last executing test programs: 9.447615114s ago: executing program 3 (id=3415): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) 9.228765407s ago: executing program 3 (id=3418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x88}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048009}, 0x20004090) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x88}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048009}, 0x20004090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 8.963616961s ago: executing program 3 (id=3421): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000040)={{0xab6, 0x3}, 0x100, './cgroup/cgroup.procs\x00'}) sendfile(r2, r3, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="43aeed0021fcb1cb3c02d5dc180300c0e3"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 8.305279721s ago: executing program 3 (id=3425): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004", @ANYRESOCT], 0x18}], 0x1, 0x0, 0x4c}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) 8.018333711s ago: executing program 3 (id=3428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x200}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40010000, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) pread64(r6, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 7.625117319s ago: executing program 3 (id=3432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x2f, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x0, 0x1, 0x6, 0x9, 0x9, 0x100, 0x4}, @alu={0x4, 0x0, 0x7, 0xa, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xb8, &(0x7f0000000300)=""/184, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x1, 0x5, 0x9}, {0x0, 0x3, 0x6, 0x5}, {0x5, 0x2, 0x10, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r0, 0x13, 0x1, 0x8, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x702, 0xe98, 0x0, &(0x7f0000000380)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r3, 0xffffffffffffffff, 0x31, 0x1, r1, @void, @value=r4, @void, @void, r2}, 0x20) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 3.953413726s ago: executing program 0 (id=3467): r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4099, 0x1003}, {&(0x7f0000001280)=""/4109, 0x100d}, {&(0x7f0000000140)=""/207, 0xcf}], 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.231073856s ago: executing program 0 (id=3474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000140)=[{0x1, 0x5, 0x8, 0x2}, {0x4, 0x5, 0x10, 0xa}, {0x1, 0x2, 0x4, 0x1}, {0x3, 0x5, 0x9, 0x6}, {0x2, 0x4, 0x5, 0x4}, {0x1, 0x2, 0x9, 0x5}, {0x4, 0x5, 0x4, 0x1}], 0x10, 0x400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r0, r1}, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2, 0x32, 0x0, @void}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000400)='bond_slave_1\x00', 0x10) r4 = openat$cgroup_type(r2, &(0x7f0000000440), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000480), 0x9) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x1410, 0x800, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x1402, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x4, &(0x7f00000008c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc8}], &(0x7f0000000900)='GPL\x00', 0x2, 0xb2, &(0x7f0000000940)=""/178, 0x0, 0x10, '\x00', r7, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x0, 0x10000, 0x101}, 0x10, 0x1bc29, r0, 0x2, &(0x7f0000000a80)=[r1, r1, r1, r1], &(0x7f0000000ac0)=[{0x2, 0x3, 0x0, 0xb}, {0x3, 0x5, 0x6, 0x7}], 0x10, 0x80}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r11, 0xc0385868, &(0x7f0000000cc0)={0xffffffffffffffff, &(0x7f0000000bc0)='threaded\x00', 0x10841, &(0x7f0000000c00)={@_ha_fsid={[0x4, 0x8]}, {0x2, 0x1, 0x0, 0x3}}, 0x4, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0xfff}) poll(&(0x7f0000000d00)=[{r11, 0x2000}, {r5, 0x80}], 0x2, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000d40)={'gretap0\x00', @local}) socket$kcm(0x29, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000d80)=0xb) r13 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r13, &(0x7f0000001300)={&(0x7f0000000dc0)=@caif=@dbg, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/145, 0x91}, {&(0x7f0000000f40)=""/243, 0xf3}, {&(0x7f0000001040)=""/253, 0xfd}, {&(0x7f0000001140)=""/137, 0x89}], 0x5, &(0x7f0000001280)=""/124, 0x7c}, 0x2002) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x380000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000001440)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'wpan3\x00'}) 2.181064924s ago: executing program 4 (id=3475): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x1, 0x8, 0x24, 0x67, 0x4, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, {0x17, 0x5, 0x0, @broadcast}}}}}, 0x0) 1.968685882s ago: executing program 4 (id=3477): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@deltaction={0xe4, 0x31, 0x400, 0x70bd27, 0x25dfdc00, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdb}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20000}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20009}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffef5, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xe4}}, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.732333188s ago: executing program 1 (id=3478): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x498, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x460, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x450, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_XOR={0x42c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x425, 0x1, "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"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x534}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 1.666347316s ago: executing program 4 (id=3479): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x5, @private1, 0xa7d}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, 0x90) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'veth0_to_bond\x00', {0x2, 0x0, @dev}}) 1.605062364s ago: executing program 2 (id=3480): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0x41}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r1, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) close(r2) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bind$can_raw(r0, &(0x7f00000001c0), 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'geneve1\x00', {'ip6tnl0\x00'}}) close(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000180)={0x2, 0x1, 0x8}) 1.500293216s ago: executing program 1 (id=3481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000480}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x4040080) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000480}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x4040080) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd24, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x401c011}, 0x9590f6cc1aa39d16) 1.445439333s ago: executing program 4 (id=3482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 1.191373064s ago: executing program 0 (id=3483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x141) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xe0a}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) write$tun(0xffffffffffffffff, 0x0, 0x141) (async) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xe0a}], 0x5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) (async) close(0x3) (async) 1.137001744s ago: executing program 1 (id=3484): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x3f, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xd1, 0x12d5c, 0x3}}, 0x44) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20, 0x48d5}, 0x8050) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x3f, 0x2, 0x6a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xd1, 0x12d5c, 0x3}}, 0x44) (async) socket(0xa, 0x5, 0x0) (async) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @private2, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20, 0x48d5}, 0x8050) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) 1.136642613s ago: executing program 2 (id=3485): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@empty, @initdev, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newaddr={0x2c, 0x14, 0x300, 0x70bd25, 0x25dfdbfd, {0x2, 0x18, 0xa0, 0xfd, r1}, [@IFA_LABEL={0x14, 0x3, 'macsec0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r2], 0x33fe0}}, 0x0) (async) sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1.038544938s ago: executing program 4 (id=3486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x800feea, [0x1, 0x3]}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 979.272235ms ago: executing program 2 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012800bfc000065727370616e0000100002800400120006000e0000000000"], 0x40}}, 0x0) 912.507991ms ago: executing program 0 (id=3488): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x40, 0x3, 0x4, 0x83f0, 0x4, 0x0, [{0x999, 0x2, 0xfffffffffffffffe, '\x00', 0x184}, {0x9, 0x2, 0x1, '\x00', 0x800}, {0x872, 0x6, 0x38, '\x00', 0x1103}, {0x8, 0x4f3, 0x6, '\x00', 0x1}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 889.639582ms ago: executing program 1 (id=3489): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) close(0x3) (async) close(0x3) syz_emit_ethernet(0x1f1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000004c0004800800024067b33f2808000140000000001400030076657468305f746f5f62617461647600080001400000000108000140000000031400030076657468315f746f496873720000000008000540fffffffc14"], 0xc8}}, 0x0) 751.741281ms ago: executing program 0 (id=3490): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) 655.952681ms ago: executing program 2 (id=3491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xe, 0x1, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0xe, 0x1, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x9, 0x4, 0x3, 0x9, 0x2c, 0x67, 0x0, 0xfc, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xef, [@remote]}]}}, {0x15, 0x4, 0x0, @private=0xa010101}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x9, 0x4, 0x3, 0x9, 0x2c, 0x67, 0x0, 0xfc, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xef, [@remote]}]}}, {0x15, 0x4, 0x0, @private=0xa010101}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r7, 0x49}, &(0x7f0000000580)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 642.33568ms ago: executing program 1 (id=3492): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2, &(0x7f0000000440)=""/4096, 0x1000}, 0x10000) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="0887fc4d614cd13a117ff167324f763fe76a8153f67a0f45eee319f918c75ae2a80e5dec85e5f11d508b10f0c9e18b00513d16b18cfef1a142d2d77d4feadb088158f4583f2ce786c4f3784002ef49ececd7268235e8305f1944c6925a9a248adeb532260cd2970eecaf77d451dcd69a056e880fd70438605f8980ffce8cf72418319b205a9c54f541fabffe543c96789d0fb03d91415d47ea95976190ee652ee114b4ad32ac6c51cb275235e8a47e511c6f7c27b7d7ed1fd3e6b37469f1bc6f2d21b9d132af91cfa35b8fe7ac7c84e10b5b08d1874dfb7c1829b2335e54"], 0x4c}}, 0x0) 615.466836ms ago: executing program 4 (id=3493): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_attach_bpf(r1, 0x111, 0x87, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) close(0x4) sendto$inet6(r2, &(0x7f0000000040)="5106bcf9139586d9d31db9c9c06534ad23eda4629e6b11b16c9e8d4b7667090ece2d4ff90607b0ce84de3fe0ff6712333487dc86f7f49967e3b3cd6f5935b0f5f9e64a1ab408cf8f866e44fab8a551930223af8957251e2533d079f1a5af9ea0a264ff78b59d6be14b11f8d455", 0x6d, 0x9880, &(0x7f00000000c0)={0xa, 0x4e23, 0x2b1, @remote, 0x1}, 0x1c) 544.109675ms ago: executing program 0 (id=3494): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x2, 0x3, {{0x8, 0x4, 0x2, 0x1d, 0x20, 0x66, 0x0, 0xa, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x69, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x8b}]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x65, '\x00', r0, @sched_cls=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000004c0)=""/83, 0x53, 0x0, &(0x7f0000000640)=""/203, 0xcb}}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x8, '\x00', r0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000a40)={r1, &(0x7f0000000940)='*%\\\\&(\x00', 0x10800, &(0x7f0000000980)={@align=0xd, {0xa, 0xd1, 0x4, 0x100000000}}, 0x4, &(0x7f00000009c0), &(0x7f0000000a00)=0x9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000d40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000dc0)='GPL\x00', 0x200, 0xb5, &(0x7f0000001040)=""/181, 0x41000, 0x30, '\x00', r0, 0x19, r4, 0x8, &(0x7f0000001100)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x14509, r4, 0x2, 0x0, &(0x7f0000001140)=[{0x5, 0x2}, {0x4, 0x3, 0x3}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_lsm={0x1d, 0x5, &(0x7f0000001300)=@raw=[@call={0x85, 0x0, 0x0, 0xd3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit], &(0x7f0000000b40)='GPL\x00', 0x9, 0x34, &(0x7f0000000c40)=""/52, 0x41000, 0x0, '\x00', r0, 0x1b, r4, 0x8, &(0x7f0000000c80)={0x3, 0x9}, 0x8, 0x10, 0x0, 0x0, r2, 0x0, 0x9, &(0x7f0000000cc0)=[r3, r3, r3], &(0x7f0000000f80)=[{0x5, 0x4, 0xa, 0xa}, {0x0, 0x2, 0x6, 0xc}, {0x3, 0x8000001, 0xa, 0x4}, {0x3, 0x3, 0x3}, {0x4, 0x3, 0xc, 0xb}, {0x2, 0x2, 0x9}, {0x1, 0x4, 0x7, 0x1}, {0x4, 0x1, 0x6, 0x6}, {0x3, 0x1, 0x5, 0x6}], 0x10, 0x7}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r11 = socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000007c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'gre0\x00', r0, 0x8720, 0x80, 0x8, 0x9, {{0x19, 0x4, 0x1, 0x3d, 0x64, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @remote, {[@lsrr={0x83, 0x17, 0xff, [@multicast1, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xb5, [@dev={0xac, 0x14, 0x14, 0x15}, @empty, @loopback, @multicast2, @local]}, @ssrr={0x89, 0x17, 0x6b, [@rand_addr=0x64010100, @loopback, @loopback, @remote, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') close(r13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r9, @ANYBLOB="a12a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'veth0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001400)=@RTM_NEWMDB={0xb8, 0x54, 0x200, 0x70bd2c, 0x25dfdbfc, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x2, 0x4, {@in6_addr=@mcast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r0, 0x0, 0x2, 0x4, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x3739ecd5d6042adf, 0x4, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x2, 0x1, {@in6_addr=@private2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x0, 0x2, {@in6_addr=@private0, 0xcdb3}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 376.75591ms ago: executing program 1 (id=3495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r4, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 198.154228ms ago: executing program 2 (id=3496): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18140000", @ANYRES32, @ANYBLOB="000000000000000018220000", @ANYRES32=0x1, @ANYBLOB="00000000040000001866960002000000000000002d77c6a218290008becb4d360400", @ANYRES32=0x1, @ANYBLOB="0000000005000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000001640)=""/4096, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000002680)=[{0x0, 0x2, 0xf, 0x4}, {0x2, 0x2, 0xe, 0x9}, {0x4, 0x3, 0xb, 0x7}, {0x3, 0x5, 0xe, 0x9}, {0x0, 0x3, 0x4, 0x3}], 0x10, 0xe}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) (async) r5 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f00000002c0)={0x8001, 0xcbcc, 0x1, 0x1, 0x8, 0x26, 0x6, "64d197e055848c9173cbdd3d043a43d3d18846ff", "ce6001fe161526ae5e0d277ca02e3bfa657eeba4"}) (async) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f00000002c0)={0x8001, 0xcbcc, 0x1, 0x1, 0x8, 0x26, 0x6, "64d197e055848c9173cbdd3d043a43d3d18846ff", "ce6001fe161526ae5e0d277ca02e3bfa657eeba4"}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) poll(&(0x7f00000027c0)=[{r0, 0x145}, {r0, 0x7000}, {r1}, {r2, 0x8040}, {r6, 0x80}], 0x5, 0x5) (async) poll(&(0x7f00000027c0)=[{r0, 0x145}, {r0, 0x7000}, {r1}, {r2, 0x8040}, {r6, 0x80}], 0x5, 0x5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000000)="46780135db60c3399c7c98af3cdd99191b842fd579827d09e8a6819fc8375445305929df580ba7efc42e543a8e4ee5b058c1c000000000", &(0x7f0000000300)=""/108}, 0x20) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 2 (id=3497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)="4fffe3ab59ae73fbb0d00ec31d80de9be9", 0x11}], 0x1, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x28044854}], 0x1, 0x804) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/53, 0x35}], 0x1}, 0x103) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_del_from_accept_list={{0x2012, 0x7}, {0x8}}}, 0xb) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170900000000000000000100e6b7dd6bd9fc797209c35b3696650000a105080700000000000800090000000000050004000400000008000a0000000000060002000100000014001f000000"], 0x50}, 0x1, 0x620b}, 0x2404c089) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000000000000f6ffffffffffffff00000000000000"], 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x0, 0x8}, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000580)={r2, &(0x7f00000003c0)='%\x00', 0x303301, &(0x7f0000000400)={@_ha_fsid={[0x9, 0x7]}, {0x0, 0x0, 0xc, 0x8b}}, 0x5ddb, &(0x7f0000000480), &(0x7f0000000540)=0x33}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r10) (async) sendmsg$unix(r10, 0x0, 0x80) kernel console output (not intermixed with test programs): s unknown, defaulting to 1000 [ 276.574422][T11945] netlink: 'syz.4.1656': attribute type 2 has an invalid length. [ 276.607211][T11945] netlink: 'syz.4.1656': attribute type 2 has an invalid length. [ 276.754963][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880558f9400: rx timeout, send abort [ 276.782347][T11912] virt_wifi0 speed is unknown, defaulting to 1000 [ 276.890741][T11961] netlink: 'syz.2.1657': attribute type 2 has an invalid length. [ 276.931926][T11961] : entered promiscuous mode [ 277.240646][T11975] netlink: 'syz.2.1663': attribute type 21 has an invalid length. [ 277.263425][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880558f9400: abort rx timeout. Force session deactivation [ 277.490833][T11985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.624082][T11992] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 277.991279][T11675] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.001030][T11988] syzkaller1: entered promiscuous mode [ 278.006783][T11988] syzkaller1: entered allmulticast mode [ 278.047239][T11675] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.166579][T11675] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.175699][T11675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.185058][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.664269][T11674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.862134][T12045] can: request_module (can-proto-3) failed. [ 278.871947][T12050] netlink: 'syz.0.1684': attribute type 21 has an invalid length. [ 278.905578][T12050] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.013853][T12049] __nla_validate_parse: 4 callbacks suppressed [ 279.013873][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1685'. [ 279.341189][T12066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1691'. [ 279.390947][T12066] unsupported nlmsg_type 40 [ 279.702156][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'. [ 279.770184][T12083] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 279.786951][T12083] team0: Device ipvlan2 is already an upper device of the team interface [ 279.912826][T12085] can: request_module (can-proto-4) failed. [ 280.030073][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 280.081175][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 280.510642][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 280.748904][T12128] xt_TCPMSS: Only works on TCP SYN packets [ 280.988866][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 281.221865][T12150] netlink: 'syz.0.1714': attribute type 2 has an invalid length. [ 281.223619][T12151] netlink: 'syz.0.1714': attribute type 2 has an invalid length. [ 281.274762][T12149] syzkaller0: entered promiscuous mode [ 281.306432][T12149] syzkaller0: entered allmulticast mode [ 281.440228][T12151] : entered promiscuous mode [ 281.674202][T12171] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 282.498229][T12223] syzkaller0: entered promiscuous mode [ 282.553360][T12223] syzkaller0: entered allmulticast mode [ 283.016493][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 283.599391][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 283.674557][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 283.717155][T12283] vlan3: entered allmulticast mode [ 283.740168][T12283] bridge6: entered allmulticast mode [ 283.753135][T12284] bridge6: port 1(erspan0) entered blocking state [ 283.760389][T12284] bridge6: port 1(erspan0) entered disabled state [ 283.775894][T12284] erspan0: entered allmulticast mode [ 283.794037][T12284] erspan0: entered promiscuous mode [ 283.892288][T12301] netlink: 'syz.1.1750': attribute type 1 has an invalid length. [ 283.929999][T12294] bond4: entered promiscuous mode [ 283.935988][T12294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.986840][T12301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.038521][T12303] bond0: (slave veth7): Enslaving as an active interface with a down link [ 284.092465][T12307] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 284.115069][T12307] bond0: (slave batadv2): making interface the new active one [ 284.139651][T12307] batadv2: entered promiscuous mode [ 284.153276][T12307] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 284.384376][T12323] __nla_validate_parse: 1 callbacks suppressed [ 284.384394][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1756'. [ 284.405660][T12327] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 284.763791][T12339] syzkaller1: entered promiscuous mode [ 284.792045][T12339] syzkaller1: entered allmulticast mode [ 284.992074][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 285.059458][T12361] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 285.097508][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1767'. [ 285.219585][T12371] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1768'. [ 285.695613][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 286.099390][T12416] netlink: 'syz.4.1784': attribute type 23 has an invalid length. [ 286.330743][T12432] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 286.585945][T12446] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1791'. [ 286.634703][T12447] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 286.884371][T12452] syzkaller0: entered promiscuous mode [ 286.911739][T12452] syzkaller0: entered allmulticast mode [ 286.953758][T12458] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1797'. [ 286.964579][T12457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.976412][T12458] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1797'. [ 286.990644][T12458] netlink: 'syz.4.1797': attribute type 7 has an invalid length. [ 286.999206][T12457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.020846][T12460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.029934][T12460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.040892][T12460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.050843][T12462] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1797'. [ 287.051268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.110691][T12465] syz_tun: refused to change device tx_queue_len [ 287.118477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.142697][T12466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'. [ 287.154597][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.198589][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.220524][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.236116][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.444459][T12455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.550681][T12480] syzkaller0: entered promiscuous mode [ 287.558892][T12480] syzkaller0: entered allmulticast mode [ 288.019922][T12507] netlink: 'syz.2.1813': attribute type 2 has an invalid length. [ 288.161570][T12513] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 288.550832][T12528] syzkaller0: entered promiscuous mode [ 288.558774][T12528] syzkaller0: entered allmulticast mode [ 290.652218][T12560] __nla_validate_parse: 7 callbacks suppressed [ 290.652237][T12560] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1826'. [ 290.676017][T12547] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 290.921839][T12572] team0: Device ipvlan3 failed to register rx_handler [ 291.084636][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 291.130041][T12576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1832'. [ 291.154519][T12579] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1834'. [ 291.183038][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1834'. [ 291.195788][T12579] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1834'. [ 291.327545][T12547] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.690651][T12607] netlink: 'syz.3.1841': attribute type 1 has an invalid length. [ 291.710625][T12607] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.1841'. [ 291.881415][T12613] xt_hl: Unknown TTL match mode: 255 [ 292.027605][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1843'. [ 292.166773][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 292.626259][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1848'. [ 294.954693][T12667] geneve3: entered promiscuous mode [ 295.019815][T12675] netlink: 'syz.2.1859': attribute type 33 has an invalid length. [ 295.219448][ T3369] batadv2: left promiscuous mode [ 295.759372][T12708] __nla_validate_parse: 4 callbacks suppressed [ 295.759392][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 295.808180][T12709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.822951][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 295.852567][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 296.175357][T12730] bridge0: port 3(ipvlan3) entered blocking state [ 296.195310][T12730] bridge0: port 3(ipvlan3) entered disabled state [ 296.218460][T12730] ipvlan3: entered allmulticast mode [ 296.247559][T12730] bridge0: entered allmulticast mode [ 296.302799][T12730] ipvlan3: left allmulticast mode [ 296.323926][T12730] bridge0: left allmulticast mode [ 296.756100][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'. [ 296.765926][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1879'. [ 296.788396][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 296.822615][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 297.026366][T12753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1880'. [ 297.027843][ T29] audit: type=1800 audit(1784781986.850:10): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1880" name="memory.events" dev="tmpfs" ino=1865 res=0 errno=0 [ 297.383790][ T9] net_ratelimit: 1 callbacks suppressed [ 297.383808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.398741][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.412787][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.422538][T12770] syzkaller1: entered promiscuous mode [ 297.436528][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.447635][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.458571][T12770] syzkaller1: entered allmulticast mode [ 297.782853][T12780] "syz.0.1888" (12780) uses obsolete ecb(arc4) skcipher [ 298.293478][T12824] IPVS: length: 193 != 8 [ 298.373726][T12827] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1902'. [ 298.389342][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1902'. [ 298.711959][T12853] xt_addrtype: ipv6 does not support BROADCAST matching [ 298.785073][T12859] raw_sendmsg: syz.0.1910 forgot to set AF_INET. Fix it! [ 298.997295][T12871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 299.517646][T12897] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.626944][T12897] bond5: (slave lo): Enslaving as an active interface with an up link [ 299.657760][T12897] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 299.940963][T12928] sctp: [Deprecated]: syz.1.1927 (pid 12928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.940963][T12928] Use struct sctp_sack_info instead [ 300.210044][T12940] syzkaller1: entered promiscuous mode [ 300.221194][T12940] syzkaller1: entered allmulticast mode [ 300.501240][T12953] xt_HMARK: proto mask must be zero with L3 mode [ 300.849283][T12969] __nla_validate_parse: 10 callbacks suppressed [ 300.849309][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 300.915103][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 301.129636][T12984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.213115][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 301.260191][T12986] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1944'. [ 301.621914][T13024] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1951'. [ 301.631594][T13020] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1950'. [ 301.689967][T13024] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1951'. [ 301.702056][T13024] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1951'. [ 301.732681][T13024] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1951'. [ 301.767623][T13024] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1951'. [ 301.956141][T13029] netlink: 'syz.4.1952': attribute type 7 has an invalid length. [ 302.703238][T13056] netlink: 'syz.1.1959': attribute type 24 has an invalid length. [ 302.886232][T13076] syzkaller0: entered promiscuous mode [ 302.898975][T13076] syzkaller0: entered allmulticast mode [ 303.097809][T13087] netlink: 'syz.1.1970': attribute type 83 has an invalid length. [ 303.174959][T13090] netlink: 'syz.2.1971': attribute type 1 has an invalid length. [ 303.306170][T13101] xt_hashlimit: size too large, truncated to 1048576 [ 303.369098][T13103] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 303.672860][T13122] netlink: 'syz.4.1980': attribute type 1 has an invalid length. [ 303.781259][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 303.869899][T13122] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.363726][T13162] netlink: 'syz.1.1991': attribute type 9 has an invalid length. [ 304.534125][T13170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.544064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.562453][T13173] netlink: 'syz.4.1994': attribute type 8 has an invalid length. [ 304.598693][T13173] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.606169][T13173] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.381805][T13208] macvtap1: entered promiscuous mode [ 305.401041][T13208] macvtap1: entered allmulticast mode [ 305.415932][T13208] veth1_vlan: entered allmulticast mode [ 305.536730][T13219] bond10: Unable to set up delay as MII monitoring is disabled [ 305.571368][T13219] bond10 (unregistering): Released all slaves [ 306.313020][T13262] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 306.334300][T13262] __nla_validate_parse: 35 callbacks suppressed [ 306.334323][T13262] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2014'. [ 306.352598][T13262] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 306.604727][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 306.982066][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.430050][T13276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.446121][T13292] netlink: 'syz.0.2024': attribute type 1 has an invalid length. [ 307.461967][T13292] netlink: 'syz.0.2024': attribute type 3 has an invalid length. [ 307.475964][T13292] netlink: 'syz.0.2024': attribute type 7 has an invalid length. [ 307.507419][T13292] netlink: 'syz.0.2024': attribute type 8 has an invalid length. [ 307.516350][T13292] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2024'. [ 307.537289][T13292] NCSI netlink: No device for ifindex 131092 [ 307.559924][T13288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.726818][T13325] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 307.958903][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 308.009756][T13334] netlink: 'syz.4.2032': attribute type 23 has an invalid length. [ 308.058205][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 308.137779][T13341] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 308.209154][T13341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.332235][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 308.532935][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 308.605836][T13370] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2040'. [ 308.625996][T13372] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2043'. [ 308.694389][T13364] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 308.754782][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 308.764661][T13365] bridge4: entered promiscuous mode [ 308.781828][T13365] bridge4: entered allmulticast mode [ 308.860412][T13385] netlink: 'syz.3.2046': attribute type 10 has an invalid length. [ 308.897532][T13377] bond9: option xmit_hash_policy: invalid value (64) [ 308.910461][T13377] bond9 (unregistering): Released all slaves [ 309.030562][T13385] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.061791][T13385] : (slave team0): Enslaving as an active interface with an up link [ 309.219708][T13392] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.231237][T13394] xt_nat: multiple ranges no longer supported [ 309.253887][T13392] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.391111][T13404] veth0: entered promiscuous mode [ 309.421446][T13396] veth0: left promiscuous mode [ 309.512114][T13392] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.550480][T13392] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.691532][T13392] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.715802][T13392] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.425133][T13392] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.468798][T13392] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.752696][T11674] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.780672][T11674] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.919915][T11672] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.928870][T11672] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.974658][ T35] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.984445][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.037114][T11675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.072172][T11675] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.571709][T13501] dvmrp0: entered allmulticast mode [ 311.624014][T13503] syzkaller0: entered promiscuous mode [ 311.645960][T13503] syzkaller0: entered allmulticast mode [ 311.812421][T13514] tipc: Enabling of bearer rejected, failed to enable media [ 312.128549][T13536] __nla_validate_parse: 8 callbacks suppressed [ 312.128569][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 312.992745][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 313.032311][T13577] syzkaller0: entered promiscuous mode [ 313.040954][T13577] syzkaller0: entered allmulticast mode [ 313.599488][T13587] netlink: 'syz.3.2103': attribute type 10 has an invalid length. [ 313.621016][T13587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.643343][T13587] : (slave netdevsim1): Enslaving as an active interface with an up link [ 313.687531][T13591] netlink: 'syz.2.2104': attribute type 3 has an invalid length. [ 313.807284][T13595] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 314.144177][T13612] netlink: 'syz.3.2108': attribute type 1 has an invalid length. [ 314.423932][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 314.655790][T13645] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 314.703649][T13645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.995503][T13663] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 315.580508][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 315.626370][T13694] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 315.687187][T13699] netlink: 'syz.4.2130': attribute type 2 has an invalid length. [ 315.709456][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2130'. [ 315.724287][T13700] sctp: [Deprecated]: syz.0.2129 (pid 13700) Use of int in max_burst socket option deprecated. [ 315.724287][T13700] Use struct sctp_assoc_value instead [ 315.758995][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 315.768118][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 315.777284][T13697] netlink: 'syz.0.2129': attribute type 15 has an invalid length. [ 315.804729][ T13] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 315.814459][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 315.823629][ T13] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 315.836745][ T13] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 315.846538][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 315.856542][ T13] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 315.866269][T13697] netlink: 'syz.0.2129': attribute type 15 has an invalid length. [ 315.925024][T13666] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 316.055218][T13689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2127'. [ 316.170471][T13689] bond9 (unregistering): Released all slaves [ 316.198778][T13722] x_tables: unsorted underflow at hook 1 [ 316.466792][T13736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.579639][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.642448][T13748] 8021q: VLANs not supported on lo [ 316.728099][T13748] syzkaller1: entered promiscuous mode [ 316.752517][T13748] syzkaller1: entered allmulticast mode [ 316.850259][T13756] IPv6: Can't replace route, no match found [ 316.859221][T13755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.869941][T13758] netlink: 'syz.2.2145': attribute type 21 has an invalid length. [ 316.880361][T13760] IPv6: Can't replace route, no match found [ 316.889542][T13755] set match dimension is over the limit! [ 317.303687][T13787] xt_hashlimit: size too large, truncated to 1048576 [ 317.349176][T13789] __nla_validate_parse: 5 callbacks suppressed [ 317.349196][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 317.390219][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 317.400181][T13790] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2156'. [ 317.415296][T13790] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 317.495872][T13790] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 317.513297][T13793] xt_hashlimit: invalid rate [ 317.665919][T13798] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 318.557739][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 318.628158][T13852] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 318.646869][T13852] dvmrp8: left allmulticast mode [ 318.735531][T13855] netlink: 'syz.3.2173': attribute type 16 has an invalid length. [ 318.763474][T13859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2174'. [ 318.779122][T13855] netlink: 'syz.3.2173': attribute type 17 has an invalid length. [ 318.802344][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 318.843389][T13855] erspan0: left allmulticast mode [ 318.850816][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 318.960292][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 319.006531][T13873] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2176'. [ 319.056505][T13855] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 319.075632][T13855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.091722][T13855] veth3: left promiscuous mode [ 319.097076][T13855] veth3: left allmulticast mode [ 319.111055][T13878] nbd: must specify a size in bytes for the device [ 319.117877][T13855] veth5: left promiscuous mode [ 319.123975][T13855] veth5: left allmulticast mode [ 319.144587][T13855] bridge4: left allmulticast mode [ 319.154804][T13855] bond0: left promiscuous mode [ 319.160207][T13855] ip6gre1: left promiscuous mode [ 319.172148][T13855] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 319.192171][T13855] veth13: left allmulticast mode [ 319.209581][T13855] bond3: left promiscuous mode [ 319.214874][T13855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.223970][T13855] h: left promiscuous mode [ 319.240584][T13855] bond4: left promiscuous mode [ 319.249707][T13855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.329785][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.343214][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.420989][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.456473][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.457030][T13885] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 319.487067][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.530798][T13885] netlink: 'syz.4.2179': attribute type 83 has an invalid length. [ 319.538001][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.574342][T13891] netlink: 'syz.1.2182': attribute type 21 has an invalid length. [ 319.597021][T13891] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2182'. [ 319.612256][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.637611][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.707229][T13903] x_tables: duplicate underflow at hook 2 [ 320.201524][T13924] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 320.371551][T13939] netlink: 'syz.0.2193': attribute type 30 has an invalid length. [ 320.469441][T13944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.477901][T13944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.487117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.511540][T13939] bond10: option arp_missed_max: invalid value (0) [ 320.518119][T13939] bond10: option arp_missed_max: allowed values 1 - 255 [ 320.546940][T13939] bond10 (unregistering): Released all slaves [ 320.651343][T13924] veth0_to_bond: entered promiscuous mode [ 320.661444][T13924] gretap0: entered promiscuous mode [ 320.670020][T13924] debugfs: 'hsr1' already exists in 'hsr' [ 320.678909][T13924] Cannot create hsr debugfs directory [ 320.687588][T13924] hsr1: entered promiscuous mode [ 320.947488][T13962] syzkaller0: entered promiscuous mode [ 320.953872][T13962] syzkaller0: entered allmulticast mode [ 321.254859][T13978] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 321.288646][T13978] openvswitch: netlink: Message has 512 unknown bytes. [ 321.295905][T13980] syzkaller0: entered promiscuous mode [ 321.315923][T13980] syzkaller0: entered allmulticast mode [ 321.346102][T13978] netlink: 'syz.4.2204': attribute type 6 has an invalid length. [ 321.526182][T13994] bond0: entered promiscuous mode [ 321.536181][T13994] bond_slave_0: entered promiscuous mode [ 321.781220][T14004] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 321.787262][T14011] netlink: 'syz.0.2213': attribute type 32 has an invalid length. [ 321.915779][T14021] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 321.967859][T14004] bond9: option mode: invalid value (8) [ 321.992065][T14004] bond9 (unregistering): Released all slaves [ 322.132292][T14011] bond10: option coupled_control: invalid value (192) [ 322.147374][T14011] bond10 (unregistering): Released all slaves [ 322.212756][T14021] dummy0: entered promiscuous mode [ 322.413108][T14039] __nla_validate_parse: 17 callbacks suppressed [ 322.413129][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2218'. [ 322.436415][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 322.858950][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 322.902021][ T3331] wlan1: Trigger new scan to find an IBSS to join [ 322.909528][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2220'. [ 322.965193][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 323.026797][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 323.052342][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2220'. [ 323.083342][T14077] gretap1: entered promiscuous mode [ 323.805299][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 323.994002][T14124] validate_nla: 4 callbacks suppressed [ 323.994022][T14124] netlink: 'syz.0.2237': attribute type 11 has an invalid length. [ 324.297508][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'. [ 324.445162][T14140] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2242'. [ 324.477541][T14139] netlink: 'syz.4.2242': attribute type 9 has an invalid length. [ 324.590688][T14152] tipc: Trying to set illegal importance in message [ 324.631547][T14152] netlink: 'syz.3.2244': attribute type 4 has an invalid length. [ 324.850742][T14163] netlink: 'syz.1.2249': attribute type 8 has an invalid length. [ 325.064151][T14172] syzkaller0: entered promiscuous mode [ 325.076021][T14172] syzkaller0: entered allmulticast mode [ 325.149421][T14172] tipc: Started in network mode [ 325.164272][T14172] tipc: Node identity 3a5db6b0a822, cluster identity 4711 [ 325.188100][T14172] tipc: Enabled bearer , priority 0 [ 325.209224][T14175] netlink: 'syz.2.2252': attribute type 4 has an invalid length. [ 325.232843][T14171] tipc: Resetting bearer [ 325.355454][T14171] tipc: Disabling bearer [ 325.585401][T14189] netlink: 'syz.3.2257': attribute type 29 has an invalid length. [ 325.939921][ T35] wlan1: Trigger new scan to find an IBSS to join [ 326.178790][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.230570][T14213] macvlan2: entered promiscuous mode [ 326.240256][T14213] macvlan2: entered allmulticast mode [ 326.841870][T11675] wlan1: Creating new IBSS network, BSSID 8a:b1:a7:95:3f:c2 [ 327.012254][T14256] netlink: 'syz.0.2276': attribute type 1 has an invalid length. [ 327.096813][T14256] bond10: entered promiscuous mode [ 327.102811][T14256] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.130684][T14262] bond10: (slave bridge8): making interface the new active one [ 327.139499][T14262] bridge8: entered promiscuous mode [ 327.149892][T14263] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 327.157830][T14262] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 327.196149][T14263] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 327.292264][T14269] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 327.356204][T14269] bond11: entered promiscuous mode [ 327.371581][T14269] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.448203][T14269] IPv6: sit2: Disabled Multicast RS [ 327.678957][T14294] __nla_validate_parse: 12 callbacks suppressed [ 327.678980][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2285'. [ 327.711373][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 327.729489][T14294] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2285'. [ 327.907664][T14294] veth17: entered promiscuous mode [ 328.284958][T14323] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.345596][T14330] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2296'. [ 328.352016][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 328.439166][T14333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2297'. [ 328.580933][T14335] tipc: Enabling of bearer rejected, failed to enable media [ 328.592807][T14338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2299'. [ 328.645603][T14342] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2300'. [ 329.184140][T14369] validate_nla: 7 callbacks suppressed [ 329.184163][T14369] netlink: 'syz.1.2308': attribute type 2 has an invalid length. [ 329.665672][T14391] openvswitch: netlink: Message has 4 unknown bytes. [ 329.699675][T14391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.164962][T14416] sctp: [Deprecated]: syz.4.2321 (pid 14416) Use of int in maxseg socket option. [ 330.164962][T14416] Use struct sctp_assoc_value instead [ 330.219167][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 330.235216][T14415] 0ªX¹¦Dö»: left allmulticast mode [ 330.302653][T14415] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 330.563724][T14420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.591266][T14420] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.603781][T14420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.762712][T14420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.796100][T14420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.846988][T14420] veth0_vlan: left promiscuous mode [ 330.881476][T14420] veth0_vlan: entered promiscuous mode [ 330.963494][T14420] veth1_macvtap: left promiscuous mode [ 330.975768][T14420] veth1_macvtap: entered promiscuous mode [ 330.992574][T14420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.001567][T14420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.011710][T14420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.021920][T14420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.032900][T14420] veth0_macvtap: entered promiscuous mode [ 331.051241][T14420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.096917][T14420] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 331.127057][T14420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 331.142521][T14420] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.266286][ T24] bond_slave_0: entered promiscuous mode [ 331.273657][ T24] bond_slave_1: entered promiscuous mode [ 331.279440][ T24] batadv0: entered promiscuous mode [ 331.295012][T11670] bridge0: port 1(1¾x9ÿ) entered blocking state [ 331.301599][T11670] bridge0: port 1(1¾x9ÿ) entered listening state [ 331.322790][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.330019][T11670] bridge0: port 2(bridge_slave_1) entered listening state [ 331.390506][T14454] netlink: 'syz.0.2329': attribute type 16 has an invalid length. [ 331.404379][T14454] netlink: 'syz.0.2329': attribute type 3 has an invalid length. [ 331.412774][T14454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2329'. [ 331.416060][T14445] gre2: entered promiscuous mode [ 331.429101][T14445] gre2: entered allmulticast mode [ 331.462152][T11675] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 331.480273][T11675] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 331.626539][T14460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.666660][T11675] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 333.676053][T11675] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 333.692585][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.863651][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.871002][ C0] bridge0: topology change detected, propagating [ 334.121009][T14494] __nla_validate_parse: 1 callbacks suppressed [ 334.121031][T14494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2338'. [ 334.295927][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 334.368192][T14505] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 334.492991][T14510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.610745][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'. [ 334.635272][T14520] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2346'. [ 334.651099][T14517] block nbd0: not configured, cannot reconfigure [ 334.746093][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'. [ 334.984056][ T3331] wlan1: Trigger new scan to find an IBSS to join [ 335.042229][T14539] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2351'. [ 335.140825][T14546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2353'. [ 335.196181][T14547] macsec1: entered promiscuous mode [ 335.333967][T14549] syz_tun: entered allmulticast mode [ 335.630732][T14568] netlink: 'syz.0.2361': attribute type 11 has an invalid length. [ 335.671524][T14575] netlink: 'syz.0.2361': attribute type 11 has an invalid length. [ 336.157516][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 336.284816][T14607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2367'. [ 336.655392][T14622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.720140][T14624] openvswitch: netlink: IP tunnel dst address not specified [ 336.746048][T14624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2373'. [ 336.875337][T14631] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 336.921410][T14631] netlink: 'syz.2.2376': attribute type 142 has an invalid length. [ 337.213965][T14650] netlink: 'syz.2.2383': attribute type 83 has an invalid length. [ 337.378096][T14666] xt_hashlimit: size too large, truncated to 1048576 [ 337.540787][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.580486][T14673] bridge_slave_0 (unregistering): left allmulticast mode [ 337.619069][T14673] bridge_slave_0 (unregistering): left promiscuous mode [ 337.635855][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.771905][T14652] syzkaller0: entered promiscuous mode [ 337.777665][T14652] syzkaller0: entered allmulticast mode [ 339.949148][ T3331] wlan1: Trigger new scan to find an IBSS to join [ 340.385290][T14694] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 340.545482][T14711] geneve2: entered promiscuous mode [ 340.582090][T14711] geneve2: entered allmulticast mode [ 340.813853][T14732] netlink: 'syz.2.2403': attribute type 10 has an invalid length. [ 340.877691][T11668] wlan1: Creating new IBSS network, BSSID 4e:38:b3:49:ea:34 [ 340.913554][T14739] __nla_validate_parse: 3 callbacks suppressed [ 340.913575][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'. [ 340.964385][T14739] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2404'. [ 340.996559][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 341.056487][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2406'. [ 341.871715][T14770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2415'. [ 341.906664][T14777] netlink: 'syz.4.2416': attribute type 39 has an invalid length. [ 341.934975][T14777] hsr_slave_0: left promiscuous mode [ 341.983972][T14777] hsr_slave_1: left promiscuous mode [ 342.126261][T14781] tipc: Enabling of bearer rejected, failed to enable media [ 342.409276][T14800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2422'. [ 342.437177][T14804] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2424'. [ 342.455994][T14798] syzkaller0: entered promiscuous mode [ 342.471815][T14798] syzkaller0: entered allmulticast mode [ 342.488094][T14798] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 342.629081][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2425'. [ 343.441031][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 343.567928][T14846] bond10: Invalid ad_actor_system MAC address. [ 343.592542][T14846] bond10: option ad_actor_system: invalid value (1) [ 343.657022][T14846] bond10 (unregistering): Released all slaves [ 343.919700][T14850] syzkaller1: entered promiscuous mode [ 343.934191][T14850] syzkaller1: entered allmulticast mode [ 344.281296][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 344.480409][T14882] gre3: entered promiscuous mode [ 344.499837][T14882] gre3: entered allmulticast mode [ 344.622329][T14869] tipc: Enabling of bearer rejected, failed to enable media [ 344.864380][T14896] syzkaller1: entered promiscuous mode [ 344.873448][T14896] syzkaller1: entered allmulticast mode [ 344.963856][T14905] netlink: 'syz.1.2453': attribute type 16 has an invalid length. [ 345.378508][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 346.233237][T14945] netlink: 'syz.2.2464': attribute type 1 has an invalid length. [ 346.395787][T14949] __nla_validate_parse: 6 callbacks suppressed [ 346.395808][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2466'. [ 346.425066][T14951] xt_hashlimit: size too large, truncated to 1048576 [ 346.502077][T14961] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 346.554072][T14961] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.580905][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 346.716321][T14967] netlink: 'syz.4.2470': attribute type 11 has an invalid length. [ 347.147656][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2474'. [ 347.216686][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'. [ 347.365501][T14997] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 347.384959][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2475'. [ 347.408899][T14999] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 347.431712][T14999] netlink: 'syz.4.2476': attribute type 11 has an invalid length. [ 347.453610][T14997] netlink: 'syz.4.2476': attribute type 11 has an invalid length. [ 347.467271][T14999] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2476'. [ 347.481469][T14997] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2476'. [ 347.747818][T15010] sctp: [Deprecated]: syz.2.2481 (pid 15010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.747818][T15010] Use struct sctp_sack_info instead [ 347.801055][T15011] sctp: [Deprecated]: syz.2.2481 (pid 15011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.801055][T15011] Use struct sctp_sack_info instead [ 348.017047][T15024] xt_l2tp: v2 sid > 0xffff: 1114112 [ 348.055892][T15030] netlink: 'syz.2.2486': attribute type 21 has an invalid length. [ 348.079984][T15030] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2486'. [ 348.095428][T15030] netlink: 'syz.2.2486': attribute type 5 has an invalid length. [ 348.125440][T15030] netlink: 'syz.2.2486': attribute type 6 has an invalid length. [ 348.160621][T15030] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2486'. [ 348.408069][T15056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2492'. [ 348.723566][T15075] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 349.709693][T15093] netlink: 'syz.4.2505': attribute type 1 has an invalid length. [ 349.737391][T15093] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 349.796507][T15096] nbd3: detected capacity change from 0 to 63 [ 349.823856][T15097] block nbd3: NBD_DISCONNECT [ 349.848488][T15097] block nbd3: Disconnected due to user request. [ 349.875090][T15104] hsr0: entered allmulticast mode [ 349.882910][T15097] block nbd3: shutting down sockets [ 349.898842][T15104] hsr_slave_0: entered allmulticast mode [ 349.908078][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.917583][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 349.950549][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.959807][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 349.968720][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.977917][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 349.985716][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.994901][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 350.004729][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 350.014928][ T1654] Buffer I/O error on dev nbd3, logical block 0, async page read [ 350.025008][ T1654] Buffer I/O error on dev nbd3, logical block 1, async page read [ 350.033872][ T1654] Buffer I/O error on dev nbd3, logical block 2, async page read [ 350.042219][ T1654] Buffer I/O error on dev nbd3, logical block 3, async page read [ 350.052247][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 350.064407][ T1654] Buffer I/O error on dev nbd3, logical block 0, async page read [ 350.073711][ T1654] Buffer I/O error on dev nbd3, logical block 1, async page read [ 350.086284][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 350.096991][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 350.106978][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 350.116747][ T1654] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 350.128561][ T9169] ldm_validate_partition_table(): Disk read failed. [ 350.142810][ T9169] Dev nbd3: unable to read RDB block 0 [ 350.152674][ T9169] nbd3: unable to read partition table [ 350.175540][ T9169] ldm_validate_partition_table(): Disk read failed. [ 350.185544][ T9169] Dev nbd3: unable to read RDB block 0 [ 350.194922][ T9169] nbd3: unable to read partition table [ 350.460621][T15117] syzkaller1: entered promiscuous mode [ 350.519934][T15117] syzkaller1: entered allmulticast mode [ 350.578009][T15121] syzkaller0: entered promiscuous mode [ 350.605661][T15121] syzkaller0: entered allmulticast mode [ 350.730313][ T13] syzkaller1: tun_net_xmit 70 [ 350.747490][T15138] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 350.759144][T15138] syzkaller1: Linktype set failed because interface is up [ 351.175329][T15160] syzkaller0: entered promiscuous mode [ 351.182726][T15160] syzkaller0: entered allmulticast mode [ 351.200749][T15161] 0ªX¹¦Dö»: entered promiscuous mode [ 351.219745][T15161] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 351.233524][T15161] 0ªî{X¹¦: left promiscuous mode [ 351.240399][T15161] 0ªî{X¹¦: entered allmulticast mode [ 351.255460][T15161] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 351.349662][T15161] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 351.362558][T15161] syzkaller1: group set to 0 [ 351.647861][T15182] __nla_validate_parse: 7 callbacks suppressed [ 351.647880][T15182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2528'. [ 351.657006][T15180] SET target dimension over the limit! [ 351.774857][T15186] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 351.906748][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 352.132145][T15208] xt_CONNSECMARK: invalid mode: 0 [ 352.377794][T15225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2540'. [ 352.429951][T15225] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 352.640241][ T29] audit: type=1804 audit(1784782042.470:11): pid=15240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2542" name="/newroot/477/cgroup.controllers" dev="tmpfs" ino=2449 res=1 errno=0 [ 352.681434][ T29] audit: type=1800 audit(1784782042.470:12): pid=15240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2542" name="cgroup.controllers" dev="tmpfs" ino=2449 res=0 errno=0 [ 352.847580][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 352.875113][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 353.013095][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 353.124425][T15266] siw: device registration error -23 [ 353.143404][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2553'. [ 353.166622][T15266] tipc: New replicast peer: 255.255.255.255 [ 353.196278][T15266] tipc: Enabled bearer , priority 10 [ 353.211663][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2553'. [ 353.225560][T15273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2552'. [ 353.676503][T15297] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2561'. [ 353.712673][T15295] syzkaller0: entered promiscuous mode [ 353.722148][T15295] syzkaller0: entered allmulticast mode [ 353.795422][T15295] tipc: Enabled bearer , priority 10 [ 354.151342][T15317] netlink: 'syz.1.2566': attribute type 2 has an invalid length. [ 354.223592][T15318] netlink: 'syz.1.2566': attribute type 3 has an invalid length. [ 354.309582][ T5781] tipc: Node number set to 3530433742 [ 354.671949][ T13] smbdirect: ib_dev[syz0] removed [ 354.866104][T15350] bridge0: entered promiscuous mode [ 354.874545][T15350] bridge0: entered allmulticast mode [ 354.899226][ T9] tipc: Node number set to 2457843376 [ 355.320525][T15366] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 355.477506][T15385] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 355.511788][T15385] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 355.570332][T15394] veth1_macvtap: left promiscuous mode [ 355.594521][T15394] macsec0: entered promiscuous mode [ 355.617864][T15394] macsec0: entered allmulticast mode [ 356.285974][T11670] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 356.623827][T15445] pim6reg: entered allmulticast mode [ 356.686897][T15448] __nla_validate_parse: 7 callbacks suppressed [ 356.686915][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2599'. [ 356.732210][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2599'. [ 356.744476][ T9] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 359.173962][T15425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.389414][T15477] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 359.460551][T11675] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 359.643642][T15494] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 359.682600][T15494] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 359.718366][T15499] syzkaller0: entered promiscuous mode [ 359.738934][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2610'. [ 359.748211][T15499] syzkaller0: entered allmulticast mode [ 359.767294][T15501] block nbd0: not configured, cannot reconfigure [ 359.816930][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2609'. [ 359.871261][T15505] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 360.208946][T15523] syzkaller0: entered promiscuous mode [ 360.219897][T15523] syzkaller0: entered allmulticast mode [ 360.340847][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 360.351179][T15533] netlink: 'syz.2.2618': attribute type 29 has an invalid length. [ 360.361042][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 360.372530][T15532] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 360.382658][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 360.398120][T15532] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 360.399041][T15533] netlink: 'syz.2.2618': attribute type 29 has an invalid length. [ 360.432423][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 360.675379][T15550] IPVS: set_ctl: invalid protocol: 1 172.20.20.26:20000 [ 360.726795][T15541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2620'. [ 360.753411][T15541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2620'. [ 360.863653][T15555] netlink: 'syz.2.2624': attribute type 21 has an invalid length. [ 361.276528][T15576] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 361.291867][T15577] bridge_slave_1: left allmulticast mode [ 361.299994][T15577] bridge_slave_1: left promiscuous mode [ 361.305970][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.378337][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 361.385764][ C0] bridge0: port 1(1¾x9ÿ) entered learning state [ 361.563071][T15587] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 361.582437][ T13] bond0: (slave ip6gre1): link status definitely down, disabling slave [ 361.613432][ T13] bond0: now running without any active interface! [ 361.632484][T15591] netlink: 'syz.0.2636': attribute type 1 has an invalid length. [ 361.779762][T15603] __nla_validate_parse: 4 callbacks suppressed [ 361.779781][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2638'. [ 362.006387][T15617] Cannot find del_set index 4 as target [ 362.019405][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.111787][T15616] syzkaller0: entered promiscuous mode [ 362.117462][T15616] syzkaller0: entered allmulticast mode [ 362.428094][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2647'. [ 362.592301][T15644] sctp: [Deprecated]: syz.4.2652 (pid 15644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.592301][T15644] Use struct sctp_sack_info instead [ 362.601870][T15645] sctp: [Deprecated]: syz.0.2651 (pid 15645) Use of int in max_burst socket option deprecated. [ 362.601870][T15645] Use struct sctp_assoc_value instead [ 362.753582][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 362.762994][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 362.782203][T15651] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 362.920370][T15656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.011449][T15658] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2657'. [ 363.409892][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 363.676071][T15690] bridge0: port 3(batadv1) entered blocking state [ 363.704729][T15690] bridge0: port 3(batadv1) entered disabled state [ 363.745662][T15690] batadv1: entered allmulticast mode [ 363.789285][T15690] batadv1: entered promiscuous mode [ 364.161618][ T35] batman_adv: batadv1: IGMP Querier appeared [ 364.170306][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 364.323410][T15729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2675'. [ 364.400316][T15733] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 364.433843][T15733] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 364.802737][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 364.829149][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2684'. [ 365.189761][T15770] netlink: 'syz.1.2690': attribute type 9 has an invalid length. [ 365.322625][T15773] netlink: 'syz.3.2691': attribute type 2 has an invalid length. [ 365.361065][T15778] atomic_op ffff88807efd9998 conn xmit_atomic 0000000000000000 [ 365.516127][T15786] bridge8: entered allmulticast mode [ 365.790275][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 365.806178][T15805] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 365.942748][T15805] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 366.597781][T15851] sctp: [Deprecated]: syz.0.2713 (pid 15851) Use of int in maxseg socket option. [ 366.597781][T15851] Use struct sctp_assoc_value instead [ 367.052733][T15868] __nla_validate_parse: 2 callbacks suppressed [ 367.052755][T15868] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2717'. [ 367.322228][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 367.585258][T15894] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2723'. [ 367.623674][T15894] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2723'. [ 367.921958][T15913] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2730'. [ 368.122913][T15920] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2732'. [ 368.404840][T15936] netlink: 'syz.4.2736': attribute type 142 has an invalid length. [ 368.419854][T15936] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2736'. [ 368.503717][T15942] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2737'. [ 368.546156][T15942] netlink: 'syz.1.2737': attribute type 58 has an invalid length. [ 368.568018][T15942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2737'. [ 368.713318][T15954] netlink: 'syz.3.2740': attribute type 30 has an invalid length. [ 368.955946][T15967] syzkaller0: entered allmulticast mode [ 369.160855][T15977] netlink: 'syz.0.2745': attribute type 11 has an invalid length. [ 369.205347][T15977] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.2745'. [ 369.535646][T15992] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 369.777885][T16009] syzkaller1: entered promiscuous mode [ 369.802010][T16009] syzkaller1: entered allmulticast mode [ 370.059980][T16017] netlink: 'syz.3.2760': attribute type 4 has an invalid length. [ 370.703773][T16058] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 371.604583][T16107] netlink: 'syz.0.2787': attribute type 16 has an invalid length. [ 371.620358][T16107] netlink: 'syz.0.2787': attribute type 3 has an invalid length. [ 371.893760][T16121] netlink: 'syz.3.2792': attribute type 1 has an invalid length. [ 371.909594][T16121] netlink: 'syz.3.2792': attribute type 4 has an invalid length. [ 372.125902][T16137] __nla_validate_parse: 11 callbacks suppressed [ 372.125926][T16137] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2796'. [ 372.225632][T16141] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2795'. [ 372.601654][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2803'. [ 372.615511][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2800'. [ 372.963828][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2808'. [ 373.186287][T11671] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 373.546333][ T3331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 373.619477][T16226] netlink: 'syz.4.2816': attribute type 16 has an invalid length. [ 373.631231][T16226] netlink: 644 bytes leftover after parsing attributes in process `syz.4.2816'. [ 373.651010][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 373.840177][T16193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.717004][T16282] netlink: 'syz.0.2833': attribute type 10 has an invalid length. [ 374.762248][T16282] veth1_macvtap: left promiscuous mode [ 374.817609][T16282] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 375.147747][T16306] bond11: option all_slaves_active: invalid value (222) [ 375.161082][T16306] bond11 (unregistering): Released all slaves [ 375.311834][T16316] syzkaller1: entered promiscuous mode [ 375.329360][T16316] syzkaller1: entered allmulticast mode [ 375.393609][T16292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.635926][T16327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 375.761962][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2846'. [ 375.997004][T16348] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2852'. [ 376.468107][T16370] netlink: 'syz.0.2858': attribute type 1 has an invalid length. [ 376.681843][T16379] syzkaller0: entered promiscuous mode [ 376.701787][T16379] syzkaller0: entered allmulticast mode [ 376.715870][T16384] IPVS: length: 63 != 24 [ 376.736299][T16379] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 376.824594][T16379] xt_hashlimit: size too large, truncated to 1048576 [ 376.909444][T16394] netlink: 'syz.4.2866': attribute type 1 has an invalid length. [ 377.090531][T16394] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.625452][T16435] netlink: 'syz.1.2877': attribute type 3 has an invalid length. [ 377.641735][T16435] openvswitch: netlink: Actions may not be safe on all matching packets [ 377.764812][T16448] __nla_validate_parse: 3 callbacks suppressed [ 377.764832][T16448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2880'. [ 377.813599][T16449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2880'. [ 377.836034][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 377.939724][T16456] netlink: 'syz.3.2883': attribute type 10 has an invalid length. [ 377.947755][T16456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2883'. [ 378.014867][T16456] team0: Port device geneve1 added [ 378.103180][T16462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2885'. [ 378.153580][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 378.415486][T16484] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 378.431060][T16484] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 378.440961][T16484] gretap2: entered promiscuous mode [ 378.446311][T16484] gretap2: entered allmulticast mode [ 378.872552][T16511] netlink: 'syz.0.2897': attribute type 15 has an invalid length. [ 378.946341][T16508] syzkaller0: entered promiscuous mode [ 378.961002][T16508] syzkaller0: entered allmulticast mode [ 378.995218][T16508] tc action pedit offset must be on 32 bit boundaries [ 379.463236][T16538] netlink: 'syz.1.2905': attribute type 2 has an invalid length. [ 379.503144][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 379.793609][T16553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2910'. [ 379.836948][T16556] netlink: 'syz.3.2911': attribute type 20 has an invalid length. [ 379.887138][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 380.002997][T16556] netlink: 'syz.3.2911': attribute type 20 has an invalid length. [ 380.029808][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 380.193907][T16580] netlink: 'syz.4.2917': attribute type 1 has an invalid length. [ 380.416527][T16580] bond8: entered promiscuous mode [ 380.464579][T16580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.756563][T16580] bond8: (slave bridge0): making interface the new active one [ 380.776195][T16580] bridge0: entered promiscuous mode [ 380.792165][T16580] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 381.159872][T16622] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 381.823414][T16667] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 381.959951][T16667] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.352681][T16689] netlink: 'syz.4.2945': attribute type 6 has an invalid length. [ 382.387021][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.403328][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.414304][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.424730][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.434291][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.572458][T16686] syz.3.2944 (16686) used greatest stack depth: 17600 bytes left [ 383.187860][T16728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.344543][ T5626] syz_tun (unregistering): left allmulticast mode [ 383.356900][T16733] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 383.606711][T16735] bond8 (unregistering): Released all slaves [ 383.652879][T16733] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 383.815203][T16725] syzkaller0: entered promiscuous mode [ 383.830419][T16725] syzkaller0: entered allmulticast mode [ 383.862686][T16753] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 383.877862][T16753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.505231][ T5628] Bluetooth: hci5: command tx timeout [ 386.250054][T16688] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 386.381983][T16768] __nla_validate_parse: 12 callbacks suppressed [ 386.382013][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'. [ 386.579210][ T5628] Bluetooth: hci5: command tx timeout [ 386.616366][T16768] 8021q: adding VLAN 0 to HW filter on device bond12 [ 386.695045][T16768] bond12 (unregistering): Released all slaves [ 386.923444][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 387.192567][T16809] netlink: 'syz.4.2973': attribute type 12 has an invalid length. [ 387.382434][T16817] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 387.464940][T16819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'. [ 387.876283][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 387.946489][T16688] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.970489][T16688] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.003839][T16688] bridge_slave_0: entered allmulticast mode [ 388.045608][T16688] bridge_slave_0: entered promiscuous mode [ 388.084015][T16688] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.111620][T16688] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.141505][T16688] bridge_slave_1: entered allmulticast mode [ 388.166877][T16688] bridge_slave_1: entered promiscuous mode [ 388.192255][T16854] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 388.294060][T16688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.361031][T16854] 8021q: adding VLAN 0 to HW filter on device bond12 [ 388.440131][T16864] bond12: (slave gretap3): making interface the new active one [ 388.466055][T16864] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 388.501377][T16688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.561031][T16688] team0: Port device team_slave_0 added [ 388.589181][T16871] bridge0: port 1(batadv2) entered blocking state [ 388.590615][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 388.602357][T16871] bridge0: port 1(batadv2) entered disabled state [ 388.627411][T16871] batadv2: entered allmulticast mode [ 388.642245][T16871] batadv2: entered promiscuous mode [ 388.658639][ T5628] Bluetooth: hci5: command tx timeout [ 388.682772][T16688] team0: Port device team_slave_1 added [ 388.722018][T16688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.729287][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.760165][T16688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.797070][T16688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.804461][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.837068][T16688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.019194][T16688] hsr_slave_0: entered promiscuous mode [ 389.031497][T16688] hsr_slave_1: entered promiscuous mode [ 389.049521][T16688] debugfs: 'hsr0' already exists in 'hsr' [ 389.055348][T16688] Cannot create hsr debugfs directory [ 389.089330][T11670] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 389.099533][T11670] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 389.174813][T16889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2996'. [ 389.214199][T16893] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 389.297175][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2998'. [ 389.323798][T16893] 8021q: adding VLAN 0 to HW filter on device bond13 [ 389.352288][T16894] syzkaller1: entered promiscuous mode [ 389.358733][T16894] syzkaller1: entered allmulticast mode [ 389.385145][T16893] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 389.474040][T16893] dummy0: left promiscuous mode [ 389.485279][T16897] netlink: 'syz.2.2998': attribute type 10 has an invalid length. [ 389.517025][T16893] bond13: (slave dummy0): making interface the new active one [ 389.527157][T16897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2998'. [ 389.567177][T16893] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 389.610749][T16897] dummy0: entered promiscuous mode [ 389.624841][T16897] bond13: (slave dummy0): Releasing active interface [ 389.720531][T16911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3002'. [ 389.802556][T16908] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 390.095552][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3006'. [ 390.118169][T16933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.160085][T16927] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 390.234389][T16688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.252618][T16688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 390.281411][T16688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.523510][T16688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.556991][T16688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 390.584198][T16688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.740039][ T5628] Bluetooth: hci5: command tx timeout [ 390.863958][T16688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.883589][T16688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 390.910419][T16688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.118140][T16688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.157917][T16688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 391.199461][T16688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.368727][T16986] syzkaller0: entered promiscuous mode [ 391.386317][T16986] syzkaller0: entered allmulticast mode [ 391.458571][ C0] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 391.465194][ C0] bridge0: topology change detected, propagating [ 391.471858][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.479158][ C1] bridge0: topology change detected, propagating [ 391.489294][T11671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.542549][T16990] netlink: 'syz.3.3024': attribute type 1 has an invalid length. [ 391.806264][T17001] netlink: 'syz.3.3026': attribute type 17 has an invalid length. [ 391.825396][T17001] __nla_validate_parse: 3 callbacks suppressed [ 391.825413][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 391.829908][T17002] netlink: 'syz.3.3026': attribute type 17 has an invalid length. [ 391.836917][T17001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3026'. [ 391.862990][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 391.872407][T17002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3026'. [ 392.107232][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 392.127644][T17007] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 392.128089][T17013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.156154][T17001] ip6gretap0: entered promiscuous mode [ 392.162975][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3027'. [ 392.175802][T17001] syz_tun: entered promiscuous mode [ 392.185647][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 392.202881][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3027'. [ 392.535386][T16688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.583760][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 392.734990][T16688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.780428][T17046] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3035'. [ 392.802541][T16688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.827411][T16688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.851844][T16688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.901816][T16688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.911256][T16688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.952181][T16688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.002936][T17059] sctp: [Deprecated]: syz.1.3038 (pid 17059) Use of int in max_burst socket option. [ 393.002936][T17059] Use struct sctp_assoc_value instead [ 393.188803][T16688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.246764][T16688] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.309675][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.316994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.387026][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.394283][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.167765][T17104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.240314][T17104] syzkaller0: entered promiscuous mode [ 394.261339][T17104] syzkaller0: entered allmulticast mode [ 394.779573][T16688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.965878][T16688] veth0_vlan: entered promiscuous mode [ 395.015278][T16688] veth1_vlan: entered promiscuous mode [ 395.122120][T16688] veth0_macvtap: entered promiscuous mode [ 395.133556][T17144] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 395.193475][T16688] veth1_macvtap: entered promiscuous mode [ 395.252902][T17144] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 395.299233][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.366560][T16688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.392007][T16688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.481434][T11675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.508939][T11675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.555849][T11675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.576334][T11675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.751397][T17169] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.769437][T17165] x_tables: duplicate underflow at hook 3 [ 395.786770][T17173] netlink: 'syz.2.3064': attribute type 4 has an invalid length. [ 395.817020][T17173] netlink: 'syz.2.3064': attribute type 4 has an invalid length. [ 395.902808][T17178] vlan2: entered promiscuous mode [ 395.908058][T17178] hsr0: entered promiscuous mode [ 395.921641][T17178] vlan2: entered allmulticast mode [ 395.927287][T17178] hsr0: entered allmulticast mode [ 395.932572][T17178] hsr_slave_0: entered allmulticast mode [ 395.940403][T17178] hsr_slave_1: entered allmulticast mode [ 395.982407][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.002880][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.049018][T17180] hsr_slave_0: left promiscuous mode [ 396.077302][T17180] hsr_slave_1: left promiscuous mode [ 396.263340][T11675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.285040][T11675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.477289][T17203] tc_dump_action: action bad kind [ 397.088009][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.106847][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.116840][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.132949][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.148557][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.194538][T17228] netlink: 'syz.0.3079': attribute type 2 has an invalid length. [ 397.604619][T17247] __nla_validate_parse: 7 callbacks suppressed [ 397.604641][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 397.644754][T17247] netlink: 'syz.0.3083': attribute type 7 has an invalid length. [ 397.654130][T17247] netlink: 'syz.0.3083': attribute type 8 has an invalid length. [ 397.673460][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 397.968112][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 398.001820][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 398.047530][T17270] vlan0: entered promiscuous mode [ 398.099540][T17222] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 398.527643][T17298] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3096'. [ 398.717489][ T29] audit: type=1804 audit(1784782088.540:13): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3097" name="/newroot/609/cgroup.controllers" dev="tmpfs" ino=3127 res=1 errno=0 [ 398.803438][ T29] audit: type=1800 audit(1784782088.540:14): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3097" name="cgroup.controllers" dev="tmpfs" ino=3127 res=0 errno=0 [ 399.174242][ T29] audit: type=1804 audit(1784782089.000:15): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3100" name="/newroot/610/cgroup.controllers" dev="tmpfs" ino=3135 res=1 errno=0 [ 399.220921][ T5628] Bluetooth: hci1: command tx timeout [ 399.242920][ T29] audit: type=1800 audit(1784782089.000:16): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3100" name="cgroup.controllers" dev="tmpfs" ino=3135 res=0 errno=0 [ 399.344508][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.352910][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.360602][T17222] bridge_slave_0: entered allmulticast mode [ 399.369363][T17222] bridge_slave_0: entered promiscuous mode [ 399.381064][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.388586][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.396256][T17222] bridge_slave_1: entered allmulticast mode [ 399.404851][T17222] bridge_slave_1: entered promiscuous mode [ 399.492557][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.506975][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.549201][T17222] team0: Port device team_slave_0 added [ 399.557405][T17222] team0: Port device team_slave_1 added [ 399.590177][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.597187][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.624852][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.637387][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.645218][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.672281][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.727839][T17222] hsr_slave_0: entered promiscuous mode [ 399.734901][T17222] hsr_slave_1: entered promiscuous mode [ 399.742392][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 399.749810][T17222] Cannot create hsr debugfs directory [ 399.904721][T17222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.916097][T17222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 399.930237][T17222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.032441][T17222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.043748][T17222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.054978][T17222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.113424][T17222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.128008][T17222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.138596][T17222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.218308][T17222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.231033][T17222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.241422][T17222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 401.223925][T17280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.271858][T17222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.308037][ T5628] Bluetooth: hci1: command tx timeout [ 401.347752][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.380137][T17222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.402806][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.421848][T17222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.445468][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.465222][T17222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.480526][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.522481][T17333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3101'. [ 401.713696][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 401.784893][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 401.857232][T17350] syzkaller0: entered promiscuous mode [ 401.870291][T17350] syzkaller0: entered allmulticast mode [ 401.893978][T17357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 402.075562][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.174812][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.203087][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.210394][T11675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.222126][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3108'. [ 402.269063][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.276325][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.391606][T17374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.007685][T17411] __nla_validate_parse: 1 callbacks suppressed [ 403.007706][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 403.098137][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3122'. [ 403.136342][T17412] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3122'. [ 403.378489][ T5628] Bluetooth: hci1: command tx timeout [ 403.392227][T17425] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 403.426950][T17427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3124'. [ 403.478044][T17434] netlink: 'syz.4.3126': attribute type 178 has an invalid length. [ 403.725775][T17443] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 403.826288][T17448] netlink: 'syz.4.3130': attribute type 5 has an invalid length. [ 404.000625][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.142152][T17467] 8021q: VLANs not supported on sit0 [ 404.202174][T17222] veth0_vlan: entered promiscuous mode [ 404.232758][T17222] veth1_vlan: entered promiscuous mode [ 404.315967][T17471] rdma_rxe: rxe_newlink: failed to add team0 [ 404.335267][T17476] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 404.383645][T17222] veth0_macvtap: entered promiscuous mode [ 404.386576][T17476] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 404.418463][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3137'. [ 404.443132][T17222] veth1_macvtap: entered promiscuous mode [ 404.566922][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.643527][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.675480][T11674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.705533][T11674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.748866][T11674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.757813][T11674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.843921][T17491] IPVS: persistence engine module ip_vs_pe_ not found [ 405.023491][T17503] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 405.315031][T17506] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 405.359748][T17511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3145'. [ 405.374412][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 405.415512][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.443992][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.459055][ T5628] Bluetooth: hci1: command tx timeout [ 405.543188][T11668] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 405.568482][T17526] netlink: 'syz.1.3148': attribute type 23 has an invalid length. [ 405.586903][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.607834][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.052972][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 406.441941][T17559] Unsupported ieee802154 address type: 0 [ 406.481744][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.495060][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.507879][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.517109][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.532761][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.761962][T17567] Bluetooth: MGMT ver 1.23 [ 406.963679][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3161'. [ 407.039541][T17574] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3161'. [ 407.077386][ T5625] team0: Port device syz_tun removed [ 407.221432][T17574] can: request_module (can-proto-0) failed. [ 407.442615][T17560] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 407.611310][T17600] 8021q: adding VLAN 0 to HW filter on device bond11 [ 407.707590][T17608] syzkaller0: entered promiscuous mode [ 407.714057][T17608] syzkaller0: entered allmulticast mode [ 407.739154][T17608] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 408.444905][T17646] netlink: 'syz.2.3177': attribute type 3 has an invalid length. [ 408.474594][T17646] __nla_validate_parse: 2 callbacks suppressed [ 408.474613][T17646] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3177'. [ 408.509134][T17653] xt_hashlimit: invalid rate [ 408.513671][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3178'. [ 408.580239][ T5631] Bluetooth: hci2: command tx timeout [ 408.615391][T17656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3178'. [ 408.633770][T17646] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 408.655009][ T10] IPVS: starting estimator thread 0... [ 408.760259][T17658] IPVS: using max 25 ests per chain, 60000 per kthread [ 408.821120][ T5628] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 408.847097][T17662] netlink: 'syz.0.3181': attribute type 6 has an invalid length. [ 408.904351][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 408.923821][T17662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.026585][T17662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.053168][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 409.143505][T17675] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 409.413234][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 409.423043][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 409.579678][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 409.590103][T17700] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3191'. [ 409.722295][T17560] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.768151][T17560] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.813837][T17560] bridge_slave_0: entered allmulticast mode [ 409.838088][T17560] bridge_slave_0: entered promiscuous mode [ 409.875727][T17560] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.894620][T17560] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.914069][T17560] bridge_slave_1: entered allmulticast mode [ 409.931793][T17560] bridge_slave_1: entered promiscuous mode [ 409.998499][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'. [ 410.089351][T17560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.112961][T17560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.220640][T17560] team0: Port device team_slave_0 added [ 410.242406][T17560] team0: Port device team_slave_1 added [ 410.326598][T17560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.345060][T17560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.373212][T17560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.427239][T17560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.451951][T17739] netlink: 'syz.2.3199': attribute type 37 has an invalid length. [ 410.460413][T17560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.460452][T17560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.581976][T17741] netlink: 'syz.1.3200': attribute type 4 has an invalid length. [ 410.661135][ T5628] Bluetooth: hci2: command 0x041b tx timeout [ 410.696301][T17560] hsr_slave_0: entered promiscuous mode [ 410.704223][T17560] hsr_slave_1: entered promiscuous mode [ 410.710962][T17560] debugfs: 'hsr0' already exists in 'hsr' [ 410.717182][T17560] Cannot create hsr debugfs directory [ 411.308170][T17767] syzkaller0: entered promiscuous mode [ 411.333603][T17767] syzkaller0: entered allmulticast mode [ 411.929891][T17560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.966024][T17560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.245584][T17560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.256854][T17560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.481091][T17560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.491705][T17560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.610805][T17560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.639778][T17560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.739261][ T5628] Bluetooth: hci2: command 0x041b tx timeout [ 413.004952][T17843] siw: device registration error -23 [ 413.133790][T17560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.187503][T17560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.222806][T17848] syzkaller0: entered promiscuous mode [ 413.247751][T17848] syzkaller0: entered allmulticast mode [ 413.260062][T17856] netlink: 'syz.3.3229': attribute type 1 has an invalid length. [ 413.271674][T17560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.283710][T17855] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 413.294347][T17560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.322729][T17856] tipc: Enabling of bearer rejected, failed to enable media [ 413.343181][T17560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.358823][T17560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.381043][T17848] tipc: Started in network mode [ 413.401376][T17848] tipc: Node identity 921cdf35b33e, cluster identity 4711 [ 413.420609][T17848] tipc: Enabled bearer , priority 0 [ 413.442457][T17560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.491982][T17560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.516438][T17847] tipc: Resetting bearer [ 413.602142][T17847] tipc: Disabling bearer [ 413.733206][T17870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.767925][T17878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.855348][T17887] __nla_validate_parse: 11 callbacks suppressed [ 413.855371][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 413.916692][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 413.988922][T17560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.072560][T17560] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.097663][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.104948][T11670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.155237][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.162556][T11670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.347772][T17903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3240'. [ 414.389568][T17903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3240'. [ 414.493274][T17916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.671931][T17920] netlink: 'syz.2.3244': attribute type 6 has an invalid length. [ 414.723170][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 414.746306][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 414.818399][ T5628] Bluetooth: hci2: command 0x041b tx timeout [ 414.844030][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'. [ 414.866022][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.883487][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 414.897817][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.944335][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.983563][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.380251][T17959] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 415.413625][T17959] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 415.582118][T17965] lo: entered promiscuous mode [ 415.597490][T17965] netlink: 'syz.3.3255': attribute type 2 has an invalid length. [ 415.616711][T17965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.691089][T17969] netlink: 'syz.0.3257': attribute type 9 has an invalid length. [ 415.797312][T17972] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20000 [ 415.816188][T17560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.012939][T17987] netlink: 'syz.2.3263': attribute type 1 has an invalid length. [ 416.190644][T17997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3264'. [ 416.217169][T17987] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 416.277501][T17991] macvlan2: entered promiscuous mode [ 416.297575][T17991] macvlan2: entered allmulticast mode [ 416.320015][T17991] bond1: entered promiscuous mode [ 416.336707][T17991] bridge1: entered promiscuous mode [ 416.361678][T17991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 416.383138][T17991] bond1: left promiscuous mode [ 416.395217][T17991] bridge1: left promiscuous mode [ 416.405119][T18007] netlink: 'syz.0.3266': attribute type 12 has an invalid length. [ 416.606782][T18014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 416.712917][T17560] veth0_vlan: entered promiscuous mode [ 416.776612][T17560] veth1_vlan: entered promiscuous mode [ 416.878249][T17560] veth0_macvtap: entered promiscuous mode [ 416.893004][T17560] veth1_macvtap: entered promiscuous mode [ 416.912287][ T5628] Bluetooth: hci2: command 0x041b tx timeout [ 416.941300][T17560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.981598][T17560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.054712][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.085950][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.112133][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.142365][T11668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.290763][T18040] netlink: zone id is out of range [ 417.319268][T18040] netlink: zone id is out of range [ 417.336402][T18040] netlink: zone id is out of range [ 417.342007][T18040] netlink: zone id is out of range [ 417.347197][T18040] netlink: zone id is out of range [ 417.595214][T11675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.624441][T11675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.725921][T11671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.754213][T11671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.364945][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.386659][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.395176][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.408062][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.419625][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.025428][T18101] __nla_validate_parse: 3 callbacks suppressed [ 419.025447][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3291'. [ 419.051570][T18101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.058916][T18101] IPv6: NLM_F_CREATE should be set when creating new route [ 419.227666][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 419.343823][T11670] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.389033][T11670] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.587616][T11670] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.597837][T11670] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.638252][T18082] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 419.704097][T18123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3296'. [ 419.719923][T11670] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.733278][T11670] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.818055][T18125] net_ratelimit: 74 callbacks suppressed [ 419.818076][T18125] netlink: zone id is out of range [ 419.843603][T11670] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.854206][T18125] netlink: zone id is out of range [ 419.860312][T18125] netlink: zone id is out of range [ 419.865632][T11670] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.877624][T18125] netlink: zone id is out of range [ 419.906811][T18125] syzkaller1: entered promiscuous mode [ 419.913643][T18125] syzkaller1: entered allmulticast mode [ 419.922048][T18125] openvswitch: netlink: Flow key attr not present in new flow. [ 420.371933][T11670] batadv1: left allmulticast mode [ 420.393036][T11670] batadv1: left promiscuous mode [ 420.414507][T11670] bridge0: port 1(batadv1) entered disabled state [ 420.462382][T11670] bridge_slave_1: left allmulticast mode [ 420.470328][T11670] bridge_slave_1: left promiscuous mode [ 420.476564][T11670] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.499759][ T5631] Bluetooth: hci0: command tx timeout [ 420.576636][T18140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3299'. [ 420.592547][T11670] erspan0: left allmulticast mode [ 420.604517][T11670] erspan0: left promiscuous mode [ 420.620541][T11670] bridge6: port 1(erspan0) entered disabled state [ 421.119238][T18168] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 421.164275][T18168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3305'. [ 421.399522][T11670] batman_adv: batadv0: Removing interface: gretap0 [ 421.627969][T11670] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.642995][T11670] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.656090][T11670] .` (unregistering): Released all slaves [ 421.667624][T11670] bond1 (unregistering): Released all slaves [ 421.684558][T11670] bond2 (unregistering): Released all slaves [ 421.701252][T11670] bond3 (unregistering): Released all slaves [ 421.722265][T11670] bond4 (unregistering): (slave 26±ÿª¨úrBº“): Releasing backup interface [ 421.734761][T11670] bond4 (unregistering): (slave 26±ÿª¨úrBº“): last VLAN challenged slave left bond - VLAN blocking is removed [ 421.750490][T11670] bond4 (unregistering): Released all slaves [ 421.770006][T11670] bond5 (unregistering): Released all slaves [ 421.787347][T11670] bond6 (unregistering): (slave veth3): Releasing active interface [ 421.799630][T11670] bond6 (unregistering): Released all slaves [ 421.815578][T11670] bond7 (unregistering): Released all slaves [ 421.843956][T11670] bond8 (unregistering): Released all slaves [ 421.867530][T11670] bond0 (unregistering): (slave veth7): Releasing active interface [ 421.879878][T11670] batadv2: entered promiscuous mode [ 421.892807][T11670] bond0 (unregistering): (slave batadv2): Releasing active interface [ 421.904835][T11670] bond0 (unregistering): Released all slaves [ 421.921803][T11670] bond9 (unregistering): Released all slaves [ 421.949469][T11670] bond10 (unregistering): Released all slaves [ 421.972849][T11670] bond11 (unregistering): Released all slaves [ 422.003196][T18136] vlan2: entered allmulticast mode [ 422.009524][T18136] bond0: entered allmulticast mode [ 422.014725][T18136] bond_slave_0: entered allmulticast mode [ 422.021418][T18136] bond_slave_1: entered allmulticast mode [ 422.041481][T18140] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 422.051975][ T5763] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 422.083846][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.335213][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 422.355070][T11670] tipc: Disabling bearer [ 422.376844][T11670] tipc: Left network mode [ 422.424504][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3309'. [ 422.518188][T18183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3309'. [ 422.584032][ T5631] Bluetooth: hci0: command tx timeout [ 422.795726][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 423.460044][T11668] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.849994][T18223] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 424.007348][T18176] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 424.015136][T18176] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.052877][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 424.156338][T18223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.361580][T18082] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.383207][T18082] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.401809][T18082] bridge_slave_0: entered allmulticast mode [ 424.439734][T18082] bridge_slave_0: entered promiscuous mode [ 424.520241][T18235] syzkaller0: entered promiscuous mode [ 424.527236][T18235] syzkaller0: entered allmulticast mode [ 424.539399][T18082] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.550268][T18082] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.565785][T18082] bridge_slave_1: entered allmulticast mode [ 424.591184][T18082] bridge_slave_1: entered promiscuous mode [ 424.659753][ T5631] Bluetooth: hci0: command tx timeout [ 424.793761][T18082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.837047][T18082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.011862][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 425.101983][T18082] team0: Port device team_slave_0 added [ 425.132513][T18082] team0: Port device team_slave_1 added [ 425.253997][T18267] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3325'. [ 425.577027][T18282] bond3: entered promiscuous mode [ 425.632456][T18282] bond3: entered allmulticast mode [ 425.654778][T18282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.674785][T18082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.705758][T18082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.804856][T18082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.894562][T18082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.904635][T18082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.981753][T18082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.084701][T18318] 8021q: VLANs not supported on wg1 [ 426.096979][T18319] sctp: [Deprecated]: syz.0.3333 (pid 18319) Use of int in max_burst socket option deprecated. [ 426.096979][T18319] Use struct sctp_assoc_value instead [ 426.412293][T18082] hsr_slave_0: entered promiscuous mode [ 426.449744][T18082] hsr_slave_1: entered promiscuous mode [ 426.472502][T18082] debugfs: 'hsr0' already exists in 'hsr' [ 426.492524][T18082] Cannot create hsr debugfs directory [ 426.739492][ T5631] Bluetooth: hci0: command tx timeout [ 426.747292][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 426.984323][T11670] hsr_slave_0: left promiscuous mode [ 427.000161][T11670] hsr_slave_1: left promiscuous mode [ 427.014327][T11670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.032785][T11670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.071332][T11670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.098447][T11670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.129886][T11670] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 427.137716][T18354] netlink: 'syz.4.3341': attribute type 1 has an invalid length. [ 427.152797][T11670] batman_adv: batadv0: Removing interface: ipvlan2 [ 427.365390][T11670] veth1_vlan: left promiscuous mode [ 427.375064][T11670] veth0_vlan: left promiscuous mode [ 427.500542][T18368] tipc: Failed to remove unknown binding: 66,0,0/2457843376:2298592786/2298592788 [ 427.531462][T18368] tipc: Failed to remove unknown binding: 66,0,0/2457843376:2298592786/2298592787 [ 427.563730][T18368] tipc: Failed to remove unknown binding: 66,0,0/2457843376:2298592786/2298592788 [ 427.590960][T18368] tipc: Failed to remove unknown binding: 66,0,0/2457843376:2298592786/2298592787 [ 427.910960][T18385] xt_CT: No such helper "snmp" [ 428.113954][T18392] netlink: 'syz.2.3348': attribute type 1 has an invalid length. [ 428.705407][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 429.093062][T18411] syzkaller0: entered promiscuous mode [ 429.098840][T18411] syzkaller0: entered allmulticast mode [ 431.113607][T18394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.297894][T18444] netlink: zone id is out of range [ 431.304469][T18444] netlink: zone id is out of range [ 431.311801][T18444] netlink: zone id is out of range [ 431.330315][T18444] netlink: zone id is out of range [ 431.347285][T18444] netlink: zone id is out of range [ 431.364488][T18444] netlink: zone id is out of range [ 431.388329][T18444] netlink: zone id is out of range [ 431.405792][T18444] netlink: zone id is out of range [ 431.430142][T18444] netlink: get zone limit has 4 unknown bytes [ 432.537301][T11670] IPVS: stop unused estimator thread 0... [ 432.985902][T18497] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 433.215572][T18504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3374'. [ 433.251484][T18504] netlink: 'syz.2.3374': attribute type 21 has an invalid length. [ 433.511504][T18510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.544272][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.627502][T18508] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 434.164483][T18537] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 434.198125][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3382'. [ 434.313597][T18082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.372039][T18082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.393872][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3384'. [ 434.552897][T18082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.602905][T18082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.622572][T18082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.637663][T18082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.670285][T18558] netlink: 'syz.2.3385': attribute type 2 has an invalid length. [ 436.915381][T11671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.108625][T18082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.120290][T18082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.640642][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 437.778787][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.354155][T18082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.450677][T18082] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.489517][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.496882][T11675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.570766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.578113][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.194557][T18648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.213771][T18655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.366153][T18663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3401'. [ 439.842784][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3406'. [ 439.860342][T18676] x_tables: duplicate underflow at hook 1 [ 439.888477][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3406'. [ 439.962053][T18689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3406'. [ 440.134166][T18695] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 440.334561][T18082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.462234][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 440.543542][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 440.613099][T18082] veth0_vlan: entered promiscuous mode [ 440.732608][T18082] veth1_vlan: entered promiscuous mode [ 440.809837][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3414'. [ 440.851595][T18726] netlink: zone id is out of range [ 440.862898][T18726] netlink: del zone limit has 4 unknown bytes [ 440.883094][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3414'. [ 440.935577][T18082] veth0_macvtap: entered promiscuous mode [ 441.076956][T18082] veth1_macvtap: entered promiscuous mode [ 441.174211][T18744] syzkaller0: entered promiscuous mode [ 441.188585][T18744] syzkaller0: entered allmulticast mode [ 441.237020][T18082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.255042][T18744] sctp: [Deprecated]: syz.0.3420 (pid 18744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.255042][T18744] Use struct sctp_sack_info instead [ 441.286827][T18082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.303945][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3422'. [ 441.341563][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.355467][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.375054][T18751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3422'. [ 441.423496][T18751] netlink: 'syz.4.3422': attribute type 1 has an invalid length. [ 441.466687][T18754] veth3: entered allmulticast mode [ 441.480245][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.606856][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.086240][T11671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.129894][T11671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.196572][T18780] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 442.222340][T18779] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 442.261095][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.295660][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.600862][T18804] syzkaller0: entered promiscuous mode [ 442.617732][T18804] syzkaller0: entered allmulticast mode [ 443.148464][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.165261][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.177428][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.200373][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.213124][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.235170][T18814] gre1: entered promiscuous mode [ 443.242042][T18814] gre1: entered allmulticast mode [ 443.841593][ T5634] syz_tun (unregistering): left promiscuous mode [ 444.220177][T18858] netlink: 'syz.2.3449': attribute type 3 has an invalid length. [ 444.283621][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.296233][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.309362][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 444.658087][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.670333][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.689886][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 444.989729][ T13] : (slave netdevsim1): Releasing backup interface [ 445.021980][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.033352][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.044500][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 445.111169][T18819] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 445.193520][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.232014][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.250655][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 445.310228][ T5631] Bluetooth: hci4: command tx timeout [ 445.542617][T18910] __nla_validate_parse: 4 callbacks suppressed [ 445.542638][T18910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3461'. [ 445.627971][T18914] netlink: 'syz.4.3463': attribute type 4 has an invalid length. [ 445.655244][T18914] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3463'. [ 445.843459][T18914] .`: renamed from bond0 (while UP) [ 446.122710][T18934] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3465'. [ 446.161423][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 446.498446][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 446.679121][ T13] ip6gretap0 (unregistering): left promiscuous mode [ 446.734959][ T13] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 446.935823][ T13] gretap0 (unregistering): left promiscuous mode [ 447.032499][ T13] team0: Port device geneve1 removed [ 447.135003][ T13]  (unregistering): (slave team0): Releasing backup interface [ 447.158982][ T13]  (unregistering): Released all slaves [ 447.170761][ T13] bond1 (unregistering): Released all slaves [ 447.188129][ T13] bond2 (unregistering): Released all slaves [ 447.206068][ T13] bond0 (unregistering): Released all slaves [ 447.232780][ T13] bond3 (unregistering): Released all slaves [ 447.250787][ T13] bond4 (unregistering): Released all slaves [ 447.277512][ T13] bond5 (unregistering): (slave lo): Releasing backup interface [ 447.285939][ T13] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 447.297707][ T13] bond5 (unregistering): Released all slaves [ 447.320117][ T13] bond6 (unregistering): Released all slaves [ 447.338879][ T13] bond7 (unregistering): Released all slaves [ 447.378416][ T5631] Bluetooth: hci4: command tx timeout [ 447.414342][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 447.542366][ T13] : left promiscuous mode [ 447.864284][ T13] tipc: Disabling bearer [ 447.895569][ T13] tipc: Left network mode [ 448.215974][T18991] macvlan0: entered promiscuous mode [ 448.951660][ T24] IPVS: starting estimator thread 0... [ 448.989266][T19034] IPVS: set_ctl: invalid protocol: 768 0.32.0.0:256 [ 449.069490][T19032] IPVS: using max 28 ests per chain, 67200 per kthread [ 449.113862][T19040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3487'. [ 449.456650][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 449.469971][ T5631] Bluetooth: hci4: command tx timeout [ 449.526142][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 449.537315][T19065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3494'. [ 449.695142][T18819] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.718966][T18819] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.738584][T18819] bridge_slave_0: entered allmulticast mode [ 449.746587][T18819] bridge_slave_0: entered promiscuous mode [ 449.834267][T18819] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.841732][T18819] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.853428][T18819] bridge_slave_1: entered allmulticast mode [ 449.862301][T18819] bridge_slave_1: entered promiscuous mode [ 450.056900][ T13] ------------[ cut here ]------------ [ 450.063879][ T13] !chanctx_conf [ 450.063916][ T13] WARNING: net/mac80211/tx.c:6482 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: kworker/u8:1/13 [ 450.077929][ T13] Modules linked in: [ 450.083815][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 450.093196][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 450.103327][ T13] Workqueue: netns cleanup_net [ 450.108298][ T13] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.114377][ T13] Code: 19 57 f6 e9 b1 fe ff ff e8 f5 1c 7b f6 90 0f 0b 90 e9 e2 fe ff ff e8 e7 1c 7b f6 90 0f 0b 90 e9 2a fe ff ff e8 d9 1c 7b f6 90 <0f> 0b 90 e8 60 b4 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 450.134065][ T13] RSP: 0018:ffffc90000126e38 EFLAGS: 00010293 [ 450.140230][ T13] RAX: ffffffff8b4b54a7 RBX: ffffffff8b4b511f RCX: ffff88801decdd00 [ 450.148270][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 450.156275][ T13] RBP: 00000000ffffffff R08: ffffffff8b4b511f R09: 0000000000000000 [ 450.166416][ T13] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff888068e30ec0 [ 450.174555][ T13] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 450.182624][ T13] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 450.191662][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.198334][ T13] CR2: 0000200000001a80 CR3: 000000007338c000 CR4: 00000000003526f0 [ 450.206373][ T13] Call Trace: [ 450.209755][ T13] [ 450.212728][ T13] mesh_plink_frame_tx+0x73d/0xc30 [ 450.217921][ T13] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 450.223685][ T13] ? mesh_rx_plink_frame+0x19c0/0x26a0 [ 450.229225][ T13] mesh_plink_deactivate+0x18b/0x2f0 [ 450.234567][ T13] mesh_sta_cleanup+0x42/0x150 [ 450.239444][ T13] cleanup_single_sta+0x3ff/0x660 [ 450.244539][ T13] __sta_info_flush+0x5bb/0x700 [ 450.249508][ T13] ? __pfx___sta_info_flush+0x10/0x10 [ 450.254946][ T13] ieee80211_do_stop+0x3cd/0x2410 [ 450.260134][ T13] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 450.265674][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.271636][ T13] ieee80211_stop+0x1ab/0x200 [ 450.276364][ T13] ? __pfx_ieee80211_stop+0x10/0x10 [ 450.281715][ T13] __dev_close_many+0x366/0x6e0 [ 450.286631][ T13] ? __lock_acquire+0x683/0x2cf0 [ 450.291685][ T13] ? __pfx___dev_close_many+0x10/0x10 [ 450.297114][ T13] ? try_to_wake_up+0x8c5/0x14d0 [ 450.302181][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.308068][ T13] netif_close_many+0x222/0x410 [ 450.313018][ T13] ? __pfx_netif_close_many+0x10/0x10 [ 450.318496][ T13] netif_close+0x160/0x220 [ 450.322965][ T13] ? __pfx_netif_close+0x10/0x10 [ 450.328067][ T13] ? __mutex_lock+0x1092/0x1550 [ 450.333006][ T13] dev_close+0xf7/0x210 [ 450.337314][ T13] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 450.343565][ T13] ieee80211_remove_interfaces+0x108/0x6a0 [ 450.349481][ T13] ? __pfx_autoremove_wake_function+0x10/0x10 [ 450.355599][ T13] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 450.362026][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 450.367445][ T13] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 450.373079][ T13] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 450.379223][ T13] ? hwsim_exit_net+0xcbd/0xf50 [ 450.384138][ T13] ? __local_bh_enable_ip+0xd0/0x130 [ 450.389550][ T13] hwsim_exit_net+0xe8e/0xf50 [ 450.394288][ T13] ? hwsim_exit_net+0x326/0xf50 [ 450.399236][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 450.404498][ T13] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 450.410398][ T13] ops_undo_list+0x43d/0x8d0 [ 450.415061][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 450.420272][ T13] ? idr_destroy+0x218/0x290 [ 450.424916][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 450.430114][ T13] cleanup_net+0x572/0x810 [ 450.434589][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 450.439642][ T13] ? rcu_is_watching+0x15/0xb0 [ 450.444468][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 450.450277][ T13] process_scheduled_works+0xa8e/0x14e0 [ 450.455898][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.461987][ T13] ? assign_work+0x3cf/0x5d0 [ 450.466638][ T13] worker_thread+0xa47/0xfb0 [ 450.471363][ T13] kthread+0x388/0x470 [ 450.475489][ T13] ? __pfx_worker_thread+0x10/0x10 [ 450.480724][ T13] ? __pfx_kthread+0x10/0x10 [ 450.485377][ T13] ret_from_fork+0x514/0xb70 [ 450.490081][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 450.495253][ T13] ? __switch_to+0xc89/0x1420 [ 450.500033][ T13] ? __pfx_kthread+0x10/0x10 [ 450.504680][ T13] ret_from_fork_asm+0x1a/0x30 [ 450.509556][ T13] [ 450.512766][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 450.520089][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 450.529411][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 450.539506][ T13] Workqueue: netns cleanup_net [ 450.544331][ T13] Call Trace: [ 450.547630][ T13] [ 450.550583][ T13] vpanic+0x56c/0xa60 [ 450.554602][ T13] ? __pfx__printk+0x10/0x10 [ 450.559268][ T13] ? __pfx_vpanic+0x10/0x10 [ 450.563804][ T13] ? is_bpf_text_address+0x292/0x2b0 [ 450.569121][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 450.574363][ T13] panic+0xc5/0xd0 [ 450.578253][ T13] ? __pfx_panic+0x10/0x10 [ 450.582729][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 450.587733][ T13] __warn+0x315/0x4c0 [ 450.591747][ T13] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.597157][ T13] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.602647][ T13] __report_bug+0x276/0x570 [ 450.607177][ T13] ? ret_from_fork+0x514/0xb70 [ 450.611971][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 450.616938][ T13] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.622339][ T13] ? __pfx___report_bug+0x10/0x10 [ 450.627394][ T13] ? __lock_acquire+0x683/0x2cf0 [ 450.632413][ T13] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 450.638512][ T13] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.643919][ T13] report_bug+0x16a/0x220 [ 450.648284][ T13] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.653695][ T13] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 450.659133][ T13] handle_bug+0x9c/0x200 [ 450.663433][ T13] exc_invalid_op+0x1a/0x50 [ 450.667965][ T13] asm_exc_invalid_op+0x1a/0x20 [ 450.672851][ T13] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 450.678879][ T13] Code: 19 57 f6 e9 b1 fe ff ff e8 f5 1c 7b f6 90 0f 0b 90 e9 e2 fe ff ff e8 e7 1c 7b f6 90 0f 0b 90 e9 2a fe ff ff e8 d9 1c 7b f6 90 <0f> 0b 90 e8 60 b4 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 450.698604][ T13] RSP: 0018:ffffc90000126e38 EFLAGS: 00010293 [ 450.704702][ T13] RAX: ffffffff8b4b54a7 RBX: ffffffff8b4b511f RCX: ffff88801decdd00 [ 450.712705][ T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 450.720704][ T13] RBP: 00000000ffffffff R08: ffffffff8b4b511f R09: 0000000000000000 [ 450.728706][ T13] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff888068e30ec0 [ 450.736714][ T13] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 450.744720][ T13] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 450.750048][ T13] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 450.755369][ T13] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 450.760772][ T13] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 450.766173][ T13] mesh_plink_frame_tx+0x73d/0xc30 [ 450.771323][ T13] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 450.776981][ T13] ? mesh_rx_plink_frame+0x19c0/0x26a0 [ 450.782480][ T13] mesh_plink_deactivate+0x18b/0x2f0 [ 450.787807][ T13] mesh_sta_cleanup+0x42/0x150 [ 450.792597][ T13] cleanup_single_sta+0x3ff/0x660 [ 450.797657][ T13] __sta_info_flush+0x5bb/0x700 [ 450.802543][ T13] ? __pfx___sta_info_flush+0x10/0x10 [ 450.807961][ T13] ieee80211_do_stop+0x3cd/0x2410 [ 450.813039][ T13] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 450.818556][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.824407][ T13] ieee80211_stop+0x1ab/0x200 [ 450.829111][ T13] ? __pfx_ieee80211_stop+0x10/0x10 [ 450.834332][ T13] __dev_close_many+0x366/0x6e0 [ 450.839210][ T13] ? __lock_acquire+0x683/0x2cf0 [ 450.844190][ T13] ? __pfx___dev_close_many+0x10/0x10 [ 450.849586][ T13] ? try_to_wake_up+0x8c5/0x14d0 [ 450.854552][ T13] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.860388][ T13] netif_close_many+0x222/0x410 [ 450.865273][ T13] ? __pfx_netif_close_many+0x10/0x10 [ 450.870681][ T13] netif_close+0x160/0x220 [ 450.875123][ T13] ? __pfx_netif_close+0x10/0x10 [ 450.880273][ T13] ? __mutex_lock+0x1092/0x1550 [ 450.885171][ T13] dev_close+0xf7/0x210 [ 450.889378][ T13] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 450.895575][ T13] ieee80211_remove_interfaces+0x108/0x6a0 [ 450.901450][ T13] ? __pfx_autoremove_wake_function+0x10/0x10 [ 450.907556][ T13] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 450.913930][ T13] ieee80211_unregister_hw+0x5d/0x2c0 [ 450.919333][ T13] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 450.924925][ T13] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 450.931151][ T13] ? hwsim_exit_net+0xcbd/0xf50 [ 450.936216][ T13] ? __local_bh_enable_ip+0xd0/0x130 [ 450.941538][ T13] hwsim_exit_net+0xe8e/0xf50 [ 450.946246][ T13] ? hwsim_exit_net+0x326/0xf50 [ 450.951130][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 450.956355][ T13] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 450.962196][ T13] ops_undo_list+0x43d/0x8d0 [ 450.966835][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 450.972065][ T13] ? idr_destroy+0x218/0x290 [ 450.976685][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 450.981823][ T13] cleanup_net+0x572/0x810 [ 450.986275][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 450.991250][ T13] ? rcu_is_watching+0x15/0xb0 [ 450.996049][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 451.001790][ T13] process_scheduled_works+0xa8e/0x14e0 [ 451.007388][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.013566][ T13] ? assign_work+0x3cf/0x5d0 [ 451.018185][ T13] worker_thread+0xa47/0xfb0 [ 451.022839][ T13] kthread+0x388/0x470 [ 451.026940][ T13] ? __pfx_worker_thread+0x10/0x10 [ 451.032079][ T13] ? __pfx_kthread+0x10/0x10 [ 451.036700][ T13] ret_from_fork+0x514/0xb70 [ 451.041320][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 451.046463][ T13] ? __switch_to+0xc89/0x1420 [ 451.051166][ T13] ? __pfx_kthread+0x10/0x10 [ 451.055788][ T13] ret_from_fork_asm+0x1a/0x30 [ 451.060600][ T13] [ 451.064249][ T13] Kernel Offset: disabled [ 451.068582][ T13] Rebooting in 86400 seconds..