last executing test programs: 2.270361858s ago: executing program 4 (id=6779): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061148896a7e13e1ca8029800040000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) openat$cgroup_type(0xffffffffffffffff, 0xfffffffffffffffc, 0x2, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x80000001, 0x2, 0x0, 0x40, 0x100ad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd27, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) (async) r4 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.218955271s ago: executing program 4 (id=6780): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002"], 0xb8}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ad00000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x14, 0x4, @remote}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xcc}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r10, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="4a41b951ec6c05bf073767aa5be02f8a1c24985f52bd88ef23b0f1afb6df9cb28c2f9f3a1c530d256a749b20bda554f37b54dc1da7c893a91eeb368167c133da06b4ad94ea1ed31f5c03f4bc132e55dbad1faaa946d052349de8", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r12, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r13, r14, 0x4, r14}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.799806883s ago: executing program 2 (id=6785): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x3f7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}}, &(0x7f00000002c0)=0x84) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x6, 0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@deltclass={0x30, 0x29, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0x3}, {0x5, 0x9}}, [@tclass_kind_options=@c_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r12, &(0x7f0000000000), 0xe) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x26, 0x803, 0x4) 1.798554628s ago: executing program 3 (id=6786): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) 1.753325684s ago: executing program 3 (id=6787): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000001f40)={@multicast2, @empty, @empty}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x8000}, {0x8, 0x3, 0x0, 0x0, 0x18}]}}]}]}, 0x44}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000805) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x100, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x8, 0x8, 0x0, 0x0, 0x2, 0x10006}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0xf8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x810) 1.415591201s ago: executing program 0 (id=6793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a003c0cc68dc559b27600000400000000800000", @ANYRES32, @ANYBLOB="0000f800b7fb1ccf48a9194b5e0448725bb134a277b940cd66d8cf58a87e3d8af312bd748532264c18e2ffffff7f12e4795939cea71c1f5903dca347246358350bb640fe16cbe138ba75dc003d59ed9cd2ef8e806a00509c8945dd92237f4bfee7d755da6d7a050000000000000046a0d77d467da385abb440ca22d5ca9d0ac8f6032fde8c90a1025b6f5bdd64b1940d4731be0fed9352d269b7f992f5e5c9a79b0f1e8cbc81d4ce52433807e9748252785c43a38a27c8d620", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x50) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000280)={'HL\x00'}, &(0x7f00000002c0)=0x1e) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r9, 0x40047459, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000003080102000000000000000000000000040004800500030002000000"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.264054171s ago: executing program 4 (id=6795): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48014}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) socketpair(0x23, 0x3, 0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r5, 0x6, &(0x7f0000000500)="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") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40051) 1.256541322s ago: executing program 0 (id=6796): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 1.144151096s ago: executing program 4 (id=6798): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) (async) close(r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000800000071d7"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.129235296s ago: executing program 0 (id=6800): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) 1.090789936s ago: executing program 4 (id=6801): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x8044004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="b5590be9f7b7f3244954dc1c4230b5e98945713f024bfff823b6dd7485e97e5db1c6918ebfab87f4afa21b29edff60bf700a7f5a8c3dd6f76385f3bd222f2ad57bb66ff614bfd399d4975a191fa738e197967bfefe3cda70d41a18d64044e199e1db8e7917d76550191e4da5f8c2f9330f3919ccb11d8e15430776acd182754bb16b1c86dc066da1d38ceb4f2035edc1f0dd5835d748944ce21f80ceb828fc728261be3e1f7773c3f85151000c25065c894b69760969e56b1962992b95c22b95b4f33a6c420fc3b00f90f586550621a4e5febab342cedee046e3cac2ade1242ba875f3330ff629f7b4d297d5d6a6bf2c518bd3ff119afef5c7104fd650336c890c2889dbb40942af46bef457e23c0076d07d15e228a67390289133e212cb7566944042d42e0999fc5aa3b5982396968935513482adee78936a891cc137b97d5ef67d53483aa001c1aab731ce0211f4370c4398eafe3e1cab840eab8d9b8317fb339103d5d074b4bd09017c4c9f537cca08889e395724a1cbf6e45f2c041bf351b0dc1b7ab40f36576555080a53b447126910fe8e9e31db979b2f17f5816045f3765bd1a48393a39bcea86517577ce71dad3d8cdbf3ed15d640655dca90f202f61fb63091be03fc35c0b88a781dd60b3d11e7bfcd88893b5271f9c8606f1ed97eae80314d6291434513cb170531db39b3444bb9f961e097983add21a3ab439fe1870489e482140a5c6227b49b9b95c23a95cd1359186e8f82587b4c7a2121daca9de389ac987330743b83a017951aafa55cbbf0bdd852474b58b49ada9d1ab7f20220a1a9fd8e700b43e603f375270e8e721610e676d08301971a720b90bfc9a991182d90a2f16266ff602aeebe516da141a4d00520d06cd873e77502351eb02d9099175de5df19516d110e4d2b64da635c2f37a7b78a0799dc58132b397e89c3c9d807134d72cbaf2ef549379cba42dd8af159d0e05d0378b6e77ea55c3815c8f83cb7a3b2583e2ff58d0a568d892511303882e1af4c193f3d36645cfb9222bda82e6d9bd4f52a0ede5c48e8965de0ca5b07b60895f7de26659399d02d2e4ebb140389d871d5a48fea8bde2dc9b29f282df17b934e677f23bffc53495dc72b772ecf395569dc1f9e134e01a28143c6bfc95897cc7b7654765806464df9b946581b4fef00b3014afb1df08a71815d47097ed520b343fc83381b92bc5427e1b11bb7fcf2c4efb97fcac08c72554790359a26a6fa553716818bf833433cb933b701e28479ff0eb9ccc77c297f9899cba7e67fc51cc44c5d7284da8ad24506a9c3d1e0b0787248b94bb2500e27163c2db5960662c305516a1d4fbdd983e5bab3b5756f8dc72a44951b0d7932331df8d8031e5197760ec85423341454b90f7180dbd6ed4bb337f1e5a47e954541b81043a58bcea7bc0ccdaf8dc63ef651ca49db5057252dab399b3992accecbabf04c154bfbf9a1df7dc687abe5f447566e1fcba9bfdf5d8339974a9d3fdb4a74702069053d5eed9dc1dfa42e9097dbae70c15ac17440faa6f95ebfbc6742700b7828336d8aa3d44950e14b9985d93f9435b4203fce0d07baa3c74e58e65fcf2e58eae91c47e8ca560a337e3bd7450c069376215ad37db05393c9678abd0f984bd85769d914bdd34251515505257b16041db350beaa07206f1a52bd68b56ade7d486d153735e7f096ee42cbbbe3cdc319b7d506d747ae34f265f7b4d01db0e8c841362755f71a4093e7fbb16d8ff4ee35693ca90594b768f55bede1a5914522a1e5734ce3380524f36bc1f97f81d7a9717a369a066e64d5bb0a7e985ebbbc872dee848bb9db487ffd8c979fb149934c70072962de4338b04491d604b6a072ff9de3f845ddd9f8623f3286b089da763fa670034226ae6ccb8972b70ab30ceddfc445cda1251c7cf6033cf13ce521fadb4138a676ee828e2dadbb2586da8410b76c5de854496cc0889b080a467118e2b2188b1f15604a162220bfe7521d4f2647ae87d63de0242c147ccf091ddee2c356e544929dc1f563acd3f5529c5122150687857afa593c7f28d3b316d6f583482732a52a1f30ee32dab586a8c1967b703f1960470ba0fdeda9892a7b7840c950f3258175ee29377c933fa1a0c878e9b87487ce35e3908559d42c42b96066801c1868a88e361dc4e87e963b250dacd08ffebfaea8ec300dd027db0c749be81c953f6de8a23a01286910a94221b2ad2a7cc76a69df2c802fdbaebf0de6fa39caf52c0e0f63d31bca24ab9930182b2f1f20b7f7b7b4a8cef45529d7572144d0f1033fa90e201ef84a4928309f7584e8b3eda6cb8d4df272e7236daa7342d16bcecb66268c29911428c943c23253a7854c62572339f42553bf38b4e4ff6415e3b42bd5b76fe298b2211ed20eda8ec6842053cecf0e77002865c9adfdb541ec212a62a93c3ca6bac967443acb9a016ebc5553767f1d8e466619b988e5e905e499db8777d39082a2df1ead413c529106354f619bcc7ceb4e02e60bbee591f7a5edf4ffbc913a1ff38e98a5c8ee7fff2115d05f9a61d5bdc56c05b47f6dd807e0f17994a9b695b47f33df41c38dd2c145b899045d81a310f7311b68fcf7a5f38f41a119b130a613e5c03897d00aadef8b8b7fed9712825c470b21ef17165b2a97ac06c891322e51bb1732ca103356f07f008c79302d2e9adaf941c947b4c73e27cd7c005dadf4f02c36ab9868ff8177f972decd694a1ed1066a0c8b087649e2dc81fc8c09c7267c1bd3bf8ac2269b0a1722d094f01a851107b42e17220fff1673e87ffb940775856682b6937768233b1b7032e2ce072491ef2789efdf42d6e172869e076b019f32ef917d3bd948cc3b2233bf2236ffaacd63c60b332a1046706fe9f9a647e05f1aad446693deb4382d48c803fa87420c34782f0ec0797c0455f4a55ef8923f8bf4edb49fdf6a06159a9d5b61b9ad0afda0557d2188cbed094a010e098d29dff692392faeafa79d976d6c78fa16a080658aa36b1a0cc412c30d550ca8975540a0b87a0bf4a086533b69d6683b05873fda1b82c8e85aa51da8f1d89c95cce619cf689b026251738ad679eb5249436bc78d21705b115a5776e57bb0c4680bdc79aef2edd18fb824398e7411fca1b384c07ccf4b1028e9621948e0da09250f3efe3ba30a52fe5647c18483ff27d525c7225568f84da6243eeaaaf5a7e93c99085a31b6a518f0cdb211957d67bfe9f62ba5f6c486aec9311fd9ace11fd65f94daa6e1427f84e5de42049f0cf48f3cc87556585f42130e139194f5254f732aad36c3e8c7fedf73488b147d731149f8d477afcdd15a066d27c5530bf93378e3d88c3d8ca07f742b63c51d7f0f805170a459a6ca4594203a6c9439953d5b6178b7a8db9f58183b11e3fa4311e523266b42f92bfd66257fc0740d5f5a1c5a50fce4bb1df35a4e610aabe777deeeaa72a0f34d8a29c79ab76b5f48187e65bb8d6bfa7312da73e1a9f3e164046571072fb1001d5ed5f5fe0fc1a7cf8064262018c433e5b31237e67dda391cb809c8e06782563d6c98159d4c1c460b0e00ab517b2732d3bc12819ea4e50f23bf62a46886b7a6e3272c3821b2a4f943fbf472ff634cf3bd5122119746398b58bbe3c403ef6b4fae5fb8e9f7ae9c07ed421b12f4738bd1cfebdbbee2f9a6857bb4d010968155f9b55b54d8ee87cf528b62f5f0fab05164d617e2bd63d842476f918f2d2df39b1ad7360af0678ba855730b8eeef97af7b785b9c07789fab41920cc66dd065e5cfff9b40f178727fc8a5fff99068b811efd818420eb1bc45f2a7a22f9f877bc09a9efb9bd49d770ead599f0c2e0fdb4ffcad3441c62f6486613fde086ebdeb5a40c7ad89c7edefbb5b8f42812ba7dafc70740be174f01f2af47fa0be93b8e5c1d4c72c0ce9500cfd88057c5aae1647634696f0cd43418009d90d0e288ecfe9abe93fa61dd83ddaffe3d85083b1268d091941f911a1a0ab06ac833d16f066ea116d0b33a216d21c02f9ba5a19bbece29ffa94ee903c23cf505e4c972c61a3ac99952f32453d40c881ee56f26a978fad21a5e53e611f9f1de54816420df5cafe3a67c0accdb686b2d0961211c73ae048c8775c0b9798a744c6aeb5a1317827e36426c0ddd18038a970e45ae15f1b551300b93c3e27c0df7fa6f889fdc72ab50835696ac4e567bf289ec247d851c2c715b9495e77b5a3dbd03d3aff3180043316d5959709d89b18331b4fb4c921ee14c576d4ce71930b5baf0deb0fc060d35e1e9f1c1323d243ccfc166bda65527438b8b41d969661a1df70a7abff735b35554056a82f498d46eeb835fe6a84f474379699531a5d5d5be2cd0916342ea79424219d1aef2f5871829cb58394898f8901f33d4fc83c67108ebfcfa4c54ae697c2651803c15e6ffa00e583c11f2c91e179562fc6c0e05a6f178f29841a5d1ca12feb279fe86801f32ac95d8977d5993dfc0fbd664ce2cde73afa4b9621d05e1779e6fdc36d579a370381154572d75260cf60a071158e99cfafd311c8af97e268737a729c1ee18bb6a95c64dfaea95cc6c5ba2e82dad8e0cb95334d05cb60db3491f0c756cccf26bc1c9665947bb8107f9bd2825de12311513ac374bd4c7b370243fa8576601f731b8dcb77a3db0950d98b600e67245532940012eece1e09f4d9f009435309227b0f28de1e014afba15b10953cf3dc610fbcbb652965cc72f3a26f91e7510094253b3bae289868b54a5f7f10a20116c0945890bd913534432d386ec3c8047bc525c71d7c37c5111ff90cdf25abaef49ea1a17a1ace80df37bb51cb253f5f6ceec8983a1762f1d4ae0e432e28f46998fa09a29e3165e0c69ed600281d7cc8a9ef09a0033de405e03b8c3afa09e192a1fd83bdf663ef51dc9f49060d5905dfa36abbda8831b168cb1a3f6205a51057da70011ac49ea48b21bcaf27c4f021ff2fa88f777e65d96f27829bbb8d5a7823626457ce00e3351b35ad2048630ff9533bb2b34a0aaba7cf9eab969c1554b3c1a497d0528b34c3f1a1a22405d1c0d9693c19bce1bc9ed536a66fcccbefa942a1cacec656ef56191d32db0fd471e62ac40db50c27ffc6a4de3eee510867d666a5d2a3af70ea49993858c998987e0e3cb534f9146144a7296b9a96c755f122e15e9aed76f537c51837487c554e4d25ddcae881d58069a0093915c3bbe2f8647849acca3aab55432da7107c422274cb43e398e17b8c4f43c50a6a4617d7f3656d3505110f885fc2d2b950c6c34ea0120da2f111e794a38a24fe8e6e70c25c2d2fc6c00dc9c369b1b5dbb5d7bb5f4d3d34f8bfdc633be412182c50caea9b2782666ed1fd8fba61c9fc0b3f75aa05a28b2dd57afc9b6b5f1628a7f2980dffa903711ed1c582532d1c74576771040a0687f0c2b3204e79aef004629afe78e9cff053a4322cd5521509a4a0a771a45eccb7001f70e17ad2ed44ea84c5535aabb704341bf71f0646fb6483f14965f0a502fd4cd6c545bf2d4c51ed6431a9a324087c75511a678d2484337537659f60b75f4475ea8115ec9fd355c66322e9d765e38a29aa3bf84e80f58315d5ac09661b74dfc588edc20576598ddb865c5adbc14326dc5ab43d3a0c39d078f95d878e86abbb69d90a2ad81cf49787f3c949d3a2744bb1024192c361af620af42639c04be79b7c9cb588a603dadca39a79c42ae9884196cdf2b97ef17d49f2eebb26cb12a8944b105ddb9d82f855dfec36cbb0a40f841dcfd2feba91cf3e6805473b9e1b58aee324799da01a94de853f61a6e319bf16efcb42b44b0308437b3", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="d903073f2814863caa6ed5419a0f33d19f4118e665b4df3b43138d6d56ba264b2a65c4276caa91f7db5dc265cc0279aa59c8228b3cd395164cbd2d97293d15cbc143d44ca7d4a6cf1c3452fd1bfe06c6100a33df8567a25a50ff8efbf7671bee6fe488abccabbdb9a1010d076260c9f953c6d6d9d77fddd8bf63bbdb23aa08c3c4441e40e512cfeba6020e2876f06dfc891be248870e089f9295b8ad2111fa3017c32444c0bdf7d0dfe05502e4c06504f56eeb5122c5c9992828ab1fb883de2dad1cbb6d233033793e6a554ab094c5543be2ef6f2a784e0b320b3afb4c23ddb5b47a0253cfca4457ade6c1b4fd39e444a33fbeff5c1bb5aa71d71909ed50c9fcd8533fdf17a9493ab6b81fc010bb54f5b1e434a8e5337659ac988b7e777cce76a0067d98c5083b67957738c37ef27fd0f0dbd7948a7119d3f1d5d92168be5480a719d8bfdf18d89a2363caf5588b1955664661a8daa2a218747226463d051ef36b3d8e3233d2796e4ee3559fd4593d8a98281f984b558a6650c21ddffbd50630273c9ecbd0ced365393d48bd7207e08964de19d7536787dc01182551cd17ff74100fe47030dce70b43e6fb109edb3eb4ebc26e6f650d6fe2f48dbf10abd8da3a74734e1ce0de2916a88fb7baf2e3a667d9c84cc832ef722bf3f0158659e6ee4d54578568b7e4286ecf5d28657cd7255599271de02de750a3e4db9c861cd6cb0d31a62de7d1f883c81707a7b1b1e73cacb6f89e757abf476827ee68b665990930e2378d9f71cffbe85136b2dd41a37e3dfad20abdd61e638dba4734bd373b5a7e2231cef7fd7290f5f5176744973f51d57256459a87bc398fa50d35b0ec9d4af2586d8589bc60de4c8749b4c05570d6bd348423f3e6130dbd82db51ab59faa567ef5c508c42dc4d65c31328e9e1748060f94ac7da9e66e51f2267d472fb88d3a2cd382bc1abfa36a41053154050d3dd107f44ee6ad7d336370bd2e2f277bac9ae98736e3a1a23c711e40294217175d22e004a4c259cbdb6e979636bda65fba76bacf70831da02da182d02188b77c7e3786936a00d76c083ba03880a497677083d19be6bde9e24b82f8439de814782dbc17c1df750ac9b91acf0c3275f359015e9c87265c1a6ad3885d37d38184b2bee4412d2a7b718c0da2df38c32ff001f5832b8fd26d9881b7511737bfc31f61c7ffdbde1302b13b21c02cd0e205594613b2928b2365d43d1f7ef48c4ce456b4193fbd78c156bbd33ba8be512c72b3d24e776c4b11ce9fc227aa234ba9fcf9ed8ca9542c7f1dbfd5cb03f3b9c3590a835f4287ad209a7f277010883ed5d2cfd14dd39e82ee105634d12aa17369a53456ec7494d0d77213c5041851b6071b64cb54461d7b80bb990a58918d401e18ff778a6f96b9f161df37023f026c221dee245840b4ac5ce5c9862dedb315254e6a2763cf4874ea6d0e95dcbc7a1ff99a824b52cf300872ed1eb0d07adbc434a895a21bd5034ca3ad82ed6b1393ba87d1943dcf8eeb1143b98b018d92c76e80391ff3a78429c983a5e9b402eaa8a1bf1aed72674f259d6de53c1d8bf59ec10021807c22ab1a3ebc80223977b340974bfd23cd10ef221c728b01d8a391fddb07b33df75717633642c873ab81b0cc298ef08cebb62e148cf6ff3075faf35e96877d70af857edc611bfee4d8e52a556a3e1cdcff90b677ec06d91642c07a616b99e49ca480736a76eb89e66429a99f3cbf7efc41c2cfbcd70005d35490dc4616c0bcab1f11c34be27444e95de0b4d2cfcebc20378d99f433379b484d9904658fb341c66b5e8524475867a56ce06ee2f4793a4ba8086bb3875b87ea32095d69a83f11163ee63c5676ec249f4b31febaf5165bcff2c50bd9a80efd696e5c02b9da782e315ea47a4e6ba46159a8b31062e8f737b59e2b2e1793ca5b11f1ffb323394656725df638db0c5b47c7879084493ca92499be283a6ce9b3b749db5436cf731d4f56252bad7658789ce5e56100c9c16c9c75fcdba8448db1c444815e60e98f498f02727ed1adf6fa8f70e7d7123b1e69a6ef48af614cef73dd2a16a9020b377f9762f0b233419b41eb0625b1b4f6be4fe0a8b5e44dfc2bcd976d121ce7facbaf73414ab92f1ade959fd80afec427e003caaa37c875ffbb00342ab461d47ea628d93f8f7a053724dda6c2c85e11334b528323144efd081257aeac769791d25c99ad81381c9d4c9af97f4cfe5a5b0370b3a3ec6a7503a7d732753ee7ecbf3ed91e05c34a526bb5cb19ee346b9d6e7edbf8564289af59169b517df7778666359827516f295d6392f200d8e0feae69c31cc3d8a1c51d26315de96a08a7f26c587de54ec6b5832b77108736a4b4fee7e14754b17d15a406ceba02039e7378286f4a0a8c801d710561c8339b78576c0702a89a26f179c1946f0bdc26acfced75d34b3ffa2311e3c9a0096f960691c9e9a95734936473dfd44fb42653b3b9c7bf900e718de7ffdd47744ef44142fec2d90189bc3c5ef768ddbc01cdc615d2fe5d6aaf6d846a3fa694e71ba9e51d0fdeb73eacb2f5d8c035e1f14dfdf3e98332bf7ccd2fff37a387a963e39c3e02c61036ce91db95ef5407c9645ca0dcc3edda9061c43d6eb2fe3dc0f62c1c1bd31f9ccf8f0d853e3d40d4569eed66522bcd6002ee322dcec1a10ec3a06f02f6eae7e6795aaec272f9679510eafe89eb1aea4c1801f22dda078801739d2d8278b53a96bd616ec9a5418bb15cd3861df094f0b7a8c269658600218ff272732b5bac5193eb115681b01abb4b98993c13559d780a8f3058ff1c84e7b2ac90ba5393be3d8126a28c6fc9a85b4c50a353b0b9715ad8995cb6968ac88021463cc8411c3914ba91710c9ae77ab39811d5260338c2a15fbc684b08cebecdd906c4a6914ebdfce5396bc4465ccd1990f3846ae8d3fbb601d9feae4425f68af3878d33290429ab48396dccbdc8a51be183d5318af9502fae1af27e051cd0a87312a7f9fc78d7c2b1f280758ed7a67b743d8bf65036d034e40b65a7d6b4cdb7561b7b7c84392a79eea34e40c540d3009e16d5f81daf7d7279c8c5e44c53bb05f4d1abe46dd6e965454f88c5a60a348c9bb94acf92b160a1f9d5967f649cef93e76727ed74425c325f2674babfb81fbf8aa68dc3e112d332b7c97348a7f0d9781ede9aaa1504443bd1cd9bf43190e1a21de3fa8a245c3bb0a9d9a497db268f2b86c3613a8a556e6042b9d0a17813907c96f0003ecbef8fa14d29eb8b892b04fbc909da18c18b803ea8626502720a387062381290dd3e4b9b62b8749bbe696eb0e330fce3f0ff75c59fbb212341a899c66f433bb386ecbde15ae837df4aa5b8726365c2c982ddf812f8afa4beba641439763f1465c0024bc6101c91fdf9f9074d106b4935db6d46aeec12b8289daf8503a9475979607dcc5d396b706e3ffce46aba020a723620759da9485a917a3ba7b2df692e4cb121c4b405b713b6345908725d81d556eb75c0fd6178d32bbda1edc3fa86449e4f901fcc354d58a27971591e732b1590cadc0ac9ac126845bb91686e8909dd14852ffe8053e3cfc9de4928f315ab117d02e996c27e1b487e3d1cb230885a497f2b2f561609052346378835206f19632b9a7831138c5e706d3ba3e640845245fd6e5ef39abde8cb642ef6e1eb1cf2f276348b7bccb21544d46556b4bb018694bdad724a4e5efc71c7be0a38cb1c9c1b8ccfcff17872dbe4d2c6b5695094389bc602457f47df60faad7d6931ed403ad5b5b47e0f20ff7be0e85ac712984094c62209d7235888eac0fc4e843a888b368a827d9a290486a7283e26e518d5ee9f43857b864023a8abc66fbe5ae42ac577531ab588e476a6962c929ddac48cafd978359dcbaaa508c710b9e07b6933df6602d8c77a19fe6f738e1de34c81f73559232340384e748271f6b4a966a75d4024fe3afb7e9533dfecb965d412d5b4ac507ab42e638b80a8048abd0b2ca0a9a7b047cdc18751a53c8dbfd2fe4737bfd6fcdd544e7dbaf8ed0f97286e151bf52f2efc5b01b29ad55859ecfd0500a8ffdf077d26c2603c25a666ad100ae4823b7e72c12f130bd29d083fade9db5e76dfbb1ccae77c5f613e925e577dfdcbb1226a7e515d41927427ba44636ca7a5d9942562dba2e3f01961e974179f51b977f5d93d78b7117facc303ba1e02a4e85aa9cbc6ea116f2b7b73fcce8672d3ef677c3ba168c65363a948c34d5a70c3d2845a59e9ed132cf15f04934884269b9527d4e7e90f53a2d46a96c7b0ffbe69657f028b38ef634693c74359efe1be0ad7a74bf93fcb5953b5c5f7cced1370f0412976c66e61af6cb0229afae3a"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 983.892158ms ago: executing program 0 (id=6802): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x89}, {0xb6e7, 0xf3c, 0x2, 0x0, 0x0, 0x5}, {0x0, 0xffffffffffffffff, 0x2000000000000, 0x4000000000001}, 0x0, 0x0, 0x3, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0xa, @in6=@mcast1, 0xfffffffe, 0x1, 0x2, 0x0, 0x0, 0x0, 0x800}}, 0xe8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYBLOB="ee47f06198de64398185576ee9bf9754563da00b4be0c15f6cd6ae34e669c7193a639ef4965f20ac02ae6a4f729e26c0e9738083837f40a9daf229f25661204d71b19bca8d04168a9481b78dccf7dbda6fa859da477db196e7b386158cff98e2a3beb50341fe238963dc5fd416", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf256500000008000300", @ANYRES32=r4, @ANYBLOB="0c009900030000004d000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x1406, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8d4}, 0x4004004) 931.815922ms ago: executing program 1 (id=6803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') unshare(0x6a040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x400261f3, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200ff0f0000ffdbdf2502cad79077890e6362d9d8d55f1100000008008100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffff00000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x12) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200ff0f0000ffdbdf2502cad79077890e6362d9d8d55f1100000008008100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffff00000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1200000003000000050000000500000008005bf70d5cef0d1a5ff10000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000140)='t'}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000140)='t'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24044890}, 0x1) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24044890}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='block_bio_remap\x00', r6}, 0x18) getpid() (async) r8 = getpid() sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001b19c40d9b13e15f095edfc89faf00d0776edc0c3bdf57", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf254c0000000c00a600f7ffffffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x800) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001b19c40d9b13e15f095edfc89faf00d0776edc0c3bdf57", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf254c0000000c00a600f7ffffffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={r8, r7, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000000a01030000000000000000030000003c00060089f95f7c1aa1cd8fa2786b600477b53a0de5106b34d9b77d8bd45c01a2f714e8653bbf62d3f4bcc1e014bb939cb9d3b2ba9c1c1c70b5511140000000000a01040000000000000000030000000900010073797a30000000001f0006003e6bf5abfff39483d695efdfdee5a40e50bc2c73757dd8c2de4f51002c000000030a01010000000000000000030000050c00024000000000000100030900010073797a3000000000140000001100010000000000000000000000000a"], 0xe4}}, 0x20000000) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0x27}, {&(0x7f0000000200)=""/83, 0xffffffffffffff28}], 0x2}, 0x12000) 908.619858ms ago: executing program 0 (id=6804): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet(r0, &(0x7f0000001280)=""/4096, 0x1000, 0x102, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) listen(r0, 0xea) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4845}, 0x20040000) syz_emit_ethernet(0x1016, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x1, 0x2, [0x88f, 0xd4c, 0x4b4, 0x255]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 759.833615ms ago: executing program 2 (id=6805): r0 = socket(0x11, 0x2, 0x0) close(r0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc0189436, 0x1ffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x2}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0xffffffffffffffe4, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_delroute={0x0, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x7, 0xfd, 0x0, 0xff, 0xa, 0x200}, [@RTA_EXPIRES, @RTA_MARK, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x0, 0x4, 0x9}}, @RTA_EXPIRES={0x0, 0x17, 0x2}, @RTA_PRIORITY={0x0, 0x6, 0x9}, @RTA_MULTIPATH={0x0, 0x9, {0x49, 0x10, 0x2, r5}}, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x0, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}}, @RTA_IIF={0x0, 0x3, r6}, @RTA_ENCAP_TYPE={0x0, 0x15, 0x7}]}, 0x3c}}, 0x4008810) 758.889401ms ago: executing program 3 (id=6806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) 684.101001ms ago: executing program 2 (id=6807): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x2) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 612.015556ms ago: executing program 1 (id=6808): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x5, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x2, {{0xa, 0x4e20, 0x0, @mcast2, 0xde9a}}, {{0xa, 0x4e22, 0x200, @mcast2, 0x80000000}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa8c00defa000086dd6000048e00303a00fe880000000000000000000000000001ff02000000000000000000000000000102000060050006097a3affff01000000000000000000000000000100"/97], 0x0) syz_emit_ethernet(0xc0, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@val={0x88a8, 0x3}, {0x8100, 0x7, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x9}, {0x100, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}], @generic="3c429ee7a1b1b5e31aed7cb06faa7a97d2a2905aacba32d40df6cd6f356512e931ad456b3a743355dd6d3cb83e6538fa5a7efc704ff2a5d92a97d3eada4a8cf4e2226d6f82dc906aaa78fe79db02cd0834f3f6bf337d3e9c180be1a9e270e2e0e8c5240a91aeb99539148730ab38b2d0e20b1b780239f4d5289206dac498584e3b3262bb7f47f256cd250e5290ba7c41e26e55e47265f142189d"}}}}, &(0x7f0000000000)={0x0, 0x3, [0xe83, 0xcfc, 0x1e0, 0xdc8]}) 551.97272ms ago: executing program 3 (id=6809): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x1, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x110, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0xee, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}, "74983ff461078f8aa632253a6d8f6906f61c175d1de5e0ac76c2fc7530cf5a576a00d14b50d48e6fa210669461ff1ad1682e526f9a8963106f97dee6a61a90391822ea0f31d435deb8ed1c56641ec6ebd45c0000000000001b21eed11aba880f0171ba2c8787d040fc04fa458bb4f4fc5cca5a3d26c0306c62f7b5add6f666df3c9ed474f1c95945b076a05e36d9de02e17f7338a878294b14408c836a284bdc7e089fe7c1b042b8b4c5b840ae6df831abb164a62d6526dd292a415998e514d8f08fb44e8100a82acc7180c6b1a520c209d1bf65a208a7808e57a9dee9c6"}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x1, 0x100, @void}}}}}}}, 0x0) (async) syz_emit_ethernet(0x110, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0xee, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}, "74983ff461078f8aa632253a6d8f6906f61c175d1de5e0ac76c2fc7530cf5a576a00d14b50d48e6fa210669461ff1ad1682e526f9a8963106f97dee6a61a90391822ea0f31d435deb8ed1c56641ec6ebd45c0000000000001b21eed11aba880f0171ba2c8787d040fc04fa458bb4f4fc5cca5a3d26c0306c62f7b5add6f666df3c9ed474f1c95945b076a05e36d9de02e17f7338a878294b14408c836a284bdc7e089fe7c1b042b8b4c5b840ae6df831abb164a62d6526dd292a415998e514d8f08fb44e8100a82acc7180c6b1a520c209d1bf65a208a7808e57a9dee9c6"}}}}}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 550.137482ms ago: executing program 0 (id=6810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 549.506027ms ago: executing program 2 (id=6811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @local}, {0x1, @random="54c14790e741"}, 0x0, {0x2, 0x4e23, @remote}, 'pim6reg\x00'}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES16=r1], 0x2e) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 548.8681ms ago: executing program 1 (id=6812): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x4840) 496.744592ms ago: executing program 1 (id=6813): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x2, 0xdda}) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "9e5fe8e5458d5e4a4d6fcc2ea0fa2de00615981b51759c3d175edd97fc7ce2c6543a0c90527110445a9d3535f55cc0657c842cc38a9d8e02321693ce644588d95dddf5198c7edec2e9143a1ae07ed17222e16713ebd4de5a3a3dd64c911d40f922812f6481cb0e6b61f4b49d26749093568bd3b0a293"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004010) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r0, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 409.316242ms ago: executing program 3 (id=6814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x64, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd28, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x8008) 343.825726ms ago: executing program 1 (id=6815): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_crypto(0x10, 0x3, 0x15) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18, 0x4014}, 0x2c0408d0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xfff) (async) listen(r4, 0xfff) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000cebb54fb879ad8dcd703703ee0e0ef6068ba864fc9609f73f926a46f7c306ec016c6ca67503a364bb9a2fe7e53904ff0003bd10e7f84b4433677f9baa5df9f330593a9a7491ed6e1f243f0320f777c21ceab97197832a2bc80b41ea904b7c2670ba865047e6883e75f95e6b6f1b2ba2388a03b3699e40a232d5f872e252e34fddd3672", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x3c}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffff81}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffff81}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newtclass={0x2c, 0x28, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8, 0xb}, {0xe, 0xc}, {0x4, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb6, 0x5}}]}, 0x2c}}, 0x0) 239.296277ms ago: executing program 2 (id=6816): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000015000000000040000000000000000000", @ANYRES32=r1, @ANYBLOB="14000300766574683000"/20], 0x2c}}, 0x4000850) 162.120159ms ago: executing program 4 (id=6817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x105, 0xfffffbff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r4, 0x800442d4, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018100000", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xd1383000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r9) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000380)=r9) 100.133825ms ago: executing program 3 (id=6818): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000002000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x49, 0xe, 0xf, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40, 0x1, 0x2}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000dc0)={0x468, 0x12, 0x8, 0x70bd26, 0x25dfdbfe, {0x25, 0x48, 0x6, 0xc, {0x4e22, 0x4e20, [0x7fff, 0xfffffffc, 0xfffffff0, 0x6f], [0x5, 0x1, 0x8, 0x1], r1, [0x9, 0x8]}, 0x0, 0xffff7fff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "453ac8c5d4f1cb060af7fd2e8ac3cb636f5e27fe79f7a75588d238d73b69c62d805d73b031b59d186a847dabec6571974a54a8d266f1745ce0819bd4b44c6bdcae56522dc48e855ee4f39f6ca0b234dc8bc2a6d9ed9aea5c51508e4acdc29d42016f81adb41a5127df267c7f5189e50874d36f24ca1b92890e2eabf680e7c8df6a7a919f06e5ba0de6516501d7704327d461dffa9f057245264ace4424bcbf2959fcf89c4d08219ed68d5c5ae57a08cb448d5c6af14799caf34bb220bea7bea5f4734fd5d490afc947301c9ad0f108b98014c1d3533f"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "6693104305ce4d6727dc57366308fc9e7ae9236373d6e50ce66e4e11544d0b03e4b730be07926785b64e256a1530c2e65130a355636b8a9b0b06d31e964560b41a05d21bf8969317bcbf7dfdca5a9fd1b8fa959600519c6e13bca62d4f8a553740f515fd5be4f1681e8982edeab7cf05db64b9d206a254be81f1dae9bf08e8444c53ff23b13938fbd7994944685c45e4fb1b8fd6a51d18d14e7d06389840995b6f61186298586600cc70114b7cb583861fb33ec436bb087c019d81ca8e637f5af680229282796092d130a5093319f5925ed29e7c42e129653582489fd8852a0ee4c298700dad1945290b2de4fa2e325fd5f1676f0f10ef79"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "27ac0e526aca994f1803aee9ea4f131b1463d8b3e725eeea1aafe3b1f5c60409c9b7fe6950b555fa48ceb306818f4e74683bdffdf1fac636c0ba1814bdc751315b3613925bda05302b09a11caaf6977993eaf477c0ed7bfcae40de731ef10ca298d4fd5142382475c0f3f6739574899c3db52658e29ce855ef777dfaf5f536b72160ab843bfe0dcf6729af4df7e4e0bd36720718b66f82d938b2f27feed116a134814dc1490f3318ce4a87eb9571bc16ec85c0e1f9"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "38d38b90ed1a88e8cc0b86fb66be2dcf200d2a5dad5428534d2cbb8cf759c164c355fc14a0ecc38fde8086a928c655057c98caca0c437dd1e360bb943b12a624b3479dd1d1eaa1b0f55e09595189bbb7fe1c527a3f2b7949b809202f1199e160391f97dd4021e68667b8044fcb536063af3107349542b26539164cd175db019427e29ea2e56d150c94"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "cc2b271b4cdcefc7047f486caadae70472f97e05bac6bbc863d61d35aa81fa094012be21b4b50e0a81a7624484eac1959f216c5716ea2f50dba5c6a3650a25f99d73914fd99e69976a732f836b8d2940715178da33af0515f1f5726f7db92bb672ec7be3584a61d086e2062d19"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "d5df5546a8a94956732eb8a99c1d659d8c5d978f6f466abee570bb6ea6711c740d4e0fe78d242be67500f4539ea65fdfe4d2b9bd0495dd5b87bf41685fb075deb02c6365aa7d9e54720711f1952d43678562078cf31eb193e0d4e7b40916ad7f3ee4fdb98c0b1be8ae29622b8f74be0bbe131f224b4cbce900a428"}]}, 0x468}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendto(r0, &(0x7f0000000400)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0xffffffffffffff71) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f0000003500)=""/4076, 0xfec}, {&(0x7f0000000000)=""/181, 0xb5}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000c80)=""/271, 0x10f}, {&(0x7f0000000540)=""/82, 0x52}], 0x9}, 0x11}], 0x1, 0x2102, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6}, 0x14, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_virt_wifi\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6}, 0x14, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_virt_wifi\x00'}) 91.363796ms ago: executing program 2 (id=6819): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xef}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ed6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 1 (id=6820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x5) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x3, 0x20000000, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4(r5, &(0x7f0000000240)=@qipcrtr, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.4905'. [ 501.071861][T23064] bridge0: port 3(ipvlan0) entered blocking state [ 501.081223][T23064] bridge0: port 3(ipvlan0) entered disabled state [ 501.088147][T23064] ipvlan0: entered allmulticast mode [ 501.093425][T23064] bridge0: entered allmulticast mode [ 501.100685][T23064] ipvlan0: left allmulticast mode [ 501.106580][T23064] bridge0: left allmulticast mode [ 501.130004][T23078] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.139435][T23078] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 501.150399][T23078] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 501.168951][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4905'. [ 501.444924][ T9347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.815884][T23124] netlink: zone id is out of range [ 501.831248][T23124] netlink: zone id is out of range [ 501.957151][T11116] tipc: Node number set to 2154709032 [ 502.011158][T23139] net_ratelimit: 52 callbacks suppressed [ 502.011176][T23139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.058908][T23141] syzkaller1: entered promiscuous mode [ 502.077710][T23141] syzkaller1: entered allmulticast mode [ 502.465635][T23174] veth0_to_team: entered promiscuous mode [ 502.480200][T23167] netlink: 'syz.4.4936': attribute type 1 has an invalid length. [ 502.545857][ T9342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.791801][T23203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.284606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.360874][T23247] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 503.386160][T23245] netem: change failed [ 503.568459][T23265] 8021q: VLANs not supported on syzkaller1 [ 503.581505][T23263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.664475][ T9347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.925242][ T3544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.946003][T23285] __nla_validate_parse: 12 callbacks suppressed [ 503.946021][T23285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4972'. [ 503.990441][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4972'. [ 504.150568][T23304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 504.165888][T23305] nft_compat: unsupported protocol 1 [ 504.400537][T23322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4983'. [ 504.570936][T23337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.578237][T23337] IPv6: NLM_F_CREATE should be set when creating new route [ 504.585505][T23337] IPv6: NLM_F_CREATE should be set when creating new route [ 504.592732][T23337] IPv6: NLM_F_CREATE should be set when creating new route [ 505.200562][T23385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5000'. [ 505.212760][T23380] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4998'. [ 505.223170][T23385] block nbd6: Unsupported socket: should be TCP or UNIX. [ 505.250822][T23380] netlink: 'syz.3.4998': attribute type 15 has an invalid length. [ 505.277322][T23387] netlink: 'syz.0.5001': attribute type 1 has an invalid length. [ 505.349388][T23395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5001'. [ 505.437316][T23402] xt_hashlimit: invalid rate [ 505.457129][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5001'. [ 505.727263][T23416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.768733][T23423] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5011'. [ 505.795378][T23425] tls_set_device_offload_rx: netdev not found [ 505.817759][T23421] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.5009'. [ 505.843123][T23432] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5011'. [ 505.908573][T23435] wg1: entered promiscuous mode [ 505.915125][ T9347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.923714][T23435] wg1: entered allmulticast mode [ 506.036963][T23445] netlink: 'syz.3.5017': attribute type 1 has an invalid length. [ 506.120307][T23445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 506.144311][T23445] bond9: (slave gretap1): making interface the new active one [ 506.153360][T23445] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 506.261261][T23461] xfrm1: entered promiscuous mode [ 506.266509][T23461] xfrm1: entered allmulticast mode [ 506.390884][T23470] netlink: 'syz.2.5024': attribute type 1 has an invalid length. [ 506.469145][T23471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.477475][T23471] bond5: (slave bond6): making interface the new active one [ 506.489823][T23471] bond5: (slave bond6): Enslaving as an active interface with an up link [ 506.698272][T23484] vlan0: entered allmulticast mode [ 506.999908][T23508] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002 [ 507.069124][T23509] netlink: 'syz.4.5036': attribute type 1 has an invalid length. [ 507.156053][T23509] 8021q: adding VLAN 0 to HW filter on device bond12 [ 507.243551][T23509] bond12: (slave gretap2): making interface the new active one [ 507.256642][T23509] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 507.276713][T23531] bond4: (slave lo): Releasing backup interface [ 507.315217][T23531] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 507.330224][T23531] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 516.726201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 522.137973][T23540] __nla_validate_parse: 74 callbacks suppressed [ 522.137992][T23540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5046'. [ 522.159464][T23545] syzkaller1: entered promiscuous mode [ 522.178197][T23545] syzkaller1: entered allmulticast mode [ 522.465630][T23563] netlink: 'syz.3.5052': attribute type 2 has an invalid length. [ 522.537021][T23565] tipc: Enabled bearer , priority 0 [ 522.549806][T23565] syzkaller0: entered promiscuous mode [ 522.561254][T23565] syzkaller0: entered allmulticast mode [ 522.585419][T23565] tipc: Resetting bearer [ 522.821868][T23564] tipc: Resetting bearer [ 522.909246][T23564] tipc: Disabling bearer [ 523.093924][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5064'. [ 523.114789][T23598] bridge_slave_0: default FDB implementation only supports local addresses [ 523.135050][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5064'. [ 523.154089][T23598] bridge_slave_0: default FDB implementation only supports local addresses [ 523.224434][T23604] syzkaller1: entered promiscuous mode [ 523.240187][T23604] syzkaller1: entered allmulticast mode [ 523.286494][T23604] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 523.318670][T23608] netlink: 'syz.3.5065': attribute type 1 has an invalid length. [ 523.325701][T23603] dvmrp6: entered allmulticast mode [ 523.341892][T23608] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.5065'. [ 523.651993][T23634] netlink: 'syz.3.5072': attribute type 32 has an invalid length. [ 523.662230][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'. [ 523.727797][T23634] bond10: option coupled_control: invalid value (52) [ 523.736983][T23634] bond10 (unregistering): Released all slaves [ 524.389088][T23674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5083'. [ 524.617910][T23687] IPVS: stopping backup sync thread 16159 ... [ 524.773686][T23701] netlink: 'syz.2.5093': attribute type 29 has an invalid length. [ 524.800909][T23701] netlink: 548 bytes leftover after parsing attributes in process `syz.2.5093'. [ 524.954400][T23711] netlink: 'syz.0.5097': attribute type 29 has an invalid length. [ 524.962936][T23711] netlink: 'syz.0.5097': attribute type 29 has an invalid length. [ 524.971841][T23711] netlink: 'syz.0.5097': attribute type 29 has an invalid length. [ 524.982699][T23711] netlink: 'syz.0.5097': attribute type 29 has an invalid length. [ 525.013157][T23711] netlink: 'syz.0.5097': attribute type 29 has an invalid length. [ 525.025111][T23711] netlink: 'syz.0.5097': attribute type 29 has an invalid length. [ 525.429269][T23740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5106'. [ 525.548938][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5106'. [ 525.551641][T23744] 8021q: adding VLAN 0 to HW filter on device bond11 [ 525.567489][T23744] bond10: (slave bond11): Enslaving as an active interface with an up link [ 525.619853][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5106'. [ 525.641765][T23740] bond10 (unregistering): (slave bond11): Releasing backup interface [ 525.675334][T23740] bond10 (unregistering): Released all slaves [ 525.800857][T23761] veth0_to_bridge: entered promiscuous mode [ 526.121091][T23784] block nbd6: Unsupported socket: should be TCP or UNIX. [ 526.313429][T23798] tipc: Enabled bearer , priority 0 [ 526.338804][T23798] syzkaller0: entered promiscuous mode [ 526.361423][T23798] syzkaller0: entered allmulticast mode [ 526.437095][T23798] veth0_to_bridge: mtu greater than device maximum [ 526.457689][T23797] tipc: Resetting bearer [ 526.508624][T23797] tipc: Disabling bearer [ 526.629346][ T30] audit: type=1800 audit(1764806585.175:5): pid=23820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5132" name="memory.events" dev="tmpfs" ino=1970 res=0 errno=0 [ 527.414168][T23877] __nla_validate_parse: 4 callbacks suppressed [ 527.414185][T23877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5149'. [ 527.430085][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 527.432036][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 527.467162][T23877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5149'. [ 527.477143][T23877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5149'. [ 527.503629][T23883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5153'. [ 527.531233][T23884] xt_connbytes: Forcing CT accounting to be enabled [ 528.902022][ T9347] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.933087][ T9347] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.971854][ T9347] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.020182][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5160'. [ 529.188115][T23918] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5165'. [ 529.205833][T23918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5165'. [ 529.219179][T23921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5166'. [ 529.651763][T23942] validate_nla: 5 callbacks suppressed [ 529.651781][T23942] netlink: 'syz.0.5172': attribute type 1 has an invalid length. [ 530.189831][T23959] syz.2.5176 (23959) used obsolete PPPIOCDETACH ioctl [ 530.278863][T23963] bond5 (unregistering): Released all slaves [ 530.389114][T23975] tipc: Enabled bearer , priority 0 [ 530.397844][T23975] syzkaller0: entered promiscuous mode [ 530.403469][T23975] syzkaller0: entered allmulticast mode [ 530.418887][T23975] tipc: Resetting bearer [ 530.436900][T23977] xt_bpf: check failed: parse error [ 530.459100][T23974] tipc: Resetting bearer [ 530.496055][T23974] tipc: Disabling bearer [ 530.747131][T23999] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 530.757602][T23999] gretap1: left promiscuous mode [ 530.759349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.764690][T23999] geneve2: left promiscuous mode [ 530.785479][T24000] netlink: 'syz.0.5187': attribute type 4 has an invalid length. [ 530.795517][T24000] netlink: 'syz.0.5187': attribute type 4 has an invalid length. [ 530.941461][ T9347] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.951320][ T9347] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.972795][ T9347] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.075538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.190021][T24023] netlink: 'syz.2.5195': attribute type 11 has an invalid length. [ 531.429137][T24039] netlink: 'syz.0.5199': attribute type 1 has an invalid length. [ 531.574853][T24052] netlink: 'syz.2.5203': attribute type 1 has an invalid length. [ 531.598148][T24053] netlink: 'syz.0.5205': attribute type 11 has an invalid length. [ 531.636176][T24058] netlink: 'syz.0.5205': attribute type 11 has an invalid length. [ 531.689243][T24052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.371951][T24105] team1: entered promiscuous mode [ 532.377755][T24105] team1: entered allmulticast mode [ 532.457276][T24117] __nla_validate_parse: 18 callbacks suppressed [ 532.457296][T24117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5221'. [ 532.518349][T24119] netlink: 'syz.4.5223': attribute type 1 has an invalid length. [ 532.566988][T24119] 8021q: adding VLAN 0 to HW filter on device bond13 [ 532.581326][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5223'. [ 532.595172][T24119] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5223'. [ 532.786276][T24136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5227'. [ 532.816094][T24136] netlink: 'syz.4.5227': attribute type 11 has an invalid length. [ 532.824747][T24136] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5227'. [ 532.932369][T24149] tc_dump_action: action bad kind [ 532.971452][T24155] tipc: Enabled bearer , priority 0 [ 532.979777][T24155] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 532.990659][T24155] tipc: Resetting bearer [ 533.101603][T24160] xt_socket: unknown flags 0x50 [ 533.127721][T24160] netlink: 'syz.4.5239': attribute type 7 has an invalid length. [ 533.172672][T24175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5242'. [ 533.220297][T24175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 533.381648][T24187] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5245'. [ 533.426664][T24193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5246'. [ 533.577490][T24209] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 533.721131][T24209] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 534.013642][T24243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5259'. [ 534.095947][T24243] bond8 (unregistering): Released all slaves [ 535.204261][T24269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.221151][T24271] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 535.228606][T24273] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 535.251317][ T9342] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.271198][ T9342] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.321131][ T9342] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.341617][ T9342] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.380509][ T9342] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.389077][T24297] "syz.0.5274" (24297) uses obsolete ecb(arc4) skcipher [ 535.397011][ T9342] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.418229][T24299] validate_nla: 4 callbacks suppressed [ 535.418246][T24299] netlink: 'syz.4.5275': attribute type 83 has an invalid length. [ 535.438087][ T9342] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.465109][ T9342] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.491857][T24303] netlink: 'syz.0.5274': attribute type 2 has an invalid length. [ 535.539425][T24303] 9: entered promiscuous mode [ 535.641143][T24314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 535.956068][T24338] netlink: 'syz.0.5288': attribute type 16 has an invalid length. [ 535.984033][T24338] netlink: 'syz.0.5288': attribute type 17 has an invalid length. [ 536.068292][T24338] bridge0: left allmulticast mode [ 536.078256][T24338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.087619][T24338] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.100617][T24338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.538555][T24358] syzkaller0: entered promiscuous mode [ 536.551850][T24358] syzkaller0: entered allmulticast mode [ 536.574863][T24358] netlink: 'syz.4.5294': attribute type 29 has an invalid length. [ 536.602176][T24358] netlink: 'syz.4.5294': attribute type 29 has an invalid length. [ 536.730682][T24376] netlink: 'syz.1.5297': attribute type 6 has an invalid length. [ 537.230050][T24405] xt_ecn: cannot match TCP bits for non-tcp packets [ 537.587762][T24436] __nla_validate_parse: 7 callbacks suppressed [ 537.587778][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5319'. [ 537.640662][T24429] bond14: option lp_interval: invalid value (0) [ 537.650540][T24429] bond14: option lp_interval: allowed values 1 - 2147483647 [ 537.665431][T24429] bond14 (unregistering): Released all slaves [ 537.939134][T24453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5321'. [ 538.077215][T24467] rdma_rxe: rxe_newlink: failed to add bond0 [ 538.621502][T24505] geneve3: entered promiscuous mode [ 538.637075][T24505] geneve3: entered allmulticast mode [ 538.705028][T24515] xt_ecn: cannot match TCP bits for non-tcp packets [ 538.818193][T24521] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 539.459733][T24554] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5352'. [ 539.778455][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5357'. [ 539.827392][T24566] ip6tnl0: entered allmulticast mode [ 540.000105][T24582] nbd: nbd3 already in use [ 540.050249][T24587] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5362'. [ 540.201315][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'. [ 540.375171][T24608] netlink: 'syz.2.5370': attribute type 21 has an invalid length. [ 540.411519][T24611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5371'. [ 540.554913][T24617] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5372'. [ 540.922410][T24645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5382'. [ 540.954853][T24644] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5379'. [ 541.076841][T24655] netlink: 'syz.2.5386': attribute type 1 has an invalid length. [ 541.093260][T24658] netlink: 'syz.4.5388': attribute type 4 has an invalid length. [ 541.145051][T24655] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.170112][T24665] bond8: (slave geneve4): making interface the new active one [ 541.179769][T24665] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 541.200047][T24658] syzkaller1: entered promiscuous mode [ 541.206874][T24658] syzkaller1: entered allmulticast mode [ 541.344506][T24677] netlink: 'syz.2.5392': attribute type 1 has an invalid length. [ 541.466840][T24689] netlink: 'syz.0.5397': attribute type 11 has an invalid length. [ 541.548373][T24688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.556413][T24688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.567990][T24688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.576537][T24688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.615590][T24688] batadv0 (unregistering): left promiscuous mode [ 541.622275][T24688] bridge0: port 3(batadv0) entered disabled state [ 542.520032][T24762] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 542.778885][T24777] netlink: 'syz.1.5422': attribute type 1 has an invalid length. [ 543.152248][T24800] __nla_validate_parse: 3 callbacks suppressed [ 543.152265][T24800] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5431'. [ 543.258748][T24809] sctp: [Deprecated]: syz.1.5434 (pid 24809) Use of int in maxseg socket option. [ 543.258748][T24809] Use struct sctp_assoc_value instead [ 543.275674][T24809] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 543.403370][T24818] netlink: 516 bytes leftover after parsing attributes in process `syz.1.5437'. [ 543.602331][T24834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5440'. [ 544.333332][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5457'. [ 544.508512][T24881] syzkaller0: entered promiscuous mode [ 544.514985][T24881] syzkaller0: entered allmulticast mode [ 544.547998][T24900] tipc: Enabling of bearer rejected, failed to enable media [ 544.689432][T24900] bond14: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 544.710459][T24900] bond14 (unregistering): Released all slaves [ 544.900940][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5466'. [ 544.917718][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5462'. [ 544.955148][T24903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5462'. [ 545.058154][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5467'. [ 545.173010][T24933] netlink: 'syz.0.5469': attribute type 4 has an invalid length. [ 545.277170][T24936] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 545.308714][T24936] bond5 (unregistering): Released all slaves [ 545.530903][T24961] : renamed from bond_slave_0 (while UP) [ 545.563449][T24963] xt_cgroup: path and classid specified [ 545.608239][T24963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.845036][T24980] netlink: 'syz.4.5482': attribute type 29 has an invalid length. [ 545.883627][T24985] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 545.963119][T24992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5485'. [ 546.066948][T24992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5485'. [ 546.600652][T25042] Cannot find del_set index 49151 as target [ 546.808763][T25054] x_tables: duplicate underflow at hook 4 [ 546.909719][T25056] delete_channel: no stack [ 547.442291][T25093] tipc: Enabling of bearer rejected, already enabled [ 547.461491][T25093] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 566.660846][T25140] __nla_validate_parse: 3 callbacks suppressed [ 566.660863][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5526'. [ 566.776291][T25147] sctp: [Deprecated]: syz.2.5530 (pid 25147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.776291][T25147] Use struct sctp_sack_info instead [ 566.836066][T25154] syzkaller1: entered promiscuous mode [ 566.841574][T25154] syzkaller1: entered allmulticast mode [ 566.895950][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5533'. [ 566.997303][T25167] netlink: 'syz.2.5537': attribute type 1 has an invalid length. [ 567.070445][T25167] bond9: Removing last ns target with arp_interval on [ 567.587098][T25206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5554'. [ 567.605908][T25210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.999635][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 568.010313][T25234] netlink: 'syz.3.5563': attribute type 8 has an invalid length. [ 568.052200][T25232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5562'. [ 568.089496][T25241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5564'. [ 568.131262][T25245] netlink: 'syz.2.5567': attribute type 1 has an invalid length. [ 568.147010][T25245] netlink: 'syz.2.5567': attribute type 2 has an invalid length. [ 568.162389][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'. [ 568.229885][T25242] netlink: 'syz.0.5566': attribute type 21 has an invalid length. [ 568.298869][T25258] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5569'. [ 568.365119][T25262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'. [ 568.390235][T25265] netlink: 'syz.2.5573': attribute type 1 has an invalid length. [ 568.398525][T25265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'. [ 568.641704][T25282] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 568.778147][T25291] netlink: 'syz.1.5582': attribute type 1 has an invalid length. [ 569.151334][T25310] IPVS: persistence engine module ip_vs_pe_ not found [ 569.157842][T25311] bond10: entered promiscuous mode [ 569.164682][T25311] 8021q: adding VLAN 0 to HW filter on device bond10 [ 569.248107][T25320] bond10: (slave gtp0): refused to change device type [ 569.406306][T25334] lo: entered allmulticast mode [ 569.420266][T25334] lo: left allmulticast mode [ 569.476117][T25341] netlink: 'syz.0.5599': attribute type 1 has an invalid length. [ 569.508696][T25340] xt_policy: output policy not valid in PREROUTING and INPUT [ 569.541709][T25341] bond11: entered promiscuous mode [ 569.547122][T25341] bond11: entered allmulticast mode [ 569.553121][T25341] 8021q: adding VLAN 0 to HW filter on device bond11 [ 569.622733][T25350] netlink: 'syz.1.5602': attribute type 11 has an invalid length. [ 569.767832][T25359] syzkaller0: entered promiscuous mode [ 569.777762][T25359] syzkaller0: entered allmulticast mode [ 569.814540][T25359] block nbd4: NBD_DISCONNECT [ 569.819286][T25359] block nbd4: Send disconnect failed -32 [ 569.825258][T25359] block nbd4: shutting down sockets [ 569.868041][T25364] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 569.877912][T25364] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 569.913596][T25367] 0: reclassify loop, rule prio 0, protocol 800 [ 569.961340][T25365] tipc: Enabling of bearer rejected, already enabled [ 569.971036][T25373] netlink: 'syz.3.5611': attribute type 9 has an invalid length. [ 569.972736][T25365] sit0: mtu less than device minimum [ 570.131735][T25375] bond5: entered allmulticast mode [ 570.162336][T25375] openvswitch: netlink: Duplicate or invalid key (type 0). [ 570.199140][T25375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.226816][T25375] ip6gretap1: entered allmulticast mode [ 570.235148][T25375] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 570.458971][T25399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.029079][T25444] netlink: 'syz.1.5628': attribute type 1 has an invalid length. [ 571.080634][T25444] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.108694][T25447] macvlan4: entered promiscuous mode [ 571.146016][T25447] macvlan4: entered allmulticast mode [ 571.151837][T25447] bond6: entered allmulticast mode [ 571.157212][T25447] bond6: entered promiscuous mode [ 571.172484][T25447] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 571.238814][T25447] team0: Port device macvlan4 added [ 571.898571][T25502] IPVS: Unknown mcast interface: nicvf0 [ 571.908528][T25504] __nla_validate_parse: 21 callbacks suppressed [ 571.908544][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5645'. [ 571.958623][T25502] syzkaller1: entered promiscuous mode [ 571.974003][T25502] syzkaller1: entered allmulticast mode [ 572.315932][T25528] netlink: 'syz.2.5653': attribute type 1 has an invalid length. [ 572.324165][T25529] netlink: 'syz.2.5653': attribute type 1 has an invalid length. [ 572.395686][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 572.428685][T25535] netlink: 'syz.1.5655': attribute type 4 has an invalid length. [ 572.437619][T25535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5655'. [ 572.450410][T25535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5655'. [ 572.671394][T25547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.917493][T25559] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 572.941684][T25559] tipc: Enabled bearer , priority 10 [ 573.111229][ T9345] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.136464][ T9345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.196290][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.206649][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.217421][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.226624][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.237557][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.281475][ T9345] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.296760][ T9345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.308601][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.318054][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.325784][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.334135][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.338476][T25579] netlink: 'syz.1.5668': attribute type 9 has an invalid length. [ 573.349458][T25579] netlink: 'syz.1.5668': attribute type 11 has an invalid length. [ 573.358101][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.358108][T25579] netlink: 'syz.1.5668': attribute type 12 has an invalid length. [ 573.358125][T25579] netlink: 152824 bytes leftover after parsing attributes in process `syz.1.5668'. [ 573.408675][ T9345] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.436105][ T9345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.491229][ T9345] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.511897][ T9345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.785338][ T9345] team0: left allmulticast mode [ 573.790418][ T9345] geneve0: left allmulticast mode [ 573.795677][ T9345] team0: left promiscuous mode [ 573.800628][ T9345] geneve0: left promiscuous mode [ 573.807555][ T9345] bridge0: port 1(team0) entered disabled state [ 574.042591][T25598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5676'. [ 574.103561][T25603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5677'. [ 574.226823][ T9345] bond12 (unregistering): (slave gretap2): Releasing active interface [ 574.287540][ T9345] team0: Port device geneve0 removed [ 574.366825][ T9345] team0: Port device bridge1 removed [ 574.548051][ T9345] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 574.561076][ T9345] bond0 (unregistering): Released all slaves [ 574.589224][ T9345] bond1 (unregistering): Released all slaves [ 574.697777][ T9345] bond2 (unregistering): Released all slaves [ 574.796649][ T9345] bond3 (unregistering): Released all slaves [ 574.895238][ T9345] bond4 (unregistering): (slave veth9): Releasing active interface [ 574.905456][ T9345] bond4 (unregistering): Released all slaves [ 575.001463][ T9345] bond5 (unregistering): Released all slaves [ 575.097598][ T9345] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 575.108448][ T9345] bond6 (unregistering): Released all slaves [ 575.213034][ T9345] bond7 (unregistering): Released all slaves [ 575.226529][ T9345] bond8 (unregistering): Released all slaves [ 575.239119][ T9345] bond9 (unregistering): Released all slaves [ 575.333695][ T9345] bond10 (unregistering): Released all slaves [ 575.346523][ T9345] bond11 (unregistering): Released all slaves [ 575.445553][ T9345] bond12 (unregistering): Released all slaves [ 575.454040][ T52] Bluetooth: hci4: command tx timeout [ 575.542230][ T9345] bond13 (unregistering): Released all slaves [ 575.580717][T25575] chnl_net:caif_netlink_parms(): no params data found [ 575.690360][T25607] delete_channel: no stack [ 575.713366][T25607] netlink: 'syz.0.5678': attribute type 1 has an invalid length. [ 575.959301][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.994225][T25575] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.002687][T25575] bridge_slave_0: entered allmulticast mode [ 576.011634][T25575] bridge_slave_0: entered promiscuous mode [ 576.020647][T25575] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.028043][T25575] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.036245][T25575] bridge_slave_1: entered allmulticast mode [ 576.046295][T25575] bridge_slave_1: entered promiscuous mode [ 576.056126][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5683'. [ 576.114715][T25575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.132168][T25575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.168674][T25646] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5679'. [ 576.202707][T25646] 0{X: renamed from gretap0 (while UP) [ 576.212100][T25646] 0{X: entered allmulticast mode [ 576.219202][T25646] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 576.238656][T25575] team0: Port device team_slave_0 added [ 576.255314][T25575] team0: Port device team_slave_1 added [ 576.282493][T25575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.289613][T25575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.316306][T25575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.329604][T25575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.336590][T25575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.363055][T25575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.405271][T25575] hsr_slave_0: entered promiscuous mode [ 576.411664][T25575] hsr_slave_1: entered promiscuous mode [ 576.418275][T25575] debugfs: 'hsr0' already exists in 'hsr' [ 576.424536][T25575] Cannot create hsr debugfs directory [ 576.894111][T25657] gtp0: entered promiscuous mode [ 576.903818][T25657] gtp0: entered allmulticast mode [ 577.173703][T25575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 577.218741][T25575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 577.248152][T25575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 577.298871][T25688] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5695'. [ 577.299605][T25575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 577.312345][T25688] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5695'. [ 577.327076][T25688] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5695'. [ 577.337356][T25688] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5695'. [ 577.348730][T25688] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5695'. [ 577.371855][ T9345] tipc: Left network mode [ 577.459399][T25686] syzkaller0: entered promiscuous mode [ 577.465546][T25686] syzkaller0: entered allmulticast mode [ 577.524371][ T52] Bluetooth: hci4: command tx timeout [ 577.562444][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5699'. [ 577.622552][T25692] syzkaller0: left promiscuous mode [ 577.628804][T25692] syzkaller0: left allmulticast mode [ 579.151300][T25727] bridge4: entered promiscuous mode [ 579.157059][T25727] bridge4: entered allmulticast mode [ 579.166098][T25727] team0: Port device bridge4 added [ 579.173629][T25731] bridge0: port 3(team0) entered blocking state [ 579.181181][T25731] bridge0: port 3(team0) entered disabled state [ 579.188012][T25731] team0: entered allmulticast mode [ 579.193148][T25731] team_slave_0: entered allmulticast mode [ 579.200552][T25731] team_slave_1: entered allmulticast mode [ 579.208855][T25731] team0: entered promiscuous mode [ 579.214823][T25731] team_slave_0: entered promiscuous mode [ 579.220905][T25731] team_slave_1: entered promiscuous mode [ 579.300481][T25739] netlink: 'syz.1.5707': attribute type 1 has an invalid length. [ 579.336487][ T9345] hsr_slave_0: left promiscuous mode [ 579.346130][ T9345] hsr_slave_1: left promiscuous mode [ 579.360965][ T9345] veth1_macvtap: left promiscuous mode [ 579.368521][ T9345] veth0_macvtap: left promiscuous mode [ 579.375205][ T9345] veth1_vlan: left promiscuous mode [ 579.380772][ T9345] veth0_vlan: left promiscuous mode [ 579.517727][ T9345] pimreg3 (unregistering): left allmulticast mode [ 579.605369][ T52] Bluetooth: hci4: command tx timeout [ 579.620984][ T9345] vlan1 (unregistering): left allmulticast mode [ 579.628183][ T9345] veth0_vlan (unregistering): left allmulticast mode [ 580.132045][T25739] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 580.311483][T25575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.321148][T25752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5710'. [ 580.400479][T25757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5712'. [ 580.401448][T25575] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.416623][T25757] netlink: 'syz.0.5712': attribute type 11 has an invalid length. [ 580.429524][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.436696][ T9342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.460993][T25757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5712'. [ 580.519316][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.526508][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.540083][T25757] netlink: 'syz.0.5712': attribute type 11 has an invalid length. [ 580.557980][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5713'. [ 580.650708][T25770] dvmrp0: left allmulticast mode [ 580.856047][ T9345] IPVS: stop unused estimator thread 0... [ 580.876674][T25774] x_tables: unsorted entry at hook 2 [ 580.895523][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 580.904089][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 580.911386][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 580.997709][T25774] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 581.041611][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.050535][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.061193][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.070160][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.078556][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.087798][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.100279][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.108826][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.118181][T25774] syzkaller0 speed is unknown, defaulting to 1000 [ 581.203431][T25575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.369840][T25802] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 581.684602][ T52] Bluetooth: hci4: command tx timeout [ 581.717652][T25575] veth0_vlan: entered promiscuous mode [ 581.735590][T25575] veth1_vlan: entered promiscuous mode [ 581.777623][T25575] veth0_macvtap: entered promiscuous mode [ 581.798035][T25575] veth1_macvtap: entered promiscuous mode [ 581.824468][T25575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.842508][T25575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.874829][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.893773][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.908063][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.923074][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.143783][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.174129][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.268292][ T9342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.277130][ T9342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.359452][T25856] __nla_validate_parse: 2 callbacks suppressed [ 582.359470][T25856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5735'. [ 582.427142][T25856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5735'. [ 582.662204][T25880] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 583.108044][T25900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.140117][T25900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5743'. [ 583.216110][T25903] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5744'. [ 583.226409][T25903] openvswitch: netlink: Flow key attr not present in new flow. [ 583.287978][ T9337] tipc: Resetting bearer [ 583.321448][T25908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 583.347266][T25910] netlink: 'syz.4.5746': attribute type 4 has an invalid length. [ 583.719458][T25929] IPv6: NLM_F_CREATE should be specified when creating new route [ 584.473197][T25962] syzkaller0 speed is unknown, defaulting to 1000 [ 584.649719][T25979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5770'. [ 584.659818][T25977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5771'. [ 584.701515][T25979] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5770'. [ 584.764676][T25984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5772'. [ 584.798280][T25985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5772'. [ 584.867840][T25981] bond12: entered promiscuous mode [ 584.873341][T25981] bond12: entered allmulticast mode [ 584.879916][T25981] 8021q: adding VLAN 0 to HW filter on device bond12 [ 585.141586][T26008] xt_l2tp: missing protocol rule (udp|l2tpip) [ 585.159673][T26008] bond0: entered allmulticast mode [ 585.169028][T26008] bond_slave_0: entered allmulticast mode [ 585.184190][T26008] bond_slave_1: entered allmulticast mode [ 585.288813][T26014] Unsupported ieee802154 address type: 0 [ 585.612325][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5795'. [ 585.780059][T26055] netlink: 'syz.4.5798': attribute type 4 has an invalid length. [ 585.919881][T26061] netlink: 'syz.2.5800': attribute type 33 has an invalid length. [ 586.449150][T26100] 0: reclassify loop, rule prio 0, protocol 800 [ 586.570715][T26114] : renamed from bond_slave_0 (while UP) [ 587.186749][T26107] netlink: 'syz.3.5810': attribute type 3 has an invalid length. [ 587.196082][T26107] netlink: 'syz.3.5810': attribute type 1 has an invalid length. [ 587.388640][T26134] __nla_validate_parse: 6 callbacks suppressed [ 587.388658][T26134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5817'. [ 587.433069][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5817'. [ 587.443317][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5817'. [ 587.630620][T26149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5825'. [ 587.682358][T26157] netlink: 'syz.1.5823': attribute type 83 has an invalid length. [ 587.786351][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5829'. [ 587.871983][T26162] wireguard0: entered promiscuous mode [ 587.879016][T26162] wireguard0: entered allmulticast mode [ 587.893047][T26162] team0: Device wireguard0 is of different type [ 587.956473][T26171] tipc: Enabling of bearer rejected, failed to enable media [ 588.078020][T26171] sctp: [Deprecated]: syz.1.5831 (pid 26171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.078020][T26171] Use struct sctp_sack_info instead [ 588.339068][T26207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5836'. [ 588.350461][T26210] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5839'. [ 588.461236][T26215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5840'. [ 588.542521][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5841'. [ 588.954038][T26239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5846'. [ 589.014893][T26248] team_slave_1: entered allmulticast mode [ 589.298047][T26279] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 589.571938][T26296] block nbd4: Unsupported socket: should be TCP or UNIX. [ 589.589717][T26281] veth0: entered promiscuous mode [ 589.643519][T26281] veth0 (unregistering): left promiscuous mode [ 589.720237][T26295] syzkaller0: entered promiscuous mode [ 589.726761][T26295] syzkaller0: entered allmulticast mode [ 590.000679][T26308] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.323447][T26323] dvmrp6: entered allmulticast mode [ 590.524884][T26335] netlink: 'syz.2.5875': attribute type 11 has an invalid length. [ 590.550594][T26340] netlink: 'syz.0.5877': attribute type 10 has an invalid length. [ 590.688622][T26345] syzkaller1: entered promiscuous mode [ 590.703268][T26345] syzkaller1: entered allmulticast mode [ 591.147145][T26379] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 591.149251][T26380] netlink: 'syz.0.5894': attribute type 1 has an invalid length. [ 591.154923][T26379] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 591.197636][T26380] 8021q: adding VLAN 0 to HW filter on device bond13 [ 591.221305][T26380] vlan0: entered allmulticast mode [ 591.227220][T26380] bond13: entered allmulticast mode [ 591.248844][T26380] bond13: (slave gretap3): making interface the new active one [ 591.256527][T26380] gretap3: entered allmulticast mode [ 591.267223][T26380] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 591.868318][T26433] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.877851][T26433] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.896176][T26437] netlink: 'syz.2.5908': attribute type 16 has an invalid length. [ 591.896705][T26434] netlink: 'syz.2.5908': attribute type 16 has an invalid length. [ 591.921750][T26436] netlink: 'syz.0.5909': attribute type 1 has an invalid length. [ 591.928582][T26437] netlink: 'syz.2.5908': attribute type 17 has an invalid length. [ 591.934922][T26433] tipc: Resetting bearer [ 591.949205][T26434] netlink: 'syz.2.5908': attribute type 17 has an invalid length. [ 591.958177][T26433] tipc: Resetting bearer [ 592.028840][ T9347] tipc: Resetting bearer [ 592.076010][T26436] 8021q: adding VLAN 0 to HW filter on device bond14 [ 592.104290][T26437] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.115179][T26447] openvswitch: netlink: IP tunnel TTL not specified. [ 592.126366][T26437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.134539][T26454] openvswitch: netlink: IP tunnel TTL not specified. [ 592.185291][T26434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.310858][T26451] bond14: (slave ip6erspan0): making interface the new active one [ 592.321158][T26451] bond14: (slave ip6erspan0): Enslaving as an active interface with an up link [ 592.350929][T26460] bond0: entered promiscuous mode [ 592.356590][T26460] : entered promiscuous mode [ 592.361689][T26460] bond_slave_1: entered promiscuous mode [ 592.372356][T26460] mac80211_hwsim hwsim33 : entered promiscuous mode [ 592.395309][T26462] sctp: [Deprecated]: syz.4.5915 (pid 26462) Use of int in max_burst socket option. [ 592.395309][T26462] Use struct sctp_assoc_value instead [ 592.561890][T26470] __nla_validate_parse: 16 callbacks suppressed [ 592.561909][T26470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5918'. [ 592.615894][T26467] openvswitch: netlink: IP tunnel dst address not specified [ 592.625457][T26467] netlink: zone id is out of range [ 592.630591][T26467] netlink: del zone limit has 4 unknown bytes [ 592.639837][T26467] v: renamed from ipvlan1 (while UP) [ 592.647782][T26467] tipc: Disabling bearer [ 592.705389][T26474] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5919'. [ 592.912679][T26491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5920'. [ 592.967650][T26493] gtp4: entered promiscuous mode [ 592.972651][T26493] gtp4: entered allmulticast mode [ 593.046207][T26497] netlink: 'syz.0.5924': attribute type 1 has an invalid length. [ 593.122488][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'. [ 593.137313][T26504] bond15: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 593.154446][T26497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5924'. [ 593.166095][T26497] 8021q: adding VLAN 0 to HW filter on device bond15 [ 593.175185][ T12] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 593.267485][T26510] ip6gre0: entered allmulticast mode [ 593.273366][T26510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5928'. [ 593.317576][ T9347] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 593.540158][T26523] tipc: Enabling of bearer rejected, failed to enable media [ 593.742969][T26534] 0{X: left allmulticast mode [ 593.783296][T26534] ip6tnl0: left allmulticast mode [ 593.802372][T26534] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.810119][T26534] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.855457][T26534] bond0: left allmulticast mode [ 593.868634][T26534] : left allmulticast mode [ 593.876316][T26534] bond_slave_1: left allmulticast mode [ 594.007308][T26534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 594.126038][T26571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5947'. [ 594.162830][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5947'. [ 594.449709][T26596] tipc: Enabled bearer , priority 0 [ 594.611848][T26602] bond1: down delay (2) is not a multiple of miimon (5), value rounded to 0 ms [ 594.630087][T26596] syzkaller0: entered promiscuous mode [ 594.636687][T26596] syzkaller0: entered allmulticast mode [ 594.645794][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'. [ 594.684995][T26596] tipc: Resetting bearer [ 594.688051][T26616] set match dimension is over the limit! [ 594.692537][T26596] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5956'. [ 594.711737][T26595] tipc: Resetting bearer [ 594.732674][T26595] tipc: Disabling bearer [ 594.869286][T26619] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 594.918839][T26619] tipc: New replicast peer: 255.255.255.255 [ 594.933559][T26619] tipc: Enabled bearer , priority 10 [ 595.162925][T26631] netlink: 'syz.2.5967': attribute type 1 has an invalid length. [ 595.183445][T26630] netlink: 'syz.2.5967': attribute type 1 has an invalid length. [ 595.415507][T26650] netlink: 'syz.3.5970': attribute type 1 has an invalid length. [ 595.447945][T26650] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004 [ 595.705872][T26649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.057894][T26689] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 596.066498][T26689] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 596.167091][T26693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.178038][T26693] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 596.208583][T26693] bond2: entered allmulticast mode [ 596.262768][T26693] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 596.429181][T26671] validate_nla: 2 callbacks suppressed [ 596.429199][T26671] netlink: 'syz.2.5977': attribute type 8 has an invalid length. [ 596.436537][T26708] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 597.042211][T26738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.095916][T26750] netlink: 'syz.3.5995': attribute type 8 has an invalid length. [ 597.291789][T26738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.451039][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.462521][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.463788][T26738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.480999][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.489558][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.504891][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.609591][T26738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.672876][T26767] syzkaller0 speed is unknown, defaulting to 1000 [ 597.860960][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.874042][T26787] __nla_validate_parse: 10 callbacks suppressed [ 597.874058][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6006'. [ 597.898198][T26794] netlink: 'syz.0.6008': attribute type 1 has an invalid length. [ 597.908237][T26794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6008'. [ 597.926534][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.043128][ T9337] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.052327][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6010'. [ 598.061672][T26805] netlink: 'syz.3.6010': attribute type 11 has an invalid length. [ 598.067839][T26804] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6011'. [ 598.115230][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6010'. [ 598.124983][ T9337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.140264][T26805] netlink: 'syz.3.6010': attribute type 11 has an invalid length. [ 598.300063][T26767] chnl_net:caif_netlink_parms(): no params data found [ 598.402100][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6016'. [ 598.657319][T26767] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.675359][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.682652][T26767] bridge_slave_0: entered allmulticast mode [ 598.697371][T26767] bridge_slave_0: entered promiscuous mode [ 598.705397][T26843] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6026'. [ 598.707817][T26767] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.722154][T26767] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.727963][T26845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6025'. [ 598.731245][T26767] bridge_slave_1: entered allmulticast mode [ 598.746246][T26767] bridge_slave_1: entered promiscuous mode [ 598.867504][T26767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.914938][T26767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.931590][T26854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6028'. [ 599.006162][T26767] team0: Port device team_slave_0 added [ 599.026992][T26767] team0: Port device team_slave_1 added [ 599.118333][T26767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.127977][T26767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.156289][T26767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.206084][T26767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.258641][T26767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.291048][T26767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.343608][T26879] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 599.446786][T26767] hsr_slave_0: entered promiscuous mode [ 599.453734][T26767] hsr_slave_1: entered promiscuous mode [ 599.457444][T26885] netlink: 'syz.2.6039': attribute type 1 has an invalid length. [ 599.460884][T26767] debugfs: 'hsr0' already exists in 'hsr' [ 599.473178][T26767] Cannot create hsr debugfs directory [ 599.506822][T26885] 8021q: adding VLAN 0 to HW filter on device bond12 [ 599.604796][ T52] Bluetooth: hci1: command tx timeout [ 599.637434][T26897] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6041'. [ 599.980122][T26915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 599.990625][T26908] tipc: Resetting bearer [ 600.002630][T26908] tipc: Resetting bearer [ 600.035082][T26911] netlink: 'syz.0.6046': attribute type 16 has an invalid length. [ 600.061805][T26911] netlink: 'syz.0.6046': attribute type 17 has an invalid length. [ 600.096653][ T9323] net_ratelimit: 2 callbacks suppressed [ 600.096672][ T9323] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.116033][T26911] bond0: left allmulticast mode [ 600.121021][T26911] bond_slave_0: left allmulticast mode [ 600.130464][T26911] bond_slave_1: left allmulticast mode [ 600.141692][T26911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.158341][T26912] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 600.167426][ T9323] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.172037][T26912] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 600.194787][ T9347] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.234818][ T9323] bond15: (slave ip6gretap1): link status up again after 0 ms [ 600.242337][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.384031][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.484379][T26940] netlink: 'syz.3.6058': attribute type 1 has an invalid length. [ 600.495013][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.644213][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.668701][T26767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 600.713308][T26955] netlink: 'syz.2.6062': attribute type 21 has an invalid length. [ 600.713545][T26954] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 600.738936][T26954] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 600.746788][T26767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.770256][T26767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.793918][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 600.802058][T26767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.866410][T26967] erspan0: entered allmulticast mode [ 601.139793][T26767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.166983][T26990] tipc: Invalid UDP bearer configuration [ 601.167031][T26990] tipc: Enabling of bearer rejected, failed to enable media [ 601.199213][T26767] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.275002][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.282149][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.299814][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.306990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.472147][T27007] tipc: Resetting bearer [ 601.490887][T27007] netem: change failed [ 601.527513][T27007] tipc: Enabling of bearer rejected, already enabled [ 601.684663][ T52] Bluetooth: hci1: command tx timeout [ 601.766675][T26767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.819928][T26767] veth0_vlan: entered promiscuous mode [ 601.838730][T26767] veth1_vlan: entered promiscuous mode [ 601.877166][T26767] veth0_macvtap: entered promiscuous mode [ 601.899488][T26767] veth1_macvtap: entered promiscuous mode [ 601.927740][T26767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.949600][T26767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.968345][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.011975][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.023193][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.037530][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.149036][T27040] validate_nla: 2 callbacks suppressed [ 602.149054][T27040] netlink: 'syz.4.6087': attribute type 21 has an invalid length. [ 602.239274][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.264698][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.363148][ T9323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.376809][ T9323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.961139][T27092] __nla_validate_parse: 12 callbacks suppressed [ 602.961156][T27092] netlink: 388 bytes leftover after parsing attributes in process `syz.3.6102'. [ 603.020918][T27099] netlink: 'syz.1.6105': attribute type 2 has an invalid length. [ 603.067865][T27099] xt_TPROXY: Can be used only with -p tcp or -p udp [ 603.130251][T27103] netlink: 'syz.0.6106': attribute type 30 has an invalid length. [ 603.211323][T27103] bond16: option arp_missed_max: invalid value (0) [ 603.219055][T27103] bond16: option arp_missed_max: allowed values 1 - 255 [ 603.279006][T27103] bond16 (unregistering): Released all slaves [ 603.351811][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 603.398100][T27118] bond0: entered promiscuous mode [ 603.412556][T27118] : entered promiscuous mode [ 603.425870][T27118] bond_slave_1: entered promiscuous mode [ 603.450838][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'. [ 603.463718][T27118] bond0: left promiscuous mode [ 603.470036][T27118] : left promiscuous mode [ 603.480409][T27118] bond_slave_1: left promiscuous mode [ 603.628706][T27128] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 603.755164][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6117'. [ 603.768494][ T52] Bluetooth: hci1: command tx timeout [ 603.880332][T27148] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6121'. [ 603.906190][T27148] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6121'. [ 603.962681][T27148] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6121'. [ 604.178422][T27166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6127'. [ 604.298147][T27179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6130'. [ 604.486986][T27190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6134'. [ 604.553148][T11756] IPVS: starting estimator thread 0... [ 604.580199][T27193] IPVS: ip_vs_edit_dest(): server weight less than zero [ 604.654840][T27195] IPVS: using max 28 ests per chain, 67200 per kthread [ 604.672047][T27203] netlink: 'syz.2.6137': attribute type 2 has an invalid length. [ 604.730146][T27205] IPv6: sit3: Disabled Multicast RS [ 604.750368][T27205] sit3: entered allmulticast mode [ 604.779782][T27202] netlink: 'syz.0.6138': attribute type 4 has an invalid length. [ 605.186359][T27230] netlink: 'syz.2.6147': attribute type 2 has an invalid length. [ 605.207096][T27234] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 605.224844][T27234] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 605.242873][T27234] gretap0: entered promiscuous mode [ 605.252944][T27234] gretap0: entered allmulticast mode [ 605.275497][T27237] netem: change failed [ 605.280750][T27241] netlink: 'syz.2.6152': attribute type 10 has an invalid length. [ 605.304230][ T9337] net_ratelimit: 29 callbacks suppressed [ 605.304249][ T9337] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 605.439135][T27248] netlink: 'syz.1.6155': attribute type 4 has an invalid length. [ 605.449022][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 605.459360][T27250] netlink: 'syz.2.6156': attribute type 1 has an invalid length. [ 605.491823][T27256] netlink: 'syz.1.6155': attribute type 4 has an invalid length. [ 605.511228][T27250] 8021q: adding VLAN 0 to HW filter on device bond13 [ 605.556120][T27250] bond13: (slave ip6gretap1): making interface the new active one [ 605.570735][T27250] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 605.607364][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 605.784706][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 605.844295][ T52] Bluetooth: hci1: command tx timeout [ 605.894465][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 606.005345][ T9337] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 606.115279][ T9342] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 606.234014][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 606.265557][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.276120][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.284871][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.294892][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.302618][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 606.344063][ T9337] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 606.359030][T27291] syzkaller0 speed is unknown, defaulting to 1000 [ 606.455457][ T9337] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 606.609633][T27303] syzkaller1: entered promiscuous mode [ 606.615803][T27303] syzkaller1: entered allmulticast mode [ 606.655942][T27291] chnl_net:caif_netlink_parms(): no params data found [ 606.778557][T27291] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.791019][T27291] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.798569][T27291] bridge_slave_0: entered allmulticast mode [ 606.807944][T27291] bridge_slave_0: entered promiscuous mode [ 606.817776][T27291] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.825694][T27291] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.833049][T27291] bridge_slave_1: entered allmulticast mode [ 606.841350][T27291] bridge_slave_1: entered promiscuous mode [ 606.931926][T27291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.961810][T27291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.000592][T27291] team0: Port device team_slave_0 added [ 607.037745][T27291] team0: Port device team_slave_1 added [ 607.098914][T27318] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 607.124205][T27291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.137191][T27291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.264228][T27291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.306142][T27291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.313205][T27291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.372799][T27291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.580943][T27313] bridge2: entered promiscuous mode [ 607.587976][T27313] bridge2: entered allmulticast mode [ 607.602036][T27344] lo speed is unknown, defaulting to 1000 [ 607.620489][T27291] hsr_slave_0: entered promiscuous mode [ 607.629352][T27291] hsr_slave_1: entered promiscuous mode [ 607.636849][T27291] debugfs: 'hsr0' already exists in 'hsr' [ 607.642719][T27291] Cannot create hsr debugfs directory [ 607.678107][T27344] lo speed is unknown, defaulting to 1000 [ 607.736502][T27344] lo speed is unknown, defaulting to 1000 [ 607.773049][T27354] tipc: Enabling of bearer rejected, failed to enable media [ 607.997315][T27344] infiniband sz1: set down [ 608.003073][T27344] infiniband sz1: added lo [ 608.017782][ T5883] lo speed is unknown, defaulting to 1000 [ 608.126398][T27344] RDS/IB: sz1: added [ 608.152745][T27344] smc: adding ib device sz1 with port count 1 [ 608.170956][T27344] smc: ib device sz1 port 1 has no pnetid [ 608.219554][ T5833] lo speed is unknown, defaulting to 1000 [ 608.228198][T27344] lo speed is unknown, defaulting to 1000 [ 608.324030][ T52] Bluetooth: hci3: command tx timeout [ 608.398895][T27291] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.434446][T27291] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.565522][T27291] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.575602][T27291] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.705746][T27291] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.724262][T27291] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.852214][T27291] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.908332][T27291] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.945393][T27397] __nla_validate_parse: 77 callbacks suppressed [ 608.945410][T27397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6197'. [ 608.971282][T27344] lo speed is unknown, defaulting to 1000 [ 608.972679][ T9342] bridge_slave_0: left allmulticast mode [ 608.989955][ T9342] bridge_slave_0: left promiscuous mode [ 609.005990][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.496858][ T9342] bond4 (unregistering): (slave gretap3): Releasing active interface [ 609.551841][ T9342] dvmrp0 (unregistering): left allmulticast mode [ 610.114945][ T9342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.126857][ T9342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.138489][ T9342] bond0 (unregistering): Released all slaves [ 610.241581][ T9342] bond1 (unregistering): Released all slaves [ 610.255139][ T9342] bond2 (unregistering): Released all slaves [ 610.267972][ T9342] bond3 (unregistering): Released all slaves [ 610.287785][ T9342] bond4 (unregistering): Released all slaves [ 610.303737][ T9342] bond5 (unregistering): Released all slaves [ 610.318958][T27401] netlink: 'syz.2.6198': attribute type 29 has an invalid length. [ 610.407136][ T52] Bluetooth: hci3: command tx timeout [ 610.431537][ T9337] net_ratelimit: 11 callbacks suppressed [ 610.431556][ T9337] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 610.460040][T27344] lo speed is unknown, defaulting to 1000 [ 610.466792][ T9342] tipc: Left network mode [ 610.560281][T27424] xt_cgroup: path and classid specified [ 610.572456][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 610.857314][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 610.915299][T27436] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6204'. [ 610.943328][T27440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6205'. [ 610.984496][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 611.033615][T27291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 611.096009][T27291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 611.147867][T27447] netlink: 'syz.1.6207': attribute type 1 has an invalid length. [ 611.172088][T27291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 611.196525][T27344] lo speed is unknown, defaulting to 1000 [ 611.263020][T27447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.275095][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 611.331774][T27447] vlan2: entered allmulticast mode [ 611.347482][T27447] bond1: entered allmulticast mode [ 611.412526][T27291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 611.462617][T27450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.470194][T27450] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 611.483013][T27450] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 611.525981][T27453] veth3: entered promiscuous mode [ 611.535575][T27453] bond1: (slave veth3): Enslaving as an active interface with a down link [ 611.568478][T27460] bond2: option mode: unable to set because the bond device has slaves [ 611.666884][T27470] netlink: 'syz.4.6211': attribute type 2 has an invalid length. [ 611.674696][T27344] lo speed is unknown, defaulting to 1000 [ 611.686099][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 611.722878][T27473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.802056][T27476] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6213'. [ 611.906563][T27482] xt_recent: Unsupported userspace flags (000000b1) [ 611.980335][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 612.142306][T27291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.166025][T27493] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 612.194546][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 612.282746][T27291] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.305367][T27505] sctp: [Deprecated]: syz.2.6219 (pid 27505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.305367][T27505] Use struct sctp_sack_info instead [ 612.353399][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.360612][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.381145][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.388350][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.438414][T27344] lo speed is unknown, defaulting to 1000 [ 612.460817][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 612.486725][ T52] Bluetooth: hci3: command tx timeout [ 612.777505][T27525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.982913][T27291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.002730][T27344] lo speed is unknown, defaulting to 1000 [ 613.097129][T27291] veth0_vlan: entered promiscuous mode [ 613.147334][T27291] veth1_vlan: entered promiscuous mode [ 613.206922][T27545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6226'. [ 613.276233][T27291] veth0_macvtap: entered promiscuous mode [ 613.298017][T27291] veth1_macvtap: entered promiscuous mode [ 613.333265][T27549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6227'. [ 613.540717][T27291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.598680][T27291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.677448][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.750639][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.766720][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.790652][T27344] lo speed is unknown, defaulting to 1000 [ 613.841617][T27566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6230'. [ 613.846525][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.862562][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6230'. [ 613.957865][T27566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6230'. [ 613.980905][ T9323] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.993075][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6230'. [ 614.010989][ T9323] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.065616][ T9323] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.106207][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.125897][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.161112][ T9323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.229570][T27580] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 614.237556][T27580] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 614.358710][ T9347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.379115][ T9347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.489913][T27594] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6237'. [ 614.511272][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6236'. [ 614.541096][T27344] lo speed is unknown, defaulting to 1000 [ 614.572744][ T52] Bluetooth: hci3: command tx timeout [ 614.654285][T27597] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 614.817608][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6240'. [ 614.845700][T27607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6239'. [ 615.106678][T27607] bond2 (unregistering): Released all slaves [ 615.208868][T27618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6242'. [ 615.239601][T27618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6242'. [ 615.323369][T27618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6242'. [ 615.414570][T27618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6242'. [ 615.534824][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.547151][T27344] lo speed is unknown, defaulting to 1000 [ 615.555977][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.567023][ T3544] net_ratelimit: 14 callbacks suppressed [ 615.567020][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.567039][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 615.625069][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.636252][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.666806][T27631] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.884493][T27634] bond3: (slave ip_vti0): Device is not bonding slave [ 615.905208][T27634] bond3: option active_slave: invalid value (ip_vti0) [ 615.971400][T27634] bond3 (unregistering): Released all slaves [ 616.080027][T27631] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.177292][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 616.187066][T27344] lo speed is unknown, defaulting to 1000 [ 616.204759][T27631] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.324818][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 616.357288][T27631] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.454021][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 616.585047][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 616.664421][ T9323] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.730429][ T3544] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.811634][T27344] lo speed is unknown, defaulting to 1000 [ 616.814009][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 616.835920][T27682] sctp: [Deprecated]: syz.1.6253 (pid 27682) Use of int in max_burst socket option deprecated. [ 616.835920][T27682] Use struct sctp_assoc_value instead [ 616.864737][ T3544] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.894942][ T3544] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.964776][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 617.091235][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 617.116492][T27692] netlink: 'syz.3.6255': attribute type 4 has an invalid length. [ 617.156148][T27692] `: renamed from bond0 (while UP) [ 617.206830][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 617.340460][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 617.407399][T27626] syzkaller0 speed is unknown, defaulting to 1000 [ 617.684658][ T5845] Bluetooth: hci2: command tx timeout [ 617.735950][T27716] x_tables: unsorted entry at hook 3 [ 617.799300][ T9342] hsr_slave_0: left promiscuous mode [ 617.812285][ T9342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.823346][ T9342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.837632][ T9342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.858153][ T9342] batman_adv: batadv0: Interface deactivated: dummy0 [ 617.871441][ T9342] batman_adv: batadv0: Removing interface: dummy0 [ 617.897046][ T9342] veth1_vlan: left promiscuous mode [ 618.190504][ T9342] team0 (unregistering): Port device team_slave_1 removed [ 618.252731][ T9342] team0 (unregistering): Port device team_slave_0 removed [ 618.641679][T27736] tipc: Started in network mode [ 618.647436][T27736] tipc: Node identity ac14140f, cluster identity 4711 [ 618.656784][T27736] tipc: New replicast peer: 255.255.255.255 [ 618.687652][T27736] tipc: Enabled bearer , priority 10 [ 618.941061][T27752] netlink: 'syz.3.6273': attribute type 2 has an invalid length. [ 619.025499][T27626] chnl_net:caif_netlink_parms(): no params data found [ 619.090700][T27759] tipc: MTU too low for tipc bearer [ 619.103197][T27759] __nla_validate_parse: 7 callbacks suppressed [ 619.103213][T27759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6277'. [ 619.280022][T27772] bond0: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 619.292699][T27772] bond0: entered promiscuous mode [ 619.297395][T27777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6283'. [ 619.298610][T27772] bond0: entered allmulticast mode [ 619.313207][T27772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.419370][T27626] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.434275][T27626] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.441562][T27626] bridge_slave_0: entered allmulticast mode [ 619.456324][T27626] bridge_slave_0: entered promiscuous mode [ 619.479527][T27626] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.486826][T27626] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.494214][T27626] bridge_slave_1: entered allmulticast mode [ 619.501123][T27626] bridge_slave_1: entered promiscuous mode [ 619.526469][T27789] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 619.564777][T27626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.595358][T27626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.643652][T27626] team0: Port device team_slave_0 added [ 619.661643][T27777] syzkaller0: entered promiscuous mode [ 619.668100][T27777] syzkaller0: entered allmulticast mode [ 619.678450][T27626] team0: Port device team_slave_1 added [ 619.752630][T27626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.761904][T27626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.788293][ T5845] Bluetooth: hci2: command tx timeout [ 619.795615][T27626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.807747][ T5883] tipc: Node number set to 2886997007 [ 619.816432][T27626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.823359][T27626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.850481][T27626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.890122][T27626] hsr_slave_0: entered promiscuous mode [ 619.897617][T27626] hsr_slave_1: entered promiscuous mode [ 619.903647][T27626] debugfs: 'hsr0' already exists in 'hsr' [ 619.909883][T27626] Cannot create hsr debugfs directory [ 620.007405][T27626] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.018252][T27626] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 620.028687][T27626] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 620.083797][T27626] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.095234][T27626] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 620.105298][T27626] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 620.151786][T27626] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.162220][T27626] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 620.173506][T27626] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 620.219852][T27626] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.229827][T27626] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 620.240500][T27626] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 620.338659][T27626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.356189][T27626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.365610][T27626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 620.378662][T27626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 620.441674][T27626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.462625][T27626] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.478216][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.485376][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.501908][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.509059][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.560599][ T9342] IPVS: stop unused estimator thread 0... [ 620.580650][ T12] net_ratelimit: 11 callbacks suppressed [ 620.580668][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 620.724518][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 620.770998][T27626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.835526][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 620.848003][T27626] veth0_vlan: entered promiscuous mode [ 620.861714][T27626] veth1_vlan: entered promiscuous mode [ 620.890795][T27626] veth0_macvtap: entered promiscuous mode [ 620.902355][T27626] veth1_macvtap: entered promiscuous mode [ 620.919792][T27626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.933482][T27626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.949155][ T9323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.958526][ T9323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.969626][ T9323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.992159][ T9323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.034517][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.058608][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.067398][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.091606][ T9323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.100031][ T9323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.146987][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'. [ 621.156006][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.173766][T27805] netlink: 'syz.2.6238': attribute type 4 has an invalid length. [ 621.265720][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.375014][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.484675][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.594224][ T9342] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.714859][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 621.844534][ T5845] Bluetooth: hci2: command tx timeout [ 623.924424][ T5845] Bluetooth: hci2: command tx timeout [ 625.624140][ T3544] net_ratelimit: 34 callbacks suppressed [ 625.624161][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 625.744197][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 625.864041][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 625.974229][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 626.085776][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 626.194152][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 626.304640][ T9342] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 626.414931][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 626.523986][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 626.634004][ T9342] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 630.684283][ T9342] net_ratelimit: 35 callbacks suppressed [ 630.684299][ T9342] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 630.804544][ T9342] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 630.914105][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.024291][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.134009][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.244226][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.354218][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.464314][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.574312][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 631.684693][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 635.684778][T27816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6290'. [ 635.694829][T27815] Unsupported ieee802154 address type: 0 [ 635.726329][T27819] Unsupported ieee802154 address type: 0 [ 635.796988][ T3544] net_ratelimit: 36 callbacks suppressed [ 635.797018][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 635.931025][T27823] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6293'. [ 635.999512][T27833] Cannot find add_set index 0 as target [ 635.999934][T27830] tap0: tun_chr_ioctl cmd 1074025672 [ 636.065005][T27830] tap0: ignored: set checksum disabled [ 636.075123][ T12] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 636.122950][T27837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6295'. [ 636.153238][T27837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6295'. [ 636.252211][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 636.285489][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 636.339751][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 636.351978][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 636.360681][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 636.375908][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 636.389748][T27840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.397030][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.404327][ T3544] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 636.455831][T27841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.510972][T27858] delete_channel: no stack [ 636.603923][ T9323] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 636.617208][T27844] syzkaller0 speed is unknown, defaulting to 1000 [ 636.639090][T27844] lo speed is unknown, defaulting to 1000 [ 636.798317][T27874] team_slave_0: entered promiscuous mode [ 636.804077][T27874] team_slave_1: entered promiscuous mode [ 636.814812][T27874] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 636.823275][T27874] team0: Device macvtap1 is already an upper device of the team interface [ 636.845293][T27874] team_slave_0: left promiscuous mode [ 636.850778][T27874] team_slave_1: left promiscuous mode [ 636.934472][ T9347] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 636.935809][T27877] xt_cgroup: xt_cgroup: no path or classid specified [ 637.128451][ T13] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 637.225236][ T9342] team0: left allmulticast mode [ 637.230812][ T9342] team_slave_0: left allmulticast mode [ 637.237796][ T9342] team_slave_1: left allmulticast mode [ 637.244850][ T9342] team0: left promiscuous mode [ 637.249701][ T9342] team_slave_0: left promiscuous mode [ 637.256757][ T9342] team_slave_1: left promiscuous mode [ 637.262722][ T9342] bridge0: port 3(team0) entered disabled state [ 637.277571][ T9342] bridge_slave_1: left allmulticast mode [ 637.278697][T27892] netlink: 'syz.4.6311': attribute type 83 has an invalid length. [ 637.283224][ T9342] bridge_slave_1: left promiscuous mode [ 637.283424][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.308979][ T9342] bridge_slave_0: left allmulticast mode [ 637.315754][ T9342] bridge_slave_0: left promiscuous mode [ 637.321558][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.347380][T27894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.572174][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6314'. [ 637.582243][T27910] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6314'. [ 637.593168][ T9342] bond14 (unregistering): (slave ip6erspan0): Releasing active interface [ 637.635433][ T9342] bond15 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 637.659585][ T9342] bond15 (unregistering): (slave ip6gretap1): Releasing backup interface [ 637.817795][ T9342] bond13 (unregistering): (slave gretap3): Releasing active interface [ 637.826127][ T9342] gretap3 (unregistering): left allmulticast mode [ 638.145670][ T9342] team0: Port device bridge4 removed [ 638.294548][ T9342] bond0 (unregistering): left promiscuous mode [ 638.300827][ T9342] bond_slave_0: left promiscuous mode [ 638.306909][ T9342] bond_slave_1: left promiscuous mode [ 638.313744][ T9342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.325490][ T9342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.335346][ T9342] bond0 (unregistering): Released all slaves [ 638.348217][ T9342] bond1 (unregistering): Released all slaves [ 638.360838][ T9342] bond2 (unregistering): Released all slaves [ 638.461363][ T9342] bond3 (unregistering): Released all slaves [ 638.474628][ T9342] bond4 (unregistering): Released all slaves [ 638.484401][T27853] Bluetooth: hci0: command tx timeout [ 638.491122][ T9342] bond5 (unregistering): Released all slaves [ 638.595337][ T9342] bond6 (unregistering): Released all slaves [ 638.693025][ T9342] bond7 (unregistering): Released all slaves [ 638.787804][ T9342] bond8 (unregistering): Released all slaves [ 638.800457][ T9342] bond9 (unregistering): Released all slaves [ 638.815572][ T9342] bond10 (unregistering): Released all slaves [ 638.915332][ T9342] bond11 (unregistering): Released all slaves [ 639.012824][ T9342] bond12 (unregistering): Released all slaves [ 639.108989][ T9342] bond13 (unregistering): Released all slaves [ 639.203638][ T9342] bond14 (unregistering): Released all slaves [ 639.298399][ T9342] bond15 (unregistering): Released all slaves [ 639.390868][T27918] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6315'. [ 639.400564][T27918] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6315'. [ 639.746099][T27942] netlink: 'syz.4.6321': attribute type 2 has an invalid length. [ 639.772462][T27844] chnl_net:caif_netlink_parms(): no params data found [ 639.886104][T27944] netlink: 'syz.3.6322': attribute type 11 has an invalid length. [ 639.919994][T27950] netlink: 'syz.1.6323': attribute type 17 has an invalid length. [ 640.142255][T27844] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.153421][T27844] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.161246][T27844] bridge_slave_0: entered allmulticast mode [ 640.170060][T27844] bridge_slave_0: entered promiscuous mode [ 640.195422][T27844] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.218582][T27844] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.242201][T27844] bridge_slave_1: entered allmulticast mode [ 640.244797][T27967] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 640.257459][T27844] bridge_slave_1: entered promiscuous mode [ 640.438703][T27973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.452938][T27973] bond2: (slave bond3): making interface the new active one [ 640.464294][T27973] bond2: (slave bond3): Enslaving as an active interface with an up link [ 640.496475][T27975] bond1: option miimon: invalid value (18446744073709551585) [ 640.504445][T27975] bond1: option miimon: allowed values 0 - 2147483647 [ 640.512785][T27975] bond1 (unregistering): Released all slaves [ 640.549790][T27977] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 640.560849][T27967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.568486][T27853] Bluetooth: hci0: command tx timeout [ 640.573589][T27844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.598487][T27844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.726901][T27844] team0: Port device team_slave_0 added [ 640.737267][T27844] team0: Port device team_slave_1 added [ 640.809944][T27998] __nla_validate_parse: 8 callbacks suppressed [ 640.809961][T27998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6337'. [ 640.867200][T27844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.874654][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.906815][T27844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.926355][T28006] netlink: 'syz.1.6338': attribute type 11 has an invalid length. [ 640.966248][T28006] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6338'. [ 641.027475][T28005] syzkaller0: entered promiscuous mode [ 641.033103][T28005] syzkaller0: entered allmulticast mode [ 641.058525][T27844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.070291][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.097773][T27844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.128445][T28016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.142854][T28016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.253028][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6343'. [ 641.262866][T28021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6343'. [ 642.647331][T27853] Bluetooth: hci0: command tx timeout [ 642.709650][ T9342] 9: left promiscuous mode [ 642.889247][ T9342] tipc: Disabling bearer [ 642.905553][ T9342] tipc: Left network mode [ 642.913102][T27844] hsr_slave_0: entered promiscuous mode [ 642.920393][T27844] hsr_slave_1: entered promiscuous mode [ 642.928081][T27844] debugfs: 'hsr0' already exists in 'hsr' [ 642.933926][T27844] Cannot create hsr debugfs directory [ 642.948235][T28041] syzkaller0: entered promiscuous mode [ 642.953708][T28041] syzkaller0: entered allmulticast mode [ 642.993350][T28039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6348'. [ 643.143171][T28051] netlink: 'syz.1.6352': attribute type 9 has an invalid length. [ 643.175892][T28055] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.6351'. [ 643.473016][T28064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6356'. [ 643.639685][T28072] netlink: 'syz.2.6358': attribute type 83 has an invalid length. [ 643.700178][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6359'. [ 643.789665][T28082] xt_TCPMSS: Only works on TCP SYN packets [ 644.020048][T28075] macsec1: entered promiscuous mode [ 644.045926][T28075] macsec1: entered allmulticast mode [ 644.062228][T28075] bond3: (slave macsec1): Error -34 calling dev_set_mtu [ 644.097941][ T9342] batadv0: left promiscuous mode [ 644.171626][ T9342] hsr_slave_0: left promiscuous mode [ 644.391803][ T9342] pimreg3 (unregistering): left allmulticast mode [ 644.476588][ T9342] pim6reg (unregistering): left allmulticast mode [ 644.728913][T27853] Bluetooth: hci0: command tx timeout [ 644.836350][ T9342] team0 (unregistering): Port device team_slave_1 removed [ 644.878076][ T9342] team0 (unregistering): Port device team_slave_0 removed [ 645.180886][ T3544] smc: removing ib device sz1 [ 645.219566][T28101] macvtap1: entered allmulticast mode [ 645.234916][T28101] veth0_macvtap: entered allmulticast mode [ 645.649223][T27844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 645.727646][T27844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 645.806709][T27844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 645.985011][T28124] macvtap1: entered promiscuous mode [ 645.990566][T28124] vlan0: entered promiscuous mode [ 645.996672][T28124] macvtap1: entered allmulticast mode [ 646.002294][T28124] vlan0: entered allmulticast mode [ 646.013168][T28124] veth0_vlan: entered allmulticast mode [ 646.026391][T27844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 646.346560][T27844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.368483][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6380'. [ 646.396461][T27844] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.420008][T28162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6380'. [ 646.430052][T28162] Bluetooth: MGMT ver 1.23 [ 646.450639][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.457913][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.510565][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.517783][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.171336][T28188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6385'. [ 647.213596][T28187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6387'. [ 647.409266][T27844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.565676][T27844] veth0_vlan: entered promiscuous mode [ 647.614816][T27844] veth1_vlan: entered promiscuous mode [ 647.739505][T27844] veth0_macvtap: entered promiscuous mode [ 647.766543][T27844] veth1_macvtap: entered promiscuous mode [ 647.800769][T27844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.878774][T27844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.949036][T28206] tipc: Started in network mode [ 647.955613][T28206] tipc: Node identity a61cc9c3aab9, cluster identity 4711 [ 647.976379][T28206] tipc: Enabled bearer , priority 0 [ 648.023711][T28206] syzkaller0: entered promiscuous mode [ 648.033717][T28206] syzkaller0: entered allmulticast mode [ 648.058826][ T6786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.068427][ T6786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.149171][ T6786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.184987][ T6786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.242956][T28206] tipc: Resetting bearer [ 648.284403][T28205] tipc: Resetting bearer [ 648.367633][T28205] tipc: Disabling bearer [ 648.484140][T27853] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 648.495315][T27853] Bluetooth: hci2: command 0x0401 tx timeout [ 648.771356][T28229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.856827][T28228] bond_slave_0: entered promiscuous mode [ 648.862850][T28228] bond_slave_1: entered promiscuous mode [ 648.871763][T28228] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 648.883192][T28228] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 649.003754][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.022984][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.176723][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.208213][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.275499][T28251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6405'. [ 649.600127][T28276] bridge0: entered allmulticast mode [ 649.621996][T28274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6411'. [ 649.664690][T28274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6411'. [ 649.772714][T28284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.947662][T28299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6419'. [ 650.196286][T28296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6420'. [ 650.249930][T28320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6426'. [ 650.277725][T28318] bridge0: entered allmulticast mode [ 650.341312][T28323] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 650.747233][T28355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.776719][T28358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.882883][T28365] netlink: 'syz.3.6441': attribute type 1 has an invalid length. [ 651.430171][T28395] __nla_validate_parse: 6 callbacks suppressed [ 651.430182][T28395] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6449'. [ 651.482057][T28397] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6450'. [ 651.528264][T28399] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 651.571783][T28403] netlink: 'syz.1.6452': attribute type 15 has an invalid length. [ 651.579790][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'. [ 651.596820][ T3544] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 651.596931][T28403] netlink: 'syz.1.6452': attribute type 15 has an invalid length. [ 651.611326][ T3544] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 651.618679][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'. [ 651.627023][ T3544] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 651.642861][ T3544] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 651.722343][T28406] lo: entered allmulticast mode [ 651.737584][T28406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6453'. [ 651.858799][T28412] xfrm1: entered allmulticast mode [ 652.294696][T28444] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6464'. [ 652.355869][T28446] netlink: 'syz.1.6465': attribute type 11 has an invalid length. [ 652.393548][T28446] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6465'. [ 652.633406][T28463] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6471'. [ 652.658771][T28463] netlink: 'syz.2.6471': attribute type 1 has an invalid length. [ 652.666711][T28463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.809971][T28473] netlink: 'syz.1.6474': attribute type 11 has an invalid length. [ 652.849857][T28473] netlink: 'syz.1.6474': attribute type 11 has an invalid length. [ 652.869501][T28473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6474'. [ 653.529950][T28511] team_slave_1: entered allmulticast mode [ 653.553722][T28513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6486'. [ 653.912956][T28534] netlink: 'syz.3.6493': attribute type 1 has an invalid length. [ 654.118719][T28547] syzkaller1: entered promiscuous mode [ 654.125049][T28547] syzkaller1: entered allmulticast mode [ 654.335619][T28561] netlink: 'syz.0.6502': attribute type 9 has an invalid length. [ 654.344897][T28564] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 654.383869][T28563] netlink: 'syz.0.6502': attribute type 9 has an invalid length. [ 654.726616][T27853] Bluetooth: hci0: command tx timeout [ 654.803550][T28599] netlink: 'syz.0.6515': attribute type 5 has an invalid length. [ 655.101621][T28616] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 655.115480][T28616] bond4 (unregistering): Released all slaves [ 655.138847][T28622] tipc: Enabling of bearer rejected, media not registered [ 655.430107][T28642] Bluetooth: MGMT ver 1.23 [ 655.474513][T28643] xt_CONNSECMARK: invalid mode: 0 [ 655.731951][T28661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 655.859574][T28668] Cannot find add_set index 0 as target [ 655.903725][T28668] netem: incorrect gi model size [ 655.910748][T28668] netem: change failed [ 656.161040][T28696] netlink: 'syz.4.6550': attribute type 1 has an invalid length. [ 656.210517][T28696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.585263][T28727] __nla_validate_parse: 9 callbacks suppressed [ 656.585280][T28727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6556'. [ 656.642326][T28730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6556'. [ 656.762008][T28739] netlink: 'syz.1.6562': attribute type 4 has an invalid length. [ 656.968184][T28752] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6567'. [ 657.237442][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6575'. [ 657.252865][T28786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6575'. [ 657.290274][T28788] netlink: 'syz.2.6577': attribute type 11 has an invalid length. [ 657.316345][T28788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6577'. [ 657.454905][T28801] netlink: 'syz.1.6581': attribute type 5 has an invalid length. [ 657.482714][T28801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6581'. [ 657.610004][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6583'. [ 657.654763][T28811] netlink: 'syz.0.6583': attribute type 1 has an invalid length. [ 657.662531][T28811] netlink: 'syz.0.6583': attribute type 2 has an invalid length. [ 657.842742][T28828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6589'. [ 657.878943][T28833] veth1_to_bond: entered allmulticast mode [ 657.920839][T28833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6591'. [ 657.998834][T28833] bond0: (slave bond_slave_1): Releasing backup interface [ 658.078471][T28833] veth1_to_bond (unregistering): left allmulticast mode [ 658.369932][T28856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 658.594548][T28885] bridge_slave_1: left allmulticast mode [ 658.620713][T28885] bridge_slave_1: left promiscuous mode [ 658.639131][T28885] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.682593][T28885] bridge_slave_0: left allmulticast mode [ 658.697860][T28885] bridge_slave_0: left promiscuous mode [ 658.708727][T28885] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.758407][T28885] bridge0 (unregistering): left allmulticast mode [ 658.873721][T28905] IPVS: Unknown mcast interface: nicvf0 [ 658.910867][T28906] IPVS: Unknown mcast interface: nicvf0 [ 659.219957][T28928] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 660.129074][T28939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.150233][T28938] smc: net device gre0 applied user defined pnetid SYZ1 [ 660.166671][T28944] smc: net device gre0 erased user defined pnetid SYZ1 [ 660.359896][T28950] netlink: 'syz.2.6621': attribute type 18 has an invalid length. [ 660.413950][ T9337] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.434771][ T9337] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.456223][ T9337] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.485108][ T9337] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.520636][T28962] syzkaller1: entered promiscuous mode [ 660.536918][T28962] syzkaller1: entered allmulticast mode [ 660.556297][T28962] netlink: 'syz.4.6624': attribute type 6 has an invalid length. [ 660.888136][T28983] netlink: 'syz.4.6630': attribute type 10 has an invalid length. [ 661.540958][T29030] netlink: 'syz.0.6642': attribute type 1 has an invalid length. [ 661.549552][T29030] netlink: 'syz.0.6642': attribute type 7 has an invalid length. [ 661.557876][T29030] netlink: 'syz.0.6642': attribute type 8 has an invalid length. [ 661.565731][T29030] NCSI netlink: No device for ifindex 65584 [ 661.786830][T29050] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 661.820252][T29039] syzkaller0 speed is unknown, defaulting to 1000 [ 661.957907][T29064] __nla_validate_parse: 11 callbacks suppressed [ 661.957924][T29064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6653'. [ 661.980357][T29059] netlink: 'syz.4.6652': attribute type 10 has an invalid length. [ 661.995229][T29059] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 662.011337][T29059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.137102][T29071] veth0: entered promiscuous mode [ 662.173651][T29074] netlink: 'syz.1.6657': attribute type 30 has an invalid length. [ 662.231407][T29071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6656'. [ 662.275551][T29079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6658'. [ 662.475849][T29086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6660'. [ 662.494421][T29086] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6660'. [ 662.503552][T29086] netlink: 'syz.1.6660': attribute type 5 has an invalid length. [ 662.535175][T29092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.550407][T29086] netlink: 'syz.1.6660': attribute type 6 has an invalid length. [ 662.562253][T29086] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6660'. [ 662.686889][T29101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6667'. [ 662.913374][T11758] IPVS: starting estimator thread 0... [ 662.936000][T29113] team_slave_0: entered promiscuous mode [ 662.941780][T29113] team_slave_1: entered promiscuous mode [ 662.950807][T29113] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 662.972001][T29113] team0: Device macvtap2 is already an upper device of the team interface [ 663.004382][T29116] IPVS: using max 29 ests per chain, 69600 per kthread [ 663.032912][T29113] team_slave_0: left promiscuous mode [ 663.038405][T29113] team_slave_1: left promiscuous mode [ 663.053272][T29125] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6674'. [ 663.251744][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6678'. [ 663.507595][T29153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6681'. [ 663.695414][T29162] tipc: Started in network mode [ 663.700313][T29162] tipc: Node identity 72c413e11443, cluster identity 4711 [ 663.735333][T29162] tipc: Enabled bearer , priority 0 [ 663.742949][T29162] syzkaller0: entered promiscuous mode [ 663.765720][T29162] syzkaller0: entered allmulticast mode [ 663.792867][T29167] TCP: TCP_TX_DELAY enabled [ 663.800635][T29162] tipc: Resetting bearer [ 663.803339][T29167] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 663.817148][T29161] tipc: Resetting bearer [ 663.840453][T29161] tipc: Disabling bearer [ 663.858815][T29167] netlink: 'syz.1.6687': attribute type 8 has an invalid length. [ 664.222942][T29195] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 664.390548][T29197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.693334][T29231] syzkaller0: entered promiscuous mode [ 664.711384][T29231] syzkaller0: entered allmulticast mode [ 664.775307][T29231] tipc: Enabled bearer , priority 0 [ 664.803087][T29229] tipc: Resetting bearer [ 664.876250][T29229] tipc: Disabling bearer [ 664.917977][T29255] SET target dimension over the limit! [ 664.942941][T29259] netlink: 'syz.2.6715': attribute type 1 has an invalid length. [ 664.962579][T29263] netlink: 'syz.3.6714': attribute type 1 has an invalid length. [ 665.047579][T29253] syzkaller0: entered promiscuous mode [ 665.053173][T29253] syzkaller0: entered allmulticast mode [ 665.139904][T29272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.247097][T29276] syzkaller0: refused to change device tx_queue_len [ 665.317255][T29280] tipc: Enabling of bearer rejected, failed to enable media [ 665.444367][T29287] nbd: nbd1 already in use [ 667.272050][T29321] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 667.338862][T29331] validate_nla: 4 callbacks suppressed [ 667.338881][T29331] netlink: 'syz.1.6736': attribute type 12 has an invalid length. [ 667.621445][T29345] netlink: 'syz.2.6740': attribute type 9 has an invalid length. [ 667.647003][T29345] __nla_validate_parse: 14 callbacks suppressed [ 667.647021][T29345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6740'. [ 667.681993][T29359] tipc: Started in network mode [ 667.687038][T29359] tipc: Node identity , cluster identity 4711 [ 667.693377][T29359] tipc: Failed to set node id, please configure manually [ 667.714865][T29359] tipc: Enabling of bearer rejected, failed to enable media [ 667.908209][T29370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6747'. [ 667.934638][T29370] chnl_net:caif_netlink_parms(): no params data found [ 668.012395][T29380] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6750'. [ 668.056809][T29382] netlink: 'syz.0.6751': attribute type 19 has an invalid length. [ 668.098842][T29384] netlink: 'syz.2.6752': attribute type 2 has an invalid length. [ 668.108903][T29386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6754'. [ 668.138086][T29384] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 668.195260][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 668.225361][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 668.256834][T29391] 8021q: VLANs not supported on sit0 [ 668.341322][T29400] Bluetooth: MGMT ver 1.23 [ 668.779926][T29416] netlink: 'syz.2.6761': attribute type 11 has an invalid length. [ 668.809870][T29416] netlink: 'syz.2.6761': attribute type 4 has an invalid length. [ 668.818335][T29416] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.6761'. [ 668.879581][T29419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6762'. [ 668.971504][T29426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6764'. [ 669.211721][T29443] netlink: 412 bytes leftover after parsing attributes in process `syz.0.6767'. [ 669.286496][T29442] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 669.304737][T29442] bond6: (slave lo): Enslaving as a backup interface with an up link [ 669.318937][T29442] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 669.411929][T29451] syzkaller0: entered promiscuous mode [ 669.423909][T29451] syzkaller0: entered allmulticast mode [ 669.668945][T29468] netlink: 'syz.0.6775': attribute type 11 has an invalid length. [ 669.961538][T29488] netlink: 'syz.2.6776': attribute type 1 has an invalid length. [ 670.031787][T29486] veth0_macvtap: left promiscuous mode [ 670.156388][T29497] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 670.190818][T29497] netlink: 'syz.1.6783': attribute type 1 has an invalid length. [ 670.202305][T29497] netlink: 'syz.1.6783': attribute type 2 has an invalid length. [ 670.686203][T29483] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 670.728008][T29532] IPv6: sit2: Disabled Multicast RS [ 670.941126][T29547] syzkaller1: entered promiscuous mode [ 670.955195][T29547] syzkaller1: entered allmulticast mode [ 671.282389][T29563] syzkaller0 speed is unknown, defaulting to 1000 [ 671.725729][T29597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.748424][T29606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.756386][T29606] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 671.771131][T29606] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 671.926096][T27853] Bluetooth: hci0: command 0x080f tx timeout [ 672.021937][T29597] veth3: entered promiscuous mode [ 672.130748][ T3544] [ 672.133106][ T3544] ============================================ [ 672.139228][ T3544] WARNING: possible recursive locking detected [ 672.145357][ T3544] syzkaller #0 Not tainted [ 672.149749][ T3544] -------------------------------------------- [ 672.155870][ T3544] kworker/u8:9/3544 is trying to acquire lock: [ 672.162078][ T3544] ffffe8ffffd82298 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 672.171275][ T3544] [ 672.171275][ T3544] but task is already holding lock: [ 672.178613][ T3544] ffffe8ffffc822e8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 672.187809][ T3544] [ 672.187809][ T3544] other info that might help us debug this: [ 672.195844][ T3544] Possible unsafe locking scenario: [ 672.195844][ T3544] [ 672.203271][ T3544] CPU0 [ 672.206526][ T3544] ---- [ 672.209780][ T3544] lock(&pd_list->lock); [ 672.214086][ T3544] lock(&pd_list->lock); [ 672.218402][ T3544] [ 672.218402][ T3544] *** DEADLOCK *** [ 672.218402][ T3544] [ 672.226518][ T3544] May be due to missing lock nesting notation [ 672.226518][ T3544] [ 672.234809][ T3544] 3 locks held by kworker/u8:9/3544: [ 672.240065][ T3544] #0: ffff88801dbf7148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 672.251954][ T3544] #1: ffffc9000c2a7ba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 672.263748][ T3544] #2: ffffe8ffffc822e8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 672.273382][ T3544] [ 672.273382][ T3544] stack backtrace: [ 672.279244][ T3544] CPU: 1 UID: 0 PID: 3544 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 672.279257][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.279265][ T3544] Workqueue: pencrypt_parallel padata_parallel_worker [ 672.279279][ T3544] Call Trace: [ 672.279286][ T3544] [ 672.279291][ T3544] dump_stack_lvl+0x189/0x250 [ 672.279306][ T3544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.279318][ T3544] ? __pfx__printk+0x10/0x10 [ 672.279328][ T3544] ? print_lock_name+0xde/0x100 [ 672.279337][ T3544] print_deadlock_bug+0x28b/0x2a0 [ 672.279349][ T3544] validate_chain+0x1a3f/0x2140 [ 672.279362][ T3544] ? __queue_work+0x102/0xfb0 [ 672.279372][ T3544] ? look_up_lock_class+0x74/0x170 [ 672.279386][ T3544] ? register_lock_class+0x51/0x320 [ 672.279396][ T3544] __lock_acquire+0xab9/0xd20 [ 672.279406][ T3544] ? padata_do_serial+0x707/0xb80 [ 672.279416][ T3544] lock_acquire+0x120/0x360 [ 672.279425][ T3544] ? padata_do_serial+0x707/0xb80 [ 672.279439][ T3544] _raw_spin_lock+0x2e/0x40 [ 672.279450][ T3544] ? padata_do_serial+0x707/0xb80 [ 672.279460][ T3544] padata_do_serial+0x707/0xb80 [ 672.279489][ T3544] ? padata_parallel_worker+0x44/0x1d0 [ 672.279503][ T3544] padata_parallel_worker+0x75/0x1d0 [ 672.279514][ T3544] ? process_scheduled_works+0x9ef/0x17b0 [ 672.279523][ T3544] process_scheduled_works+0xae1/0x17b0 [ 672.279539][ T3544] ? __pfx_process_scheduled_works+0x10/0x10 [ 672.279552][ T3544] worker_thread+0x8a0/0xda0 [ 672.279568][ T3544] kthread+0x711/0x8a0 [ 672.279580][ T3544] ? __pfx_worker_thread+0x10/0x10 [ 672.279590][ T3544] ? __pfx_kthread+0x10/0x10 [ 672.279601][ T3544] ? _raw_spin_unlock_irq+0x23/0x50 [ 672.279612][ T3544] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.279624][ T3544] ? __pfx_kthread+0x10/0x10 [ 672.279636][ T3544] ret_from_fork+0x4bc/0x870 [ 672.279646][ T3544] ? __pfx_ret_from_fork+0x10/0x10 [ 672.279656][ T3544] ? __switch_to_asm+0x39/0x70 [ 672.279664][ T3544] ? __switch_to_asm+0x33/0x70 [ 672.279674][ T3544] ? __pfx_kthread+0x10/0x10 [ 672.279685][ T3544] ret_from_fork_asm+0x1a/0x30 [ 672.279697][ T3544] [ 677.774143][T11758] page_pool_release_retry() stalled pool shutdown: id 138, 1 inflight 60 sec