3 has an invalid length. [ 574.342978][T28195] netlink: 'syz.2.5818': attribute type 3 has an invalid length. [ 574.539943][T28212] netlink: 'syz.2.5821': attribute type 1 has an invalid length. [ 574.540163][T28212] block nbd296: server does not support multiple connections per device. [ 574.540489][T28212] block nbd296: shutting down sockets [ 574.922049][T28226] netlink: 'syz.3.5826': attribute type 9 has an invalid length. [ 574.955601][T28226] netlink: 'syz.3.5826': attribute type 9 has an invalid length. [ 574.967158][T26007] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.967245][T26007] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.967284][T26007] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.983372][T26007] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.616115][T28270] ip_tables: iptables: counters copy to user failed while replacing table [ 575.820968][T28258] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 576.081695][T28284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 576.269181][T28288] netlink: 'syz.1.5843': attribute type 5 has an invalid length. [ 576.576264][T28305] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 576.857598][T28323] sctp: [Deprecated]: syz.1.5855 (pid 28323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.857598][T28323] Use struct sctp_sack_info instead [ 576.952409][T28326] netlink: 'syz.0.5854': attribute type 12 has an invalid length. [ 576.993898][T28331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.082983][T28336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 577.760305][T28368] syzkaller1: entered promiscuous mode [ 577.760325][T28368] syzkaller1: entered allmulticast mode [ 577.779333][T28371] netlink: 'syz.0.5870': attribute type 1 has an invalid length. [ 577.806067][T28371] __nla_validate_parse: 23 callbacks suppressed [ 577.806090][T28371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5870'. [ 577.928910][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5871'. [ 577.929011][T28374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5871'. [ 578.184833][T27291] Bluetooth: hci4: unexpected event 0x03 length: 0 < 11 [ 578.195814][T28385] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5874'. [ 578.204801][T28385] gretap0: entered promiscuous mode [ 578.223388][T28386] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5874'. [ 578.223485][T28386] 0ªî{X¹¦: renamed from gretap0 [ 578.232022][T28386] 0ªî{X¹¦: left promiscuous mode [ 578.232041][T28386] 0ªî{X¹¦: entered allmulticast mode [ 578.242942][T28386] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 578.914137][T28398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5876'. [ 578.934263][T28406] atomic_op ffff8880765051e0 conn xmit_atomic 0000000000000000 [ 578.998565][T28409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5881'. [ 579.052371][T28411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5882'. [ 579.053380][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5882'. [ 579.307218][T28418] bond7: option downdelay: invalid value (18446744073709551615) [ 579.307242][T28418] bond7: option downdelay: allowed values 0 - 2147483647 [ 579.313079][T28418] bond7 (unregistering): Released all slaves [ 579.325960][T28426] netlink: 'syz.0.5883': attribute type 1 has an invalid length. [ 579.522508][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.537237][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.545000][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.553964][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.554971][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.752904][T28449] sch_tbf: peakrate 9 is lower than or equals to rate 2048 ! [ 579.908449][T28435] bond1: invalid ARP target 0.0.0.0 specified for addition [ 579.908477][T28435] bond1: option arp_ip_target: invalid value (0) [ 579.919120][T28435] bond1 (unregistering): Released all slaves [ 580.436713][T28431] rxe_eth0 speed is unknown, defaulting to 1000 [ 580.770592][T28506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5902'. [ 580.951652][T28431] wg1 speed is unknown, defaulting to 1000 [ 581.247939][T28532] xt_hashlimit: size too large, truncated to 1048576 [ 581.250839][T28534] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 581.549973][T28540] netlink: 'syz.4.5912': attribute type 1 has an invalid length. [ 581.599935][T28540] bond10: entered promiscuous mode [ 581.602112][T28540] 8021q: adding VLAN 0 to HW filter on device bond10 [ 581.606288][T27291] Bluetooth: hci5: command tx timeout [ 581.658349][T28544] vlan4: entered allmulticast mode [ 581.658370][T28544] bond10: entered allmulticast mode [ 581.780501][T28559] netlink: 'syz.4.5912': attribute type 1 has an invalid length. [ 581.783600][T28540] bond10: (slave bridge30): making interface the new active one [ 581.783622][T28540] bridge30: entered promiscuous mode [ 581.783944][T28540] bridge30: entered allmulticast mode [ 581.815356][T28540] bond10: (slave bridge30): Enslaving as an active interface with an up link [ 581.947671][T28544] bond10: (slave bridge31): Enslaving as a backup interface with an up link [ 582.034711][T28568] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 582.050693][T28567] geneve3: entered promiscuous mode [ 582.074223][T28568] netlink: 'syz.3.5917': attribute type 1 has an invalid length. [ 582.158513][T28431] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.161643][T28431] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.161849][T28431] bridge_slave_0: entered allmulticast mode [ 582.163848][T28431] bridge_slave_0: entered promiscuous mode [ 582.206409][T28431] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.206513][T28431] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.206658][T28431] bridge_slave_1: entered allmulticast mode [ 582.210504][T28431] bridge_slave_1: entered promiscuous mode [ 582.280214][T28431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.295937][T28431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.307897][T28587] x_tables: duplicate underflow at hook 1 [ 582.321888][T28586] openvswitch: netlink: IP tunnel dst address not specified [ 582.350533][T28431] team0: Port device team_slave_0 added [ 582.353730][T28431] team0: Port device team_slave_1 added [ 582.396098][T28431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.396115][T28431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.396139][T28431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.398132][T28431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.398146][T28431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.398169][T28431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.540287][T28431] hsr_slave_0: entered promiscuous mode [ 582.541431][T28431] hsr_slave_1: entered promiscuous mode [ 582.542835][T28431] debugfs: 'hsr0' already exists in 'hsr' [ 582.542854][T28431] Cannot create hsr debugfs directory [ 582.900307][T28605] ip6gre3: entered promiscuous mode [ 583.026942][T28431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.026977][T28431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.236817][T28431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.236851][T28431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.280337][T28625] __nla_validate_parse: 3 callbacks suppressed [ 583.280356][T28625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5930'. [ 583.418978][T28431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.419037][T28431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.471773][T28636] block nbd0: not configured, cannot reconfigure [ 583.509335][T28634] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 583.542304][T28634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5931'. [ 583.562113][T28634] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5931'. [ 583.562135][T28634] nbd: must specify at least one socket [ 583.688049][T27291] Bluetooth: hci5: command tx timeout [ 583.754204][T28652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5933'. [ 583.757925][T28649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5934'. [ 583.804774][T28652] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5933'. [ 583.971338][T28649] syzkaller0: entered promiscuous mode [ 583.971362][T28649] syzkaller0: entered allmulticast mode [ 584.066275][T28665] sctp: [Deprecated]: syz.3.5937 (pid 28665) Use of int in maxseg socket option. [ 584.066275][T28665] Use struct sctp_assoc_value instead [ 584.066516][T28665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5937'. [ 584.232476][T28675] netlink: 'syz.0.5938': attribute type 3 has an invalid length. [ 585.775675][T27291] Bluetooth: hci5: command tx timeout [ 586.006890][T28431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.034313][T28431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.040574][T28431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 586.060787][T28431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.061932][T28431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 586.089056][T28431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.091558][T28431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 586.115817][T28431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.124736][T28679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5941'. [ 586.124757][T28679] openvswitch: netlink: Flow key attr not present in new flow. [ 586.153920][T28682] netlink: 'syz.0.5939': attribute type 5 has an invalid length. [ 586.336793][T28699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5943'. [ 586.389767][T28699] netlink: 'syz.2.5943': attribute type 1 has an invalid length. [ 586.438043][T28699] netlink: 'syz.2.5943': attribute type 10 has an invalid length. [ 586.438063][T28699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5943'. [ 586.438574][T28699] dummy0: entered promiscuous mode [ 586.590194][T28710] 8021q: adding VLAN 0 to HW filter on device bond7 [ 586.614454][T28431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.652243][T28431] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.667657][T26012] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.667790][T26012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.681066][T26010] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.681168][T26010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.772551][T28720] Unsupported ieee802154 address type: 0 [ 587.135297][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.138835][T28737] netlink: 'syz.2.5955': attribute type 21 has an invalid length. [ 587.185024][T28737] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 587.202682][T28737] bond1 (unregistering): Released all slaves [ 587.534420][T28756] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 587.534496][T28756] gretap3: entered promiscuous mode [ 587.534510][T28756] gretap3: entered allmulticast mode [ 587.789122][T28431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.847575][T27291] Bluetooth: hci5: command tx timeout [ 587.906756][T28431] veth0_vlan: entered promiscuous mode [ 587.939585][T28431] veth1_vlan: entered promiscuous mode [ 588.009233][T28431] veth0_macvtap: entered promiscuous mode [ 588.030702][T28431] veth1_macvtap: entered promiscuous mode [ 588.046853][T28791] netlink: 'syz.3.5967': attribute type 1 has an invalid length. [ 588.078198][T28791] 8021q: adding VLAN 0 to HW filter on device bond10 [ 588.127373][T28791] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 588.158430][T28431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.227240][T28431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.315917][T26006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.371169][T26010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.371759][T26010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.371795][T26010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.564088][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.564108][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.637480][T26010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.637501][T26010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.820560][T28822] siw: device registration error -23 [ 588.917787][T28827] __nla_validate_parse: 5 callbacks suppressed [ 588.917807][T28827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5975'. [ 589.057493][T28832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5977'. [ 589.089686][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5978'. [ 589.089711][T28833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5978'. [ 589.096723][T28833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5978'. [ 589.237325][T28837] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5885'. [ 589.238356][T28838] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5885'. [ 589.250044][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5979'. [ 589.254863][T28846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.362247][T28856] geneve2: entered allmulticast mode [ 589.676490][T27291] Bluetooth: hci4: unexpected cc 0x100c length: 5 > 3 [ 589.764239][T28880] nbd0: detected capacity change from 0 to 274877906944 [ 589.862706][T28884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5992'. [ 589.867735][T28885] siw: device registration error -23 [ 590.322500][T27291] block nbd0: Receive control failed (result -104) [ 590.627287][T28934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6001'. [ 590.732210][T28933] netlink: 'syz.3.6003': attribute type 7 has an invalid length. [ 590.732231][T28933] netlink: 'syz.3.6003': attribute type 8 has an invalid length. [ 591.114871][T28960] xt_connbytes: Forcing CT accounting to be enabled [ 591.122433][T28960] Cannot find set identified by id 0 to match [ 591.198389][T28963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.228796][T28967] Cannot find set identified by id 0 to match [ 591.427280][T28980] sctp: [Deprecated]: syz.4.6015 (pid 28980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.427280][T28980] Use struct sctp_sack_info instead [ 591.588082][T28994] sctp: [Deprecated]: syz.4.6020 (pid 28994) Use of int in maxseg socket option. [ 591.588082][T28994] Use struct sctp_assoc_value instead [ 591.981740][T29014] veth1_macvtap: left promiscuous mode [ 591.981767][T29014] macsec0: entered allmulticast mode [ 592.117972][T29012] veth1_macvtap: entered promiscuous mode [ 592.117996][T29012] veth1_macvtap: entered allmulticast mode [ 592.119368][T29012] macsec0: left allmulticast mode [ 592.119386][T29012] veth1_macvtap: left allmulticast mode [ 592.421131][T29043] netlink: 'syz.3.6034': attribute type 1 has an invalid length. [ 592.733896][T29058] netlink: 'syz.2.6040': attribute type 4 has an invalid length. [ 592.766722][T29056] netlink: 'syz.0.6039': attribute type 3 has an invalid length. [ 593.502905][T29110] syzkaller0: left promiscuous mode [ 593.503028][T29110] syzkaller0: left allmulticast mode [ 593.876803][T29141] netlink: 'syz.0.6060': attribute type 11 has an invalid length. [ 593.878241][T29141] nbd: socks must be embedded in a SOCK_ITEM attr [ 593.908620][T29143] nbd: socks must be embedded in a SOCK_ITEM attr [ 593.909043][T29142] netlink: 'syz.0.6060': attribute type 11 has an invalid length. [ 594.192706][T29160] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 594.267333][T29167] __nla_validate_parse: 13 callbacks suppressed [ 594.267362][T29167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6067'. [ 594.271681][T29164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6065'. [ 594.358561][T29171] netlink: 'syz.3.6069': attribute type 1 has an invalid length. [ 594.358582][T29171] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6069'. [ 594.361925][T29172] netlink: 'syz.3.6069': attribute type 1 has an invalid length. [ 594.361943][T29172] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6069'. [ 594.441792][T29171] Bluetooth: hci0: unsupported parameter 5134 [ 594.441812][T29171] Bluetooth: hci0: unsupported parameter 8192 [ 594.441823][T29171] Bluetooth: hci0: unsupported parameter 5134 [ 594.441834][T29171] Bluetooth: hci0: unsupported parameter 8192 [ 594.443597][T29172] Bluetooth: hci0: unsupported parameter 5134 [ 594.443615][T29172] Bluetooth: hci0: unsupported parameter 8192 [ 594.443625][T29172] Bluetooth: hci0: unsupported parameter 5134 [ 594.443635][T29172] Bluetooth: hci0: unsupported parameter 8192 [ 594.552302][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552349][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552370][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552389][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552407][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552426][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552468][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552488][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552506][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552524][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.552543][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554583][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554606][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554626][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554644][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554663][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554682][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554700][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554719][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554738][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554756][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554775][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554793][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554811][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554829][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554848][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554866][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554884][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554903][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554922][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554940][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554958][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.554977][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584268][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584295][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584316][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584344][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584364][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584384][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584404][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584450][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584471][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584513][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584533][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584554][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584574][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584594][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584614][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584634][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584654][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584673][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584693][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584714][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584734][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584753][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584773][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584793][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584812][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584833][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584853][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584872][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584892][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584912][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584932][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.584952][T29184] IPVS: Unknown mcast interface: macvlan1 [ 594.710349][T29183] syzkaller0: entered promiscuous mode [ 594.710371][T29183] syzkaller0: entered allmulticast mode [ 595.235943][T29204] tc_dump_action: action bad kind [ 595.526263][T29223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 595.598982][T29194] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 596.000831][T29240] syzkaller0: entered promiscuous mode [ 596.000854][T29240] syzkaller0: entered allmulticast mode [ 596.402936][T29248] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 596.466851][T29254] Cannot find set identified by id 0 to match [ 596.505415][T29254] netlink: 'syz.1.6092': attribute type 2 has an invalid length. [ 596.506998][T29254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6092'. [ 596.507040][T29254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6092'. [ 596.800381][T29270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6098'. [ 596.800405][T29270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6098'. [ 596.800436][T29270] netlink: 'syz.3.6098': attribute type 4 has an invalid length. [ 596.817605][T29272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6100'. [ 597.916665][T29343] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 599.441013][T29359] netlink: 'syz.1.6114': attribute type 39 has an invalid length. [ 600.227941][T29299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.488911][T29371] syzkaller1: entered promiscuous mode [ 600.488932][T29371] syzkaller1: entered allmulticast mode [ 600.552736][T29370] __nla_validate_parse: 3 callbacks suppressed [ 600.552755][T29370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6118'. [ 600.783506][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.794063][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.797722][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.813420][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.814135][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.162722][T26006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.162755][T26006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.177782][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6125'. [ 601.373994][T26006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.374027][T26006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.412805][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6125'. [ 601.436335][T29408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6129'. [ 601.523533][T29408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.581475][T26006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.581506][T26006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.655373][T29417] netlink: 'syz.1.6133': attribute type 5 has an invalid length. [ 601.689510][T29414] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6131'. [ 601.734550][T29381] rxe_eth0 speed is unknown, defaulting to 1000 [ 601.816744][T26006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.816785][T26006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.824516][T29424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6132'. [ 602.234052][T29381] wg1 speed is unknown, defaulting to 1000 [ 602.507405][T29451] netlink: 'syz.2.6140': attribute type 1 has an invalid length. [ 602.542619][T29426] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6135'. [ 602.879044][T26006] bond6 (unregistering): (slave gretap2): Releasing active interface [ 602.887958][T27291] Bluetooth: hci1: command tx timeout [ 603.106717][T26006] bond1 (unregistering): Released all slaves [ 603.133711][T29469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.140425][T26006] bond2 (unregistering): Released all slaves [ 603.159055][T26006] bond3 (unregistering): Released all slaves [ 603.185742][T26006] bond0 (unregistering): Released all slaves [ 603.198816][T26006] bond4 (unregistering): Released all slaves [ 603.214274][T26006] bond5 (unregistering): left allmulticast mode [ 603.214290][T26006] bond5 (unregistering): left promiscuous mode [ 603.229090][T26006] team0: Port device macvlan1 removed [ 603.243511][T26006] bond5 (unregistering): Released all slaves [ 603.254787][T26006] bond6 (unregistering): Released all slaves [ 603.266759][T26006] bond7 (unregistering): Released all slaves [ 603.292336][T29448] bridge1: entered allmulticast mode [ 603.418356][T29453] bond1: (slave gretap0): making interface the new active one [ 603.433530][T29453] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 603.467163][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 603.496627][T26006] : left promiscuous mode [ 603.653153][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6143'. [ 603.679917][T29481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6143'. [ 603.996469][T29498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6147'. [ 604.259285][ T30] audit: type=1804 audit(1793096804.207:49): pid=29506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6150" name="/newroot/597/cgroup.controllers" dev="tmpfs" ino=3066 res=1 errno=0 [ 604.259336][ T30] audit: type=1800 audit(1793096804.207:50): pid=29506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6150" name="cgroup.controllers" dev="tmpfs" ino=3066 res=0 errno=-22 [ 604.446784][T29513] syzkaller0: left promiscuous mode [ 604.446829][T29513] syzkaller0: left allmulticast mode [ 604.777582][T29534] openvswitch: netlink: Duplicate or invalid key (type 0). [ 604.777617][T29534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.970342][T27291] Bluetooth: hci1: command tx timeout [ 605.088253][T29543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.204017][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 605.402178][T29557] xt_cgroup: invalid path, errno=-2 [ 605.498836][T29560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.602377][T29564] __nla_validate_parse: 2 callbacks suppressed [ 605.602395][T29564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6160'. [ 606.070675][T29381] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.070842][T29381] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.089129][T29381] bridge_slave_0: entered allmulticast mode [ 606.121757][T29381] bridge_slave_0: entered promiscuous mode [ 606.129392][T29381] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.132944][T29381] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.133097][T29381] bridge_slave_1: entered allmulticast mode [ 606.163959][T29381] bridge_slave_1: entered promiscuous mode [ 606.242743][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6166'. [ 606.301323][T29381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.304218][T29381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.363267][T26006] veth1_macvtap: left promiscuous mode [ 606.363315][T26006] veth0_macvtap: left allmulticast mode [ 606.363332][T26006] veth0_macvtap: left promiscuous mode [ 606.662611][T29614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6171'. [ 606.783528][T26006] team0 (unregistering): Port device team_slave_1 removed [ 606.808798][T26006] team0 (unregistering): Port device team_slave_0 removed [ 607.011720][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 607.023315][T29381] team0: Port device team_slave_0 added [ 607.031722][T29381] team0: Port device team_slave_1 added [ 607.055744][T27291] Bluetooth: hci1: command tx timeout [ 607.092358][T29381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.092375][T29381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.092396][T29381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.100797][T29381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.100815][T29381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.100839][T29381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.290329][T29381] hsr_slave_0: entered promiscuous mode [ 607.301919][T29381] hsr_slave_1: entered promiscuous mode [ 607.302658][T29381] debugfs: 'hsr0' already exists in 'hsr' [ 607.302676][T29381] Cannot create hsr debugfs directory [ 607.429558][T26006] IPVS: stop unused estimator thread 0... [ 607.487439][T29627] xt_TCPMSS: Only works on TCP SYN packets [ 607.511114][T29627] netlink: 'syz.2.6175': attribute type 10 has an invalid length. [ 607.524290][T29627] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 607.699694][T29646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.870502][T29656] netlink: 'syz.1.6180': attribute type 1 has an invalid length. [ 607.957727][T29659] vlan0: entered promiscuous mode [ 607.987550][T29654] bond2: (slave bridge2): making interface the new active one [ 607.989442][T29654] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 608.738867][T29694] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 608.772287][T29692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6190'. [ 608.772311][T29692] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6190'. [ 608.920583][T29704] netlink: ct family unspecified [ 609.023529][T29712] Bluetooth: MGMT ver 1.23 [ 609.043808][T29701] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 609.058145][T29701] bond2 (unregistering): Released all slaves [ 609.126577][T27291] Bluetooth: hci1: command tx timeout [ 609.651302][T26011] bond1 (unregistering): Released all slaves [ 609.669197][T26011] bond2 (unregistering): Released all slaves [ 609.698888][T26011] bond3 (unregistering): Released all slaves [ 609.737486][T26011] bond0 (unregistering): Released all slaves [ 609.757714][T26011] bond4 (unregistering): Released all slaves [ 609.773349][T26011] bond5 (unregistering): Released all slaves [ 609.817790][T26011] bond6 (unregistering): Released all slaves [ 609.838592][T26011] bond7 (unregistering): Released all slaves [ 609.964550][T29381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.000141][T29381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.023395][T29381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.042799][T29381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.043645][T29381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 610.080008][T29381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.080927][T29381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.106455][T29381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.147845][T26011] tipc: Left network mode [ 610.321283][T29381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.342665][T29754] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.406546][T29381] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.440363][T26012] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.440464][T26012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.443993][T26012] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.444115][T26012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.500532][T26011] IPVS: stopping backup sync thread 9475 ... [ 610.545272][T29765] netlink: 'syz.3.6200': attribute type 1 has an invalid length. [ 610.695762][T29765] bond11: option mode: invalid value (7) [ 610.729440][T29765] bond11 (unregistering): Released all slaves [ 610.841348][T29768] tipc: Resetting bearer [ 611.043314][T29781] 8021q: VLANs not supported on sit0 [ 611.068883][T29774] syzkaller0: entered promiscuous mode [ 611.068908][T29774] syzkaller0: entered allmulticast mode [ 611.627847][T29774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.693608][T29824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6208'. [ 611.717098][T29824] bond11: entered promiscuous mode [ 611.717648][T29824] 8021q: adding VLAN 0 to HW filter on device bond11 [ 611.984670][T29774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.067907][T29824] 8021q: adding VLAN 0 to HW filter on device bond11 [ 612.068313][T29824] bond11: (slave sit2): The slave device specified does not support setting the MAC address [ 612.069206][T29824] bond11: (slave sit2): Error -95 calling set_mac_address [ 612.304242][T29774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.321691][T29854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'. [ 612.683704][T29774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.838028][T29858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6213'. [ 613.106711][T29884] netlink: 'syz.3.6218': attribute type 11 has an invalid length. [ 613.106735][T29884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 613.106966][T29884] netlink: 'syz.3.6218': attribute type 11 has an invalid length. [ 613.106982][T29884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6218'. [ 613.414445][T29900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6219'. [ 613.436518][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6221'. [ 613.436544][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6221'. [ 613.501687][T29904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6219'. [ 613.693084][T29381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.007332][T29930] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6227'. [ 614.639728][T29939] tipc: Enabled bearer , priority 10 [ 614.804286][T29381] veth0_vlan: entered promiscuous mode [ 614.846465][T29381] veth1_vlan: entered promiscuous mode [ 614.873007][T27291] Bluetooth: hci4: connection err: -111 [ 614.899556][T29967] netlink: 'syz.4.6235': attribute type 62 has an invalid length. [ 614.933244][T29967] netlink: 'syz.4.6235': attribute type 1 has an invalid length. [ 614.963907][T29381] veth0_macvtap: entered promiscuous mode [ 615.146342][T29967] 8021q: adding VLAN 0 to HW filter on device bond12 [ 615.146782][T29971] veth0_to_bond: left promiscuous mode [ 615.153491][T29971] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 615.182099][T29381] veth1_macvtap: entered promiscuous mode [ 615.244699][T29381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.267084][T29381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.316259][T10205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.318043][T26008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.415580][T26006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.416066][T26006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.418836][T26011] IPVS: stop unused estimator thread 0... [ 615.702494][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.702517][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.883455][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.883483][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.218557][T30018] netlink: 'syz.2.6242': attribute type 4 has an invalid length. [ 616.667894][T30051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.883090][T30063] __nla_validate_parse: 4 callbacks suppressed [ 616.883111][T30063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6252'. [ 617.093467][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.094295][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.103117][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.116066][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.116639][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.177173][T30072] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6255'. [ 617.200543][T30062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6252'. [ 617.200570][T30062] nbd: device at index 64 is going down [ 617.484581][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.484906][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.507864][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.508187][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.515599][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.515917][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.516220][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.516499][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.516775][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.529794][T30086] ip_tables: iptables: counters copy to user failed while replacing table [ 617.554400][T28808] udevd[28808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 617.581325][T28808] udevd[28808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 618.269797][T30123] netlink: 'syz.2.6261': attribute type 1 has an invalid length. [ 618.481183][T30144] netlink: 'syz.2.6267': attribute type 13 has an invalid length. [ 618.484646][T30144] netlink: 'syz.2.6267': attribute type 1 has an invalid length. [ 618.518561][T30144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6267'. [ 618.592376][T30075] rxe_eth0 speed is unknown, defaulting to 1000 [ 619.084098][T30075] wg1 speed is unknown, defaulting to 1000 [ 619.529052][T30186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6277'. [ 619.529095][T30186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6277'. [ 619.537254][T30186] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6277'. [ 619.565951][T30180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6275'. [ 619.679552][T30194] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6279'. [ 619.679972][T30194] netlink: 560 bytes leftover after parsing attributes in process `syz.1.6279'. [ 619.970055][T30205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.137565][T30208] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.138318][T30208] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.370310][T30217] netlink: 'syz.1.6283': attribute type 10 has an invalid length. [ 620.400864][T30208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.413185][T30208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.427442][ T2049] block nbd0: Possible stuck request ffff88808123e000: control (read@0,4096B). Runtime 30 seconds [ 620.633656][T30217] geneve2: entered promiscuous mode [ 620.633678][T30217] geneve2: entered allmulticast mode [ 620.845981][T10205] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.846057][T10205] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.846090][T10205] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.846120][T10205] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.959144][T30232] No such timeout policy "syz1" [ 621.003718][T30232] No such timeout policy "syz1" [ 621.042614][T30232] No such timeout policy "syz1" [ 621.051071][T30232] No such timeout policy "syz1" [ 621.057336][T30232] No such timeout policy "syz1" [ 621.063374][T30232] No such timeout policy "syz1" [ 621.070919][T30232] No such timeout policy "syz1" [ 621.077187][T30232] No such timeout policy "syz1" [ 621.083634][T30232] No such timeout policy "syz1" [ 621.177696][T30232] No such timeout policy "syz1" [ 621.710577][T30075] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.710660][T30075] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.710779][T30075] bridge_slave_0: entered allmulticast mode [ 621.714133][T30075] bridge_slave_0: entered promiscuous mode [ 621.773601][T30075] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.773712][T30075] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.773863][T30075] bridge_slave_1: entered allmulticast mode [ 621.801314][T30075] bridge_slave_1: entered promiscuous mode [ 621.896875][T30075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.900185][T30075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.043653][T30075] team0: Port device team_slave_0 added [ 622.079513][T30075] team0: Port device team_slave_1 added [ 622.221272][T30075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.221289][T30075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.221314][T30075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.225295][T30075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.225310][T30075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.225330][T30075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.393850][T30075] hsr_slave_0: entered promiscuous mode [ 622.408061][T30075] hsr_slave_1: entered promiscuous mode [ 622.410096][T30075] debugfs: 'hsr0' already exists in 'hsr' [ 622.410116][T30075] Cannot create hsr debugfs directory [ 622.646750][T30360] __nla_validate_parse: 5 callbacks suppressed [ 622.646768][T30360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6299'. [ 622.996541][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6304'. [ 623.022477][T30369] netlink: 'syz.1.6302': attribute type 4 has an invalid length. [ 623.127258][T30376] wireguard0: entered promiscuous mode [ 623.650115][T30075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.650150][T30075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.650175][T30075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.650198][T30075] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 623.676268][T30408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6309'. [ 623.721371][T30397] macsec1: entered promiscuous mode [ 623.774231][T30402] syz_tun: entered allmulticast mode [ 623.795573][T30414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6311'. [ 623.809395][T30400] syz_tun: left allmulticast mode [ 623.970293][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6313'. [ 623.971228][T30075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.971260][T30075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.971284][T30075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.971307][T30075] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 624.029826][T30406] syzkaller1: entered promiscuous mode [ 624.029849][T30406] syzkaller1: entered allmulticast mode [ 624.084775][T30420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6312'. [ 624.196621][T30433] net_ratelimit: 26 callbacks suppressed [ 624.196640][T30433] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 624.200331][T30433] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 624.218055][T30075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.218088][T30075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.218112][T30075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.218136][T30075] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 624.380284][T30075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.380318][T30075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.380343][T30075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 624.380374][T30075] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 624.541037][T30443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6318'. [ 624.605001][T30452] ip_tables: iptables: counters copy to user failed while replacing table [ 624.843270][T30075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 624.858059][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.860937][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6326'. [ 624.861737][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6326'. [ 624.861762][T30075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.862798][T30464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6324'. [ 624.874581][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.875927][T30075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.894612][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.899909][T30075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.920402][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.953571][T30464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.002600][T30464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.079004][T30488] ip_tables: iptables: counters copy to user failed while replacing table [ 625.343930][T30075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.397279][T30075] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.413833][T26021] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.413936][T26021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.448192][T26012] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.448306][T26012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.576049][T27291] Bluetooth: hci5: unexpected event 0x13 length: 321 > 255 [ 625.785978][T30525] bond1: option xmit_hash_policy: invalid value (64) [ 625.821085][T30525] bond1 (unregistering): Released all slaves [ 625.974232][T30533] netlink: 'syz.2.6336': attribute type 4 has an invalid length. [ 625.993699][T30534] netlink: 'syz.2.6336': attribute type 1 has an invalid length. [ 626.033933][T30533] .`: renamed from bond0 (while UP) [ 626.578031][T30574] Bluetooth: MGMT ver 1.23 [ 626.671066][T30075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.730515][T30075] veth0_vlan: entered promiscuous mode [ 626.757877][T30578] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 626.761193][T30075] veth1_vlan: entered promiscuous mode [ 626.763995][T30580] netlink: 'syz.0.6347': attribute type 4 has an invalid length. [ 626.828821][T30075] veth0_macvtap: entered promiscuous mode [ 626.841088][T30075] veth1_macvtap: entered promiscuous mode [ 626.866469][T30075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.881652][T30075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.898261][T26008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.898607][T26012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.898644][T26012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.898676][T26012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.135678][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.135707][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.254298][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.254321][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.454429][T30595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.509656][T30592] syzkaller1: entered promiscuous mode [ 627.509689][T30592] syzkaller1: entered allmulticast mode [ 627.942348][T30614] __nla_validate_parse: 41 callbacks suppressed [ 627.942367][T30614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6355'. [ 627.944569][T30614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6355'. [ 628.052793][T30619] syzkaller0: entered promiscuous mode [ 628.052815][T30619] syzkaller0: entered allmulticast mode [ 628.053961][T30619] ip6t_srh: unknown srh match flags 4000 [ 628.104756][T30619] wg2: entered allmulticast mode [ 628.166571][T30622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6361'. [ 628.271173][T27291] Bluetooth: hci0: SCO packet too small [ 628.271805][T30627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6362'. [ 628.816851][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 628.819608][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 628.820430][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 628.824334][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 628.824929][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 628.982664][T30656] syzkaller1: entered promiscuous mode [ 628.982686][T30656] syzkaller1: entered allmulticast mode [ 629.091762][T18579] batman_adv: batadv0: Interface deactivated: syz_tun [ 629.146108][T26021] IPVS: starting estimator thread 0... [ 629.147442][T30682] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 629.154850][T18579] syz_tun (unregistering): left allmulticast mode [ 629.201649][T18579] batman_adv: batadv0: Removing interface: syz_tun [ 629.245325][T30685] IPVS: using max 35 ests per chain, 84000 per kthread [ 629.281020][T30688] can: request_module (can-proto-3) failed. [ 629.468131][T30703] syzkaller0: left promiscuous mode [ 629.468150][T30703] syzkaller0: left allmulticast mode [ 629.650315][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6385'. [ 629.787228][T30667] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.789619][T30720] SET target dimension over the limit! [ 630.068796][T30732] netlink: 'syz.3.6391': attribute type 1 has an invalid length. [ 630.094356][T30667] wg1 speed is unknown, defaulting to 1000 [ 630.142888][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6391'. [ 630.209873][T30739] rdma_op ffff88802e24b238 conn xmit_rdma 0000000000000000 [ 630.354055][T30745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6395'. [ 630.599308][T30757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6401'. [ 630.599347][T30757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6401'. [ 630.657744][T30755] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6400'. [ 630.966480][T27291] Bluetooth: hci3: command tx timeout [ 630.994812][T30773] x_tables: duplicate underflow at hook 2 [ 631.134847][T30782] xt_TCPMSS: Only works on TCP SYN packets [ 631.430868][T30802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.600680][T30667] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.602415][T30667] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.602552][T30667] bridge_slave_0: entered allmulticast mode [ 631.605472][T30667] bridge_slave_0: entered promiscuous mode [ 631.616311][T30667] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.616600][T30667] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.616726][T30667] bridge_slave_1: entered allmulticast mode [ 631.622319][T30667] bridge_slave_1: entered promiscuous mode [ 631.729572][T30667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.738886][T30667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.919798][T30667] team0: Port device team_slave_0 added [ 632.080072][T30667] team0: Port device team_slave_1 added [ 632.171172][T30831] netlink: 'syz.0.6422': attribute type 21 has an invalid length. [ 633.055646][T27291] Bluetooth: hci3: command tx timeout [ 634.014536][T30667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.014554][T30667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.014577][T30667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.018461][T30840] batman_adv: batadv0: Adding interface: syz_tun [ 634.018476][T30840] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.018518][T30840] batman_adv: batadv0: Interface activated: syz_tun [ 634.019097][T30831] __nla_validate_parse: 2 callbacks suppressed [ 634.019111][T30831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6422'. [ 634.050523][T30845] tipc: Bearer : already 2 bearers with priority 10 [ 634.050542][T30845] tipc: Bearer : trying with adjusted priority [ 634.050618][T30845] tipc: Enabling of bearer rejected, failed to enable media [ 634.059091][T30667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.059106][T30667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.059130][T30667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.308468][T30667] hsr_slave_0: entered promiscuous mode [ 634.314105][T30667] hsr_slave_1: entered promiscuous mode [ 634.314814][T30667] debugfs: 'hsr0' already exists in 'hsr' [ 634.314833][T30667] Cannot create hsr debugfs directory [ 634.326530][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.326724][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.326890][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.327086][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.327250][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.327420][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.327589][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.327753][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.327915][T30850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6430'. [ 634.443976][T30863] netlink: 'syz.3.6428': attribute type 3 has an invalid length. [ 635.126163][T27291] Bluetooth: hci3: command tx timeout [ 635.241942][T26006] bond15 (unregistering): (slave bridge5): Releasing backup interface [ 635.241966][T26006] bond15 (unregistering): (slave bridge5): the permanent HWaddr of slave - be:f5:5b:09:93:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 635.241997][T26006] bond15 (unregistering): (slave bridge6): making interface the new active one [ 635.283215][T26006] bond15 (unregistering): (slave bridge6): Releasing backup interface [ 635.318779][T26006] bond0 (unregistering): (slave bond3): Releasing backup interface [ 635.319976][T26006] bond0 (unregistering): (slave bond4): Releasing backup interface [ 635.321073][T26006] bond0 (unregistering): (slave bond5): Releasing backup interface [ 635.322127][T26006] bond0 (unregistering): (slave bond6): Releasing backup interface [ 635.323302][T26006] bond0 (unregistering): (slave bond7): Releasing backup interface [ 635.324436][T26006] bond0 (unregistering): (slave bond8): Releasing backup interface [ 635.342191][T26006] bond0 (unregistering): (slave bond9): Releasing backup interface [ 635.374928][T26006] bond0 (unregistering): (slave bond10): Releasing backup interface [ 635.391595][T26006] bond0 (unregistering): (slave bond11): Releasing backup interface [ 635.392753][T26006] bond0 (unregistering): (slave bond12): Releasing backup interface [ 635.393850][T26006] bond0 (unregistering): (slave bond13): Releasing backup interface [ 635.394429][T26006] bond0 (unregistering): Released all slaves [ 635.401535][T26006] bond1 (unregistering): Released all slaves [ 635.428374][T26006] bond2 (unregistering): (slave veth5): Releasing backup interface [ 635.447942][T26006] bond2 (unregistering): Released all slaves [ 635.458076][T26006] bond3 (unregistering): Released all slaves [ 635.470088][T26006] bond4 (unregistering): Released all slaves [ 635.480211][T26006] bond5 (unregistering): Released all slaves [ 635.494693][T26006] bond6 (unregistering): Released all slaves [ 635.514894][T26006] bond7 (unregistering): Released all slaves [ 635.532240][T26006] bond8 (unregistering): Released all slaves [ 635.547542][T26006] bond9 (unregistering): Released all slaves [ 635.570287][T26006] bond10 (unregistering): Released all slaves [ 635.584504][T26006] bond11 (unregistering): Released all slaves [ 635.596987][T26006] bond12 (unregistering): Released all slaves [ 635.604441][T26006] bond13 (unregistering): Released all slaves [ 635.620343][T26006] bond14 (unregistering): Released all slaves [ 635.636241][T26006] bond15 (unregistering): Released all slaves [ 635.643832][T26006] bond16 (unregistering): Released all slaves [ 635.673050][T26006] bond17 (unregistering): (slave bond18): Releasing backup interface [ 635.673633][T26006] bond17 (unregistering): Released all slaves [ 635.686511][T26006] bond18 (unregistering): Released all slaves [ 636.038566][T26006] tipc: Left network mode [ 636.267673][T30912] bond3: option min_links: invalid value (18446744073709551614) [ 636.267699][T30912] bond3: option min_links: allowed values 0 - 2147483647 [ 636.271140][T30912] bond3 (unregistering): Released all slaves [ 636.522341][T30924] x_tables: duplicate entry at hook 3 [ 636.669152][T30933] ip6erspan0: entered promiscuous mode [ 636.848492][T30927] bridge_slave_1: left allmulticast mode [ 636.848518][T30927] bridge_slave_1: left promiscuous mode [ 636.848765][T30927] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.857121][T30927] bridge_slave_0: left allmulticast mode [ 636.857144][T30927] bridge_slave_0: left promiscuous mode [ 636.857380][T30927] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.161503][ T30] audit: type=1804 audit(1793096837.107:51): pid=30951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6447" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=555 res=1 errno=0 [ 637.188929][ T30] audit: type=1800 audit(1793096837.107:52): pid=30951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6447" name="cgroup.controllers" dev="tmpfs" ino=555 res=0 errno=-22 [ 637.214008][T27291] Bluetooth: hci3: command tx timeout [ 638.794590][T31011] xt_hl: Unknown TTL match mode: 255 [ 638.854783][T30667] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.863399][T26006] IPVS: stop unused estimator thread 0... [ 638.870575][T31017] netlink: 'syz.3.6465': attribute type 97 has an invalid length. [ 638.870599][T31017] netlink: 'syz.3.6465': attribute type 97 has an invalid length. [ 638.878740][T30667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.879694][T30667] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.901925][T30667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.953457][T30667] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.969197][T30667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.970037][T30667] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.994320][T30667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.107070][T30667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.144022][T30667] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.161020][T26006] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.161118][T26006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.189375][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.189436][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.222653][T31034] netlink: 'syz.2.6470': attribute type 30 has an invalid length. [ 639.260571][T31034] bond0: option arp_missed_max: invalid value (0) [ 639.260593][T31034] bond0: option arp_missed_max: allowed values 1 - 255 [ 639.262495][T31034] bond0 (unregistering): Released all slaves [ 639.288561][T31040] netlink: 'syz.2.6470': attribute type 30 has an invalid length. [ 639.333299][T31040] bond0: option arp_missed_max: invalid value (0) [ 639.333322][T31040] bond0: option arp_missed_max: allowed values 1 - 255 [ 639.346632][T31040] bond0 (unregistering): Released all slaves [ 639.404854][T31043] __nla_validate_parse: 36 callbacks suppressed [ 639.404875][T31043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6471'. [ 639.605490][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.802405][T31063] syzkaller1: entered promiscuous mode [ 639.802437][T31063] syzkaller1: entered allmulticast mode [ 640.121864][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6482'. [ 640.121896][T31078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6482'. [ 640.266626][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6483'. [ 640.337905][T30667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.373552][T31090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.508100][T31098] netlink: 'syz.3.6487': attribute type 13 has an invalid length. [ 640.580226][T31107] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6489'. [ 640.777647][T31120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.995142][T30667] veth0_vlan: entered promiscuous mode [ 641.028500][T30667] veth1_vlan: entered promiscuous mode [ 641.053268][T31136] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6497'. [ 641.112018][T30667] veth0_macvtap: entered promiscuous mode [ 641.122586][T31136] syzkaller0: entered promiscuous mode [ 641.122609][T31136] syzkaller0: entered allmulticast mode [ 641.271190][T30667] veth1_macvtap: entered promiscuous mode [ 641.272679][T31142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6498'. [ 641.296696][T31142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6498'. [ 641.353153][T30667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.389937][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6498'. [ 641.399047][T30667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.446168][ T7645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.446214][ T7645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.446248][ T7645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.446281][ T7645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.594311][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.594331][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.644211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.644231][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.774078][T31160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6501'. [ 642.471175][T31215] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 642.473981][T31215] team0: Device ipvlan2 is already an upper device of the team interface [ 642.683752][T31235] ip_tables: iptables: counters copy to user failed while replacing table [ 642.703869][T31235] C: renamed from lo [ 642.713636][T31235] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 643.027769][T31258] xt_hashlimit: size too large, truncated to 1048576 [ 643.080820][T31260] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.459753][T31218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.650977][T31277] __nla_validate_parse: 7 callbacks suppressed [ 645.650998][T31277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6530'. [ 645.651378][T31278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6530'. [ 645.877350][T31298] netlink: 'syz.4.6535': attribute type 12 has an invalid length. [ 645.972602][T31306] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 646.003645][T31308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6537'. [ 646.054351][T31298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6535'. [ 646.277972][T31330] Unsupported ieee802154 address type: 0 [ 646.431243][T31339] ip_tables: iptables: counters copy to user failed while replacing table [ 646.566643][T31348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6551'. [ 646.572619][T31348] Bluetooth: hci0: unsupported parameter 5135 [ 646.572632][T31348] Bluetooth: hci0: unsupported parameter 8192 [ 646.572640][T31348] Bluetooth: hci0: unsupported parameter 5135 [ 646.572646][T31348] Bluetooth: hci0: unsupported parameter 8192 [ 647.113340][T31368] IPVS: Unknown mcast interface: rose0 [ 647.248483][T31377] netlink: 'syz.0.6560': attribute type 12 has an invalid length. [ 647.539160][T31396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6567'. [ 647.539197][T31396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6567'. [ 647.583072][T31402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6569'. [ 647.742840][T31420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6571'. [ 648.186746][T31443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6576'. [ 648.748416][T31454] netlink: 'syz.0.6579': attribute type 1 has an invalid length. [ 650.488154][ T2049] block nbd0: Possible stuck request ffff88808123e000: control (read@0,4096B). Runtime 60 seconds [ 650.607561][T31408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.886363][T31464] __nla_validate_parse: 2 callbacks suppressed [ 650.886383][T31464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6582'. [ 650.951758][T31472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6584'. [ 650.966765][T31474] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 651.112992][T31486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6588'. [ 651.113013][T31486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6588'. [ 651.236890][T31491] netlink: 'syz.3.6591': attribute type 3 has an invalid length. [ 651.945534][T31521] ip_tables: iptables: counters copy to user failed while replacing table [ 651.947010][T31521] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 652.090633][T31526] Unsupported ieee802154 address type: 0 [ 652.274895][T31536] netlink: 'syz.1.6603': attribute type 4 has an invalid length. [ 652.335747][T31538] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6604'. [ 652.336414][T31538] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6604'. [ 652.336430][T31538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6604'. [ 652.575529][T31547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6608'. [ 652.749008][T31556] netlink: 'syz.0.6611': attribute type 9 has an invalid length. [ 652.749032][T31556] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6611'. [ 652.911476][T31563] IPv4: Oversized IP packet from 127.202.26.0 [ 653.019844][T31567] netlink: 'syz.1.6616': attribute type 4 has an invalid length. [ 653.121299][T31569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6617'. [ 653.170479][T31572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 653.187380][T31571] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 653.861956][T31585] syzkaller0: entered promiscuous mode [ 653.861980][T31585] syzkaller0: entered allmulticast mode [ 654.218623][T31609] netlink: 'syz.1.6625': attribute type 1 has an invalid length. [ 656.326494][ T4996] udevd[4996]: worker [28349] /devices/virtual/block/nbd0 is taking a long time [ 658.627473][T31615] __nla_validate_parse: 3 callbacks suppressed [ 658.627491][T31615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6627'. [ 658.687971][T31619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6627'. [ 662.760804][T31625] netlink: 'syz.2.6628': attribute type 1 has an invalid length. [ 664.813961][T31609] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 664.879832][T31625] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 665.701085][ C0] sched: DL replenish lagged too much [ 665.852197][T31657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6635'. [ 666.676629][T31669] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6636'. [ 668.453697][T31672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6638'. [ 668.996691][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 668.996887][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 668.997064][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 668.997246][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 668.997420][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 668.997596][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 668.997771][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6641'. [ 669.241428][T31690] netlink: 'syz.4.6642': attribute type 1 has an invalid length. [ 705.226530][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 710.859470][ T2049] block nbd0: Possible stuck request ffff88808123e000: control (read@0,4096B). Runtime 90 seconds [ 802.839597][ T32] INFO: task kworker/1:2:2007 blocked for more than 143 seconds. [ 802.839627][ T32] Not tainted syzkaller #0 [ 802.839637][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 802.839647][ T32] task:kworker/1:2 state:D stack:23824 pid:2007 tgid:2007 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 802.839702][ T32] Workqueue: events drain_vmap_area_work [ 802.839736][ T32] Call Trace: [ 802.839743][ T32] [ 802.839759][ T32] __schedule+0x17dd/0x5820 [ 802.839808][ T32] ? __lock_acquire+0x747/0x2de0 [ 802.839844][ T32] ? __lock_acquire+0x747/0x2de0 [ 802.839877][ T32] ? __pfx___schedule+0x10/0x10 [ 802.839915][ T32] ? schedule+0x90/0x2b0 [ 802.839945][ T32] schedule+0x164/0x2b0 [ 802.839973][ T32] schedule_timeout+0xc0/0x2c0 [ 802.839998][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 802.840024][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 802.840061][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.840088][ T32] ? wait_for_completion+0x26d/0x5d0 [ 802.840117][ T32] wait_for_completion+0x2c5/0x5d0 [ 802.840158][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 802.840193][ T32] ? __flush_work+0x101/0xd30 [ 802.840234][ T32] __flush_work+0xac1/0xd30 [ 802.840259][ T32] ? reclaim_list_global+0x13b9/0x13f0 [ 802.840285][ T32] ? __flush_work+0x101/0xd30 [ 802.840313][ T32] ? __pfx___flush_work+0x10/0x10 [ 802.840341][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 802.840392][ T32] ? flush_work+0xd/0x30 [ 802.840422][ T32] __purge_vmap_area_lazy+0x880/0xb40 [ 802.840453][ T32] ? process_scheduled_works+0x97a/0x1630 [ 802.840478][ T32] drain_vmap_area_work+0x27/0x40 [ 802.840502][ T32] process_scheduled_works+0xc3d/0x1630 [ 802.840567][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 802.840600][ T32] ? assign_work+0x3cf/0x5d0 [ 802.840630][ T32] worker_thread+0xa47/0xfb0 [ 802.840685][ T32] kthread+0x38b/0x480 [ 802.840705][ T32] ? __pfx_worker_thread+0x10/0x10 [ 802.840729][ T32] ? __pfx_kthread+0x10/0x10 [ 802.840750][ T32] ret_from_fork+0x514/0xb70 [ 802.840800][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 802.840821][ T32] ? __switch_to+0xc78/0x1410 [ 802.840851][ T32] ? __pfx_kthread+0x10/0x10 [ 802.840872][ T32] ret_from_fork_asm+0x1a/0x30 [ 802.840909][ T32] [ 802.841090][ T32] [ 802.841090][ T32] Showing all locks held in the system: [ 802.841166][ T32] locks held by kthreadd/2: 1, last CPU#1: [ 802.841273][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 802.841367][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#1: [ 802.841381][ T32] #0: ffffffff8fbf5f00 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 802.841434][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 802.841447][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 802.841496][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 802.841556][ T32] #2: ffff88805fd90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 802.841649][ T32] locks held by kworker/1:0H/25: 2, on CPU#1: [ 802.841663][ T32] #0: ffff88801d6c1d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 802.841713][ T32] #1: ffffc900001f7c40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 802.841764][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 802.841778][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 802.841834][ T32] locks held by kworker/u8:4/62: 4, last CPU#1: [ 802.841848][ T32] #0: ffff88802977c148 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 802.841903][ T32] #1: ffffc9000204fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 802.841953][ T32] #2: ffff8880458b1480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 802.842060][ T32] #3: ffff888034db6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 802.842113][ T32] locks held by kswapd0/89: 3, last CPU#0: [ 802.842126][ T32] #0: ffffffff8fe8de00 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0