last executing test programs: 1.960162636s ago: executing program 2 (id=3452): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) close(r0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f40)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@perr={0x84, 0x2, {0x7}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x804) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="0200ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r11}, 0x38) (async) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000280)={'wg0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.75968983s ago: executing program 3 (id=3454): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000)="402e8b103698be90af9be143ccfa54eae6a7eb2cc413ea6d08da1cc3981a5700565b7ec4f011425330e2c2d2f0a961075e40f956ccb9901a43876f0051900f4c74a671466ce8d9d79f8559bd9186fe2f77", 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b1b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 1.724480968s ago: executing program 2 (id=3456): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0x9) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc40}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8a501, 0x0) sendmsg$netlink(r1, &(0x7f0000000300)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000080)={0x74, 0x22, 0x800, 0x70bd2a, 0x25dfdbff, "", [@nested={0x63, 0xcb, 0x0, 0x1, [@nested={0x4, 0xe5}, @nested={0x4, 0x47}, @generic="6ab409aacd60db1951d38021772ea3586d97cf0595ab30e141a35e57eba22360b865b208775258f12f64de1e9951cf9bd0e6ca2bb6495321e0bb6d98292a33a8f2dd7613c23cddf68c63c61e1f47ffc3c62653", @nested={0x4, 0x63}]}]}, 0x74}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01, r13}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r16]}}], 0x88, 0x48004}, 0x40000) close(r0) 1.713849588s ago: executing program 1 (id=3457): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xb8, 0x3ed, 0x400, 0x70bd2a, 0x25dfdbfb, "da2989b818073930f0bb5569eba8ed7baebb0d7717dc106a4e412bb5ef2d66ea2c9a27093cfb88635c89ee15c166f708784d11ab593e00441f821b799e9a69e2df86adc64027aef0646e1a19218f587aa06473cee6a9b89b94bc2d87638fe054016d4afc2c89869d60388a6cc09f4f3ff894eed5519471d12977bc2084f72ad09fadb475b1fe2a44b7448a2053b56783b5f4e392fdb34f5bdfd1f5db9122591ec8f63ac9f6d4b9", [""]}, 0xb8}, 0x1, 0x0, 0x0, 0x24028084}, 0x804) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xc4, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x70000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x87}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5c06862f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) 1.535053736s ago: executing program 2 (id=3458): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001300)="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", 0x706}, {&(0x7f0000002300)="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", 0xfb7}, {&(0x7f0000000340)="203ef923171c176084428e0cfe13ebd4e92270281033edac997d738672b02ef90a88b0335a07b341a003f3057cdcb5a49aa73576749c435be61c03f06b8cea0296b66a0e86a1b1748d40e5f03b8d", 0x4e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="46200a58cd09d8f647e0c4dd909639a5426952499ae06bd2bb1aa39fc8ddd99ba5d66a06aacc4484d16954a972d1236c7e816d1ca98389925e9452233f042fb3c77b91bedce42994116e3a8476326758affc32a27862b792238b56feca8d336bf756f953881a3eaf1cdbaaaede4b766cb8c57200550e483499a67411219f0cea2af74654b1cf2cc7fe1d7bd9db001244", 0x90}], 0x1}}], 0x2, 0x2c008850) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r2}, 0x10) close(r3) 1.52851647s ago: executing program 1 (id=3459): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000003800000000000004000000000000419abb"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x19, 0x1a, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x1, 0x1, 0x6, 0x1, 0xb, 0x8}]}, &(0x7f0000000500)='GPL\x00', 0x7fffffff, 0xe1, &(0x7f0000000700)=""/225, 0x41000, 0x8, '\x00', r6, @cgroup_sockopt=0x16, r7, 0x8, &(0x7f0000000880)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x0, 0x4ec, 0x7f}, 0x10, r9, r10, 0x3, &(0x7f0000000980)=[r11, r12], &(0x7f0000000a80)=[{0x1, 0x4, 0x9, 0x9}, {0x4, 0x1, 0xe, 0xb}, {0x0, 0x4, 0xc, 0x1}], 0x10, 0x7}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rss_stat\x00', r14, 0x0, 0x40}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a004a53dfbc3262d92900000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) 1.506614693s ago: executing program 0 (id=3460): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'none\x00', 0x20, 0x0, 0x1}, 0x2c) 1.487751396s ago: executing program 4 (id=3461): mmap(&(0x7f00007d2000/0x4000)=nil, 0x4000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xffffc000) (async) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x738e5e8988e47c14) (async) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) 1.392043679s ago: executing program 3 (id=3462): socket(0x2a, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x131986e985dac249}, 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1c, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 1.389566805s ago: executing program 1 (id=3463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 1.342650313s ago: executing program 0 (id=3464): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2040400) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000200), &(0x7f00000002c0)=0x80) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000501925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 1.303941189s ago: executing program 1 (id=3465): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r4, &(0x7f00000019c0)=@abs, 0x6e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000001800128208000100687372000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x38}}, 0x44) 1.243896826s ago: executing program 4 (id=3466): socket(0x26, 0x0, 0x40) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r2, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x36}, {0x30, 0x1}, {0xb, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x880) 1.243024971s ago: executing program 2 (id=3467): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="08030000000000001c0012800c0001006d6163766c616e000c00028008000100080000000800050063f6679509bb3ddc7e1632da497beaa80b9385e78e09fd", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 1.185988515s ago: executing program 1 (id=3468): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}}, 0xc000000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8000000, 0x1, 0x1, 0xa, 0x0, 0x2}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x20, @rand_addr=' \x01\x00', 0x1, 0x4}, 0x20) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 1.182334686s ago: executing program 4 (id=3469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x5, 0x5}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@bridge_setlink={0xbc, 0x13, 0x4, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x420, 0x20000}, [@IFLA_NET_NS_FD={0x8, 0x1c, r10}, @IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0xc}, @IFLA_VF_PORTS={0x78, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e9c9bd269057fd4eabdc77b92f76ae36"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fbf46caad64297ed21fc36765e461bf5"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, ':,$\'\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0f16345f27c534acbaca53f26f3223af"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cdfbecf5158ef8822c8d2fbfbec816bf"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}]}, @IFLA_ADDRESS={0xa, 0x1, @random="96fd4e3d7767"}]}, 0xbc}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0xc1}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x87030000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, [0x7fffffff, 0x0, 0x8000000000000000, 0xa0e, 0x8, 0x8a1c, 0x1ff, 0xffffffffffffff80, 0x8, 0x1, 0x7fffffff, 0xff, 0x4, 0x3, 0x2]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r12, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000101001000000000000000000e0000002000000000000000000000019117f235162884af89f95ed843d38e0000a010101000000000000004000000000000000004e2100"/80, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) 1.111661851s ago: executing program 3 (id=3470): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="5e79850a51ece339618bbc69ea19a907c3c9e940e4d82f859da2473bc32d0961cfa95b609ca71254edd3bdfc97b924c64d5e58bd311ab217640042461c50c0fde853ae3be983e4befb3fb33834c077d3049e8ae4", 0x54) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x5b}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xca}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="5e79850a51ece339618bbc69ea19a907c3c9e940e4d82f859da2473bc32d0961cfa95b609ca71254edd3bdfc97b924c64d5e58bd311ab217640042461c50c0fde853ae3be983e4befb3fb33834c077d3049e8ae4", 0x54) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x5b}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xca}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 1.052072207s ago: executing program 0 (id=3471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044041) 1.015451989s ago: executing program 3 (id=3472): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) 919.965685ms ago: executing program 2 (id=3473): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ppoll(&(0x7f0000000080)=[{r0, 0x4200}], 0x1, &(0x7f0000000140), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x100, 0x8, 0x10001, 0x8}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 919.269499ms ago: executing program 4 (id=3474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x810) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x8) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f7, &(0x7f0000003200)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0xad2d, 0x6, 0x6, 0xc}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 904.175577ms ago: executing program 0 (id=3475): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 820.481436ms ago: executing program 0 (id=3476): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000480)="00e3769c76183d302e20d0cd466e42220f00dc7a869bcaca812e777289c061ad36a9faf181b4f44c12d1f364fb2e95f9f9e479986814090082d6691a19e0ae3b2884a5bf4612a8f9f389f4609523bc06000000d55d03e05bd228ec5d23956f6bc75668751cef00000000000000edff00", &(0x7f0000000400)=@buf="8102a6573b4815f3bb1cb35cfaca9bd5b77acca0a9fccd451605957e7a4dc73bb4e8d9258522338bf72546cfd973c4d258ad98ba5882a14e210827ebeaad8a68302fb14f1afd922090510e5c739bae81f9d8d6fae1a95b45461bd823fe225545", 0x1}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'vlan1\x00', 0x1000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r11, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xe0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xeb7, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfefb, 0x6f4, 0x6, 0x8}, 0x6, 0x0, 0xfafd}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0xc040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000094) 619.970023ms ago: executing program 0 (id=3477): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x3}, 0x40000000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 233.949786ms ago: executing program 1 (id=3478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r2, 0x0, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x60040d1}, 0x0) (rerun: 32) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5a, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 225.247236ms ago: executing program 3 (id=3479): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, &(0x7f00000004c0)="3f3e22ae60ed8af0f26e93e906f8ce08384104506f7b49a57bde717b0f5df2545bce4e1f05ad642067a28c960f91e05b562be16b623e6bd884346c79fcfb04898cae418a150b770177aa04f753bd7d847cb2740e9d56c0b667716eedfde47cff1e57f39df6156d870eab616b3782c42a867118cbb81c2ca1826e3d23f326b2efa7c1112300245445812ce9aa5d0b3fd2ecc7bef11e8263c3edfd6b39c68b5606853e261748fddf1763b39de5993411f25720614bd51e0fb196469d51985f00686cf1b793304c6b4f99d71b614bf7e9d627bcc2fe6af97be9ad874fcec528ecc029a65cd280b7a16b8d06f47c081bde65ce5bcdf1f320", 0xf6, 0x4880, &(0x7f0000000180)={{0x3, @null, 0x7}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000), 0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x4) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002680)=[{0x0, 0x2}]}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x24, 0x4, {}, {}, {0x4, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "1c16338a1f503ff0"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x86, &(0x7f0000002600)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r8, 0x0) write(r8, 0x0, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={r5, @multicast2, @empty}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x4044490) 111.926102ms ago: executing program 4 (id=3480): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd9b}]}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x8, 0x1a, '\xf3x^\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000680)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "aa2de60ad37a24"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001680)={{0x0, 0x200, 0x5, 0x2, 0xffff, 0x10000, 0x3, 0x1, 0x5, 0xd866, 0x5, 0x4, 0x401, 0x5, 0xf9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002680)={r2, r3, "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", "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"}) 86.375845ms ago: executing program 3 (id=3481): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r4], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 78.88093ms ago: executing program 4 (id=3482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4354289191316cd1", "00000000000056040000ffffffffffff", 'j0\bZ', "1ec5573dc17e41be"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 0s ago: executing program 2 (id=3483): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x29, 0x1, 0x7f, 0x1, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x8000, 0x80000000}}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x400, 0x8001, 0xf, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000050000000000000500000a202000000e0a010200000000000000000a0000000900010073797a3100000000140000001100010000000000000000000100000ac62575bdcbc84799f237935f70f63c6dfd8b650e4984e1fc415f3bd65340c0ff1165fd37b6a13a40ceddbaff5a363081fd851d56c10519023695c4edbc748d249d5a6db4ff7940889173004d19398b268ad34da536c952502bfcb4f03461baf3b8f0cd69203822cfd60a5cc1dca90985"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): [T11162] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 224.600616][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 224.698421][T11156] syz.1.1507 (11156) used greatest stack depth: 17832 bytes left [ 224.746988][T11167] bond0: option resend_igmp: invalid value (32767) [ 224.754486][T11167] bond0: option resend_igmp: allowed values 0 - 255 [ 224.781110][T11167] bond0 (unregistering): Released all slaves [ 224.815959][T11178] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1514'. [ 224.871357][T11164] wg1 speed is unknown, defaulting to 1000 [ 224.959042][T11178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1514'. [ 225.162313][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1521'. [ 225.289880][T11211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1524'. [ 225.324338][T11208] netlink: 'syz.0.1523': attribute type 11 has an invalid length. [ 225.335710][T11210] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 225.347468][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 225.367628][T11212] delete_channel: no stack [ 225.585113][T11218] tipc: Enabling of bearer rejected, failed to enable media [ 225.636736][T11222] tipc: Enabled bearer , priority 0 [ 225.694164][T11222] syzkaller0: entered promiscuous mode [ 225.705198][T11222] syzkaller0: entered allmulticast mode [ 225.895443][T11220] tipc: Resetting bearer [ 225.955017][T11220] tipc: Disabling bearer [ 226.079427][T11257] syzkaller1: entered promiscuous mode [ 226.095273][T11257] syzkaller1: entered allmulticast mode [ 226.115334][T11259] syzkaller0: entered promiscuous mode [ 226.120866][T11259] syzkaller0: entered allmulticast mode [ 226.139025][T11259] bridge5: entered promiscuous mode [ 226.146887][T11259] bridge5: entered allmulticast mode [ 226.178645][T11259] team0: Port device bridge5 added [ 226.428747][T11270] bridge0: port 3(team0) entered blocking state [ 226.436886][T11270] bridge0: port 3(team0) entered disabled state [ 226.443330][T11270] team0: entered allmulticast mode [ 226.448640][T11270] team_slave_0: entered allmulticast mode [ 226.454949][T11270] team_slave_1: entered allmulticast mode [ 226.464552][T11270] team0: entered promiscuous mode [ 226.469956][T11270] team_slave_0: entered promiscuous mode [ 226.476062][T11270] team_slave_1: entered promiscuous mode [ 226.942151][T11310] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 226.968280][T11308] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 227.007011][T11311] syzkaller0: entered promiscuous mode [ 227.012694][T11311] syzkaller0: entered allmulticast mode [ 227.169686][T11323] netlink: 'syz.0.1552': attribute type 28 has an invalid length. [ 227.188780][T11323] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 228.060256][T11358] net_ratelimit: 18 callbacks suppressed [ 228.060273][T11358] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 229.173639][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.222592][T11373] tap0: tun_chr_ioctl cmd 1074025676 [ 229.229724][T11373] tap0: owner set to 0 [ 229.236725][T11375] tap0: tun_chr_ioctl cmd 1074025673 [ 229.334405][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.388848][T11381] __nla_validate_parse: 5 callbacks suppressed [ 229.388866][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 229.441719][T11381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.530981][T11390] tipc: New replicast peer: 255.255.255.255 [ 229.560842][T11390] tipc: Enabled bearer , priority 10 [ 229.694126][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.814337][ T9112] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.933959][ T9112] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.043870][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.153761][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 230.495273][T11453] netlink: 'syz.1.1581': attribute type 8 has an invalid length. [ 230.660442][T11432] ipip0: left promiscuous mode [ 230.675240][T11432] gtp0: left promiscuous mode [ 230.682375][T11432] gtp0: left allmulticast mode [ 230.705699][T11432] A link change request failed with some changes committed already. Interface ip6gretap1 may have been left with an inconsistent configuration, please check. [ 230.735735][T11439] netlink: 'syz.0.1577': attribute type 14 has an invalid length. [ 230.763661][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 230.888328][T11439] netlink: 'syz.0.1577': attribute type 14 has an invalid length. [ 230.907341][ T13] bond5: (slave vlan2): link status definitely down, disabling slave [ 230.931890][ T13] bond5: now running without any active interface! [ 230.948751][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 230.964136][T11475] netlink: 'syz.4.1585': attribute type 3 has an invalid length. [ 230.982411][T11475] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1585'. [ 231.087998][T11481] netlink: 'syz.1.1587': attribute type 1 has an invalid length. [ 231.406471][T11502] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 231.709702][T11515] IPVS: Error joining to the multicast group [ 231.939234][T11535] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1601'. [ 232.022748][T11537] sctp: [Deprecated]: syz.2.1602 (pid 11537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.022748][T11537] Use struct sctp_sack_info instead [ 232.246180][T11549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1607'. [ 232.440856][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 232.522625][T11570] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 232.575283][T11565] hsr_slave_0 (unregistering): left promiscuous mode [ 232.698638][T11580] netlink: 'syz.1.1617': attribute type 29 has an invalid length. [ 232.708852][T11580] netlink: 'syz.1.1617': attribute type 29 has an invalid length. [ 232.800581][T11584] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 232.812364][T11584] bond7 (unregistering): Released all slaves [ 232.824066][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 232.832981][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 233.008730][T11597] netlink: 'syz.2.1623': attribute type 17 has an invalid length. [ 233.026702][T11597] erspan0: entered promiscuous mode [ 233.033760][T11597] gretap0: entered promiscuous mode [ 233.040425][T11597] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 233.051112][T11597] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 233.279675][T11619] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 233.288301][T11619] netlink: 'syz.0.1630': attribute type 4 has an invalid length. [ 233.578102][T11646] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 234.251633][T11706] netlink: 'syz.0.1656': attribute type 11 has an invalid length. [ 234.364584][T11714] syzkaller0: entered promiscuous mode [ 234.370331][T11714] syzkaller0: entered allmulticast mode [ 234.426477][T11716] __nla_validate_parse: 16 callbacks suppressed [ 234.426497][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 234.578656][T11727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 234.608216][T11727] bond7: (slave veth7): Enslaving as an active interface with a down link [ 234.638415][T11727] veth9: entered promiscuous mode [ 234.647771][T11727] bond7: (slave veth9): Enslaving as an active interface with a down link [ 234.668623][T11727] vlan3: entered allmulticast mode [ 234.676673][T11727] bond7: entered allmulticast mode [ 234.683458][T11727] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 234.860128][T11732] vlan3: entered promiscuous mode [ 234.889828][T11732] `: (slave vlan3): Opening slave failed [ 234.958739][T11741] syzkaller0: entered promiscuous mode [ 234.982297][T11741] syzkaller0: entered allmulticast mode [ 235.090506][T11759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1673'. [ 235.155215][T11763] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1673'. [ 235.170504][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 235.256951][T11770] netlink: zone id is out of range [ 235.280188][T11770] netlink: zone id is out of range [ 235.304668][T11770] netlink: zone id is out of range [ 235.321697][T11770] netlink: zone id is out of range [ 235.341746][T11770] netlink: zone id is out of range [ 235.351033][T11770] netlink: zone id is out of range [ 235.359761][T11770] netlink: zone id is out of range [ 235.366098][T11770] netlink: zone id is out of range [ 235.371547][T11770] netlink: zone id is out of range [ 235.377494][T11770] netlink: zone id is out of range [ 235.507560][T11777] validate_nla: 1 callbacks suppressed [ 235.507577][T11777] netlink: 'syz.2.1676': attribute type 1 has an invalid length. [ 235.549141][T11784] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1679'. [ 235.607430][T11777] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.683775][T11787] bond7: (slave veth5): Enslaving as an active interface with a down link [ 235.697990][T11777] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 235.790275][T11787] bond7: (slave veth7): Enslaving as an active interface with a down link [ 235.875467][T11805] netlink: 'syz.1.1685': attribute type 5 has an invalid length. [ 235.888805][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'. [ 236.158986][T11821] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1691'. [ 236.221557][T11826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 236.526951][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1701'. [ 236.536812][T11842] netlink: 'syz.3.1701': attribute type 7 has an invalid length. [ 236.553698][T11842] netlink: 'syz.3.1701': attribute type 8 has an invalid length. [ 236.574246][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 237.970911][T11866] syzkaller1: entered promiscuous mode [ 237.978328][T11866] syzkaller1: entered allmulticast mode [ 238.132135][T11874] tap0: tun_chr_ioctl cmd 1074025673 [ 238.147607][T11877] tap0: tun_chr_ioctl cmd 1074025678 [ 238.160957][T11877] tap0: group set to 0 [ 238.172521][T11875] tap0: tun_chr_ioctl cmd 1074025678 [ 238.186477][T11875] tap0: group set to 0 [ 238.210067][T11869] "syz.1.1705" (11869) uses obsolete ecb(arc4) skcipher [ 238.457532][T11892] syzkaller0: entered promiscuous mode [ 238.463087][T11892] syzkaller0: entered allmulticast mode [ 238.538052][T11903] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 238.551802][T11906] netlink: 'syz.1.1716': attribute type 10 has an invalid length. [ 240.320240][T11935] net_ratelimit: 44 callbacks suppressed [ 240.320259][T11935] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.372528][T11945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.415500][T11945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.441023][T11935] syzkaller1: entered promiscuous mode [ 240.447319][T11935] syzkaller1: entered allmulticast mode [ 240.474168][T11935] __nla_validate_parse: 6 callbacks suppressed [ 240.474184][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 240.508930][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 240.545921][T11952] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1725'. [ 240.562144][T11949] netlink: 'syz.0.1724': attribute type 3 has an invalid length. [ 240.572317][T11949] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1724'. [ 240.741133][T11964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.068778][T11987] can: request_module (can-proto-0) failed. [ 241.220127][T12000] veth1_to_bond: entered allmulticast mode [ 241.341890][T11991] veth1_to_bond: left allmulticast mode [ 241.370668][T12004] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1737'. [ 241.552841][T12017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.625486][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 241.886201][T12035] netlink: 'syz.1.1744': attribute type 29 has an invalid length. [ 241.905780][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 241.918757][T12035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'. [ 241.945841][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1747'. [ 241.955556][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1747'. [ 242.001052][T12043] erspan0: entered promiscuous mode [ 242.010965][T12043] batadv_slave_1: entered promiscuous mode [ 242.017732][T12043] batadv_slave_1: left promiscuous mode [ 242.045843][T12043] erspan0: left promiscuous mode [ 242.761516][T12084] netlink: 'syz.1.1756': attribute type 16 has an invalid length. [ 242.804694][T12084] netlink: 'syz.1.1756': attribute type 17 has an invalid length. [ 242.826938][T12084] erspan0: left allmulticast mode [ 242.955853][T12084] bridge0: left allmulticast mode [ 243.035903][T12084] caif0: left promiscuous mode [ 243.045997][T12084] caif0: left allmulticast mode [ 243.053694][T12084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.177695][T12082] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 243.195303][T12082] syzkaller0: linktype set to 0 [ 245.315673][T12133] netlink: 'syz.3.1769': attribute type 18 has an invalid length. [ 246.018906][T12189] __nla_validate_parse: 3 callbacks suppressed [ 246.018925][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 246.414241][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'. [ 246.592351][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1792'. [ 246.619003][T12220] xt_hashlimit: size too large, truncated to 1048576 [ 246.632573][T12219] bridge8: entered promiscuous mode [ 246.643604][T12219] bridge8: entered allmulticast mode [ 246.665316][T12219] team0: Port device bridge8 added [ 246.681182][T12222] bridge0: port 3(team0) entered blocking state [ 246.688609][T12222] bridge0: port 3(team0) entered disabled state [ 246.695792][T12222] team0: entered allmulticast mode [ 246.701105][T12222] team_slave_0: entered allmulticast mode [ 246.707008][T12222] team_slave_1: entered allmulticast mode [ 246.719716][T12222] team0: entered promiscuous mode [ 246.730497][T12222] team_slave_0: entered promiscuous mode [ 246.742467][T12222] team_slave_1: entered promiscuous mode [ 246.757197][T12222] bridge0: port 3(team0) entered blocking state [ 246.763612][T12222] bridge0: port 3(team0) entered forwarding state [ 246.898814][T12233] netlink: 'syz.1.1798': attribute type 83 has an invalid length. [ 246.967801][T12235] netlink: 'syz.1.1799': attribute type 1 has an invalid length. [ 247.018622][T12241] netlink: 'syz.4.1797': attribute type 2 has an invalid length. [ 247.025077][T12235] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.037454][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 247.078888][T12247] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 247.270726][T12259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 247.484235][T12281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.516564][T12281] x_tables: duplicate underflow at hook 3 [ 247.536762][T12289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.582777][T12285] syzkaller0: entered promiscuous mode [ 247.593600][T12285] syzkaller0: entered allmulticast mode [ 247.614522][T12293] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 247.657542][T12293] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.670632][T12285] tipc: Started in network mode [ 247.676255][T12285] tipc: Node identity , cluster identity 4711 [ 247.684751][T12285] tipc: Failed to obtain node identity [ 247.690568][T12285] tipc: Enabling of bearer rejected, failed to enable media [ 247.901830][T12314] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1817'. [ 249.066199][T12305] bond9: (slave veth0_to_bond): making interface the new active one [ 249.075908][T12305] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 249.112659][T12311] bond9: entered promiscuous mode [ 249.134269][T12311] veth0_to_bond: entered promiscuous mode [ 249.140232][T12311] bond9: entered allmulticast mode [ 249.148890][T12311] veth0_to_bond: entered allmulticast mode [ 249.344283][T12331] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1821'. [ 249.405667][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 249.510558][T12330] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 249.545700][T12330] bond10 (unregistering): Released all slaves [ 249.556299][T12343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1826'. [ 249.582443][T12351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1826'. [ 249.833030][T12326] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1823'. [ 250.029084][T12373] gtp0: entered promiscuous mode [ 250.044855][T12373] gtp0: entered allmulticast mode [ 251.021063][T12432] netlink: 'syz.0.1853': attribute type 13 has an invalid length. [ 251.060835][T12432] netlink: 'syz.0.1853': attribute type 58 has an invalid length. [ 251.094156][T12432] __nla_validate_parse: 5 callbacks suppressed [ 251.094174][T12432] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1853'. [ 251.293450][T12453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1859'. [ 251.306333][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 251.324861][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 251.684744][T12484] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1863'. [ 251.931446][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 252.227743][T12516] netlink: 'syz.0.1874': attribute type 9 has an invalid length. [ 252.236321][T12516] netlink: 'syz.0.1874': attribute type 6 has an invalid length. [ 252.243395][T12521] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 252.256285][T12517] netlink: 'syz.0.1874': attribute type 2 has an invalid length. [ 252.265303][T12518] netlink: 'syz.0.1874': attribute type 2 has an invalid length. [ 252.266562][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 252.289717][T12518] 9: entered promiscuous mode [ 252.300612][T12525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.506645][T12533] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 252.516119][T12533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.859260][T12556] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1882'. [ 253.136365][T12571] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 253.275654][T12575] bond3: (slave ip6gretap1): making interface the new active one [ 253.289575][T12575] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.332609][T12576] sctp: [Deprecated]: syz.0.1889 (pid 12576) Use of int in maxseg socket option. [ 253.332609][T12576] Use struct sctp_assoc_value instead [ 253.361693][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 253.396189][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 253.444612][T12587] Unsupported ieee802154 address type: 0 [ 253.652093][T12599] netlink: 'syz.1.1898': attribute type 4 has an invalid length. [ 253.738862][T12603] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 255.501741][T12611] bridge0: port 3(team0) entered disabled state [ 255.508908][T12611] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.516278][T12611] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.968860][T12655] tipc: Enabling of bearer rejected, failed to enable media [ 255.987875][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.028678][T12658] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 256.151993][T12668] __nla_validate_parse: 9 callbacks suppressed [ 256.152006][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'. [ 256.157746][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 256.177038][T12669] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 256.187650][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 256.204204][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 256.369411][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1924'. [ 256.371271][T12682] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 256.380890][T12680] syzkaller0: entered promiscuous mode [ 256.392730][T12680] syzkaller0: entered allmulticast mode [ 256.521430][T12688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1927'. [ 256.532316][T12688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1927'. [ 256.609263][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 256.795952][T12700] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 257.048400][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 257.070189][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1935'. [ 257.305335][T12716] validate_nla: 6 callbacks suppressed [ 257.305355][T12716] netlink: 'syz.2.1937': attribute type 27 has an invalid length. [ 258.992157][T12749] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 261.022506][T12861] tipc: Started in network mode [ 261.028173][T12861] tipc: Node identity 8242af858388, cluster identity 4711 [ 261.036225][T12861] tipc: Enabled bearer , priority 0 [ 261.166561][T12876] __nla_validate_parse: 8 callbacks suppressed [ 261.166580][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 261.176720][T12863] syzkaller0: entered promiscuous mode [ 261.207367][T12863] syzkaller0: entered allmulticast mode [ 261.225685][T12863] tipc: Resetting bearer [ 261.232371][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1987'. [ 261.242957][T12878] netlink: 'syz.3.1985': attribute type 4 has an invalid length. [ 261.292756][T12861] tipc: Resetting bearer [ 261.596823][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 262.758381][T12861] tipc: Disabling bearer [ 262.797386][ T812] tipc: Node number set to 30060421 [ 263.018039][T12917] IPVS: set_ctl: invalid protocol: 235 0.0.0.0:20004 [ 263.163217][T12919] bond7: option mode: invalid value (133) [ 263.177854][T12919] bond7 (unregistering): Released all slaves [ 263.294357][T12937] netlink: 'syz.2.2004': attribute type 12 has an invalid length. [ 263.392667][T12947] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 263.429671][T12947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.467036][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 263.537627][T12955] netlink: 'syz.3.2010': attribute type 4 has an invalid length. [ 263.555203][T12956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2009'. [ 263.859261][T12980] SET target dimension over the limit! [ 263.929313][T12982] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.963797][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2017'. [ 263.997367][T12986] pim6reg: entered allmulticast mode [ 264.006399][T12986] pim6reg: left allmulticast mode [ 264.033032][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 264.060672][T12991] dvmrp1: entered allmulticast mode [ 264.071245][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 264.099738][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2021'. [ 264.343669][T13009] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 264.410871][T13016] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2029'. [ 264.411083][T13012] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.537653][T13012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.552785][T13019] netlink: 'syz.4.2028': attribute type 2 has an invalid length. [ 264.566373][T13012] netlink: 'syz.0.2027': attribute type 3 has an invalid length. [ 264.638044][T13024] netlink: 'syz.3.2030': attribute type 3 has an invalid length. [ 264.975580][T13039] openvswitch: netlink: Missing key (keys=40, expected=80) [ 265.571170][T13087] tipc: Enabled bearer , priority 0 [ 265.593215][T13092] syzkaller0: entered promiscuous mode [ 265.612568][T13092] syzkaller0: entered allmulticast mode [ 265.653917][T13077] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 265.734401][T13077] tipc: Resetting bearer [ 265.746429][T13077] netlink: 'syz.4.2043': attribute type 1 has an invalid length. [ 265.851849][T13077] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.885449][T13112] netlink: 'syz.2.2052': attribute type 1 has an invalid length. [ 265.970887][T13120] xt_hashlimit: max too large, truncated to 1048576 [ 266.071347][T13115] bond8: (slave gretap1): making interface the new active one [ 266.082372][T13115] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 266.100884][T13077] bond3: (slave veth0_to_bond): Releasing active interface [ 266.112813][T13077] veth0_to_bond: left promiscuous mode [ 266.128268][T13077] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 266.141100][T13124] bond8 (unregistering): (slave gretap1): Releasing active interface [ 266.152161][T13124] bond8 (unregistering): Released all slaves [ 266.171427][T13072] tipc: Resetting bearer [ 266.245034][T13072] tipc: Disabling bearer [ 266.269201][T13131] __nla_validate_parse: 69 callbacks suppressed [ 266.269219][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 266.316685][T13133] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 266.351732][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 266.597206][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 266.648256][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 266.677992][T13162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2064'. [ 266.696450][T13161] 8021q: VLANs not supported on ip6_vti0 [ 266.722759][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'. [ 267.064809][T13183] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 267.213722][T13188] tipc: Enabled bearer , priority 0 [ 267.231577][T13188] syzkaller0: entered promiscuous mode [ 267.239771][T13188] syzkaller0: entered allmulticast mode [ 267.258331][T13187] tipc: Resetting bearer [ 267.301478][T13187] tipc: Disabling bearer [ 267.366109][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2073'. [ 268.013345][T13235] netlink: 'syz.1.2083': attribute type 11 has an invalid length. [ 268.022110][T13235] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2083'. [ 268.873283][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 269.327810][T13243] team0: Port device team_slave_0 removed [ 269.483984][T13256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.565050][T13261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2089'. [ 269.712282][ T24] IPVS: starting estimator thread 0... [ 269.814910][T13274] IPVS: using max 30 ests per chain, 72000 per kthread [ 269.898782][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe1 [ 270.049013][T13301] validate_nla: 1 callbacks suppressed [ 270.049033][T13301] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 270.278827][T13318] x_tables: duplicate underflow at hook 2 [ 270.851388][T13335] vlan0: entered promiscuous mode [ 270.867501][T13335] bridge0: entered promiscuous mode [ 271.275973][T13367] __nla_validate_parse: 1 callbacks suppressed [ 271.276002][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 271.333001][T13371] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 271.346944][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2123'. [ 271.352340][T13371] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 271.625751][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 271.649902][T13390] syzkaller0: refused to change device tx_queue_len [ 271.653376][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 271.678729][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 271.690202][T13394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2127'. [ 271.700010][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 271.837968][T13404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2128'. [ 272.492300][T13427] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 272.504371][T13427] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2136'. [ 272.733276][T13442] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 272.787087][T13442] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 273.115538][T13478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.259989][T13472] tipc: Enabled bearer , priority 0 [ 273.315447][T13480] syzkaller0: entered promiscuous mode [ 273.321040][T13480] syzkaller0: entered allmulticast mode [ 273.507659][T13459] tipc: Resetting bearer [ 273.531540][T13459] tipc: Disabling bearer [ 273.565715][T13495] tap0: tun_chr_ioctl cmd 1074025676 [ 273.571494][T13495] tap0: owner set to 0 [ 273.728531][T13520] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.777459][T13521] netlink: 'syz.4.2158': attribute type 11 has an invalid length. [ 273.813640][T13521] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2158'. [ 274.270010][T13556] syzkaller0: entered promiscuous mode [ 274.279044][T13556] syzkaller0: entered allmulticast mode [ 274.344914][T13563] netlink: 'syz.3.2170': attribute type 7 has an invalid length. [ 274.404341][T13563] netlink: 'syz.3.2170': attribute type 7 has an invalid length. [ 274.420001][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.434983][T13569] netlink: 'syz.1.2173': attribute type 33 has an invalid length. [ 274.443379][T13570] netlink: 'syz.1.2173': attribute type 33 has an invalid length. [ 275.271010][T13627] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 275.290467][ T3552] nci: nci_ntf_packet: unknown ntf opcode 0x505 [ 275.438448][T13641] xt_TCPMSS: Only works on TCP SYN packets [ 276.231206][T13659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.239647][T13656] can: request_module (can-proto-0) failed. [ 276.275757][T13646] netlink: 'syz.4.2195': attribute type 19 has an invalid length. [ 276.283929][T13649] netlink: 'syz.4.2195': attribute type 19 has an invalid length. [ 276.314004][T13667] can: request_module (can-proto-0) failed. [ 276.507986][T13682] netlink: 'syz.2.2205': attribute type 2 has an invalid length. [ 276.516115][T13682] __nla_validate_parse: 13 callbacks suppressed [ 276.516132][T13682] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2205'. [ 277.169562][T13734] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 277.206426][T13734] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 277.250227][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 277.277223][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 277.295155][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 277.313042][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 277.363702][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 277.450152][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 277.972514][T13790] Unsupported ieee802154 address type: 0 [ 278.001938][T13792] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 278.227761][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 278.248944][T13800] wg1 speed is unknown, defaulting to 1000 [ 278.457276][T13823] netlink: 'syz.0.2248': attribute type 3 has an invalid length. [ 278.642571][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2250'. [ 278.734305][T13836] netlink: 'syz.2.2254': attribute type 83 has an invalid length. [ 278.817405][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 278.972772][T13855] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 279.036988][T13855] bond8: (slave gretap1): making interface the new active one [ 279.047065][T13855] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 279.904631][T13925] tipc: Enabled bearer , priority 0 [ 279.922876][T13929] netlink: 'syz.3.2282': attribute type 3 has an invalid length. [ 280.028638][T13938] syzkaller0: MTU too low for tipc bearer [ 280.035683][T13938] tipc: Disabling bearer [ 280.073835][T13939] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 280.290887][T13945] bond11: (slave ip6gretap1): making interface the new active one [ 280.300414][T13945] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 280.476532][T13959] netlink: 'syz.0.2290': attribute type 16 has an invalid length. [ 280.497156][T13965] netlink: 'syz.3.2292': attribute type 21 has an invalid length. [ 280.503590][T13959] netlink: 'syz.0.2290': attribute type 17 has an invalid length. [ 280.505609][T13965] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 280.612583][T13959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.873992][T13980] syzkaller1: entered promiscuous mode [ 280.879520][T13980] syzkaller1: entered allmulticast mode [ 281.878972][T13993] veth0: left allmulticast mode [ 281.914387][T13993] wg1: left promiscuous mode [ 281.919027][T13993] wg1: left allmulticast mode [ 282.176667][T13993] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 282.184435][T13993] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 282.276635][T13993] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 282.313073][T14035] netlink: 'syz.4.2312': attribute type 39 has an invalid length. [ 282.378026][T13993] geneve2: left promiscuous mode [ 282.400592][T13993] veth5: left promiscuous mode [ 282.407995][T13993] vlan2: left promiscuous mode [ 282.412807][T13993] bridge0: left promiscuous mode [ 282.474965][T13993] veth9: left promiscuous mode [ 282.492033][T13993] bond9: left promiscuous mode [ 282.497312][T13993] veth0_to_bond: left promiscuous mode [ 282.503132][T13993] bond9: left allmulticast mode [ 282.508112][T13993] veth0_to_bond: left allmulticast mode [ 282.605768][T14015] vlan0: entered promiscuous mode [ 282.681582][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.698595][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.782533][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.812559][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.822721][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.853205][T14052] __nla_validate_parse: 6 callbacks suppressed [ 282.853224][T14052] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2316'. [ 282.859704][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.898914][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.921421][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.954772][T14045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.003311][T14059] vlan3: entered promiscuous mode [ 283.008978][T14059] bond0: entered promiscuous mode [ 283.032988][T14059] bond_slave_0: entered promiscuous mode [ 283.051988][T14059] bond_slave_1: entered promiscuous mode [ 283.202781][T14073] netlink: 'syz.3.2325': attribute type 3 has an invalid length. [ 283.286213][T14084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2327'. [ 283.329480][T14087] netlink: 'syz.1.2326': attribute type 4 has an invalid length. [ 283.417892][T14092] syzkaller1: entered promiscuous mode [ 283.441226][T14092] syzkaller1: entered allmulticast mode [ 283.767208][T14118] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 283.930033][T14130] bridge0: port 3(team0) entered disabled state [ 283.963429][T14130] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.976775][T14130] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.069927][T14031] wg1 speed is unknown, defaulting to 1000 [ 284.232304][T14158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2344'. [ 284.249551][T14158] nbd: must specify at least one socket [ 284.260058][T14160] netlink: 'syz.0.2345': attribute type 1 has an invalid length. [ 284.293162][T14160] netlink: 'syz.0.2345': attribute type 4 has an invalid length. [ 284.305117][T14160] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2345'. [ 284.471764][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 284.500730][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2349'. [ 284.637761][T14179] bond9: Invalid ad_actor_system MAC address. [ 284.644030][T14179] bond9: option ad_actor_system: invalid value (1) [ 284.652147][T14179] bond9 (unregistering): Released all slaves [ 284.680379][T14188] syzkaller0: entered promiscuous mode [ 284.686190][T14188] syzkaller0: entered allmulticast mode [ 285.007980][T14205] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2358'. [ 285.060716][T14212] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 285.116675][T14222] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2359'. [ 285.300145][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 285.509427][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 285.675437][T14255] ipvlan1: renamed from batadv0 [ 286.003219][T14285] netlink: 'syz.2.2379': attribute type 5 has an invalid length. [ 286.025960][T14285] tipc: Failed to remove unknown binding: 66,1,1/667466922:1848627547/1848627549 [ 286.187341][T14301] netlink: 'syz.4.2382': attribute type 6 has an invalid length. [ 286.432217][T14312] netlink: 'syz.1.2388': attribute type 9 has an invalid length. [ 287.003244][T14354] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 287.149505][T14365] xt_l2tp: v2 doesn't support IP mode [ 287.196717][T14369] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 287.496300][T14394] wg1 speed is unknown, defaulting to 1000 [ 287.621757][T14406] xt_TCPMSS: Only works on TCP SYN packets [ 287.643105][T14404] netlink: 'syz.4.2408': attribute type 21 has an invalid length. [ 287.765139][T14415] bridge: RTM_NEWNEIGH with invalid ether address [ 287.896019][T14423] __nla_validate_parse: 7 callbacks suppressed [ 287.896038][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 287.940986][T14423] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 287.950360][T14423] netlink: 'syz.0.2415': attribute type 2 has an invalid length. [ 287.959180][T14420] wg1 speed is unknown, defaulting to 1000 [ 287.966531][T14421] tipc: Enabled bearer , priority 0 [ 287.997393][T14421] syzkaller0: entered allmulticast mode [ 288.060768][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 288.079362][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 288.088759][T14428] netlink: 'syz.0.2417': attribute type 12 has an invalid length. [ 288.091874][T14421] tipc: Resetting bearer [ 288.104700][T14428] netlink: 'syz.0.2417': attribute type 11 has an invalid length. [ 288.137449][T14417] tipc: Resetting bearer [ 288.169538][T14417] tipc: Disabling bearer [ 288.339234][T14439] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2420'. [ 288.399284][T14446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2421'. [ 288.437571][T14448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.479732][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 288.499623][T14453] x_tables: duplicate underflow at hook 1 [ 288.539927][T14456] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 288.605500][T14448] macvtap1: entered promiscuous mode [ 288.610823][T14448] vlan0: entered promiscuous mode [ 288.623035][T14448] macvtap1: entered allmulticast mode [ 288.629135][T14448] vlan0: entered allmulticast mode [ 288.634195][T14461] tipc: Can't bind to reserved service type 0 [ 288.634418][T14448] veth0_vlan: entered allmulticast mode [ 288.727040][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 288.746562][T14467] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2427'. [ 288.756703][T14466] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2427'. [ 288.932966][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'. [ 288.942083][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.963265][T14479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.973157][T14479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.980947][T14479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.042402][T14483] syzkaller1: entered promiscuous mode [ 289.048744][T14483] syzkaller1: entered allmulticast mode [ 289.595219][T14493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 289.760723][T14518] dummy0: entered promiscuous mode [ 289.766636][T14518] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 289.794113][T14526] bond0: entered promiscuous mode [ 289.800345][T14526] bond_slave_0: entered promiscuous mode [ 289.806404][T14526] bond_slave_1: entered promiscuous mode [ 289.814392][T14526] batadv0: entered promiscuous mode [ 289.822002][T14526] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 289.833641][T14526] hsr1: entered allmulticast mode [ 289.839260][T14526] bond0: entered allmulticast mode [ 289.844711][T14526] bond_slave_0: entered allmulticast mode [ 289.851558][T14526] bond_slave_1: entered allmulticast mode [ 289.857956][T14526] batadv0: entered allmulticast mode [ 289.865847][T14526] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 289.875880][T14526] bond0: left promiscuous mode [ 289.880737][T14526] bond_slave_0: left promiscuous mode [ 289.886639][T14526] bond_slave_1: left promiscuous mode [ 289.893287][T14526] batadv0: left promiscuous mode [ 290.510210][T14578] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 290.515961][T14572] x_tables: ip_tables: ah match: only valid for protocol 51 [ 290.576650][T14581] ipvlan0: entered promiscuous mode [ 290.807608][T14599] veth0: entered promiscuous mode [ 290.821757][T14598] veth0: left promiscuous mode [ 290.877265][T14606] syzkaller1: entered promiscuous mode [ 290.884315][T14606] syzkaller1: entered allmulticast mode [ 290.939605][T14611] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 291.129263][T14621] bond5 (unregistering): Released all slaves [ 291.500903][T14650] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.562459][T14650] syzkaller1: entered promiscuous mode [ 291.574345][T14650] syzkaller1: entered allmulticast mode [ 292.461487][T14701] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 292.482730][T14701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.800238][T14722] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 292.983048][T14739] validate_nla: 3 callbacks suppressed [ 292.983066][T14739] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 293.059296][T14745] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 293.083400][T14748] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 293.185756][T14755] __nla_validate_parse: 19 callbacks suppressed [ 293.185775][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 293.225661][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 293.244179][T14750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.290219][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 293.299951][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 293.491617][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 293.545624][T14772] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2514'. [ 293.594536][T14772] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2514'. [ 293.630057][T14783] pimreg3: entered allmulticast mode [ 293.676352][T14789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2518'. [ 294.020823][T14819] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2526'. [ 294.336817][T14846] netlink: 'syz.3.2534': attribute type 10 has an invalid length. [ 294.348444][T14846] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2534'. [ 294.360687][T14846] netlink: 'syz.3.2534': attribute type 10 has an invalid length. [ 294.546015][T14857] wg1 speed is unknown, defaulting to 1000 [ 294.610897][T14867] rdma_op ffff888031cec1f0 conn xmit_rdma 0000000000000000 [ 295.700107][T14944] xt_hashlimit: invalid interval [ 295.775885][T14930] nbd4: detected capacity change from 0 to 127 [ 295.788861][T14950] xt_policy: too many policy elements [ 295.794791][ T5833] block nbd4: Receive control failed (result -32) [ 295.884740][T14964] netlink: 'syz.3.2566': attribute type 6 has an invalid length. [ 296.013742][T14964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.045354][T14972] bond14: ARP target 1.0.0.0 is already present [ 296.051724][T14972] bond14: option arp_ip_target: invalid value (1) [ 296.062527][T14972] bond14 (unregistering): Released all slaves [ 296.105803][T14964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.192736][T14964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.297611][T14964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.375352][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.392520][ T1339] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.410968][ T1339] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.427220][ T1339] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.621557][T15007] netlink: 'syz.3.2576': attribute type 13 has an invalid length. [ 296.693238][T15011] sctp: [Deprecated]: syz.0.2577 (pid 15011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.693238][T15011] Use struct sctp_sack_info instead [ 296.717778][T15007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.997508][T15032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.159309][T15039] 8021q: adding VLAN 0 to HW filter on device bond10 [ 297.502409][T15070] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 297.662458][T15070] syzkaller0: entered promiscuous mode [ 297.669188][T15070] syzkaller0: entered allmulticast mode [ 297.707489][T15079] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 297.725964][T15083] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 299.181118][T15093] netlink: 'syz.4.2597': attribute type 3 has an invalid length. [ 299.189619][T15093] __nla_validate_parse: 15 callbacks suppressed [ 299.189633][T15093] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2597'. [ 299.334594][T15116] tc_dump_action: action bad kind [ 299.359888][T15116] gre0: entered promiscuous mode [ 299.376194][T15116] gre0: entered allmulticast mode [ 299.383906][T15121] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2605'. [ 299.539782][T15130] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2608'. [ 299.605525][T15135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2610'. [ 299.652447][T15137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.794895][T15137] bond0: (slave batadv0): Releasing backup interface [ 299.810255][T15137] batadv0 (unregistering): left promiscuous mode [ 299.843090][T15150] netlink: 'syz.0.2614': attribute type 13 has an invalid length. [ 299.871640][T15150] erspan0: refused to change device tx_queue_len [ 299.924947][T15150] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 299.961839][T15162] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.2618'. [ 299.991278][T15150] syzkaller0: entered promiscuous mode [ 299.999412][T15150] syzkaller0: entered allmulticast mode [ 300.011976][T15150] tipc: Enabled bearer , priority 0 [ 300.054048][T15149] tipc: Resetting bearer [ 300.137350][T15149] tipc: Disabling bearer [ 300.358292][T15188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.380571][T15195] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 300.520702][T15207] netlink: 'syz.1.2627': attribute type 39 has an invalid length. [ 300.558984][T15209] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 300.650748][T15209] bond9: entered promiscuous mode [ 300.656506][T15209] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.037364][T15236] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2634'. [ 301.214025][T15239] netlink: 'syz.0.2635': attribute type 1 has an invalid length. [ 301.337093][T15239] 8021q: adding VLAN 0 to HW filter on device bond11 [ 301.367738][T15243] vlan1: entered allmulticast mode [ 301.373374][T15243] bond11: entered allmulticast mode [ 301.411936][T15239] bond11: (slave gretap2): making interface the new active one [ 301.430257][T15239] gretap2: entered allmulticast mode [ 301.449381][T15239] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 301.526614][T15242] syzkaller0: entered promiscuous mode [ 301.532291][T15242] syzkaller0: entered allmulticast mode [ 301.670694][T15276] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2643'. [ 301.765061][T15278] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 301.908036][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 303.074160][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2646'. [ 303.083539][T15284] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2646'. [ 303.346351][T15313] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 303.365778][T15306] syzkaller0: entered promiscuous mode [ 303.375606][T15306] syzkaller0: entered allmulticast mode [ 303.500540][T15324] netlink: 'syz.0.2657': attribute type 3 has an invalid length. [ 303.680607][T15335] netlink: 'syz.1.2661': attribute type 29 has an invalid length. [ 303.853128][T15351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.062619][T15358] syzkaller1: entered promiscuous mode [ 304.068340][T15358] syzkaller1: entered allmulticast mode [ 304.205827][T15367] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 304.302419][T15376] dvmrp6: left allmulticast mode [ 304.393431][T15382] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 304.401673][T15382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.425293][T15384] __nla_validate_parse: 5 callbacks suppressed [ 304.425309][T15384] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2675'. [ 304.454711][T15384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2675'. [ 304.476425][T15384] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2675'. [ 304.514213][T15384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2675'. [ 304.537872][T15391] x_tables: duplicate underflow at hook 1 [ 304.574416][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'. [ 304.600828][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2677'. [ 304.676686][T15395] geneve2: entered promiscuous mode [ 304.731039][T15395] geneve2: entered allmulticast mode [ 304.972741][T15419] bond5: option lp_interval: invalid value (0) [ 304.981201][T15419] bond5: option lp_interval: allowed values 1 - 2147483647 [ 304.990850][T15419] bond5 (unregistering): Released all slaves [ 305.131260][T15439] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 305.732921][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'. [ 306.263339][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2710'. [ 306.278264][T15520] tipc: Enabled bearer , priority 10 [ 306.298581][T15521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2708'. [ 306.313356][T15521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2708'. [ 306.343033][T15521] delete_channel: no stack [ 306.512295][T15536] sctp: [Deprecated]: syz.0.2712 (pid 15536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.512295][T15536] Use struct sctp_sack_info instead [ 306.570248][T15541] dvmrp0: entered allmulticast mode [ 306.589903][T15541] dvmrp0: left allmulticast mode [ 306.601737][T15541] dvmrp1: left allmulticast mode [ 306.760530][T15544] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 306.810016][T15544] bond9 (unregistering): Released all slaves [ 307.004514][T15566] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 307.167157][T15580] netlink: 'syz.1.2729': attribute type 2 has an invalid length. [ 307.183003][T15578] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 307.299693][T15578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.331967][T15586] bond5: (slave geneve3): making interface the new active one [ 307.348824][T15586] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 307.375991][T15594] netlink: 'syz.2.2734': attribute type 11 has an invalid length. [ 307.387440][T15595] netlink: 'syz.2.2734': attribute type 11 has an invalid length. [ 307.562763][T15610] xt_connbytes: Forcing CT accounting to be enabled [ 307.650517][T15611] xfrm1: entered promiscuous mode [ 307.656319][T15620] nbd: nbd1 already in use [ 307.661139][T15611] xfrm1: entered allmulticast mode [ 309.022764][T15666] delete_channel: no stack [ 309.176407][T15676] tunl0: entered promiscuous mode [ 309.199959][T15676] netlink: 'syz.3.2756': attribute type 3 has an invalid length. [ 309.529077][T15689] __nla_validate_parse: 18 callbacks suppressed [ 309.529096][T15689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 309.965389][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2766'. [ 310.020891][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'. [ 311.294439][T15714] 8021q: adding VLAN 0 to HW filter on device bond15 [ 311.358859][T15735] sctp: [Deprecated]: syz.3.2770 (pid 15735) Use of int in maxseg socket option. [ 311.358859][T15735] Use struct sctp_assoc_value instead [ 311.487562][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 311.524607][T15757] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 311.564043][T15741] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2772'. [ 311.775244][T15765] bond12: option resend_igmp: invalid value (32767) [ 311.805813][T15765] bond12: option resend_igmp: allowed values 0 - 255 [ 311.838961][T15765] bond12 (unregistering): Released all slaves [ 312.061256][T15781] netlink: 'syz.3.2781': attribute type 4 has an invalid length. [ 312.084227][T15781] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2781'. [ 312.149748][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'. [ 312.268280][T15793] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 312.310906][T15797] siw: device registration error -23 [ 312.528961][T15801] bridge2: entered promiscuous mode [ 312.537005][T15801] bridge2: entered allmulticast mode [ 312.570377][T15806] netlink: 568 bytes leftover after parsing attributes in process `syz.3.2789'. [ 313.128681][T15832] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2796'. [ 313.407507][T15846] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2801'. [ 313.483183][T15846] netlink: 'syz.0.2801': attribute type 29 has an invalid length. [ 313.686948][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.697933][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.714182][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.724730][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.734110][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.758394][T15862] netlink: 'syz.0.2804': attribute type 12 has an invalid length. [ 314.098304][T15864] wg1 speed is unknown, defaulting to 1000 [ 314.451469][T15864] chnl_net:caif_netlink_parms(): no params data found [ 314.688243][T15864] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.704985][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.720650][T15864] bridge_slave_0: entered allmulticast mode [ 314.729949][T15864] bridge_slave_0: entered promiscuous mode [ 314.750979][T15864] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.760330][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.768115][T15864] bridge_slave_1: entered allmulticast mode [ 314.776823][T15864] bridge_slave_1: entered promiscuous mode [ 314.838966][T15928] __nla_validate_parse: 4 callbacks suppressed [ 314.838987][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2820'. [ 314.868717][T15928] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 314.878138][T15928] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 314.897340][T15864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.919864][T15864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.926589][T15928] netlink: 'syz.2.2820': attribute type 2 has an invalid length. [ 314.982620][T15928] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2820'. [ 315.026752][T15864] team0: Port device team_slave_0 added [ 315.037664][T15864] team0: Port device team_slave_1 added [ 315.112751][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 315.117923][T15864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.128821][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.155124][T15864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.169499][T15864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.177039][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.182928][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 315.204105][T15864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.239411][T15945] netlink: zone id is out of range [ 315.244711][T15945] netlink: get zone limit has 4 unknown bytes [ 315.297920][T15864] hsr_slave_0: entered promiscuous mode [ 315.305579][T15864] hsr_slave_1: entered promiscuous mode [ 315.311936][T15864] debugfs: 'hsr0' already exists in 'hsr' [ 315.319239][T15864] Cannot create hsr debugfs directory [ 315.547158][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2830'. [ 315.616728][T15964] xt_HMARK: spi-set and port-set can't be combined [ 315.677900][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2833'. [ 315.717908][T15864] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.799921][T15864] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.824672][ T5833] Bluetooth: hci5: command tx timeout [ 315.900716][T15864] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.985978][T15864] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.070373][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 316.238148][T15864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.268369][T15864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.293225][T15864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.313222][T15864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.336971][T16008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2843'. [ 316.358642][T16014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2844'. [ 316.405345][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2844'. [ 316.541167][T15864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.609935][T15864] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.675451][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.682614][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.730261][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.737469][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.848661][T16042] netlink: 'syz.1.2850': attribute type 19 has an invalid length. [ 317.156099][T15864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.207702][T16065] openvswitch: netlink: Missing key (keys=40, expected=80) [ 317.228331][T15864] veth0_vlan: entered promiscuous mode [ 317.255313][T15864] veth1_vlan: entered promiscuous mode [ 317.359479][T15864] veth0_macvtap: entered promiscuous mode [ 317.388633][T15864] veth1_macvtap: entered promiscuous mode [ 317.430828][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.468750][T15864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.507936][T15864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.543876][ T1324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.557585][ T1324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.578868][ T1324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.599227][ T1324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.655014][T16089] x_tables: duplicate underflow at hook 2 [ 317.737358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.748626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.821585][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.846589][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.904683][ T5150] Bluetooth: hci5: command tx timeout [ 318.163406][T16118] netlink: 'syz.1.2870': attribute type 21 has an invalid length. [ 318.380768][T16129] netlink: 'syz.4.2871': attribute type 2 has an invalid length. [ 318.666891][T16142] bond10: Unable to set down delay as MII monitoring is disabled [ 318.707415][T16142] bond10 (unregistering): Released all slaves [ 318.921264][T16161] tipc: Enabled bearer , priority 0 [ 318.956692][T16161] syzkaller0: entered promiscuous mode [ 318.964860][T16168] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20002 [ 318.971633][T16161] syzkaller0: entered allmulticast mode [ 319.032813][T16161] tipc: Resetting bearer [ 319.056560][T16159] tipc: Resetting bearer [ 319.096946][T16159] tipc: Disabling bearer [ 319.319906][T16192] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 319.358102][T16191] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 319.368835][T16196] openvswitch: netlink: IP tunnel dst address not specified [ 319.984109][ T5150] Bluetooth: hci5: command 0x040f tx timeout [ 320.063349][T16242] __nla_validate_parse: 12 callbacks suppressed [ 320.063371][T16242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2903'. [ 320.117745][T16250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2904'. [ 320.136382][T16248] dvmrp6: entered allmulticast mode [ 320.156068][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2906'. [ 320.281661][T16257] netlink: 'syz.3.2908': attribute type 4 has an invalid length. [ 320.652966][T16293] openvswitch: netlink: Key type 105 is out of range max 32 [ 320.739410][T16299] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 320.771725][T16299] bond16: entered promiscuous mode [ 320.777051][T16299] bond16: entered allmulticast mode [ 320.782778][T16299] 8021q: adding VLAN 0 to HW filter on device bond16 [ 320.792426][T16297] syzkaller0: entered promiscuous mode [ 320.807001][T16297] syzkaller0: entered allmulticast mode [ 321.306055][T16339] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 321.695323][T16364] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2939'. [ 321.746753][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 321.863099][T16377] sctp: [Deprecated]: syz.2.2941 (pid 16377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.863099][T16377] Use struct sctp_sack_info instead [ 321.895008][T16377] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 321.925226][T16382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2944'. [ 321.991133][T16385] bond10: (slave gretap2): making interface the new active one [ 321.999689][T16385] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 322.067940][ T5833] Bluetooth: hci5: command 0x040f tx timeout [ 322.275576][T16405] delete_channel: no stack [ 322.300435][T16407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 322.595754][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 322.614896][T16416] openvswitch: netlink: Unknown nsh attribute 0 [ 322.625903][T16418] IPVS: Unknown mcast interface: vcan0 [ 322.632197][T16416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.634710][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 322.688119][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 322.709732][T16420] netlink: 'syz.1.2957': attribute type 44 has an invalid length. [ 322.740581][T16421] lo: entered allmulticast mode [ 322.746123][T16421] lo: left allmulticast mode [ 323.219224][T16448] tipc: Started in network mode [ 323.226019][T16448] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 323.252515][T16448] tipc: Enabled bearer , priority 2 [ 324.061538][T16490] tunl0: entered promiscuous mode [ 324.070110][T16490] netlink: 'syz.3.2978': attribute type 3 has an invalid length. [ 324.124494][T16495] Unsupported xt match [ 324.124513][T16495] unable to load match [ 324.147349][ T5833] Bluetooth: hci5: command 0x040f tx timeout [ 324.363826][ T9] tipc: Node number set to 10136234 [ 324.419767][T16510] sctp: [Deprecated]: syz.4.2983 (pid 16510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.419767][T16510] Use struct sctp_sack_info instead [ 324.448030][T16508] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 325.022665][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.035462][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.043800][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.051920][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.060296][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.124293][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.165043][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.178726][T16551] __nla_validate_parse: 5 callbacks suppressed [ 325.178744][T16551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2993'. [ 325.228792][T16551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2993'. [ 325.292557][T16555] netlink: 'syz.2.2994': attribute type 9 has an invalid length. [ 325.312691][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.331923][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.369561][T16543] bridge1: entered allmulticast mode [ 325.388858][T16561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2995'. [ 325.405749][T16539] wg1 speed is unknown, defaulting to 1000 [ 325.449414][T16566] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2996'. [ 325.519862][T16573] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.555907][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.573299][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.658113][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.689358][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.741423][T16588] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 325.839525][ T939] wg1 speed is unknown, defaulting to 1000 [ 325.863580][ T939] syz2: Port: 1 Link DOWN [ 325.933314][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'. [ 326.108817][ T75] team0: left allmulticast mode [ 326.116227][ T75] team_slave_0: left allmulticast mode [ 326.121850][ T75] team_slave_1: left allmulticast mode [ 326.127783][ T75] team0: left promiscuous mode [ 326.132664][ T75] team_slave_0: left promiscuous mode [ 326.141114][ T75] team_slave_1: left promiscuous mode [ 326.148722][ T75] bridge0: port 3(team0) entered disabled state [ 326.165369][ T75] bridge_slave_1: left allmulticast mode [ 326.171130][ T75] bridge_slave_1: left promiscuous mode [ 326.177886][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.194648][ T75] bridge_slave_0: left allmulticast mode [ 326.201685][ T75] bridge_slave_0: left promiscuous mode [ 326.217564][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.450807][ T75] bond8 (unregistering): (slave gretap1): Releasing active interface [ 326.472367][ T75] bond11 (unregistering): (slave gretap2): Releasing active interface [ 326.483047][ T75] gretap2 (unregistering): left allmulticast mode [ 326.954560][ T75] team0: Port device bridge8 removed [ 327.113764][ T5833] Bluetooth: hci1: command tx timeout [ 327.223196][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.232495][ T75] bond_slave_0: left promiscuous mode [ 327.241856][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.251050][ T75] bond_slave_1: left promiscuous mode [ 327.258363][ T75] bond0 (unregistering): Released all slaves [ 327.351990][ T75] bond1 (unregistering): Released all slaves [ 327.368653][ T75] bond2 (unregistering): Released all slaves [ 327.464497][ T75] bond3 (unregistering): Released all slaves [ 327.477480][ T75] bond4 (unregistering): Released all slaves [ 327.489961][ T75] bond5 (unregistering): Released all slaves [ 327.503827][ T75] bond6 (unregistering): Released all slaves [ 327.599621][ T75] bond7 (unregistering): Released all slaves [ 327.612149][ T75] bond8 (unregistering): Released all slaves [ 327.624981][ T75] bond9 (unregistering): Released all slaves [ 327.742569][ T75] bond10 (unregistering): Released all slaves [ 327.877918][ T75] bond11 (unregistering): Released all slaves [ 328.032389][T16539] chnl_net:caif_netlink_parms(): no params data found [ 328.178311][T16630] bond17: Unable to set down delay as MII monitoring is disabled [ 328.201464][T16630] bond17 (unregistering): Released all slaves [ 328.282751][ T75] : left promiscuous mode [ 328.305510][T16639] nbd: must specify at least one socket [ 328.319029][T16638] syzkaller0: entered promiscuous mode [ 328.326524][T16638] syzkaller0: entered allmulticast mode [ 328.347855][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3015'. [ 328.396855][T16626] xt_l2tp: v2 doesn't support IP mode [ 328.410276][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 328.422137][T16630] bond17: Unable to set down delay as MII monitoring is disabled [ 328.435473][T16630] bond17 (unregistering): Released all slaves [ 328.475456][T16646] sctp: [Deprecated]: syz.4.3016 (pid 16646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.475456][T16646] Use struct sctp_sack_info instead [ 328.539321][ T75] 9: left promiscuous mode [ 328.658046][T16630] bond17: Unable to set down delay as MII monitoring is disabled [ 328.671168][T16630] bond17 (unregistering): Released all slaves [ 328.784864][T16649] bond0: entered promiscuous mode [ 328.801930][T16649] bond_slave_0: entered promiscuous mode [ 328.809735][T16649] bond_slave_1: entered promiscuous mode [ 328.838584][ T75] tipc: Left network mode [ 328.920146][T16630] bond17: Unable to set down delay as MII monitoring is disabled [ 328.934597][T16630] bond17 (unregistering): Released all slaves [ 329.183593][ T5833] Bluetooth: hci1: command tx timeout [ 329.262322][T16539] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.272757][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.282848][T16539] bridge_slave_0: entered allmulticast mode [ 329.291235][T16539] bridge_slave_0: entered promiscuous mode [ 329.305332][T16539] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.312574][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.320281][T16539] bridge_slave_1: entered allmulticast mode [ 329.331277][T16539] bridge_slave_1: entered promiscuous mode [ 329.338826][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3024'. [ 329.351513][T16696] tipc: Enabled bearer , priority 10 [ 329.486778][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 329.611586][T16539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.641559][T16706] syzkaller0: entered promiscuous mode [ 329.654929][T16706] syzkaller0: entered allmulticast mode [ 329.680937][T16706] netlink: 'syz.4.3026': attribute type 10 has an invalid length. [ 329.689063][T16706] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3026'. [ 329.698313][ T75] hsr_slave_0: left promiscuous mode [ 329.706325][ T75] hsr_slave_1: left promiscuous mode [ 329.742336][ T75] vlan0: left allmulticast mode [ 329.748686][ T75] veth0_vlan: left allmulticast mode [ 329.754202][ T75] vlan0: left promiscuous mode [ 329.761481][ T75] veth1_macvtap: left promiscuous mode [ 329.769083][ T75] veth0_macvtap: left promiscuous mode [ 329.775401][ T75] veth1_vlan: left promiscuous mode [ 329.780680][ T75] veth0_vlan: left promiscuous mode [ 329.932384][ T75] pimreg3 (unregistering): left allmulticast mode [ 330.608193][ T75] team0 (unregistering): Port device team_slave_1 removed [ 330.645678][ T75] team0 (unregistering): Port device team_slave_0 removed [ 330.926582][T16539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.118316][T16539] team0: Port device team_slave_0 added [ 331.148796][T16539] team0: Port device team_slave_1 added [ 331.266044][ T5833] Bluetooth: hci1: command tx timeout [ 331.295465][T16539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.302439][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.370706][T16539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.390940][T16758] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3039'. [ 331.407112][T16539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.415804][T16539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.449514][T16762] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3040'. [ 331.459193][T16539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.665444][T16539] hsr_slave_0: entered promiscuous mode [ 331.672191][T16539] hsr_slave_1: entered promiscuous mode [ 331.711581][T16539] debugfs: 'hsr0' already exists in 'hsr' [ 331.723516][T16539] Cannot create hsr debugfs directory [ 331.734897][ T75] IPVS: stop unused estimator thread 0... [ 331.762984][T16774] netlink: 'syz.2.3044': attribute type 2 has an invalid length. [ 331.812807][T16774] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3044'. [ 331.829902][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 331.857671][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 332.054403][T16792] netlink: 'syz.1.3047': attribute type 1 has an invalid length. [ 332.095454][T16792] netlink: 'syz.1.3047': attribute type 2 has an invalid length. [ 332.113123][T16799] ip6t_srh: unknown srh invflags 4000 [ 332.124118][T16792] netlink: 'syz.1.3047': attribute type 1 has an invalid length. [ 332.482603][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 332.489879][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 332.685313][T16831] syzkaller0: entered promiscuous mode [ 332.704393][T16831] syzkaller0: entered allmulticast mode [ 333.068924][T16539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.087263][T16539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.115483][T16539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.138577][T16539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.274701][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3067'. [ 333.288602][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 333.313243][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'. [ 333.343600][ T5833] Bluetooth: hci1: command tx timeout [ 333.464710][T16539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.485306][T16539] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.505221][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.512418][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.573253][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.580578][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.642416][T16888] syzkaller1: entered promiscuous mode [ 333.648098][T16888] syzkaller1: entered allmulticast mode [ 333.691431][T16897] veth3: entered promiscuous mode [ 333.697113][T16897] veth3: entered allmulticast mode [ 333.731080][T16900] veth15: entered promiscuous mode [ 333.738894][T16900] veth15: entered allmulticast mode [ 333.870083][T16906] x_tables: unsorted entry at hook 1 [ 334.297653][T16539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.521039][T16539] veth0_vlan: entered promiscuous mode [ 334.555750][T16539] veth1_vlan: entered promiscuous mode [ 334.651138][T16962] x_tables: duplicate underflow at hook 2 [ 334.666745][T16539] veth0_macvtap: entered promiscuous mode [ 334.689213][T16539] veth1_macvtap: entered promiscuous mode [ 334.748537][T16539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.780594][T16539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.806859][ T1324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.830544][ T1324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.858249][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.878001][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.063015][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.080690][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.105925][T16987] IPVS: ip_vs_add_dest(): server weight less than zero [ 335.158227][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.177203][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.573286][T17009] x_tables: unsorted underflow at hook 4 [ 336.130263][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.140924][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.149864][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.166187][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.177716][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.259268][T17041] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 336.843380][T17036] chnl_net:caif_netlink_parms(): no params data found [ 336.971054][T17092] __nla_validate_parse: 4 callbacks suppressed [ 336.971067][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 337.066830][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.074231][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.091701][T17036] bridge_slave_0: entered allmulticast mode [ 337.102941][T17036] bridge_slave_0: entered promiscuous mode [ 337.113118][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.121074][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.128551][T17036] bridge_slave_1: entered allmulticast mode [ 337.137170][T17036] bridge_slave_1: entered promiscuous mode [ 337.239110][T17036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.254533][T17036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.328313][T17036] team0: Port device team_slave_0 added [ 337.340154][T17113] pimreg: entered allmulticast mode [ 337.349479][T17036] team0: Port device team_slave_1 added [ 337.372684][T17116] netlink: 'syz.3.3124': attribute type 33 has an invalid length. [ 337.459079][T17036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.466811][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.554862][T17036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.568074][T17036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.625148][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.655273][T17036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.790109][T17140] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3128'. [ 337.821070][T17036] hsr_slave_0: entered promiscuous mode [ 337.833199][T17036] hsr_slave_1: entered promiscuous mode [ 337.846092][T17036] debugfs: 'hsr0' already exists in 'hsr' [ 337.851861][T17036] Cannot create hsr debugfs directory [ 338.170136][T17158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3133'. [ 338.209606][T17161] netlink: 'syz.1.3134': attribute type 1 has an invalid length. [ 338.224243][ T5833] Bluetooth: hci2: command tx timeout [ 338.226378][T17161] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3134'. [ 338.342784][T17167] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 338.388964][T17168] netlink: 'syz.3.3136': attribute type 4 has an invalid length. [ 338.468709][T17175] ipt_REJECT: TCP_RESET invalid for non-tcp [ 338.521441][T17177] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 338.531051][T17177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.645438][T17036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.680706][T17036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.710671][T17036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.732410][T17036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.873087][T17198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.960722][T17036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.988221][T17036] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.006860][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.014076][ T9109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.050268][ T9109] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.057500][ T9109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.203845][T17221] ipt_ECN: cannot use operation on non-tcp rule [ 339.226371][T17221] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3151'. [ 339.265417][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 339.281541][T17225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3153'. [ 339.311483][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3151'. [ 339.313992][T17225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3153'. [ 339.332077][T17227] openvswitch: netlink: Flow key attr not present in new flow. [ 339.353363][T17223] syzkaller1: entered promiscuous mode [ 339.428342][T17231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3154'. [ 339.476207][T17231] "syz.3.3154" (17231) uses obsolete ecb(arc4) skcipher [ 339.515746][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.746519][T17249] syzkaller0: entered promiscuous mode [ 339.752031][T17249] syzkaller0: entered allmulticast mode [ 339.790627][T17256] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 340.012152][T17265] netem: change failed [ 340.138365][T17036] veth0_vlan: entered promiscuous mode [ 340.185836][T17036] veth1_vlan: entered promiscuous mode [ 340.302578][T17036] veth0_macvtap: entered promiscuous mode [ 340.309649][ T5833] Bluetooth: hci2: command tx timeout [ 340.336138][T17036] veth1_macvtap: entered promiscuous mode [ 340.381651][T17036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.409381][T17036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.433289][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.475998][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.499414][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.571878][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.586029][T17298] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 340.619173][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.633277][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.692772][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.717320][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.483259][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.494178][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.505582][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.519263][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.528844][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.534160][ T5838] syz_tun (unregistering): left allmulticast mode [ 341.931451][T17361] syzkaller0: entered promiscuous mode [ 341.937146][T17361] syzkaller0: entered allmulticast mode [ 341.976804][T17366] bridge5: entered promiscuous mode [ 341.982191][T17366] bridge5: entered allmulticast mode [ 342.394532][ T5833] Bluetooth: hci2: command tx timeout [ 343.487458][T17378] tipc: New replicast peer: 255.255.255.255 [ 343.494394][T17378] tipc: Enabled bearer , priority 10 [ 343.583844][ T5833] Bluetooth: hci0: command tx timeout [ 343.630909][T17342] chnl_net:caif_netlink_parms(): no params data found [ 343.695466][T17386] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 343.755739][T17394] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 343.764778][T17394] __nla_validate_parse: 8 callbacks suppressed [ 343.764796][T17394] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3202'. [ 343.998360][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3204'. [ 344.070688][T17415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3207'. [ 344.080327][T17415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3207'. [ 344.081304][T17342] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.098836][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.108792][T17342] bridge_slave_0: entered allmulticast mode [ 344.118700][T17342] bridge_slave_0: entered promiscuous mode [ 344.127678][T17342] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.135027][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.142291][T17342] bridge_slave_1: entered allmulticast mode [ 344.150583][T17342] bridge_slave_1: entered promiscuous mode [ 344.276598][T17342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.286280][T17423] netlink: 'syz.0.3210': attribute type 58 has an invalid length. [ 344.286303][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3210'. [ 344.345992][T17342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.446481][T17433] netlink: 'syz.2.3214': attribute type 2 has an invalid length. [ 344.456138][T17342] team0: Port device team_slave_0 added [ 344.468282][ T5833] Bluetooth: hci2: command tx timeout [ 344.475800][T17342] team0: Port device team_slave_1 added [ 344.479765][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3214'. [ 344.499168][T17437] Bluetooth: MGMT ver 1.23 [ 344.508791][T17433] ipt_rpfilter: unknown options [ 344.536029][T17434] xt_hashlimit: max too large, truncated to 1048576 [ 344.536785][T17342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.552037][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.579328][T17342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.604982][T17342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.612032][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.640940][T17342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.677428][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 344.719992][T17342] hsr_slave_0: entered promiscuous mode [ 344.727460][T17342] hsr_slave_1: entered promiscuous mode [ 344.735645][T17342] debugfs: 'hsr0' already exists in 'hsr' [ 344.741475][T17342] Cannot create hsr debugfs directory [ 344.921256][T17455] netlink: 'syz.4.3222': attribute type 10 has an invalid length. [ 344.932782][T17455] batman_adv: batadv0: Adding interface: netdevsim0 [ 344.940063][T17455] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.967574][T17455] batman_adv: batadv0: Interface activated: netdevsim0 [ 345.659172][T17342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.673626][ T5833] Bluetooth: hci0: command tx timeout [ 345.697465][T17342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.735083][T17342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.777868][T17342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.870039][T17501] bond11: entered promiscuous mode [ 345.875775][T17501] bond11: entered allmulticast mode [ 345.882143][T17501] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.925499][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3238'. [ 346.035185][T17525] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3241'. [ 346.176113][T17342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.280585][T17536] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3245'. [ 346.283063][T17342] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.319838][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.327064][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.340746][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.347975][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.391089][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.433745][T17540] bridge_slave_1 (unregistering): left allmulticast mode [ 346.440825][T17540] bridge_slave_1 (unregistering): left promiscuous mode [ 346.451013][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.553311][T17548] macvtap0: entered allmulticast mode [ 346.606975][T17553] bond2: option all_slaves_active: invalid value (222) [ 346.628286][T17553] bond2 (unregistering): Released all slaves [ 347.261917][T17342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.384291][T17609] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 347.395281][T17609] syzkaller0: entered promiscuous mode [ 347.402017][T17609] syzkaller0: entered allmulticast mode [ 347.411002][T17342] veth0_vlan: entered promiscuous mode [ 347.432985][T17342] veth1_vlan: entered promiscuous mode [ 347.479067][T17603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.568428][T17342] veth0_macvtap: entered promiscuous mode [ 347.630911][T17342] veth1_macvtap: entered promiscuous mode [ 347.739041][T17624] 8021q: adding VLAN 0 to HW filter on device ` [ 347.746294][ T5833] Bluetooth: hci0: command tx timeout [ 347.756401][T17624] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.769718][T17624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.790469][T17342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.821899][T17629] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 347.836351][T17629] bond1 (unregistering): Released all slaves [ 347.867807][T17627] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 347.879581][T17627] bond1 (unregistering): Released all slaves [ 347.929497][T17342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.974953][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.001029][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.044410][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.083809][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.178045][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.207300][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.456989][T17673] sctp: [Deprecated]: syz.2.3284 (pid 17673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.456989][T17673] Use struct sctp_sack_info instead [ 349.039499][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.073844][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.086800][T17678] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 349.164843][T17681] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 349.197141][T17678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.220277][T17689] __nla_validate_parse: 4 callbacks suppressed [ 349.220297][T17689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3286'. [ 349.264606][T17678] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 349.272399][T17678] netlink: 'syz.3.3285': attribute type 7 has an invalid length. [ 349.344612][T17678] netlink: 'syz.3.3285': attribute type 8 has an invalid length. [ 349.362891][T17686] bond1: (slave veth5): Enslaving as an active interface with a down link [ 349.373787][T17678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3285'. [ 349.424420][T17695] vlan2: entered allmulticast mode [ 349.433646][T17695] veth1: entered allmulticast mode [ 349.475214][T17695] veth1: entered promiscuous mode [ 349.525029][T17695] veth1: left promiscuous mode [ 349.555828][T17695] bond1: (slave vlan2): making interface the new active one [ 349.564835][T17701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3290'. [ 349.606466][T17695] veth1: entered promiscuous mode [ 349.625093][T17695] vlan2: entered promiscuous mode [ 349.642433][T17695] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 349.804632][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.817300][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.828018][ T5150] Bluetooth: hci0: command tx timeout [ 349.834247][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.842488][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.851437][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.914904][T17712] netlink: 'syz.3.3295': attribute type 3 has an invalid length. [ 349.966617][T17712] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3295'. [ 350.140338][T17722] netlink: 'syz.3.3295': attribute type 3 has an invalid length. [ 350.150085][T17722] netlink: 'syz.3.3295': attribute type 1 has an invalid length. [ 350.170162][T17722] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3295'. [ 350.210034][T17712] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.329514][T17712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.350402][T17712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.552807][T17713] geneve2: entered promiscuous mode [ 350.606875][T12473] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.619337][T12473] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 350.628907][T12473] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.658791][T12473] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 350.790456][ T1324] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.827477][T12473] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.840697][T12473] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 350.850811][T12473] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.861210][T12473] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 350.899319][ T1324] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.969179][T17748] pim6reg1: entered promiscuous mode [ 350.972621][T17751] netlink: 'syz.3.3303': attribute type 27 has an invalid length. [ 350.976306][T17748] pim6reg1: entered allmulticast mode [ 350.990122][T17751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3303'. [ 350.999329][T17754] netlink: 'syz.4.3304': attribute type 6 has an invalid length. [ 351.011005][T17755] netlink: 'syz.4.3304': attribute type 6 has an invalid length. [ 351.096942][ T1324] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.214056][T17760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3305'. [ 351.238128][T17760] dummy0: entered promiscuous mode [ 351.246283][T17760] bridge0: port 3(dummy0) entered blocking state [ 351.252954][T17760] bridge0: port 3(dummy0) entered disabled state [ 351.277437][T17760] dummy0: entered allmulticast mode [ 351.285782][T17760] bridge0: port 3(dummy0) entered blocking state [ 351.292317][T17760] bridge0: port 3(dummy0) entered forwarding state [ 351.322980][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3308'. [ 351.351116][T17765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3307'. [ 351.370204][T17704] chnl_net:caif_netlink_parms(): no params data found [ 351.399713][ T1324] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.680831][T17783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3310'. [ 351.691004][T17704] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.698617][T17704] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.708427][T17704] bridge_slave_0: entered allmulticast mode [ 351.716558][T17704] bridge_slave_0: entered promiscuous mode [ 351.754420][T17704] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.761792][T17704] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.769830][T17704] bridge_slave_1: entered allmulticast mode [ 351.780354][T17704] bridge_slave_1: entered promiscuous mode [ 351.891381][T17704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.905559][ T5150] Bluetooth: hci4: command tx timeout [ 351.915135][T17704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.110924][T17704] team0: Port device team_slave_0 added [ 352.313087][ T1324] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 352.326549][ T1324] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 352.350392][ T1324] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 352.453344][ T1324] erspan0 (unregistering): left promiscuous mode [ 352.515663][ T1324] bond10 (unregistering): (slave gretap2): Releasing active interface [ 352.881109][ T1324] ` (unregistering): Released all slaves [ 352.982511][ T1324] bond1 (unregistering): Released all slaves [ 352.995701][ T1324] bond2 (unregistering): Released all slaves [ 353.099510][ T1324] bond3 (unregistering): Released all slaves [ 353.112972][ T1324] bond4 (unregistering): Released all slaves [ 353.218909][ T1324] bond5 (unregistering): (slave veth3): Releasing active interface [ 353.229184][ T1324] bond5 (unregistering): (slave vlan2): Releasing active interface [ 353.238043][ T1324] bond5 (unregistering): Released all slaves [ 353.250657][ T1324] bond6 (unregistering): Released all slaves [ 353.263043][ T1324] bond0 (unregistering): Released all slaves [ 353.372847][ T1324] bond7 (unregistering): (slave veth5): Releasing active interface [ 353.383030][ T1324] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 353.394332][ T1324] bond7 (unregistering): (slave veth7): Releasing active interface [ 353.404043][ T1324] bond7 (unregistering): Released all slaves [ 353.418215][ T1324] bond8 (unregistering): Released all slaves [ 353.521086][ T1324] bond9 (unregistering): Released all slaves [ 353.533660][ T1324] bond10 (unregistering): Released all slaves [ 353.635193][ T1324] bond11 (unregistering): Released all slaves [ 353.649323][T17704] team0: Port device team_slave_1 added [ 353.748235][T17704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.773698][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.843557][T17704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.873255][T17704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.882727][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.920679][T17704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.933584][ T1324] 9: left promiscuous mode [ 353.958787][T17824] sch_fq: defrate 0 ignored. [ 353.974957][ T1324] : left promiscuous mode [ 353.996398][ T5150] Bluetooth: hci4: command tx timeout [ 354.085337][ T1324] tipc: Disabling bearer [ 354.104590][ T1324] tipc: Left network mode [ 354.149004][T17704] hsr_slave_0: entered promiscuous mode [ 354.169992][T17704] hsr_slave_1: entered promiscuous mode [ 354.190956][T17704] debugfs: 'hsr0' already exists in 'hsr' [ 354.209847][T17704] Cannot create hsr debugfs directory [ 354.431057][T17848] validate_nla: 3 callbacks suppressed [ 354.431074][T17848] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 354.453239][T17852] __nla_validate_parse: 1 callbacks suppressed [ 354.453256][T17852] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3328'. [ 354.548912][T17848] bond2 (unregistering): Released all slaves [ 354.825756][T17867] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 354.976086][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3334'. [ 355.259741][T17894] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3340'. [ 355.286156][T17893] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 355.323648][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 355.422831][T17893] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3341'. [ 355.507818][T17905] nbd: nbd3 already in use [ 355.512709][T17905] nbd: couldn't find device at index -35 [ 355.997157][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 356.038017][T11466] IPVS: starting estimator thread 0... [ 356.064560][ T5150] Bluetooth: hci4: command tx timeout [ 356.135598][T17947] IPVS: using max 34 ests per chain, 81600 per kthread [ 356.171560][ T1324] hsr_slave_1: left promiscuous mode [ 356.231062][ T1324] pimreg (unregistering): left allmulticast mode [ 356.316736][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3354'. [ 356.628053][T17974] netlink: 'syz.1.3360': attribute type 63 has an invalid length. [ 356.678813][T17973] netlink: 'syz.1.3360': attribute type 63 has an invalid length. [ 357.259998][T17704] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.291737][T17704] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.312556][T17704] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.366392][T17704] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.379308][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 357.415566][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3361'. [ 357.427261][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 357.648210][ T1324] IPVS: stop unused estimator thread 0... [ 357.766694][T17704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.946739][T17704] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.988011][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.995238][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.065685][T12473] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.072848][T12473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.147256][ T5150] Bluetooth: hci4: command tx timeout [ 358.151959][T18033] tap0: tun_chr_ioctl cmd 2148553947 [ 358.365674][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a228400: rx timeout, send abort [ 358.482540][T18048] IPVS: Error connecting to the multicast addr [ 358.604663][T18052] syzkaller0: entered promiscuous mode [ 358.610272][T18052] syzkaller0: entered allmulticast mode [ 358.649226][T17704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.764398][T17704] veth0_vlan: entered promiscuous mode [ 358.795667][T17704] veth1_vlan: entered promiscuous mode [ 358.851655][T17704] veth0_macvtap: entered promiscuous mode [ 358.865789][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a228800: rx timeout, send abort [ 358.875142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a228400: abort rx timeout. Force session deactivation [ 358.877651][T17704] veth1_macvtap: entered promiscuous mode [ 358.939071][T17704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.036770][T18079] netlink: 'syz.0.3387': attribute type 83 has an invalid length. [ 359.044777][T17704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.138196][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.185768][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.352285][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.371812][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.380634][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a228800: abort rx timeout. Force session deactivation [ 359.626543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.635451][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.689470][T18113] IPv4: Oversized IP packet from 127.202.26.0 [ 359.871793][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.884521][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.081130][T18126] __nla_validate_parse: 5 callbacks suppressed [ 360.081149][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3289'. [ 360.172070][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 360.226948][T18134] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.236408][T18134] netlink: 'syz.1.3397': attribute type 21 has an invalid length. [ 360.426248][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3401'. [ 360.722658][T18157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3405'. [ 360.759309][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3405'. [ 360.770474][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 360.806484][T18160] syz.3.3406: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 360.868178][T18160] CPU: 0 UID: 0 PID: 18160 Comm: syz.3.3406 Not tainted syzkaller #0 PREEMPT(full) [ 360.868206][T18160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.868224][T18160] Call Trace: [ 360.868233][T18160] [ 360.868241][T18160] dump_stack_lvl+0x189/0x250 [ 360.868275][T18160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.868298][T18160] ? __pfx__printk+0x10/0x10 [ 360.868325][T18160] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.868349][T18160] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.868374][T18160] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 360.868401][T18160] warn_alloc+0x214/0x310 [ 360.868427][T18160] ? stack_depot_save_flags+0x40/0x860 [ 360.868457][T18160] ? __pfx_warn_alloc+0x10/0x10 [ 360.868484][T18160] ? kasan_save_track+0x3e/0x80 [ 360.868505][T18160] ? __kasan_kmalloc+0x93/0xb0 [ 360.868530][T18160] ? xsk_setsockopt+0x4dc/0x8d0 [ 360.868550][T18160] ? do_sock_setsockopt+0x17c/0x1b0 [ 360.868566][T18160] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 360.868583][T18160] ? do_syscall_64+0xfa/0xfa0 [ 360.868606][T18160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.868634][T18160] __vmalloc_node_range_noprof+0x125/0x12d0 [ 360.868689][T18160] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.868718][T18160] ? __kasan_kmalloc+0x93/0xb0 [ 360.868748][T18160] vmalloc_user_noprof+0xad/0xf0 [ 360.868772][T18160] ? xskq_create+0xbf/0x170 [ 360.868794][T18160] xskq_create+0xbf/0x170 [ 360.868820][T18160] xsk_init_queue+0xb0/0x110 [ 360.868845][T18160] xsk_setsockopt+0x4dc/0x8d0 [ 360.868870][T18160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 360.868894][T18160] ? __pfx_aa_sk_perm+0x10/0x10 [ 360.868920][T18160] ? aa_sock_opt_perm+0xff/0x1b0 [ 360.868948][T18160] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 360.868966][T18160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 360.868989][T18160] do_sock_setsockopt+0x17c/0x1b0 [ 360.869012][T18160] __x64_sys_setsockopt+0x13f/0x1b0 [ 360.869038][T18160] do_syscall_64+0xfa/0xfa0 [ 360.869060][T18160] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.869084][T18160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.869102][T18160] ? clear_bhb_loop+0x60/0xb0 [ 360.869124][T18160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.869146][T18160] RIP: 0033:0x7fee4318f749 [ 360.869171][T18160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.869186][T18160] RSP: 002b:00007fee44028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 360.869205][T18160] RAX: ffffffffffffffda RBX: 00007fee433e5fa0 RCX: 00007fee4318f749 [ 360.869217][T18160] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 360.869228][T18160] RBP: 00007fee43213f91 R08: 0000000000000004 R09: 0000000000000000 [ 360.869239][T18160] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.869251][T18160] R13: 00007fee433e6038 R14: 00007fee433e5fa0 R15: 00007ffcffd37ae8 [ 360.869283][T18160] [ 361.173650][T18160] Mem-Info: [ 361.176877][T18160] active_anon:4670 inactive_anon:0 isolated_anon:0 [ 361.176877][T18160] active_file:2821 inactive_file:39985 isolated_file:0 [ 361.176877][T18160] unevictable:768 dirty:103 writeback:0 [ 361.176877][T18160] slab_reclaimable:12597 slab_unreclaimable:122550 [ 361.176877][T18160] mapped:29027 shmem:1357 pagetables:1168 [ 361.176877][T18160] sec_pagetables:0 bounce:0 [ 361.176877][T18160] kernel_misc_reclaimable:0 [ 361.176877][T18160] free:1305070 free_pcp:13400 free_cma:0 [ 361.224067][T18160] Node 0 active_anon:18440kB inactive_anon:0kB active_file:11284kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116104kB dirty:416kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14204kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.255966][T18160] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.286595][T18160] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.317226][T18160] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 361.326014][T18160] Node 0 DMA32 free:1307196kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18440kB inactive_anon:0kB active_file:11284kB inactive_file:159744kB unevictable:1536kB writepending:404kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:38024kB local_pcp:16928kB free_cma:0kB [ 361.359785][T18160] lowmem_reserve[]: 0 0 0 0 0 [ 361.365880][T18160] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.395542][T18160] lowmem_reserve[]: 0 0 0 0 0 [ 361.402115][T18160] Node 1 Normal free:3897468kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:8992kB free_cma:0kB [ 361.434895][T18160] lowmem_reserve[]: 0 0 0 0 0 [ 361.439711][T18160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.453168][T18160] Node 0 DMA32: 274*4kB (UME) 164*8kB (UME) 6*16kB (UM) 156*32kB (UM) 49*64kB (U) 43*128kB (UME) 173*256kB (UME) 159*512kB (UME) 62*1024kB (UM) 16*2048kB (UM) 261*4096kB (UM) = 1307144kB [ 361.466978][T18174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3411'. [ 361.473283][T18160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 361.493977][T18160] Node 1 Normal: 211*4kB (UME) 66*8kB (UME) 40*16kB (UME) 165*32kB (UME) 50*64kB (UME) 15*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3897468kB [ 361.513991][T18160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.524788][T18160] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.533533][T18174] bridge0: port 3(dummy0) entered disabled state [ 361.534302][T18160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.540725][T18174] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.550924][T18160] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.558235][T18174] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.567338][T18160] 44160 total pagecache pages [ 361.579313][T18160] 0 pages in swap cache [ 361.587487][T18160] Free swap = 124996kB [ 361.592598][T18160] Total swap = 124996kB [ 361.597451][T18160] 2097051 pages RAM [ 361.609467][T18160] 0 pages HighMem/MovableOnly [ 361.614464][T18160] 424124 pages reserved [ 361.619247][T18160] 0 pages cma reserved [ 361.629608][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'. [ 361.828648][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 361.872158][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3414'. [ 362.228056][T18209] wireguard0: entered promiscuous mode [ 362.234330][T18209] wireguard0: entered allmulticast mode [ 362.247879][T18209] team0: Device wireguard0 is of different type [ 362.424985][T18222] netlink: 'syz.1.3426': attribute type 1 has an invalid length. [ 362.493903][T18222] bond1: (slave gretap1): making interface the new active one [ 362.502331][T18222] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 362.737773][T18245] netlink: 'syz.3.3433': attribute type 11 has an invalid length. [ 362.989126][T18255] kthread_run failed with err -4 [ 363.244034][T18273] bridge1: entered promiscuous mode [ 363.249645][T18273] bridge1: entered allmulticast mode [ 363.258243][T18273] team0: Port device bridge1 added [ 363.473797][T18297] : entered promiscuous mode [ 363.605874][T18305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.729007][T18310] netlink: 'syz.0.3450': attribute type 21 has an invalid length. [ 363.788386][T18310] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 363.840088][T18318] bridge_slave_0: default FDB implementation only supports local addresses [ 363.940090][T18319] veth0: entered promiscuous mode [ 363.978635][T18312] veth0: left promiscuous mode [ 364.011548][T18332] xt_hashlimit: overflow, rate too high: 0 [ 364.276143][T18350] netlink: 'syz.4.3461': attribute type 29 has an invalid length. [ 364.295366][T18350] netlink: 'syz.4.3461': attribute type 29 has an invalid length. [ 364.454775][T18363] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 364.566640][T18370] gretap1: entered promiscuous mode [ 365.369323][T18383] __nla_validate_parse: 12 callbacks suppressed [ 365.369343][T18383] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3468'. [ 365.475061][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.487010][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.499094][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.507587][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.515971][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.524494][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.532685][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.554623][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.563850][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.588772][T18407] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 365.683592][ T36] [ 365.685953][ T36] ============================================ [ 365.692100][ T36] WARNING: possible recursive locking detected [ 365.698270][ T36] syzkaller #0 Not tainted [ 365.702676][ T36] -------------------------------------------- [ 365.708985][ T36] kworker/u8:2/36 is trying to acquire lock: [ 365.715123][ T36] ffffe8ffffd73f68 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 365.724321][ T36] [ 365.724321][ T36] but task is already holding lock: [ 365.731663][ T36] ffffe8ffffc7e720 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 365.741048][ T36] [ 365.741048][ T36] other info that might help us debug this: [ 365.749204][ T36] Possible unsafe locking scenario: [ 365.749204][ T36] [ 365.756642][ T36] CPU0 [ 365.759917][ T36] ---- [ 365.763171][ T36] lock(&pd_list->lock); [ 365.767485][ T36] lock(&pd_list->lock); [ 365.771794][ T36] [ 365.771794][ T36] *** DEADLOCK *** [ 365.771794][ T36] [ 365.779917][ T36] May be due to missing lock nesting notation [ 365.779917][ T36] [ 365.788214][ T36] 3 locks held by kworker/u8:2/36: [ 365.793300][ T36] #0: ffff88801fb69948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 365.805192][ T36] #1: ffffc90000ac7ba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 365.817090][ T36] #2: ffffe8ffffc7e720 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 365.826826][ T36] [ 365.826826][ T36] stack backtrace: [ 365.832700][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 365.832713][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.832721][ T36] Workqueue: pencrypt_parallel padata_parallel_worker [ 365.832739][ T36] Call Trace: [ 365.832746][ T36] [ 365.832751][ T36] dump_stack_lvl+0x189/0x250 [ 365.832766][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.832778][ T36] ? __pfx__printk+0x10/0x10 [ 365.832788][ T36] ? print_lock_name+0xde/0x100 [ 365.832798][ T36] print_deadlock_bug+0x28b/0x2a0 [ 365.832810][ T36] validate_chain+0x1a3f/0x2140 [ 365.832822][ T36] ? irqentry_exit+0x74/0x90 [ 365.832835][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.832847][ T36] ? look_up_lock_class+0x74/0x170 [ 365.832860][ T36] ? register_lock_class+0x51/0x320 [ 365.832870][ T36] __lock_acquire+0xab9/0xd20 [ 365.832880][ T36] ? padata_do_serial+0x707/0xb80 [ 365.832890][ T36] lock_acquire+0x120/0x360 [ 365.832899][ T36] ? padata_do_serial+0x707/0xb80 [ 365.832912][ T36] _raw_spin_lock+0x2e/0x40 [ 365.832924][ T36] ? padata_do_serial+0x707/0xb80 [ 365.832934][ T36] padata_do_serial+0x707/0xb80 [ 365.832948][ T36] ? padata_parallel_worker+0x44/0x1d0 [ 365.832959][ T36] padata_parallel_worker+0x75/0x1d0 [ 365.832970][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 365.832980][ T36] process_scheduled_works+0xae1/0x17b0 [ 365.832996][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 365.833009][ T36] worker_thread+0x8a0/0xda0 [ 365.833024][ T36] kthread+0x711/0x8a0 [ 365.833037][ T36] ? __pfx_worker_thread+0x10/0x10 [ 365.833046][ T36] ? __pfx_kthread+0x10/0x10 [ 365.833057][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.833068][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.833080][ T36] ? __pfx_kthread+0x10/0x10 [ 365.833091][ T36] ret_from_fork+0x4bc/0x870 [ 365.833101][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 365.833112][ T36] ? __switch_to_asm+0x39/0x70 [ 365.833119][ T36] ? __switch_to_asm+0x33/0x70 [ 365.833126][ T36] ? __pfx_kthread+0x10/0x10 [ 365.833137][ T36] ret_from_fork_asm+0x1a/0x30 [ 365.833148][ T36] [ 366.064356][ T5833] Bluetooth: hci4: command 0x0405 tx timeout