last executing test programs: 30.63149697s ago: executing program 2 (id=3943): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x68, r8, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44015}, 0x20000040) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r4) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x134, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_APDU={0x69, 0x19, "9b69acdc14aae7bfa94679c17d1216694cf48454d15a4f37443d9c20c34672ae1d7206050f56f0ea29f76be24ba3d791d2dd3ec903506a900e7903e64216abadab454aa35a624b63ea8c580a46ea1d367af05f3a921a2895bffab3e4e5ebd2e1df813953ee"}, @NFC_ATTR_SE_APDU={0x99, 0x19, "20db2f2d3d0b965a7cfe96e5a02b912c97b41a1ac5058e07abd939741b61ec615b71fc65d1266629e3bbc1acd30e41429c4a65391a82d831193ac56f983c95dfdce7aa634990fd9e68351dac54d32700dd9ea3b9f819db23cde8a937ac65924555517942faf4c6f03fbfb566dca484ba97035552fd3b205efd9215fd4d1957ecb12529e3d09331bf2fae0f14c444d93dc88e04ae17"}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008000000000000000000000000800"/28], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r12, &(0x7f0000000100)}, 0x20) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0xe5}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x40, 0x0, 0x100, 0xfffd, 0x2}) syz_emit_ethernet(0x200000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 29.807383665s ago: executing program 0 (id=3947): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r1, @ANYBLOB="10005a800a00008005fff80041000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 28.299051653s ago: executing program 0 (id=3948): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000002, 0x6e073, 0xffffffffffffffff, 0x100000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xfffe, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6, 0x0, 0x0, 0x2000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) 28.163454365s ago: executing program 2 (id=3950): r0 = epoll_create(0x7) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) (async) r3 = epoll_create1(0x0) (async) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)) (async) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x523374f2, &(0x7f0000000240), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000080)={0x1008}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)) 27.913114868s ago: executing program 0 (id=3952): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000000)="96bc1480bb35", 0x6}, {&(0x7f0000001240)="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", 0x5c1}], 0x3, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x4000000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @multicast1}, &(0x7f00000000c0)=0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="9500a6dd0b2b907fb5fffcff010000001801000000000000000000000000000ac6b53b378a4fde274fb23f8229fe7af7eb14d50393c1f94dd8efe234fe87707c838feb0e8186eeafd2b95ca277002358623d329eeb9a8ff36b5f11f03ca0a0b7d19ee4af96a0d4b972b0f10d9138a3ca424f8d829ffd6f7cca47692011092e151b047ab57230c4a339ac428cfbcd08a11cf100bbcc0c782000955f281543a6439b35ffb7283c080000005a694fd898f3508e"], &(0x7f0000000080)='GPL\x00', 0x7f, 0x9f, &(0x7f0000000140)=""/159, 0x41000, 0x9, '\x00', r4, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x4, 0x30d18cb0, 0x3}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000400)=[r5], &(0x7f0000000440), 0x10, 0x3000000}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r8, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.66968464s ago: executing program 1 (id=3954): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) (async) write$cgroup_subtree(r0, 0x0, 0xfffffeb0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) 27.458277649s ago: executing program 4 (id=3955): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0x1ff, 0x3, &(0x7f0000000240)="ae14566140a3f29d7b2eedabe9eac173907ce7e3912a4bf997414f03eead6df4b6c5cc7a0967ca799cdf117c17c6fb97d678a0da", 0x34) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r2, 0x0, 0x0, 0x8000, &(0x7f0000000980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x3, 0x3, 0x1, 0x2}}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018470000000000000c0000000c000000040000000c000000000000080000000000302e00"], &(0x7f00000002c0)=""/230, 0x28, 0xe6, 0x1, 0xd5}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x5, 0x4, 0x0, 0x64202, r3, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000280)={@dev, @private, 0x0}, &(0x7f0000000480)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', r8, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.263393493s ago: executing program 1 (id=3956): r0 = socket$inet6(0xa, 0x1, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000500)="6000000400143340000000000000ea0000c0000000000000000000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) 27.094601744s ago: executing program 3 (id=3957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x3c, &(0x7f0000000100), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x5, 0x3, 0x2}) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x0, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x80}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000380)={'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00020000000800020005"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61109c00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) (async) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x3c, &(0x7f0000000100), 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x5, 0x3, 0x2}) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x0, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x80}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000380)={'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000008000700ac1414aa05000800e000000106000b00020000000800020005"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61109c00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) 27.031519026s ago: executing program 2 (id=3958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x1, 0x11, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 26.66481448s ago: executing program 3 (id=3959): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000000000000af73780ecb2a9dbdbdb6241504b091", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400001dac4147ee212fa4c37800000000000000c5c80000186e"], 0x50) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x60, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x7, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x5c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, 0xfffffffffffffffe, &(0x7f00000002c0)=""/136, 0x4}, 0x20) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010001", 0x7) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000440), &(0x7f0000000300)=0x8) sendmsg$xdp(r5, &(0x7f0000000740)={&(0x7f0000000040)={0x2c, 0x4, r4, 0x1a}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000180)="4e4363d78bfa9eca56ff6a58c90e25f437c3ef440d31c6245d2dacbbe3807e7d8785365a991545a88ab809a2c9772da84cd4ad5a390eca37", 0x38}, {&(0x7f0000000240)="7581e1326cc3e1e974eef5ad9366dfd8d1c34ec073dc931ed6ae717201d6d85cf929b9984b66dcd615c433a83e5bf03ae18f940fd35cf1cbbc85927962b0965338", 0x41}, {&(0x7f0000000500)="0662fbd19f582d3fa2cbcff77df7af135cfe240af9eaf44611483ff02de3baa1941e58f5f75adfb084fa658e6cd0a692af6911bf3b9d84a3549cdbe295ddd7594d3d7135939bf775bf1422faa5514f6a1557d412445eb4756e8f9b4e5999abbacd0f22cc81ece3422211cb2915d48c1ed3a81d35191da444004ad184fd00a6d3cb4a23b49fd867a64cfc733670ce", 0x8e}, {&(0x7f00000005c0)="dd27e281ed7936e7735bd7aa860ae81c8dc92af48819710ed7167c99c0a5b7ee1dc4193d755b453096f8ab4d21d6a654cc952737d8367f38cf0e9e4370f904eda59e583d7e671444053cf198d34183c5a8646db2d7cb658ae0c1e13aef3ddda7abdaaf8c2f80ed2b22e34cc1cfbc712b841c32c8c3", 0x75}, {&(0x7f0000000640)="cafb3ff05b7ea9446e4b263fbddedd1e8fb008bbef1bbdba1a2b2f8b7bdffa06761e6701e8020b3c0947da1cd0071d49", 0x30}, {&(0x7f0000000680)="95fde677c674ec110aa17b8c9b5d5327aa8506b6f3fffe0dbe1b797430e65227beae25b564f68668602b72cc88d3395c4fffdd6e", 0x34}], 0x6, 0x0, 0x0, 0x20000801}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x800}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 26.231298468s ago: executing program 0 (id=3960): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x2b, 0x1, 0x0) (rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="28a4fbf28a1859d2000000284857420080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r0, 0x4}, 0x38) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 26.230643379s ago: executing program 1 (id=3961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f00000013c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="31155151a4f350805e7ac5706c74c383e5406da5505c8fdf7107d4288c", @ANYBLOB="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", @ANYRES16=r0], 0x494}], 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) close(0xffffffffffffffff) write(r2, &(0x7f0000000080)="37eb50169527c67606569c10d57321bf158184a4e2eaa2e6de529b4f76a161", 0x1f) close(r0) 26.230244089s ago: executing program 4 (id=3962): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000006000018120000", @ANYRES32, @ANYBLOB="0000000000000070b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 25.882922734s ago: executing program 2 (id=3963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x83, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x2, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r3, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1d, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd64, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x0, 0xd, 0x3, 0x8, 0xc, 0x1}, @generic={0x8, 0xa, 0x3, 0x133, 0x3}, @generic={0x1, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x66, &(0x7f0000000280)=""/102, 0x41100, 0x14, '\x00', r4, @lsm=0x1b, r3, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r3, 0x2, &(0x7f0000000840)=[r0, r0, r6, r0], &(0x7f0000000880)=[{0x4, 0x5, 0xe, 0x4}, {0x0, 0x5, 0xa, 0x4}], 0x10, 0x8}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 25.856304214s ago: executing program 4 (id=3964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x40010, r1, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, 0x0, 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r0}, 0x90) 25.654614137s ago: executing program 1 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000000000000000300050000000000020000007f0000010000000000000000020013a0000300"/97], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES16=r0, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, r4, 0x902, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c884}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) socket$key(0xf, 0x3, 0x2) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) getpeername$netlink(r9, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 25.465152195s ago: executing program 2 (id=3966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x4, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @broadcast}, 0x14) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x5, 0x9, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="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", 0xfe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="0200004000"}, 0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 25.322775172s ago: executing program 0 (id=3967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x10) sendto$packet(r3, &(0x7f0000000280), 0x0, 0x4020000, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB, @ANYRES8=r8, @ANYRES8=r6, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@gettaction={0x0, 0x32, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x47874c79}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x8}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xed51}}, {0x0, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x8}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xefa5}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x10}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x27f}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}]}]}, 0x40}}, 0x840) 25.090983993s ago: executing program 4 (id=3968): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106200000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e885090acabaebf8bc1dea67de28f23b1756977a30534fc2f6abbe72b68bcd88bbf0749c72fcf19229ac72c24260838d89babf1ecf13e5908d286f71ae0c66b8c2413ae3a7a225132acfa8c3e0a9ab5f094a50786bf4fef8f096446fdeea118294957b97d958ecb028be46dd1434eb1a439218b39f8e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 25.090344239s ago: executing program 3 (id=3969): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES64=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028005001600010000000400120008001500000013"], 0x54}}, 0x0) 24.481320025s ago: executing program 3 (id=3970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) 24.255918852s ago: executing program 1 (id=3971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000100000000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100dd"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 24.199389935s ago: executing program 4 (id=3972): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0xd424d000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 23.992311071s ago: executing program 0 (id=3973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, 0x0, 0x40000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="14010000300001000000000000000000040100800c0042000000000000000000140001000000000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c06f98d2f91f0b6a99c11f5e8ce930ac6679687974eb9f5bd3eb3bb6b04372c5ca4dbb76c31c47eb38a4f996d9e2e50b4a8266185bfe042c559c274fdb0eecc02778f557664297143a35ac73ee26eacad"], 0x114}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0xfffbffffffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x3, 0x0, 0xc7f, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="38003887930000f7bd69365651060b371904253836b07b71d2d50a39ed1000210400008090a0eb300e70595a0bf8f4430f09136c068c0a378a0a76e7885ec45e6988aefc322daa7ce12820c24c23f3e9fde8109cd9689c2a5b182ae01feaee6af496cea8404a9ae55ed11c63dd5416a3b2be23c9bdf674aa9771321e3ee9aa14b0d33e351ef4efcef4c4f1e5af3e5493f3ae", @ANYRES32=r3, @ANYBLOB="a7bda888000000001800128008000100677265000c00028005000a0001000000"], 0x38}}, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x2, r10, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x7, 0x11, 0xffffffffffffffff, 0x80000000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r11, 0x8, &(0x7f0000000000)={0x8002}, 0x8}, 0x94) sendmsg$xdp(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300eeffffff00000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000e6140011800a005abd380974636800000004000280140000001000010000000000000000000000000a5208b82ef2d447860b369376280e"], 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 23.760245402s ago: executing program 3 (id=3974): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000001f00)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x22}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x12, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6a, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0x8, 0x10, &(0x7f0000000040)={0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000305f8ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 23.29885529s ago: executing program 1 (id=3975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x40, 0x0, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfdfffffffffffff8, 0x4, 0x0, 0x0, 0x4008000000000}, {0x0, 0x8}, 0x0, 0x6e6bb3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x4) 23.072492959s ago: executing program 3 (id=3976): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffffe, @loopback, 0x2000a}, 0x1c) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18.15187492s ago: executing program 2 (id=3977): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x26020480) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfffe}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) unshare(0x40000100) unshare(0x40080) close(0x4) 17.795047595s ago: executing program 4 (id=3978): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@del={0xf8, 0x11, 0x20, 0x70bd25, 0x25dfdbff, {{'ecb-cast6-avx\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x8b}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40080) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 8.146806609s ago: executing program 32 (id=3973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, 0x0, 0x40000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="14010000300001000000000000000000040100800c0042000000000000000000140001000000000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c06f98d2f91f0b6a99c11f5e8ce930ac6679687974eb9f5bd3eb3bb6b04372c5ca4dbb76c31c47eb38a4f996d9e2e50b4a8266185bfe042c559c274fdb0eecc02778f557664297143a35ac73ee26eacad"], 0x114}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0xfffbffffffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x3, 0x0, 0xc7f, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="38003887930000f7bd69365651060b371904253836b07b71d2d50a39ed1000210400008090a0eb300e70595a0bf8f4430f09136c068c0a378a0a76e7885ec45e6988aefc322daa7ce12820c24c23f3e9fde8109cd9689c2a5b182ae01feaee6af496cea8404a9ae55ed11c63dd5416a3b2be23c9bdf674aa9771321e3ee9aa14b0d33e351ef4efcef4c4f1e5af3e5493f3ae", @ANYRES32=r3, @ANYBLOB="a7bda888000000001800128008000100677265000c00028005000a0001000000"], 0x38}}, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x2, r10, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x7, 0x11, 0xffffffffffffffff, 0x80000000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r11, 0x8, &(0x7f0000000000)={0x8002}, 0x8}, 0x94) sendmsg$xdp(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300eeffffff00000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000e6140011800a005abd380974636800000004000280140000001000010000000000000000000000000a5208b82ef2d447860b369376280e"], 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 6.46216905s ago: executing program 33 (id=3975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x40, 0x0, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfdfffffffffffff8, 0x4, 0x0, 0x0, 0x4008000000000}, {0x0, 0x8}, 0x0, 0x6e6bb3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x4) 5.215890976s ago: executing program 34 (id=3976): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffffe, @loopback, 0x2000a}, 0x1c) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.459678365s ago: executing program 35 (id=3977): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x26020480) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfffe}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) unshare(0x40000100) unshare(0x40080) close(0x4) 0s ago: executing program 36 (id=3978): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@del={0xf8, 0x11, 0x20, 0x70bd25, 0x25dfdbff, {{'ecb-cast6-avx\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x8b}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40080) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): 31][T13513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.984729][T13513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.997800][T13513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.011678][T13513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.024837][T13513] veth2: left promiscuous mode [ 349.034088][T13513] tun0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 349.045839][T13513] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 349.201841][ T9156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.265467][ T9156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.381552][ T5999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.474983][ T5999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.595040][T13552] netlink: NAT attribute has 5 unknown bytes [ 349.606810][T13555] C: renamed from lo (while UP) [ 349.622677][T13552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.670375][T13555] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 349.938689][T13567] netlink: 'syz.0.2120': attribute type 30 has an invalid length. [ 350.052608][T13574] __nla_validate_parse: 5 callbacks suppressed [ 350.052627][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 350.358548][T13580] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2123'. [ 350.512544][T13580] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 350.545508][T13580] bond6 (unregistering): Released all slaves [ 350.653102][T13586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.981323][T13586] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 351.068063][T13594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.474278][T13615] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2131'. [ 351.598490][T13620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2131'. [ 351.611861][T13622] IPv6: sit2: Disabled Multicast RS [ 351.717820][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 351.738371][T13627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.886703][T13633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2136'. [ 352.345862][T13627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.578700][T13636] syzkaller0: entered promiscuous mode [ 352.606772][T13636] syzkaller0: entered allmulticast mode [ 353.020471][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2141'. [ 353.228627][T13674] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2144'. [ 353.272489][T13674] ip6tnl0: Caught tx_queue_len zero misconfig [ 353.369370][T13669] IPv6: sit1: Disabled Multicast RS [ 354.300067][T13721] netlink: 'syz.4.2160': attribute type 12 has an invalid length. [ 354.415143][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 354.453471][T13726] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 354.490329][T13726] bond5 (unregistering): Released all slaves [ 354.714344][T13744] x_tables: duplicate underflow at hook 2 [ 354.745980][T13744] netlink: 'syz.0.2166': attribute type 2 has an invalid length. [ 354.819046][T13752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2169'. [ 354.992446][T13757] bridge4: entered promiscuous mode [ 355.688553][T13782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.724082][T13746] ip_tables: iptables: counters copy to user failed while replacing table [ 355.863982][T13782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.879653][T13795] __nla_validate_parse: 2 callbacks suppressed [ 355.879671][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 355.911109][T13795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2179'. [ 355.924012][T13795] netlink: 'syz.0.2179': attribute type 2 has an invalid length. [ 356.011901][T13789] bond6: entered promiscuous mode [ 356.017047][T13789] bond6: entered allmulticast mode [ 356.047308][T13789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.110322][T13750] x_tables: duplicate underflow at hook 1 [ 357.044574][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2191'. [ 357.083598][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 357.178708][T13846] syz.2.2189 (13846) used greatest stack depth: 18280 bytes left [ 357.390080][T13859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.488853][T13870] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 357.700097][T13880] netlink: 'syz.3.2197': attribute type 2 has an invalid length. [ 357.732678][T13880] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 357.753059][T13870] bond7: entered promiscuous mode [ 357.770261][T13870] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.875360][T13862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.896682][T13862] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 357.937921][T13862] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 357.957704][T13862] bond7: (slave ip6gre2): making interface the new active one [ 357.965778][T13862] ip6gre2: entered promiscuous mode [ 357.974547][T13862] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 358.154579][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2203'. [ 358.596941][T13885] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 358.819714][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578cf800: rx timeout, send abort [ 358.853274][T13931] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 359.008386][T13938] netlink: 'syz.4.2214': attribute type 83 has an invalid length. [ 359.033321][T13941] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2215'. [ 359.224310][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 359.298110][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2216'. [ 359.319862][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578cc000: rx timeout, send abort [ 359.328709][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578cf800: abort rx timeout. Force session deactivation [ 359.338467][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2216'. [ 359.428120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.516943][T13958] bridge0: port 3(gretap0) entered blocking state [ 359.542877][T13958] bridge0: port 3(gretap0) entered disabled state [ 359.585928][T13958] gretap0: entered allmulticast mode [ 359.647896][T13958] gretap0: entered promiscuous mode [ 359.724150][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 359.828278][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880578cc000: abort rx timeout. Force session deactivation [ 359.914126][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.145355][T13982] openvswitch: netlink: ct_state flags ffffffff unsupported [ 360.537586][T14000] syzkaller0: entered promiscuous mode [ 360.600869][T14000] syzkaller0: entered allmulticast mode [ 361.421823][T14034] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 361.477532][T14051] __nla_validate_parse: 3 callbacks suppressed [ 361.477548][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2238'. [ 361.859458][T14063] syzkaller0: entered promiscuous mode [ 361.883278][T14063] syzkaller0: entered allmulticast mode [ 362.047586][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'. [ 362.205785][T14077] netlink: 'syz.0.2242': attribute type 83 has an invalid length. [ 362.405091][T14083] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 362.501317][T14083] team0: Port device dummy0 added [ 362.584787][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 362.609910][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'. [ 362.927835][T14111] openvswitch: netlink: IP tunnel dst address not specified [ 362.987598][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 363.026152][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 363.158085][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 363.211673][T14128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2257'. [ 363.287650][T14130] macvtap1: entered promiscuous mode [ 363.301277][T14130] macvtap1: entered allmulticast mode [ 363.314417][T14130] veth1_to_bridge: entered promiscuous mode [ 363.339141][T14130] veth1_to_bridge: entered allmulticast mode [ 363.359263][T14130] team0: Device macvtap1 failed to register rx_handler [ 363.374268][T14130] veth1_to_bridge: left allmulticast mode [ 363.386347][T14130] veth1_to_bridge: left promiscuous mode [ 363.547194][T14143] ip_tables: iptables: counters copy to user failed while replacing table [ 363.620239][T14142] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.762895][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 363.803091][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 365.006180][T14213] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.296626][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.829694][T14246] team0: Port device team_slave_0 removed [ 366.475038][T14279] netlink: 'syz.1.2299': attribute type 1 has an invalid length. [ 366.498132][T14281] __nla_validate_parse: 9 callbacks suppressed [ 366.498151][T14281] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2300'. [ 366.519800][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2299'. [ 367.202346][T14307] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2312'. [ 367.605136][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 368.167970][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2328'. [ 368.578048][T14358] netlink: 'syz.2.2335': attribute type 2 has an invalid length. [ 368.606847][T14358] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 369.345939][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 369.770091][T14408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2357'. [ 370.512612][T14425] "syz.2.2365" (14425) uses obsolete ecb(arc4) skcipher [ 370.912574][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'. [ 371.478808][T14485] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2384'. [ 371.537846][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 371.644261][T14489] netlink: 'syz.0.2387': attribute type 13 has an invalid length. [ 371.671660][T14489] gretap0: refused to change device tx_queue_len [ 371.688286][T14489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 371.731730][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2389'. [ 371.844269][T14498] bridge0: left allmulticast mode [ 372.066254][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 372.310974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.672278][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2403'. [ 372.697681][T14540] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 372.982465][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 373.003365][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 373.020335][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 373.033123][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 373.043494][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 373.058634][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 373.472258][T14567] can: request_module (can-proto-0) failed. [ 373.844829][T14583] bond8: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 373.932650][T14583] bond8 (unregistering): Released all slaves [ 374.257203][T14591] vlan3: entered allmulticast mode [ 374.307809][T14591] bond0: entered allmulticast mode [ 374.317531][T14591] bond_slave_0: entered allmulticast mode [ 374.336224][T14591] bond_slave_1: entered allmulticast mode [ 374.353818][T14612] bridge0: port 3(gretap0) entered blocking state [ 374.360450][T14612] bridge0: port 3(gretap0) entered listening state [ 374.367413][T14612] bridge0: port 1(team0) entered blocking state [ 374.373861][T14612] bridge0: port 1(team0) entered listening state [ 374.380508][T14612] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.387698][T14612] bridge0: port 2(bridge_slave_1) entered listening state [ 374.657428][T14620] syzkaller0: entered promiscuous mode [ 374.688277][T14620] syzkaller0: entered allmulticast mode [ 374.814111][T14620] syzkaller0: left promiscuous mode [ 374.827605][T14620] syzkaller0: left allmulticast mode [ 375.069000][T14629] wg1 speed is unknown, defaulting to 1000 [ 375.178772][T14629] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 375.727615][T14652] wg1 speed is unknown, defaulting to 1000 [ 376.257934][T14672] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 376.388784][T14679] netlink: 'syz.4.2440': attribute type 10 has an invalid length. [ 376.416120][T14672] bond8: option mode: invalid value (7) [ 376.489462][T14672] bond8 (unregistering): Released all slaves [ 376.659914][T14691] __nla_validate_parse: 67 callbacks suppressed [ 376.659933][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 376.824795][T14679] dummy0: entered promiscuous mode [ 376.988556][T14692] wg1 speed is unknown, defaulting to 1000 [ 377.798235][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 378.556672][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568206][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.886373][T14741] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2458'. [ 379.189310][T14748] syzkaller0: entered promiscuous mode [ 379.209823][T14748] syzkaller0: entered allmulticast mode [ 379.799420][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'. [ 380.458136][T14790] xt_CT: No such helper "netbios-ns" [ 380.994145][T14821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2482'. [ 381.044757][T14824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2480'. [ 381.178727][T14831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 381.238130][T14831] vxcan0: tx address claim with different name [ 381.256157][T14834] syzkaller0: entered promiscuous mode [ 381.271926][T14831] block nbd0: not configured, cannot reconfigure [ 381.272207][T14834] syzkaller0: entered allmulticast mode [ 381.700521][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2494'. [ 381.866465][T14865] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2496'. [ 381.923196][T14868] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2496'. [ 381.988623][T14865] netlink: 'syz.3.2496': attribute type 21 has an invalid length. [ 382.012500][T14865] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2496'. [ 382.058056][T14868] netlink: 'syz.3.2496': attribute type 21 has an invalid length. [ 382.096090][T14865] netlink: 'syz.3.2496': attribute type 4 has an invalid length. [ 382.112593][T14868] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2496'. [ 382.137304][T14878] xt_l2tp: missing protocol rule (udp|l2tpip) [ 382.144015][T14865] netlink: 'syz.3.2496': attribute type 5 has an invalid length. [ 382.171412][T14865] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2496'. [ 382.205416][T14884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.271978][T14868] netlink: 'syz.3.2496': attribute type 4 has an invalid length. [ 382.297183][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 382.303290][T14868] netlink: 'syz.3.2496': attribute type 5 has an invalid length. [ 382.329770][T14868] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2496'. [ 382.361249][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 382.380150][T14882] syzkaller1: entered promiscuous mode [ 382.399490][T14882] syzkaller1: entered allmulticast mode [ 382.455221][T14891] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2502'. [ 382.557427][T14896] netlink: 'syz.3.2504': attribute type 11 has an invalid length. [ 383.407105][T14932] netlink: 'syz.3.2516': attribute type 4 has an invalid length. [ 383.451221][T14935] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 383.601419][T14942] team0: Port device dummy0 removed [ 383.684550][T14948] xt_nat: multiple ranges no longer supported [ 384.094630][T14967] xt_l2tp: missing protocol rule (udp|l2tpip) [ 384.230067][T14977] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 384.319721][T14977] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 384.351907][T14986] sctp: [Deprecated]: syz.0.2529 (pid 14986) Use of int in max_burst socket option deprecated. [ 384.351907][T14986] Use struct sctp_assoc_value instead [ 385.195632][T15029] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 385.928163][T15050] vlan0: Caught tx_queue_len zero misconfig [ 386.747407][T15099] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 387.034911][T15106] syzkaller0: entered promiscuous mode [ 387.158370][T15106] syzkaller0: entered allmulticast mode [ 387.775323][T15144] netlink: ct family unspecified [ 387.797609][T15144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.213084][T15159] xt_hashlimit: size too large, truncated to 1048576 [ 388.230923][ T5615] Bluetooth: hci2: command 0x0401 tx timeout [ 388.237093][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 388.509294][T15168] __nla_validate_parse: 10 callbacks suppressed [ 388.509312][T15168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2568'. [ 389.996512][T15113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.260305][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 390.318858][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 390.364326][T15213] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2583'. [ 390.417635][T15213] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2583'. [ 390.452245][T15222] netlink: 'syz.2.2583': attribute type 7 has an invalid length. [ 390.478984][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 390.500085][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 390.510837][T15226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.005383][T15250] netlink: 'syz.2.2593': attribute type 12 has an invalid length. [ 391.284126][T15268] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2596'. [ 391.323211][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2594'. [ 391.628547][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 391.796854][T15289] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 393.316114][T15353] netlink: zone id is out of range [ 393.345385][T15353] netlink: zone id is out of range [ 393.368564][T15353] netlink: zone id is out of range [ 393.398075][T15353] netlink: zone id is out of range [ 393.420543][T15353] netlink: zone id is out of range [ 393.444438][T15353] netlink: zone id is out of range [ 393.472643][T15353] netlink: zone id is out of range [ 393.495806][T15353] netlink: zone id is out of range [ 393.511575][T15353] netlink: zone id is out of range [ 393.529238][T15353] netlink: zone id is out of range [ 393.584422][T15364] __nla_validate_parse: 5 callbacks suppressed [ 393.584441][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2623'. [ 393.630250][T15364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 393.736105][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2623'. [ 393.779065][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 393.821780][T15364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2623'. [ 394.278788][T15394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2632'. [ 394.537017][T15405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2636'. [ 394.549445][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2635'. [ 394.600858][T15407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2636'. [ 394.889735][T15425] netlink: 'syz.0.2642': attribute type 1 has an invalid length. [ 395.050858][T15425] 8021q: adding VLAN 0 to HW filter on device bond8 [ 395.099703][T15428] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 395.163391][T15428] bond8: entered allmulticast mode [ 395.236084][T15433] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 395.435339][T15455] xt_hashlimit: size too large, truncated to 1048576 [ 395.507878][ T9146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.554340][ T9146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.597277][ T9146] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.781598][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 395.891555][T15465] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 395.914684][ T5346] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 396.071863][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.078253][ T5631] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 396.509659][T15486] xt_policy: neither incoming nor outgoing policy selected [ 396.545091][T15481] tipc: Enabling of bearer rejected, failed to enable media [ 396.586633][T15482] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 396.995451][T15508] syzkaller0: entered promiscuous mode [ 397.011632][T15508] syzkaller0: entered allmulticast mode [ 397.721471][T15543] xt_bpf: check failed: parse error [ 398.083404][T15562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.093233][T15562] IPv6: NLM_F_CREATE should be set when creating new route [ 398.100570][T15562] IPv6: NLM_F_CREATE should be set when creating new route [ 398.392138][ T5615] Bluetooth: hci1: command 0x0405 tx timeout [ 398.563327][T15582] bond5: (slave dummy0): Releasing backup interface [ 398.698884][T15592] __nla_validate_parse: 11 callbacks suppressed [ 398.698903][T15592] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2690'. [ 398.734096][T15594] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 399.084097][T15608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2692'. [ 400.498864][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 400.517273][T15670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.582179][ T9147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.596785][T15660] netlink: 'syz.2.2708': attribute type 1 has an invalid length. [ 400.622388][ T9147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.764261][T15660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 400.842429][T15678] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2712'. [ 400.854224][T15678] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2712'. [ 401.066833][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2715'. [ 401.239403][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2718'. [ 401.747105][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 402.098423][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.471691][T15752] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2730'. [ 402.863821][T15762] syzkaller0: entered promiscuous mode [ 402.869621][T15762] syzkaller0: entered allmulticast mode [ 403.024936][T15776] net_ratelimit: 24 callbacks suppressed [ 403.024954][T15776] openvswitch: netlink: IP tunnel dst address not specified [ 403.089438][T15777] xt_NFQUEUE: number of total queues is 0 [ 403.089747][T15778] openvswitch: netlink: Duplicate or invalid key (type 0). [ 403.289876][T15784] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 403.316375][T15788] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 403.416446][T15784] netlink: 'syz.1.2738': attribute type 1 has an invalid length. [ 403.439181][T15784] netlink: 'syz.1.2738': attribute type 12 has an invalid length. [ 403.868085][T15810] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2745'. [ 403.906897][T15810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2745'. [ 403.939859][T15813] x_tables: unsorted underflow at hook 2 [ 404.016960][T15815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2745'. [ 404.793042][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 404.801790][ C0] bridge0: port 1(team0) entered learning state [ 404.808269][ C0] bridge0: port 3(gretap0) entered learning state [ 405.203451][T15829] SET target dimension over the limit! [ 405.209715][T15829] netlink: 'syz.4.2749': attribute type 9 has an invalid length. [ 405.750280][T15764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.948660][T15834] netlink: 'syz.4.2753': attribute type 30 has an invalid length. [ 405.995631][T15834] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2753'. [ 406.155380][T15838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2752'. [ 406.214901][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 406.303491][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 406.752135][T15878] vlan1: entered promiscuous mode [ 406.796874][T15878] geneve1: entered promiscuous mode [ 406.821571][T15878] vlan1: entered allmulticast mode [ 406.836755][T15878] geneve1: entered allmulticast mode [ 406.850380][T15888] batadv_slave_0: Caught tx_queue_len zero misconfig [ 407.067261][T15900] netlink: Invalid conntrack timeout [ 407.086227][T15900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.109632][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 407.110036][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 407.144216][T15902] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2769'. [ 409.737819][T15883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.995558][T15922] __nla_validate_parse: 4 callbacks suppressed [ 409.995577][T15922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2775'. [ 409.998761][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2775'. [ 410.054005][T15930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.199216][T15927] bond8: entered promiscuous mode [ 410.473466][T15950] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2779'. [ 410.518978][T15950] netlink: 'syz.3.2779': attribute type 5 has an invalid length. [ 410.685204][T15954] tipc: Enabled bearer , priority 0 [ 410.732585][T15954] syzkaller0: entered promiscuous mode [ 410.752231][T15954] syzkaller0: entered allmulticast mode [ 410.793004][T15965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2785'. [ 410.819715][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2785'. [ 410.847617][T15954] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 411.626718][T15974] tipc: Resetting bearer [ 411.658516][T15953] tipc: Resetting bearer [ 411.760938][T15953] tipc: Disabling bearer [ 411.808746][T16002] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.964928][T15978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.234007][T16020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2794'. [ 414.248227][T16024] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2795'. [ 414.345497][T16020] netlink: 65976 bytes leftover after parsing attributes in process `syz.2.2794'. [ 414.408877][T16021] netlink: 65976 bytes leftover after parsing attributes in process `syz.2.2794'. [ 414.599524][T16047] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2802'. [ 414.783033][T16053] geneve3: entered promiscuous mode [ 414.797555][T16053] geneve3: entered allmulticast mode [ 414.915062][T16059] netlink: 'syz.0.2805': attribute type 10 has an invalid length. [ 415.213124][T16079] __nla_validate_parse: 4 callbacks suppressed [ 415.213142][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2808'. [ 415.589269][T16087] erspan0: entered promiscuous mode [ 415.630900][T16087] erspan0: entered allmulticast mode [ 415.744516][T16092] tipc: Enabling of bearer rejected, already enabled [ 416.667421][T16137] xt_socket: unknown flags 0x8 [ 417.029576][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'. [ 417.272583][T16149] geneve0: entered allmulticast mode [ 417.537773][T16164] syz_tun: entered promiscuous mode [ 417.562186][T16173] xt_l2tp: invalid flags combination: 0 [ 417.570293][T16164] syz_tun: entered allmulticast mode [ 417.594482][T16164] team0: Port device syz_tun added [ 417.712733][T16170] syzkaller0: entered promiscuous mode [ 417.732540][T16170] syzkaller0: entered allmulticast mode [ 418.225055][T16206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2840'. [ 418.582773][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2842'. [ 419.725836][T16255] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2851'. [ 419.786923][T16256] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2851'. [ 420.234864][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 420.464025][T16283] erspan0: entered promiscuous mode [ 420.481736][T16283] erspan0: entered allmulticast mode [ 421.018716][T16302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2865'. [ 421.053058][T16299] C: entered allmulticast mode [ 421.130628][T16299] tunl0: left promiscuous mode [ 421.157493][T16299] tunl0: entered allmulticast mode [ 421.179158][T16299] gre0: entered allmulticast mode [ 421.329714][T16299] gretap0: entered allmulticast mode [ 421.454394][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 421.508654][T16299] erspan0: left promiscuous mode [ 421.525599][T16299] ip_vti0: entered allmulticast mode [ 421.548995][T16299] ip6_vti0: entered allmulticast mode [ 421.592613][T16299] sit0: entered allmulticast mode [ 421.614402][T16299] ip6tnl0: entered allmulticast mode [ 421.684510][T16299] ip6gre0: entered allmulticast mode [ 421.715813][T16299] syz_tun: entered allmulticast mode [ 421.748173][T16299] ip6gretap0: entered allmulticast mode [ 421.783962][T16299] bond0: entered allmulticast mode [ 421.796801][T16299] bond_slave_0: entered allmulticast mode [ 421.835623][T16299] team0: entered allmulticast mode [ 421.857021][T16299] team_slave_1: entered allmulticast mode [ 421.873820][T16299] nlmon0: entered allmulticast mode [ 421.910155][T16299] batadv0: entered allmulticast mode [ 421.931923][T16299] veth0: entered allmulticast mode [ 421.962824][T16299] veth1: entered allmulticast mode [ 421.995942][T16299] wg0: entered allmulticast mode [ 422.027083][T16299] wg1: entered allmulticast mode [ 422.055594][T16299] wg2: entered allmulticast mode [ 422.072998][T16299] veth0_to_bridge: entered allmulticast mode [ 422.096968][T16299] bridge_slave_0: entered allmulticast mode [ 422.121608][T16299] veth1_to_bridge: entered allmulticast mode [ 422.144657][T16299] bridge_slave_1: entered allmulticast mode [ 422.170386][T16299] veth0_to_bond: entered allmulticast mode [ 422.214195][T16299] veth1_to_team: entered allmulticast mode [ 422.254618][T16299] veth0_to_batadv: entered allmulticast mode [ 422.276705][T16299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.295209][T16299] batadv_slave_0: entered allmulticast mode [ 422.318552][T16299] xfrm0: entered allmulticast mode [ 422.344319][T16299] veth0_to_hsr: entered allmulticast mode [ 422.368926][T16299] hsr_slave_0: entered allmulticast mode [ 422.405784][T16299] veth1_to_hsr: entered allmulticast mode [ 422.421776][T16299] hsr_slave_1: entered allmulticast mode [ 422.445390][T16299] veth1_virt_wifi: entered allmulticast mode [ 422.471912][T16299] veth0_virt_wifi: entered allmulticast mode [ 422.497593][T16299] virt_wifi0: entered allmulticast mode [ 422.513027][T16299] veth0_vlan: entered allmulticast mode [ 422.551706][T16299] vlan0: entered allmulticast mode [ 422.571012][T16299] vlan1: entered allmulticast mode [ 422.598553][T16299] macvlan0: entered allmulticast mode [ 422.611766][T16299] macvlan1: entered allmulticast mode [ 422.626331][T16299] ipvlan0: entered allmulticast mode [ 422.640966][T16299] ipvlan1: entered allmulticast mode [ 422.652677][T16299] veth1_macvtap: entered allmulticast mode [ 422.669615][T16299] veth0_macvtap: entered allmulticast mode [ 422.693328][T16299] macvtap0: entered allmulticast mode [ 422.721637][T16299] geneve0: entered allmulticast mode [ 422.749830][T16299] geneve1: entered allmulticast mode [ 422.778612][T16299] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 422.797394][T16299] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 422.823236][T16299] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 422.853291][T16299] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 422.885370][T16299] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 422.906921][T16299] gtp0: entered allmulticast mode [ 422.919415][T16299] nic: entered allmulticast mode [ 422.969425][T16299] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 422.988128][T16299] bridge1: entered allmulticast mode [ 423.089222][T16299] ip6tnl1: entered allmulticast mode [ 423.106525][T16299] bond1: entered allmulticast mode [ 423.121030][T16299] bridge2: entered allmulticast mode [ 423.129745][T16299] vxlan0: entered allmulticast mode [ 423.142102][T16299] gtp1: entered allmulticast mode [ 423.159682][T16299] vti0: entered allmulticast mode [ 423.176190][T16299] veth2: entered allmulticast mode [ 423.182788][T16299] veth3: entered allmulticast mode [ 423.188620][T16299] bond2: entered allmulticast mode [ 423.194854][T16299] batadv1: entered allmulticast mode [ 423.207615][T16299] veth4: entered allmulticast mode [ 423.220410][T16299] veth5: entered allmulticast mode [ 423.234241][T16299] veth6: entered allmulticast mode [ 423.245762][T16299] veth7: entered allmulticast mode [ 423.258622][T16299] bridge4: entered allmulticast mode [ 423.265092][T16299] bridge5: entered allmulticast mode [ 423.278412][T16299] bond3: entered allmulticast mode [ 423.290247][T16299] gtp2: entered allmulticast mode [ 423.296024][T16299] bridge6: entered allmulticast mode [ 423.302260][T16299] sit1: entered allmulticast mode [ 423.307811][T16299] sit2: entered allmulticast mode [ 423.360209][T16299] bridge7: entered allmulticast mode [ 423.370771][T16299] bond4: entered allmulticast mode [ 423.383360][T16299] ip6gre1: entered allmulticast mode [ 423.399603][T16299] bond5: entered allmulticast mode [ 423.497259][T16299] bond6: entered allmulticast mode [ 423.504247][T16299] gretap1: entered allmulticast mode [ 423.516659][T16299] geneve2: entered allmulticast mode [ 423.528598][T16299] bridge0: entered allmulticast mode [ 423.535012][T16299] syztnl1: entered allmulticast mode [ 423.541500][T16299] ip6tnl2: entered allmulticast mode [ 423.553850][T16299] ip6tnl3: entered allmulticast mode [ 423.567008][T16299] bond7: left promiscuous mode [ 423.572786][T16299] ip6gre2: left promiscuous mode [ 423.577968][T16299] bond7: entered allmulticast mode [ 423.584835][T16299] ip6gre2: entered allmulticast mode [ 423.608020][T16299] bond8: entered allmulticast mode [ 423.617684][T16299] bond0.4: entered allmulticast mode [ 423.624507][T16299] bond9: entered allmulticast mode [ 423.633321][T16299] vlan3: entered allmulticast mode [ 423.643367][T16299] bond10: entered allmulticast mode [ 423.648750][T16299] batadv_slave_0.: entered allmulticast mode [ 423.656070][T16299] bond11: entered allmulticast mode [ 423.663951][T16312] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 423.665645][ T9156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.725063][ T188] wg1 speed is unknown, defaulting to 1000 [ 423.745266][ T1159] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.778326][ T188] syz2: Port: 1 Link DOWN [ 423.813345][ T1159] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.868185][ T5346] wg1 speed is unknown, defaulting to 1000 [ 423.888762][ T9147] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.022960][T16332] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2870'. [ 424.520329][T16358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2876'. [ 424.945272][T16367] syzkaller0: entered promiscuous mode [ 425.011086][T16367] syzkaller0: entered allmulticast mode [ 425.088716][T16379] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2883'. [ 425.654990][ T188] IPVS: starting estimator thread 0... [ 425.729112][T16399] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 425.782479][T16414] IPVS: using max 36 ests per chain, 86400 per kthread [ 425.948153][T16422] x_tables: duplicate underflow at hook 1 [ 426.031486][T16425] netlink: 'syz.1.2890': attribute type 21 has an invalid length. [ 426.681656][T16421] pimreg: entered allmulticast mode [ 426.997245][T16435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2892'. [ 427.208914][T16438] sch_fq: defrate 0 ignored. [ 427.319609][T16447] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2895'. [ 427.330949][T16438] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2893'. [ 427.366381][T16448] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2895'. [ 427.412904][T16447] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2895'. [ 427.467287][T16448] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2895'. [ 428.046695][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2898'. [ 428.445499][T16469] netlink: 'syz.0.2899': attribute type 16 has an invalid length. [ 428.499607][T16469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2899'. [ 428.517692][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.535165][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.544038][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.558159][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.567051][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.616851][T16469] veth0_macvtap: entered allmulticast mode [ 428.899207][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2903'. [ 429.915258][T16517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2908'. [ 430.064493][ T9150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.107019][ T9150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.257360][T16523] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 430.456373][T16538] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 430.482916][ T9150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.529080][ T9150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.631234][ T5615] Bluetooth: hci5: command tx timeout [ 430.956793][ T9150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.028885][ T9150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.213389][T16566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.480696][ T9150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.503717][ T9150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.754494][T16471] wg1 speed is unknown, defaulting to 1000 [ 432.191685][T16607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.413447][T16617] __nla_validate_parse: 7 callbacks suppressed [ 432.413465][T16617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2930'. [ 432.432020][ T9150] dvmrp0: left allmulticast mode [ 432.526810][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2930'. [ 432.563628][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 432.607133][T16623] openvswitch: netlink: Flow actions attr not present in new flow. [ 432.710642][ T5615] Bluetooth: hci5: command tx timeout [ 432.777954][T16623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.180901][ T9150] bond1 (unregistering): (slave gretap1): Releasing active interface [ 433.338231][ T9150] team0: Port device bridge2 removed [ 433.417792][ T9150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.442581][ T9150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.456187][ T9150] bond0 (unregistering): Released all slaves [ 433.486001][ T9150] bond1 (unregistering): Released all slaves [ 433.514098][ T9150] bond2 (unregistering): Released all slaves [ 433.535997][ T9150] bond3 (unregistering): Released all slaves [ 433.565933][ T9150] bond4 (unregistering): Released all slaves [ 433.586536][ T9150] bond5 (unregistering): Released all slaves [ 433.618563][ T9150] bond6 (unregistering): Released all slaves [ 433.711553][T16624] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 433.857956][T16617] team0 (unregistering): Port device team_slave_0 removed [ 433.919311][T16617] team0 (unregistering): Port device team_slave_1 removed [ 433.962661][T16617] team0 (unregistering): Port device syz_tun removed [ 433.990219][T16617] team0 (unregistering): Port device geneve1 removed [ 434.079308][ T9150] : left promiscuous mode [ 434.289824][ T9150] ovs-system: left promiscuous mode [ 434.615365][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 434.689744][T16676] x_tables: duplicate underflow at hook 1 [ 434.791046][ T5615] Bluetooth: hci5: command tx timeout [ 434.872267][ C0] bridge0: port 3(gretap0) entered forwarding state [ 434.878996][ C0] bridge0: topology change detected, propagating [ 434.888089][ C0] bridge0: port 1(team0) entered forwarding state [ 434.894600][ C0] bridge0: topology change detected, propagating [ 434.901164][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.908396][ C0] bridge0: topology change detected, propagating [ 436.295104][T16714] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2949'. [ 436.526655][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 436.872173][ T5631] Bluetooth: hci5: command tx timeout [ 436.913882][T16745] netlink: 'syz.0.2953': attribute type 1 has an invalid length. [ 436.954287][T16748] netlink: 'syz.0.2953': attribute type 1 has an invalid length. [ 437.175715][T16745] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 437.182686][T16748] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 437.326746][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.391515][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.416903][T16471] bridge_slave_0: entered allmulticast mode [ 437.477495][T16471] bridge_slave_0: entered promiscuous mode [ 437.530268][T16471] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.561610][T16471] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.579216][T16471] bridge_slave_1: entered allmulticast mode [ 437.648816][T16471] bridge_slave_1: entered promiscuous mode [ 437.728827][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2959'. [ 438.072598][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 438.078812][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 438.120149][T16471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.275609][T16787] ip_tables: iptables: counters copy to user failed while replacing table [ 438.324211][T16471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.437824][ T9150] hsr_slave_0: left promiscuous mode [ 438.479739][ T9150] hsr_slave_1: left promiscuous mode [ 438.495984][ T9150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.504158][ T9150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.525144][ T9150] veth1_macvtap: left promiscuous mode [ 438.532669][ T9150] veth0_macvtap: left promiscuous mode [ 438.538377][ T9150] veth1_vlan: left promiscuous mode [ 438.544178][ T9150] veth0_vlan: left promiscuous mode [ 438.639762][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 439.059152][ T9150] team0 (unregistering): Port device team_slave_1 removed [ 439.092907][ T9150] team0 (unregistering): Port device team_slave_0 removed [ 439.529373][T16471] team0: Port device team_slave_0 added [ 439.591627][T16471] team0: Port device team_slave_1 added [ 439.762698][T16471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.775568][T16471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.860788][T16471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.954242][T16471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.966088][T16471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.995754][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007096][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.022814][T16832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2967'. [ 440.116566][T16471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.117532][T16838] nft_compat: unsupported protocol 168 [ 440.592300][T16471] hsr_slave_0: entered promiscuous mode [ 440.618761][T16471] hsr_slave_1: entered promiscuous mode [ 440.647828][T16471] debugfs: 'hsr0' already exists in 'hsr' [ 440.677273][T16471] Cannot create hsr debugfs directory [ 440.848906][T16867] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2975'. [ 441.261593][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 441.299954][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 441.380803][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 441.453758][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 441.705372][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 441.831065][T16903] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2983'. [ 441.942700][T16910] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2983'. [ 442.082050][T16903] syzkaller0: entered promiscuous mode [ 442.105728][T16903] syzkaller0: entered allmulticast mode [ 442.550719][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 442.556857][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 442.703516][T16926] wg1 speed is unknown, defaulting to 1000 [ 442.807433][T16941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2991'. [ 443.655508][T16952] wg1 speed is unknown, defaulting to 1000 [ 443.840063][T16471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.879133][T16471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.906502][T16471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.967998][T16471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.215719][T16471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.266795][T16471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.290195][T16471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.336944][T16471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.098754][T16471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.414957][T16471] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.478850][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.486099][ T9156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.551313][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.558525][ T9156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.728711][T17017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3004'. [ 445.751654][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 445.759330][T16471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.836310][T16471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.049250][T17020] block nbd2: not configured, cannot reconfigure [ 446.081394][T17026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3007'. [ 446.095076][T17020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3005'. [ 446.293733][T17034] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3008'. [ 446.938599][T17063] netlink: 'syz.4.3014': attribute type 25 has an invalid length. [ 447.084533][T17070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3016'. [ 447.087070][T17068] macsec0: entered promiscuous mode [ 447.119629][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 447.126653][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 447.370182][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3016'. [ 447.842883][T17107] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3022'. [ 448.158364][T17131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3028'. [ 448.231815][T16471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.287246][T17128] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3027'. [ 448.356638][T17137] netlink: 'syz.2.3029': attribute type 13 has an invalid length. [ 448.490321][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 448.594061][T17151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3033'. [ 448.776048][T16471] veth0_vlan: entered promiscuous mode [ 448.859385][T16471] veth1_vlan: entered promiscuous mode [ 448.906505][T17161] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 448.944892][T17161] dummy0: left promiscuous mode [ 448.998848][T17170] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 449.032593][T17167] netlink: 'syz.2.3039': attribute type 1 has an invalid length. [ 449.206274][T17167] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 449.339053][T16471] veth0_macvtap: entered promiscuous mode [ 449.450292][T16471] veth1_macvtap: entered promiscuous mode [ 449.486215][T17185] openvswitch: netlink: Actions may not be safe on all matching packets [ 449.560332][T17194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.567702][T17194] IPv6: NLM_F_CREATE should be set when creating new route [ 449.575005][T17194] IPv6: NLM_F_CREATE should be set when creating new route [ 449.602853][T17194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.622346][T16471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.703825][T16471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.810635][ T9147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.864121][ T9147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.050893][ T9156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.140767][ T9150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.446289][ T9155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.498853][ T9155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.602545][T17220] netlink: 'syz.1.3049': attribute type 2 has an invalid length. [ 450.674262][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.697373][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.866731][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.875777][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.886387][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.902008][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.912035][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.454762][T17276] veth0_macvtap: Caught tx_queue_len zero misconfig [ 452.738455][ T5608] syz_tun (unregistering): left promiscuous mode [ 452.761598][ T5608] syz_tun (unregistering): left allmulticast mode [ 452.790280][ T5608] team0: Port device syz_tun removed [ 452.865543][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'. [ 453.187907][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 453.458944][T17311] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3067'. [ 453.472394][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 453.735778][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'. [ 453.770065][T17253] wg1 speed is unknown, defaulting to 1000 [ 453.780160][T17327] netlink: 'syz.3.3072': attribute type 2 has an invalid length. [ 453.823001][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 453.992409][ T5631] Bluetooth: hci4: command tx timeout [ 454.011161][T17339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.154919][T17344] netlink: 'syz.3.3076': attribute type 11 has an invalid length. [ 454.207649][T17344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3076'. [ 454.465430][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3079'. [ 454.778753][T17373] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3083'. [ 454.838570][T17381] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3083'. [ 455.978298][T17253] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.988397][T17253] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.997806][T17253] bridge_slave_0: entered allmulticast mode [ 456.024174][T17253] bridge_slave_0: entered promiscuous mode [ 456.052961][T17253] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.073017][ T5631] Bluetooth: hci4: command tx timeout [ 456.089966][T17253] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.111186][T17253] bridge_slave_1: entered allmulticast mode [ 456.134312][T17253] bridge_slave_1: entered promiscuous mode [ 456.470049][T17253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.537355][T17253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.745529][T17253] team0: Port device team_slave_0 added [ 456.788976][T17253] team0: Port device team_slave_1 added [ 456.891983][T17253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.920365][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.028657][T17482] xt_hashlimit: size too large, truncated to 1048576 [ 457.040179][T17253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.095224][T17253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.125528][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.215907][T17253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.468942][T17253] hsr_slave_0: entered promiscuous mode [ 457.492952][T17253] hsr_slave_1: entered promiscuous mode [ 457.515465][T17253] debugfs: 'hsr0' already exists in 'hsr' [ 457.538166][T17253] Cannot create hsr debugfs directory [ 457.603316][T17496] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 457.609877][T17496] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 458.150922][ T5631] Bluetooth: hci4: command tx timeout [ 458.194937][T17513] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 458.264916][T17515] wg1 speed is unknown, defaulting to 1000 [ 458.416351][T17518] __nla_validate_parse: 6 callbacks suppressed [ 458.416371][T17518] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3116'. [ 458.568599][T17253] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.607996][T17253] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.639072][T17534] netlink: 'syz.3.3121': attribute type 15 has an invalid length. [ 458.653494][T17253] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 458.907578][T17541] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3122'. [ 458.956582][T17253] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.972113][T17253] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.983558][T17253] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 459.173647][T17253] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.189692][T17253] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.210964][T17253] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 459.341879][T17253] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.367642][T17253] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.392566][T17253] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 459.528616][T17561] netlink: 'syz.4.3132': attribute type 3 has an invalid length. [ 459.609690][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'. [ 460.230588][ T5615] Bluetooth: hci4: command tx timeout [ 461.590558][ T5615] Bluetooth: hci2: command 0x0401 tx timeout [ 461.590626][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 462.797098][T17569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.842372][T17253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.957603][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.972516][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3144'. [ 463.007096][T17253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.046624][T17611] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3145'. [ 463.059622][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.088495][T17253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.137596][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 463.145980][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.205237][T17253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.261403][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.667293][T17253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.694991][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3151'. [ 463.825069][T17253] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.846395][T17649] xt_hashlimit: size too large, truncated to 1048576 [ 463.862798][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.870057][ T9150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.893221][T17653] netlink: 'syz.2.3154': attribute type 11 has an invalid length. [ 463.915044][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.922294][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.940065][T17653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3154'. [ 464.059320][T17653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3154'. [ 464.144416][T17626] ip6gre4: entered allmulticast mode [ 464.189675][ T9155] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 464.740701][T17692] veth0: entered promiscuous mode [ 464.779471][T17690] veth0: left promiscuous mode [ 464.855741][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 464.884272][T17698] xt_HMARK: spi-set and port-set can't be combined [ 465.205472][T17253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.375569][T17253] veth0_vlan: entered promiscuous mode [ 465.401377][T17253] veth1_vlan: entered promiscuous mode [ 465.493784][T17253] veth0_macvtap: entered promiscuous mode [ 465.507689][T17253] veth1_macvtap: entered promiscuous mode [ 465.517168][T17717] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.584409][T17253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.664636][T17253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.682134][T17719] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3171'. [ 465.711681][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3170'. [ 465.773055][T17719] netlink: 'syz.4.3171': attribute type 2 has an invalid length. [ 465.794767][ T9152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.826197][ T9152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.848776][ T9147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.908746][ T9150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.089407][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 466.318934][T17746] xt_hashlimit: size too large, truncated to 1048576 [ 466.332947][T17733] team0 (unregistering): Port device team_slave_1 removed [ 466.399282][ T9152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.435959][ T9152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.476812][T17723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.546934][ T9155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.586345][ T9155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.921888][T17761] x_tables: duplicate underflow at hook 1 [ 467.008729][T17762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3052'. [ 467.269663][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.288420][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.297728][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.306592][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.318820][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.830192][T17791] macvtap1: entered promiscuous mode [ 467.852541][T17791] macvtap1: entered allmulticast mode [ 467.881618][T17791] veth1_to_bridge: entered promiscuous mode [ 467.903585][T17791] veth1_to_bridge: entered allmulticast mode [ 467.939739][T17791] team0: Device macvtap1 failed to register rx_handler [ 467.969230][T17791] veth1_to_bridge: left allmulticast mode [ 467.988776][T17791] veth1_to_bridge: left promiscuous mode [ 468.076244][ T5609] syz_tun (unregistering): left allmulticast mode [ 468.127276][T17805] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3188'. [ 468.149494][T17805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3188'. [ 468.230731][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 468.663674][T17774] wg1 speed is unknown, defaulting to 1000 [ 468.809546][T17843] __nla_validate_parse: 3 callbacks suppressed [ 468.809564][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 468.904944][T17848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.039245][T17850] syzkaller0: create flow: hash 2368007690 index 2 [ 469.345210][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 469.430754][ T5615] Bluetooth: hci0: command tx timeout [ 469.457181][T17855] syzkaller0: delete flow: hash 2368007690 index 2 [ 469.481836][ T9150] syzkaller0: tun_net_xmit 76 [ 469.494143][ T9150] syzkaller0: tun_net_xmit 48 [ 469.506859][T17860] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.517200][T17860] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.528087][ T5346] syzkaller0: tun_net_xmit 76 [ 469.576489][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 469.833876][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 469.840994][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 471.521186][ T5615] Bluetooth: hci0: command tx timeout [ 472.077619][T17876] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 472.124209][T17876] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 472.133653][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 472.187304][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 472.240752][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'. [ 472.347510][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 472.407656][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3212'. [ 472.839418][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 472.938342][T17908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3217'. [ 473.332598][T17774] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.373359][T17774] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.409323][T17774] bridge_slave_0: entered allmulticast mode [ 473.420292][T17774] bridge_slave_0: entered promiscuous mode [ 473.438762][T17774] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.447391][T17774] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.455419][T17774] bridge_slave_1: entered allmulticast mode [ 473.466008][T17774] bridge_slave_1: entered promiscuous mode [ 473.579489][T17774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.590852][ T5615] Bluetooth: hci0: command tx timeout [ 473.654667][T17774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.784982][T17774] team0: Port device team_slave_0 added [ 473.804203][T17774] team0: Port device team_slave_1 added [ 473.889397][T17942] __nla_validate_parse: 2 callbacks suppressed [ 473.889412][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3227'. [ 473.932862][T17774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.960376][T17774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.029536][T17774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.097464][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'. [ 474.122933][T17774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.141959][T17774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.179699][T17774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.227639][T17958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3228'. [ 474.527955][T17774] hsr_slave_0: entered promiscuous mode [ 474.560561][T17774] hsr_slave_1: entered promiscuous mode [ 474.574027][T17774] debugfs: 'hsr0' already exists in 'hsr' [ 474.587482][T17774] Cannot create hsr debugfs directory [ 474.602126][T17973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3235'. [ 475.200357][T17994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3240'. [ 475.680801][ T5615] Bluetooth: hci0: command tx timeout [ 475.866981][T18014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3246'. [ 475.953592][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 476.225966][T18025] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3248'. [ 476.474303][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 478.293508][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 478.305412][T18024] veth0: entered promiscuous mode [ 478.311247][T18024] veth0: left promiscuous mode [ 478.599895][T18029] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 478.623015][T18036] veth0_macvtap: left promiscuous mode [ 478.654694][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'. [ 478.879071][T18055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.892031][T18042] bond1: Unable to set down delay as MII monitoring is disabled [ 478.914853][T18042] bond1 (unregistering): Released all slaves [ 478.957633][T18058] __nla_validate_parse: 1 callbacks suppressed [ 478.957651][T18058] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3253'. [ 478.988265][T18039] syzkaller1: entered promiscuous mode [ 478.994088][T18039] syzkaller1: entered allmulticast mode [ 479.347870][T17774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.428726][T17774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.535058][T18075] block nbd0: not configured, cannot reconfigure [ 479.905598][T17774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.955016][T17774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.247210][T17774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.291613][T17774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.817109][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'. [ 480.968755][T18137] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 481.041280][T18139] netlink: 'syz.1.3271': attribute type 1 has an invalid length. [ 481.334982][T18132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.385294][T18141] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 481.876304][T17774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 481.917785][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.956778][T17774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 482.009330][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.029238][T17774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 482.046912][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.065262][T17774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 482.073366][T18168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 482.097720][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.182353][T18176] sch_fq: defrate 0 ignored. [ 482.288013][T18178] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.3284'. [ 482.391217][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 482.397293][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 482.485621][T18180] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 482.506786][T18180] syzkaller1: Refused to change device type [ 482.567545][T17774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.725980][T17774] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.823829][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.831092][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.974125][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.981379][ T9150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.983928][T18202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3293'. [ 483.044166][T18202] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.116520][T18206] SET target dimension over the limit! [ 483.286045][T18213] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 483.311513][T18212] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3297'. [ 483.377945][T18219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3298'. [ 483.656150][T18228] team0: Device ipvlan0 failed to register rx_handler [ 484.007480][T18242] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3304'. [ 484.483311][T17774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.731099][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 484.874191][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 485.030559][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 485.030801][ T5631] Bluetooth: hci2: command 0x0401 tx timeout [ 485.205696][T18295] vlan4: entered allmulticast mode [ 485.398693][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 485.483073][T17774] veth0_vlan: entered promiscuous mode [ 485.692516][T17774] veth1_vlan: entered promiscuous mode [ 485.928565][T17774] veth0_macvtap: entered promiscuous mode [ 485.953600][T18324] syzkaller1: entered promiscuous mode [ 485.960823][T18324] syzkaller1: entered allmulticast mode [ 485.982678][T17774] veth1_macvtap: entered promiscuous mode [ 486.012113][T18327] lo: entered promiscuous mode [ 486.068951][T18327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.168751][T17774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.235115][T17774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.327457][T18338] x_tables: duplicate underflow at hook 2 [ 486.472977][ T9150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.535243][ T9150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.591410][ T9152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.627482][ T9152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.709728][ T9146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.760207][ T9146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.885730][ T9146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.921552][ T9146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.987706][T18354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.187696][T18358] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 487.397061][T18358] team0: Port device dummy0 added [ 487.607073][ T29] IPVS: starting estimator thread 0... [ 487.721114][T18371] IPVS: using max 32 ests per chain, 76800 per kthread [ 487.799417][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.811959][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.826892][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.838883][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.848571][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.915795][T18383] netlink: set zone limit has 4 unknown bytes [ 488.594721][T18409] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3352'. [ 488.799714][T18409] ip6t_srh: unknown srh invflags 4000 [ 488.918662][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 489.819903][T18448] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 489.844413][T18453] netlink: 'syz.1.3362': attribute type 1 has an invalid length. [ 489.911941][ T5631] Bluetooth: hci1: command tx timeout [ 490.048024][T18453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.387433][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3364'. [ 491.991966][ T5631] Bluetooth: hci1: command tx timeout [ 492.474122][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 492.535714][T18459] bond1: (slave geneve2): making interface the new active one [ 492.550171][T18459] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 492.701307][T18375] wg1 speed is unknown, defaulting to 1000 [ 492.853486][T18476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3365'. [ 493.421862][T18509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3375'. [ 493.535316][ T9155] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 493.969874][ T9155] bond6 (unregistering): (slave gretap1): Removing an active aggregator [ 493.984285][ T9155] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 494.070744][ T5631] Bluetooth: hci1: command tx timeout [ 494.182847][ T9155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.204797][ T9155] bond0 (unregistering): Released all slaves [ 494.219047][ T9155] bond1 (unregistering): Released all slaves [ 494.243195][ T9155] bond2 (unregistering): (slave veth5): Releasing active interface [ 494.257229][ T9155] batadv1: entered promiscuous mode [ 494.264775][ T9155] bond2 (unregistering): (slave batadv1): Releasing active interface [ 494.276085][ T9155] bond2 (unregistering): (slave veth7): Releasing active interface [ 494.285254][ T9155] bond2 (unregistering): Released all slaves [ 494.305930][ T9155] bond3 (unregistering): Released all slaves [ 494.337556][ T9155] bond4 (unregistering): Released all slaves [ 494.358743][ T9155] bond5 (unregistering): Released all slaves [ 494.395721][ T9155] bond6 (unregistering): Released all slaves [ 494.415628][ T9155] bond7 (unregistering): Released all slaves [ 494.437271][ T9155] bond8 (unregistering): Released all slaves [ 494.480725][ T9155] bond9 (unregistering): Released all slaves [ 494.499737][ T9155] bond10 (unregistering): Released all slaves [ 494.529821][ T9155] bond11 (unregistering): Released all slaves [ 494.553588][ T9155] bond12 (unregistering): Released all slaves [ 494.908136][T18529] vlan2: entered promiscuous mode [ 494.937407][T18529] bridge0: entered promiscuous mode [ 495.494935][T18558] netlink: 'syz.4.3384': attribute type 2 has an invalid length. [ 496.150853][ T5631] Bluetooth: hci1: command tx timeout [ 496.677724][T18375] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.746125][T18375] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.765313][T18375] bridge_slave_0: entered allmulticast mode [ 496.776393][T18375] bridge_slave_0: entered promiscuous mode [ 496.787551][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 496.937481][T18375] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.953516][T18375] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.025681][T18375] bridge_slave_1: entered allmulticast mode [ 497.045537][T18375] bridge_slave_1: entered promiscuous mode [ 497.077456][T18613] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3396'. [ 497.167338][T18606] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 497.206103][T18606] bond1 (unregistering): Released all slaves [ 497.245862][T18619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 497.315908][T18622] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 497.509507][T18375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.538212][T18375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.704413][T18633] netlink: 'syz.0.3403': attribute type 13 has an invalid length. [ 497.758106][T18375] team0: Port device team_slave_0 added [ 497.816952][T18636] tipc: Started in network mode [ 497.840489][T18636] tipc: Node identity 028f7f819425, cluster identity 4711 [ 497.867140][T18636] tipc: Enabled bearer , priority 0 [ 497.877282][T18633] macsec0: entered allmulticast mode [ 497.929843][T18375] team0: Port device team_slave_1 added [ 498.025400][T18629] syzkaller0: entered promiscuous mode [ 498.043144][T18629] syzkaller0: entered allmulticast mode [ 498.064832][T18629] tipc: Resetting bearer [ 498.248758][T18628] tipc: Resetting bearer [ 498.449922][T18662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3408'. [ 501.191033][T18628] tipc: Disabling bearer [ 501.203578][T18375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.211073][T18375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.247736][T18375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.331457][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.387041][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 501.441266][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449395][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.193747][ T9146] smc: removing ib device syz2 [ 502.348928][T18665] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.359360][ T5612] tipc: Node number set to 2527756161 [ 502.386593][ T9146] smbdirect: ib_dev[syz2] removed [ 502.397095][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.432370][T18375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.474780][T18375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.589587][T18375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.642995][T18678] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 502.667730][T18678] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 502.694502][T18678] gretap1: entered promiscuous mode [ 502.704092][T18678] gretap1: entered allmulticast mode [ 502.726799][T18680] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3413'. [ 503.609457][T18722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3421'. [ 503.905479][T18375] hsr_slave_0: entered promiscuous mode [ 503.942092][T18375] hsr_slave_1: entered promiscuous mode [ 503.965993][T18375] debugfs: 'hsr0' already exists in 'hsr' [ 503.988003][T18375] Cannot create hsr debugfs directory [ 504.162674][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 504.207272][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 505.179887][T18778] netlink: 'syz.3.3434': attribute type 8 has an invalid length. [ 505.491544][T18784] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3435'. [ 505.525912][T18784] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3435'. [ 505.563984][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 505.869559][T18804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.001978][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3441'. [ 506.694259][T18818] geneve2: entered promiscuous mode [ 506.776801][T18828] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 506.855793][T18828] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 506.923986][T18828] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 507.098034][T18832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'. [ 507.336664][T18842] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 509.015519][T18375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.049696][T18375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.100650][T18375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.166527][T18375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.215856][T18375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.273302][T18375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.300917][T18375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.309727][ T5612] IPVS: starting estimator thread 0... [ 509.345235][T18375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.441183][T18903] IPVS: using max 34 ests per chain, 81600 per kthread [ 509.683522][ T9155] IPVS: stop unused estimator thread 0... [ 509.785407][T18929] netlink: 'syz.0.3468': attribute type 14 has an invalid length. [ 509.841537][T18375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.860632][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 509.904180][T18936] netlink: 'syz.4.3471': attribute type 32 has an invalid length. [ 509.951867][T18929] netlink: 'syz.0.3468': attribute type 14 has an invalid length. [ 509.967450][T18375] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.978840][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 510.016129][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.020723][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 510.023311][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.067827][T18926] unsupported nla_type 216 [ 510.452017][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.459190][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.470235][T18946] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3470'. [ 510.705061][T18960] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 510.738938][T18963] xt_hashlimit: size too large, truncated to 1048576 [ 511.695234][T18996] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3480'. [ 512.739215][T18375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.812116][T18375] veth0_vlan: entered promiscuous mode [ 512.842864][T18375] veth1_vlan: entered promiscuous mode [ 512.933874][T18375] veth0_macvtap: entered promiscuous mode [ 512.973378][T18375] veth1_macvtap: entered promiscuous mode [ 513.016910][T18375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.030401][T18375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.081717][ T9156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.143247][ T3368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.206012][ T9153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.253482][ T9153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.019192][T18976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.344096][ T9152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.408451][ T9152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.516339][T19057] IPv6: NLM_F_REPLACE set, but no existing node found! [ 514.544285][ T9152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.585869][ T9152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.340761][T19097] bridge0: port 3(syz_tun) entered blocking state [ 515.407193][T19097] bridge0: port 3(syz_tun) entered disabled state [ 515.463613][T19097] syz_tun: entered allmulticast mode [ 515.538405][T19097] syz_tun: entered promiscuous mode [ 515.604382][T19098] xt_hashlimit: size too large, truncated to 1048576 [ 515.618360][T19097] bridge0: port 3(syz_tun) entered blocking state [ 515.626672][T19097] bridge0: port 3(syz_tun) entered forwarding state [ 516.179324][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.197646][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.210010][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.231233][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.239526][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 516.307283][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 516.869405][ T5611] syz_tun (unregistering): left allmulticast mode [ 516.896954][ T5611] syz_tun (unregistering): left promiscuous mode [ 516.919502][ T5611] bridge0: port 3(syz_tun) entered disabled state [ 517.489164][T19170] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 517.799526][T19185] netlink: 'syz.1.3515': attribute type 3 has an invalid length. [ 518.319817][T19199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3516'. [ 518.320589][ T5615] Bluetooth: hci2: command tx timeout [ 518.375015][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 518.598510][T19204] netlink: 'syz.2.3517': attribute type 15 has an invalid length. [ 518.610515][T19204] netlink: 'syz.2.3517': attribute type 1 has an invalid length. [ 519.044297][T19216] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3520'. [ 519.061217][T19210] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3518'. [ 519.406504][T19231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3519'. [ 519.479632][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3519'. [ 520.250028][T19259] ip6t_rpfilter: unknown options [ 520.390646][ T5615] Bluetooth: hci2: command tx timeout [ 520.406688][T19124] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.429717][T19124] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.445199][T19124] bridge_slave_0: entered allmulticast mode [ 520.475134][T19124] bridge_slave_0: entered promiscuous mode [ 520.536230][T19124] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.583156][T19124] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.622839][T19124] bridge_slave_1: entered allmulticast mode [ 520.669466][T19124] bridge_slave_1: entered promiscuous mode [ 520.776358][T19278] netlink: 'syz.2.3531': attribute type 1 has an invalid length. [ 520.825297][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 520.842353][T19124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.852565][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'. [ 520.901281][T19124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.910026][T19282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3531'. [ 521.000290][T19286] tipc: Trying to set illegal importance in message [ 521.186248][T19124] team0: Port device team_slave_0 added [ 521.238368][T19124] team0: Port device team_slave_1 added [ 521.390710][T19124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.428862][T19124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.576659][T19299] __nla_validate_parse: 1 callbacks suppressed [ 521.576678][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3536'. [ 521.615776][T19124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.746627][T19124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.806166][T19124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.031406][T19124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.319531][T19316] bridge0: port 3(veth1_to_bridge) entered blocking state [ 522.351850][T19316] bridge0: port 3(veth1_to_bridge) entered disabled state [ 522.359337][T19316] veth1_to_bridge: entered allmulticast mode [ 522.359357][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'. [ 522.367934][T19316] veth1_to_bridge: entered promiscuous mode [ 522.407808][T19124] hsr_slave_0: entered promiscuous mode [ 522.422599][T19124] hsr_slave_1: entered promiscuous mode [ 522.443949][T19124] debugfs: 'hsr0' already exists in 'hsr' [ 522.456962][T19124] Cannot create hsr debugfs directory [ 522.470758][ T5615] Bluetooth: hci2: command tx timeout [ 522.633345][T19327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3541'. [ 522.705957][T19321] syz_tun: refused to change device tx_queue_len [ 523.266706][T19124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.287218][T19124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.436264][T19124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.467630][T19124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.663351][T19348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3547'. [ 523.833739][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 523.941784][T19124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.993617][T19124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.551907][ T5615] Bluetooth: hci2: command tx timeout [ 524.576747][T19124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.597438][T19124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.623955][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3556'. [ 525.255710][T19412] tap0: tun_chr_ioctl cmd 1074025672 [ 525.281844][T19412] tap0: ignored: set checksum disabled [ 525.509831][T19124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 525.554331][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 525.599807][T19124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.652253][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.701471][T19124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.744371][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.759757][ T30] audit: type=1804 audit(1786162603.866:4): pid=19426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3565" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=311 res=1 errno=0 [ 525.788270][T19124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 525.834025][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.858062][ T30] audit: type=1800 audit(1786162603.866:5): pid=19426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3565" name="cgroup.controllers" dev="tmpfs" ino=311 res=0 errno=0 [ 526.008917][T19438] netlink: 'syz.4.3567': attribute type 5 has an invalid length. [ 526.046619][T19444] netlink: 'syz.4.3567': attribute type 5 has an invalid length. [ 526.146016][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3569'. [ 526.669504][T19463] veth0_to_bond: entered allmulticast mode [ 526.733282][T19124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.884797][T19124] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.969747][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.976966][ T9152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.991444][T19469] netlink: 'syz.2.3574': attribute type 7 has an invalid length. [ 527.038333][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 527.076823][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 527.181048][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.189552][ T9152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.283445][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 527.450139][T19485] netlink: 'syz.1.3579': attribute type 10 has an invalid length. [ 527.507538][T19485] syz_tun: entered promiscuous mode [ 528.044138][T19508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3584'. [ 528.453636][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 528.465836][T19124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.501449][T19534] IPVS: set_ctl: invalid protocol: 46 172.20.20.33:20003 [ 528.706709][T19124] veth0_vlan: entered promiscuous mode [ 528.789497][T19124] veth1_vlan: entered promiscuous mode [ 528.889518][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 528.956224][T19124] veth0_macvtap: entered promiscuous mode [ 528.999973][T19124] veth1_macvtap: entered promiscuous mode [ 529.026431][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3598'. [ 529.120373][T19124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.174570][T19124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.207986][T19556] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 529.642224][ T9155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.742823][ T9155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.773980][ T9155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.825600][ T9152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.898952][ T9147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.937401][ T9147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.101297][T19549] infiniband syz2: set active [ 530.102222][T19580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3606'. [ 530.118837][T19549] infiniband syz2: added bridge_slave_0 [ 530.146584][T19549] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 530.158790][ T3368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.174646][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3606'. [ 530.194542][T19549] infiniband syz2: Couldn't open port 1 [ 530.199069][ T3368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.256815][T19549] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 530.341522][T19549] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 530.385885][T19549] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 530.508495][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 530.555499][T19549] RDS/IB: syz2: added [ 530.575251][T19549] smc: adding ib device syz2 with port count 1 [ 530.608086][T19549] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 531.087340][T19660] netlink: 'syz.4.3617': attribute type 2 has an invalid length. [ 531.173624][T19660] : entered promiscuous mode [ 531.303590][T19662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.128254][T19702] __nla_validate_parse: 3 callbacks suppressed [ 532.128274][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 532.360005][T19709] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3625'. [ 532.807916][T19733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'. [ 533.410331][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 533.452130][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 534.051908][T19773] sctp: [Deprecated]: syz.3.3646 (pid 19773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.051908][T19773] Use struct sctp_sack_info instead [ 534.466222][T19787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3650'. [ 534.975195][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3654'. [ 535.009243][T19780] netlink: Conntrack attr has 1 unknown bytes [ 535.017216][T19796] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3654'. [ 535.029113][T19780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.046392][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3655'. [ 535.712160][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3662'. [ 536.506732][T19846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.539260][T19844] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.639051][T19847] bond0: entered allmulticast mode [ 536.653499][T19847] bond_slave_0: entered allmulticast mode [ 536.668325][T19847] bond_slave_1: entered allmulticast mode [ 537.870440][T19891] __nla_validate_parse: 3 callbacks suppressed [ 537.870456][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3682'. [ 537.946820][T19899] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 538.089376][T19903] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 538.128771][T19903] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 538.280538][T19916] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3687'. [ 538.332339][T19916] netlink: 'syz.3.3687': attribute type 1 has an invalid length. [ 538.398696][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.596616][T19932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3687'. [ 538.728350][T19919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.749476][T19919] bond1: (slave bond2): making interface the new active one [ 538.777239][T19919] bond1: (slave bond2): Enslaving as an active interface with an up link [ 538.923822][T19934] netlink: 'syz.2.3692': attribute type 14 has an invalid length. [ 539.158951][T19942] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 540.016914][T19978] netlink: 'syz.4.3708': attribute type 4 has an invalid length. [ 540.109022][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3709'. [ 540.762952][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 540.818821][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 540.869743][T20012] : renamed from ip6_vti0 (while UP) [ 541.087752][T20031] xt_TCPMSS: Only works on TCP SYN packets [ 541.500126][T20043] bond3: Unable to set down delay as MII monitoring is disabled [ 541.833436][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 541.835023][T20043] bond3 (unregistering): Released all slaves [ 541.847440][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 541.917008][T20033] syzkaller0: entered promiscuous mode [ 541.944139][T20033] syzkaller0: entered allmulticast mode [ 542.088144][T20064] netlink: 'syz.0.3729': attribute type 7 has an invalid length. [ 542.113393][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 542.154587][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 542.216290][T20066] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 542.582920][T20088] xt_hashlimit: size too large, truncated to 1048576 [ 542.917845][T20091] __nla_validate_parse: 1 callbacks suppressed [ 542.917864][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'. [ 543.285468][T20108] pim6reg: entered allmulticast mode [ 543.656377][T20137] netlink: 'syz.3.3742': attribute type 1 has an invalid length. [ 543.732218][T20137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.814174][T20146] xt_hashlimit: size too large, truncated to 1048576 [ 543.839169][T20148] netlink: 'syz.4.3745': attribute type 7 has an invalid length. [ 543.848027][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 543.858823][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'. [ 543.988426][T20141] bond3: (slave geneve2): making interface the new active one [ 544.005516][T20141] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 544.051762][T20155] netlink: 'syz.4.3748': attribute type 3 has an invalid length. [ 544.087734][T20155] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3748'. [ 544.533186][T20172] Cannot find del_set index 1 as target [ 545.134620][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3760'. [ 545.269755][T20212] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 546.128979][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 546.198530][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 546.433303][T20231] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 546.477855][T20251] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 546.515503][T20231] bond4 (unregistering): Released all slaves [ 546.568424][T20232] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 546.926830][T20269] openvswitch: netlink: IPv4 tun info is not correct [ 546.968887][T20272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.995756][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 547.043138][T20276] ip_tables: iptables: counters copy to user failed while replacing table [ 547.158570][T20274] only policy match revision 0 supported [ 547.158591][T20274] unable to load match [ 547.312428][T20287] netlink: 'syz.1.3790': attribute type 1 has an invalid length. [ 547.498341][T20287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.541938][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 547.572903][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 548.007770][T20308] team0: Device gtp0 is of different type [ 548.494965][T20340] netlink: 'syz.0.3803': attribute type 1 has an invalid length. [ 548.558039][T20346] __nla_validate_parse: 1 callbacks suppressed [ 548.558058][T20346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3803'. [ 548.729145][T20351] xt_hashlimit: size too large, truncated to 1048576 [ 548.776525][T20346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.814022][T20347] netlink: 'syz.0.3803': attribute type 4 has an invalid length. [ 549.219831][T20372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3811'. [ 549.294088][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3810'. [ 549.374740][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3810'. [ 549.960518][T19633] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.006668][T19633] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.063760][T19608] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.119116][T19608] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.567775][T20420] Bluetooth: MGMT ver 1.23 [ 550.579625][T20412] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 550.591836][T20412] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 550.662954][T20420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3822'. [ 550.799797][T20428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'. [ 550.899344][T20428] netlink: 'syz.0.3826': attribute type 64 has an invalid length. [ 550.920934][T20428] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3826'. [ 551.289653][T20439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3830'. [ 551.380244][T20439] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 551.467488][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3830'. [ 551.521442][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3833'. [ 551.546038][T20444] xt_socket: unknown flags 0xe4 [ 551.572307][T20448] netlink: 'syz.0.3833': attribute type 29 has an invalid length. [ 551.587255][T20453] netlink: 'syz.0.3833': attribute type 29 has an invalid length. [ 552.296866][T20472] can: request_module (can-proto-0) failed. [ 552.605556][T20484] xt_limit: Overflow, try lower: 536871034/127 [ 553.572337][T20509] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 553.897694][T20517] veth1_to_bond: entered allmulticast mode [ 553.931327][T20517] veth1_to_bond: entered promiscuous mode [ 554.214295][T20524] bond3: entered promiscuous mode [ 554.267160][T20516] veth1_to_bond: left promiscuous mode [ 554.291451][T20516] veth1_to_bond: left allmulticast mode [ 554.713233][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 555.624809][T20546] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 557.000590][T20591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.254695][T20616] netdevsim netdevsim1 netdevsim2: IPsec offload requires 128 bit authentication [ 557.369856][T20614] openvswitch: netlink: Duplicate or invalid key (type 0). [ 557.874377][T20626] vlan0: entered promiscuous mode [ 557.903721][T20626] geneve1: entered promiscuous mode [ 557.935429][T20626] vlan0: entered allmulticast mode [ 557.992171][T20626] geneve1: entered allmulticast mode [ 558.559346][T20642] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 558.882477][T20651] __nla_validate_parse: 13 callbacks suppressed [ 558.882516][T20651] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3887'. [ 559.125467][T20656] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 559.243081][T20651] raw_sendmsg: syz.4.3887 forgot to set AF_INET. Fix it! [ 559.735687][T20662] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 560.424525][T20685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3899'. [ 560.462000][T20685] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 561.318715][T20706] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3905'. [ 561.431841][T20709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3906'. [ 561.501511][T20717] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 561.717484][T20720] macvtap1: entered allmulticast mode [ 561.824118][T20717] macvtap2: entered allmulticast mode [ 561.994063][T20726] bond4: (slave bridge2): making interface the new active one [ 562.026218][T20726] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 562.131797][T20740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.338713][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3916'. [ 562.394313][T20745] block nbd2: Unsupported socket: should be TCP or UNIX. [ 562.624291][T20755] netlink: 'syz.2.3919': attribute type 2 has an invalid length. [ 562.889792][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.227880][T20773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3925'. [ 563.294300][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 563.349610][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3926'. [ 563.522669][T20775] team0: Port device dummy0 removed [ 563.587313][T20780] tipc: Enabling of bearer rejected, media not registered [ 563.630190][T20780] tipc: Enabling of bearer rejected, media not registered [ 563.732602][T20780] tipc: Enabling of bearer rejected, media not registered [ 563.810256][T20780] tipc: Enabling of bearer rejected, media not registered [ 563.960972][T20780] tipc: Enabling of bearer rejected, media not registered [ 564.029273][T20780] tipc: Enabling of bearer rejected, media not registered [ 564.283506][T20780] tipc: Enabling of bearer rejected, media not registered [ 564.607255][T20800] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 564.866099][T20814] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3935'. [ 565.154562][T20821] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3937'. [ 565.390102][T20807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.437780][T20828] syz_tun: entered promiscuous mode [ 565.711142][T20833] xt_ecn: cannot match TCP bits for non-tcp packets [ 567.395967][T20864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3945'. [ 567.422187][T20864] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 568.742050][T20836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.488949][T20913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3958'. [ 571.292176][T20920] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 571.801721][T20933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3965'. [ 572.427372][T20936] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3967'. [ 572.525250][T20945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3969'. [ 573.220819][T20953] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 573.578502][T20960] netlink: 'syz.0.3973': attribute type 1 has an invalid length. [ 573.631265][T20953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.706043][T20960] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3973'. [ 574.608067][T20968] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3975'. [ 580.314158][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 582.750971][T20988] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3978'. [ 588.478763][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 594.163438][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.212051][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.226881][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.271583][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.298692][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 596.601197][ T5631] Bluetooth: hci3: command tx timeout [ 598.630942][ T5631] Bluetooth: hci3: command tx timeout [ 600.320424][ C0] sched: DL replenish lagged too much [ 600.415087][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 600.440111][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 600.466754][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 600.475247][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 600.483918][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 600.496978][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 600.504870][T21014] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 600.531762][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 600.572722][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 600.580899][T21014] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 600.713253][ T5631] Bluetooth: hci3: command tx timeout [ 602.780711][ T50] Bluetooth: hci6: command tx timeout [ 602.810673][ T50] Bluetooth: hci7: command tx timeout [ 602.817050][ T50] Bluetooth: hci3: command tx timeout [ 604.362188][ T5615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 604.431298][ T5615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 604.466515][ T5615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 604.801761][ T5615] Bluetooth: hci6: command tx timeout [ 604.810822][ T5615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 604.880616][ T5615] Bluetooth: hci7: command tx timeout [ 604.888333][ T5615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 606.168338][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 606.340932][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 606.360867][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 606.372048][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 606.384048][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 607.180465][ T50] Bluetooth: hci6: command tx timeout [ 607.185908][ T50] Bluetooth: hci7: command tx timeout [ 607.193781][ T5615] Bluetooth: hci8: command tx timeout [ 608.550808][ T50] Bluetooth: hci9: command tx timeout [ 609.370588][ T5615] Bluetooth: hci7: command tx timeout [ 609.376019][ T5615] Bluetooth: hci8: command tx timeout [ 609.381909][ T5631] Bluetooth: hci6: command tx timeout [ 610.630869][ T5615] Bluetooth: hci9: command tx timeout [ 611.030760][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 611.850839][ T5615] Bluetooth: hci8: command tx timeout [ 612.711523][ T50] Bluetooth: hci9: command tx timeout [ 613.920700][ T50] Bluetooth: hci8: command tx timeout [ 614.790876][ T50] Bluetooth: hci9: command tx timeout [ 624.452608][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.761751][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 658.381810][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 658.620864][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 658.629911][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 658.646195][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 658.661432][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 660.724312][ T5615] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 660.736247][ T5615] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 660.758539][ T5615] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 660.780511][ T5615] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 660.819630][ T5615] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 661.453342][ T5615] Bluetooth: hci10: command tx timeout [ 662.871894][ T5615] Bluetooth: hci11: command tx timeout [ 662.899342][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 663.040960][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 663.052391][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 663.074595][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 663.520705][ T50] Bluetooth: hci10: command tx timeout [ 663.548868][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 665.040413][ T5615] Bluetooth: hci11: command tx timeout [ 665.596769][ T5615] Bluetooth: hci12: command tx timeout [ 665.603600][ T50] Bluetooth: hci10: command tx timeout [ 667.201119][ T5615] Bluetooth: hci11: command tx timeout [ 667.670600][ T50] Bluetooth: hci12: command tx timeout [ 667.676142][ T50] Bluetooth: hci10: command tx timeout [ 668.406383][ T5615] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 668.481593][ T5615] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 668.492920][ T5615] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 668.691267][ T5615] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 668.708472][ T5615] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 669.379674][ T5615] Bluetooth: hci11: command tx timeout [ 669.750673][ T5615] Bluetooth: hci12: command tx timeout [ 670.781498][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 670.791378][T21014] Bluetooth: hci13: command tx timeout [ 670.832897][ T50] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 670.874743][ T50] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 670.890482][ T50] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 670.902113][ T50] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 671.908773][ T50] Bluetooth: hci12: command tx timeout [ 672.885925][ T50] Bluetooth: hci13: command tx timeout [ 673.030938][ T50] Bluetooth: hci14: command tx timeout [ 673.051386][ T5275] veth0_vlan: left promiscuous mode [ 674.959758][ T50] Bluetooth: hci13: command tx timeout [ 675.121125][ T50] Bluetooth: hci14: command tx timeout [ 677.060788][ T50] Bluetooth: hci13: command tx timeout [ 677.220470][ T50] Bluetooth: hci14: command tx timeout [ 678.933048][T19630] bridge_slave_1: left allmulticast mode [ 678.939125][T19630] bridge_slave_1: left promiscuous mode [ 679.270796][ T50] Bluetooth: hci14: command tx timeout [ 680.495314][T19630] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.802437][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.749849][T19630] pim6reg: left allmulticast mode [ 724.522814][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 724.717317][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 724.733950][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 724.745243][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 724.769909][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 725.668337][ T5615] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 725.941173][ T5615] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 725.970922][ T5615] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 725.987665][ T5615] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 726.060883][ T5615] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 726.083270][ T31] INFO: task syz.2.3977:20989 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 726.167857][ T5615] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 726.286552][ T5615] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 726.299010][ T5615] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 726.322715][ T5615] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 726.337740][ T5615] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 726.440445][ T31] Not tainted syzkaller #0 [ 727.061669][ T50] Bluetooth: hci15: command tx timeout [ 727.170531][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.179242][ T31] task:syz.2.3977 state:D stack:27872 pid:20989 tgid:20984 ppid:18375 task_flags:0x400040 flags:0x00080002 [ 728.278900][ T50] Bluetooth: hci16: command tx timeout [ 728.560526][ T50] Bluetooth: hci17: command tx timeout [ 729.121838][ T50] Bluetooth: hci15: command tx timeout [ 729.677661][ T31] Call Trace: [ 729.850836][ T31] [ 729.853817][ T31] __schedule+0x17d9/0x56c0 [ 730.360730][ T50] Bluetooth: hci16: command tx timeout [ 730.664002][ T50] Bluetooth: hci17: command tx timeout [ 731.057798][ T31] ? __lock_acquire+0x683/0x2cf0 [ 731.250947][ T50] Bluetooth: hci15: command tx timeout [ 731.589748][ T31] ? __lock_acquire+0x683/0x2cf0 [ 732.369714][ T31] ? __pfx___schedule+0x10/0x10 [ 732.400445][ T50] Bluetooth: hci16: command tx timeout [ 732.662334][ T31] ? schedule+0x90/0x2b0 [ 732.666640][ T31] schedule+0x164/0x2b0 [ 732.720601][ T50] Bluetooth: hci17: command tx timeout [ 733.246823][ T31] schedule_preempt_disabled+0x13/0x30 [ 733.270590][ T50] Bluetooth: hci15: command tx timeout [ 733.710988][ T31] __mutex_lock+0x7bf/0x1550 [ 733.715666][ T31] ? __mutex_lock+0x5d4/0x1550 [ 734.430786][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 734.435523][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 734.642254][ T50] Bluetooth: hci16: command tx timeout [ 734.683498][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 734.782718][ T31] ? radix_tree_lookup+0x240/0x290 [ 734.790535][ T50] Bluetooth: hci17: command tx timeout [ 735.320391][ T31] genl_rcv_msg+0x10b/0x7a0 [ 735.358277][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.802496][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 735.807941][ T31] netlink_rcv_skb+0x226/0x4a0 [ 736.003668][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.037785][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10