last executing test programs: 2.339148333s ago: executing program 1 (id=14799): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) gettid() r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000043c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r5, @ANYBLOB="14007800fe8000000000000000000000000000bb08001700", @ANYRES32=r2, @ANYBLOB="a504c980080023006401010214007d00fc010000000000000000000000000001317ca145c5671d9c4818d7c08f8dcd9edc5b08298f19bc912931da4109c7e609c7121737f3749665a359afea31548aab8b9ff639012827db19702f8ab8f00ed4c404055ec68c6d9543637c783e12a564557154aa630bc6d383952773474852be2c04a079bd19468e01bbd96c01a79b63644d29e06b4f3e3e07e2bf8299b64ebde64bbf8f5dc4cd251e9e2c119a70ad0ce8cab194bb87f2bb6afa7f7a3be3884376b1f813ea118823a6480402abed8118688e6bb009d44e4f81751b2b9fabd13242fc4c3d084ab7c5c8279c833f7166ac4afc3f2ee487a7eac17a35afdb06ad8e1b1f5fe8edde973b85728c473dd848705028d6edb60a0f1945898224bb713176babbdfcebaa14cb117c48d5a8735f423efe083680d3823c5076b935e29ba7db3e9607068b8944aa2a06f2d2e735bfabce98bb3e113638ff8ac459579b4c7a2b6aa8076a28552ae80f4ef12bdbb55d4a77d81c69919d6118aaf92947e1b48371559c7bc0eaba89c9721dbc2af598bb5e805277f07d4ff466ce936f443737b6e04269ad2c07451039c7cd9ae69711fd7b51c5fb8a215f80c4179c671b796b9731c349d29093a97cc7f0b5a590206802e01508022012880550016000ebe7483cf7ca74b44b8cbc813dc14f4831a706ac307f1f84986006ced03c5528bcd79663da4b184412c2bee29e9d536791c63ab8d1dd4a1b8fa980988b5370d4c6c7cdd464ec82d637f456b6b7e76d85c0000000800cf00", @ANYRES32=r0, @ANYBLOB="2ec1ffe8c5542cf24ad2bd1711582475ae670800350006000000040062800400f6800800d6009e53a558d46a3923e5319c4ec5dbf3779c9cd1283cd093742115c87c568c3d8de6b9545b5d16c696289ad38496db677e0aa10c9ba556d3c28d515a35b8fe44b7e938990b058ff17c1877899e1b2da71bc5b1884667f82471f4d998373e21814d", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYRESDEC=r6], 0x1604}, 0x1, 0x0, 0x0, 0xc080}, 0x8001) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4008144) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r10, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES64=r9, @ANYRES32=r9, @ANYBLOB="1400fe004606790738f8393fac8f971f3247922c14000201db65d7b4c47f6b3f62765c5d79da0166"], 0x44}, 0x1, 0x0, 0x0, 0x4004804}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) recvfrom$rose(r0, &(0x7f0000000680)=""/240, 0xf0, 0x0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r12, 0x7) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) 1.60383076s ago: executing program 2 (id=14812): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000980)=0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xfffffff9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x14000c08) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) getsockopt$ax25_int(r11, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.457834063s ago: executing program 4 (id=14814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010ff001c18000180140002007705006e31000000000000f30000000008e7070000000000fee1177c10a09791cd274e54c2918948d9eb"], 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x2004cc01) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20044805) 1.440882917s ago: executing program 0 (id=14815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB='\a\x00'], 0x30}}, 0x20000000) 1.359286185s ago: executing program 1 (id=14816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x773c1000) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x3b) 1.32433708s ago: executing program 4 (id=14817): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x3, 0x30, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendfile(r4, r0, &(0x7f0000000200)=0xfff, 0x5) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/180, 0xb4}], 0x3}, 0x12000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f00000004c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000500)=0x2c) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x10000}}}, &(0x7f0000000680)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000006c0)={r5, @in6={{0xa, 0x4e22, 0x2, @mcast2, 0xe}}}, 0x84) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x66c1f535}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000002}, 0x884) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000000900)) r8 = socket(0x8, 0x3, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000d00)={0x3, {{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x9, @mcast1, 0xfffffffc}}}, 0x108) accept4$llc(r1, &(0x7f0000000e40), &(0x7f0000000e80)=0x10, 0x800) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), r1) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000fc0)=@assoc_id=r5, &(0x7f0000001000)=0x4) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000001040)) 1.321486298s ago: executing program 1 (id=14818): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000ff00000000000000", 0x58}], 0x1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000340)=""/96, 0x60}], 0x2, 0x7ff, 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x80800) recvmsg$can_j1939(r7, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x141) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r5}, 0xc) 1.286890913s ago: executing program 0 (id=14819): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 1.207648806s ago: executing program 2 (id=14820): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3080000006060101000000000000000000000003050005000a0000000900020073797a30000000000500010007000000"], 0x30}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%ps \x00'}, 0x20) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580), 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x0, 0x4, 0x2, 0xa, 0x2, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xffff0001, 0xbd, &(0x7f0000000380)=""/189, 0x41100, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r3, r4, r5], &(0x7f0000000680)=[{0x3, 0x4, 0xf, 0x1}, {0x5, 0x1, 0xf, 0x7}], 0x10, 0xe74}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 1.171743045s ago: executing program 2 (id=14821): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x891b, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.170082582s ago: executing program 3 (id=14822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_getaddr={0x98, 0x16, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x3f, 0x4, 0xc8, r7}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x5, 0x8, 0x3}}, @IFA_FLAGS={0x8, 0x8, 0x222}, @IFA_FLAGS={0x8, 0x8, 0x6c9}]}, 0x98}, 0x1, 0x0, 0x0, 0x40008080}, 0x40000) 1.148934148s ago: executing program 0 (id=14823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e060909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16ff3959547f5090587529b2037616ec0fa4f872ba86c902000000004a32000402160009000a0000000000e000e218d1ddf66ed538f25232504c48", 0x78, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x5, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000540)={0x5, 0xfffe, 0x20a, 0x8, 0x0, 0x5, 0x3, 0x9, 0x0}, &(0x7f0000000640)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000680)={r7, 0x1, 0x4, 0x7, 0x2, 0x1}, 0x14) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r8, &(0x7f00000000c0)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x1}, 0xfffffd4e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r9, 0x1, 0x1, 0xf45, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000007c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000100001000000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000006958fe4c6dd3ab4459b05cbb0000000033000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000000000004c001400736d3300"/244], 0x13c}}, 0x20008880) 1.099774502s ago: executing program 1 (id=14824): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0x0, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11, 0x0, 0x22}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x5b, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff1b93}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb734}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x50) 1.063086457s ago: executing program 2 (id=14825): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 961.872983ms ago: executing program 0 (id=14826): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x20, 0x9, 0x4, 0x6, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x30, '\x00', r3, 0x0, r1, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x2, 0x1, 0x1}, {0x3, 0x1, 0x7}, {0x2, 0x1, 0x0, 0xc}, {0x1, 0x4, 0x6, 0x2}, {0x4, 0x2, 0x1, 0xc}, {0x0, 0x5, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x6}, {0x1, 0x5, 0x7, 0x9}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xfa, 0xcb, &(0x7f00000005c0)="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", &(0x7f00000006c0)=""/203, 0x2, 0x0, 0xc0, 0xd, &(0x7f00000007c0)="38ad182079c186a51333ab0c263053d7060f543fb2b48817a7a6ad02404a36dcddcc9e62024f959e746606959098626ca588ba8cca6f3428564ae4939503c12248ae33255e7d4d2ef9398eb08163af2128271f4351a771fb9c0706e566e1b70a0c95f89bafeb297c1bae9f02df5eea62b4a8229ffd20bf5285eb2d26aaea88202873f2b7e8c4acf76c758c6382c9e5377d0e3d8f7b42c91e729a1e6d569e5723223accdb4974beaf7159f70c7e2bafec749c4cc1235372ce1d45bc3dcbdd3ac6", &(0x7f0000000340)="d2ca9ad8651901dd2c60844cd2", 0x6, 0x0, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x10000000, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 907.605464ms ago: executing program 2 (id=14827): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x20, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x6}, 0x1c) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xffffffffffffff75, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x0, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0x0, 0x7, {0x1, 0x1}}}}]}]}, 0x98}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 895.48176ms ago: executing program 3 (id=14828): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611074000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x7c}}, 0x810) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x5}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, r5, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x8c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "541c10dfd256afb4fa758eae8d40711b77228157de1f756b1ca493ad12f8f1f3"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b12659f105c7b73abb50c34edd83af69"}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40041}, 0x40004) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) r12 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r12, 0x28, 0x2, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 783.298129ms ago: executing program 3 (id=14829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r0 = socket(0x11, 0x800000003, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) r3 = socket(0xa, 0x3, 0x3) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x20033, r3, 0x0) 631.553134ms ago: executing program 3 (id=14830): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="a455e3a45f98a313f435309bdd11e16d369ffe9b2257218bde812f4d5da1dd738681541795728def1faf615ad74e2b5397900ee2e3882ef7c061abf22f9770ddc3848ff5ebded8c1b7a7e1059eeb5e9cbc22a26a0409d1bd922fc08a12a4860681bb11d96a23e8542fcb6f9d299de5822a0bfa5988ce777dff966787bed35cef3f298654a1f9c2ee536e436fc8cf6910232654bcfd72e3e62855c089890c1772cc69612c94780b9218704b571d75b6744981adace7339a74fc67db1b5049adc8c111aeed2c299515", 0xc8}, {&(0x7f0000000280)="0a2418c0e26c8c3e64c3bd463584125562dae09528b9d92ec98e8c8d6ccdea8a6a276069bdc949a169252a11670d70ba2095f0c6813a6ace160140aadefbe2113e7d6a1d40231baaa4319e60a3fe6b773a2b1312366eb7ce53c2d7bfb8de837ac2287dc597c13fa6846ecf37edebdccfeb7b0a863fdb6fe25aee195655e259eb0301ce1d1978a88eece92b78cc8965c48677ac7eed845bde6dbcc0290647302fb8e4eb186e5d63d1fb2369360b1278c0ae85e9839060119d41c4b94d35c49a775e", 0xc1}, {&(0x7f0000000380)="27f9a394534cc37c4ac8e00758744143d454ae6fe9dc86db959cc7e6c5fd268dddf1630db3fef2563a4d0d5c0866d610d7d2d82fd0c8ce48941134334f35a0fca6bbd42f5157e79280d58415b6650772874400a80b404ac8dc963db1739958abc7493e0bedefc4f48e7bc3396624d4a42065330e38dcc16b290ae3b72ad0c90ddf71d8f385cc8a9948067f678cc315cf6a31cef5786f0e7904e3f3e2dc66503bff7933fdfa7dc58e54d739", 0xab}, {&(0x7f0000000200)="d14f68a20d46ae47f20f", 0xa}, {&(0x7f0000000500)="870620da795041387345f450", 0xc}], 0x5, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000004800000000000003000084030000000b00000002000000020000000b0000000200000000ffffff060000000200000002000000010000000000000700000000010000000000000c05000000005f00"], &(0x7f00000007c0)=""/32, 0x63, 0x20, 0x1, 0x3, 0x10000}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x8, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @alu={0x4, 0x0, 0xd, 0xa, 0x5cb0763328716cab, 0xffffffffffffffff, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x24}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000b00)='GPL\x00', 0x7024, 0x64, &(0x7f0000000b40)=""/100, 0x41000, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x0, 0x10, 0x2, 0x6}, 0x10, 0xffffffffffffffff, r3, 0x5, &(0x7f0000000c40)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000c80)=[{0x3, 0x4, 0xa, 0x6}, {0x5, 0x1, 0x7, 0xd}, {0x2, 0x5, 0x3}, {0x3, 0x2, 0x5, 0x7}, {0x2, 0x2, 0xc, 0x1}], 0x10, 0xf5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x25, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1a8f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x74b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x0, 0x7, 0x2, 0x4, 0x8, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x9, 0x7, 0xb, 0xffffffffffffffc0, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4187}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, r5, 0x8, &(0x7f0000000840)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x2, 0x5, 0x1}, 0x10, r8, r9, 0x4, &(0x7f0000000e00)=[r0], &(0x7f0000000e40)=[{0x2, 0x3, 0xd, 0xa}, {0x5, 0x4, 0xe, 0x9}, {0x4, 0x5, 0x4, 0x5}, {0x5, 0x4, 0x1, 0x2}], 0x10, 0x9}, 0x94) 589.95339ms ago: executing program 3 (id=14831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newrule={0x44, 0x20, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x0, 0x10, 0x9, 0x0, 0x0, 0x5, 0x9}, [@FRA_FLOW={0x8, 0xb, 0xdf}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_FLOW={0x8, 0xb, 0xbd}, @FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5}]}, 0x44}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x7, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x700, 0x8000, 0x800, 0xab}}) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r2, 0x110, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=@base={0xe, 0x0, 0x0, 0x202000, 0x841}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) 518.81093ms ago: executing program 0 (id=14832): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (rerun: 32) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r3, 0xa11c}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001680)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7c3, 0x5, 0xd1c5, 0x1a, 0x256, 0x100, 0x8c75, 0x7ff, 0xa, 0x7fff, 0x4, 0xda4, 0x3ff, 0x80, 0x4]}, &(0x7f0000000200)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) close(0x3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28179f09943b1b0452d1b72183aacf4a84f9130b701b81675dd4e9e3070756f97ad791fa99dac06c37479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fd80f553876acb45821d0c48fb657c29b309c73f0977e7cde65a89d9458aac2795b2b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d2665016ac59dd20fde0745db06753a7ac7fe13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2084bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304fff0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bdb539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572ac45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af00200f900cd1d0000002000000001c800000000000000000048cea769470424d28804c024ab81921f01280b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee78ebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408816eae08cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb7819441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005391577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e710d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd129db069364c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d4ac534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f0300000000000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321e10b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fde46ad265983eb1b1c6adb1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f617396c18cc7130000fc000000210000006e00002000000000000027c9a46157a3ffff6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4472b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2b3a113e47edf76f7d116d2b0976cf2ec447c0309316d1dd315003b7a6a543340715f99e99ec4b227eda2e63a1c31a2c2bd48a80500e92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949c68b7a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273061fc5c0e0a33db7f2d43ea8086cf059f40fa2645944cd9e7f2e6ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858e13e8f0ba9d1dec469dc71e998d99ebf7cfda638d7ce859acfec3f14ec2aa98b53cd68a0d99d62a5620b7c0f61dc386c449664a94bca09859a35760b7b818087347697c239990daec8384a12d973d5470efe5dae887be689c6b1551f4c5a649d9dc563d7049c91453facecbee789a1d5a4896b2b7bec3ec5e60c4916e5561888502a12f4985f9c7dab41cbf31c26cd12d5116de95b521a57408adbbac278be82fef3f9d8a51385b376b57810be83e7b27460729a626250ccd8d82eba588f86195e15119eca569bebba8514e5bfcbe51f1a628793b4ed4424c95a731628fa38e167b79affcd50b561d3a9cb4bea872d9e5a06a4201fd09eecfe283854837a65ecf8cd6cdaad4bf223db323de9d4854d66d324a0d125e3ebe2ed3c78e47392962860de6bb86759406e74335443407d9ee7d4a4430b60b6ef369604e127391dcd8b6fe95d882b0c1aa8d4b18e8db32a0eeaaabc7f7b5c49bd88cfe860f69f5510179d867970f975169591908282cd4367f82e62e3fa37876f30934c23dc2d02a0c25839f008ec099503c8d1b3169aa9c5a7db7f0116d203ac6503596c3a5b063c28f84c9eb42"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (rerun: 32) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r4, 0x1, 0x31, 0x0, &(0x7f00000008c0)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x5}, 0x50) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 387.795302ms ago: executing program 4 (id=14833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000002020101000000000000000001000002080004000001080008400000000100000000000010000000c0dd782194efa0905bc3111b8d47aaf9ccb5cd5c4db0951a210ad2419905973f2737b7d151e89c0dca12816bb25242a6c92fc8ebdbdd62156aff04560004167e8ffa404a5106d9010fc0c90ceec9c9f3d5a2ed0b00250fcba74f47594b9fc4d7"], 0x2c}, 0x1, 0x0, 0x0, 0x4004808}, 0x10) (async) syz_emit_ethernet(0xe, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x88ca}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38) 353.61402ms ago: executing program 3 (id=14834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="44a0bef5845981704ffee3d5f7fbf6704d2ff7754bd3aa85b37ee9522997bf4a704284397bd2e916fe69d3eeaa1787e567", @ANYRES16=0x0, @ANYBLOB="01000000000000000000120000000c000600000000000000000094ff130001000000050013000000000005001300000000000c0006000100000001000000"], 0x44}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00de003187f7e9e84067d35fb8694cb17e9257de70cb9ff4d57c74fd81d8551c28819a0e5141de755233449c15c32a4d0c8bc91afbc449cf5e8749d0d45443ecce4ef1bbea6f6b292ea7ef3e6dc53048ac48e886d58115f57d82d9b6c085ea8c8cb5b395d12af0fb50fb082c66e9648bb450ed699d798648e0a73ee631d7587d1fd52ee66f41601f260752f3d56e65d55070e6462d6dbb518c7b040255f9ce6f013693ace842abe94c022749fb9816266a59e23773816b0b38687869ff030000000000004152baed8dc286a35352e70319df819795410a4c7bf13f38eca605", @ANYRES16=r1, @ANYBLOB="030f00000000000000000800000015000100"/38], 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x40}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x0, 0x2) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r5, 0x11b, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000109078c205000100000000000000000832394390749f97f4ca3dd25ee6953f3998e475a4b6e19c50d06b3e9a268389a34262ca6be82b87a0a2f00615447a555fd05a4025d72183795b5d63bcd17e8c75d86b143e97aa28ee22bd9bab2f4096def6897b66c9434739953e8b895922315d2cf9dbb3499fc5b2c9402e7cc2264da0ee14df94306cd6e68a0b067c3f22aa00"/219], 0x4a) 322.717391ms ago: executing program 4 (id=14835): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0xfffffffe, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELRULE={0x188, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xf8, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xe0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x34c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000044) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x1f}, @NFTA_OSF_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) r3 = socket$isdn(0x22, 0x2, 0x11) close(r3) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xad}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x95e}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x27}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x78}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0xac}, 0x1, 0x0, 0x0, 0x40010}, 0x80) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES8=r3, @ANYRESDEC=r4, @ANYRESDEC=r3, @ANYRES32], 0x48}}, 0x0) 279.6053ms ago: executing program 0 (id=14836): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) socketpair(0x2c, 0x805, 0x45, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x83, "981075582f812f9e8e23ad93146926bb5cdefaa81d143fecefa3767604db4f9578d7d194c83dba93feb3588008b07e05cd7720db1fa7255ebf461eef2db0b519d51b51efb42c34ff633ce065c02750cb9ed9ac794edfa615b6d409ac5c9b3dff782b8f50b9a1153f110e16b43c902af8d7fd90f8fb9d41c4cc75ad7cae98773415b3bf"}, &(0x7f0000000100)=0x8b) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @empty}}, 0x3, 0xc}, &(0x7f0000000140)=0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "908603d0b3b5a323", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) socket(0x27, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) 253.852603ms ago: executing program 1 (id=14837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22, 0x8, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x1008, 0xfe14) sendto$inet6(r1, &(0x7f0000000080)="800037bb", 0x4, 0x4004000, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000040)={0x80}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000e218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x324) 180.393566ms ago: executing program 2 (id=14838): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000100000010d166ed0d7b55b0d28245748c86b2133fd1eee40e2cc909c2edd70a005813ae50747c3b49f535fb2ebc7b64"], 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400000000000000000300000041ebb5c4678a6f5a45912e41b06558a18c7c8aed30f760c226962c0b2c5abf249f69e0541e2ad11a7dfba6f7226a3c11c094b4fb05cd", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c010) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d6574610000000014000280010001400000000108000240f600001724000180090001006d61737100000000140002800800024000000008080003400000000d1400000011009b3300000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x1d, 0x2, 0x6) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="e9e528bd7000fbdbdf25050000001400018008000500010000000400010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r11, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000891) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100003}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xa8, r12, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x616}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40001b}, @TIPC_NLA_PROP_WIN={0xffffffffffffff49, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80ad883f9db0fcf5}, 0x4004005) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r13, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendto$packet(r9, &(0x7f0000000080)="8c64d74ea8dcdd7e90", 0x9, 0x8040, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840) 99.897782ms ago: executing program 4 (id=14839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x10}}, 0x0) 3.114501ms ago: executing program 4 (id=14840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, r1, 0x5, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, r1, 0x5, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) 0s ago: executing program 1 (id=14841): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="a694e188a360d4ff5be0744a6c1550ef0ba87aae8ae08b824ffc250595229b4dab5bbc819710f6c903e31b548360d7b80085201d353d31c7063d7ed6e0b57676883cd19d10e38fe8608aa198fe435a399486acdfa9343987b48af6061841d321107f6c01ebf8", 0x66}, {&(0x7f00000000c0)="cfde8de7595dc66ef04595e7d30e0e8cfb13506df5f7ef646041a0b548d6d9849dde7b4e791c27b121a49aa32f2d539f09fdaaaead4d9b8aa272807af81fd0efd0e73cfd44252e911bfcee203c3c8983804fcd4586e741c146234d882f0811a8661b", 0x62}, {&(0x7f0000000180)="64d57d9e147cb3b834eca4d5ea7d569f5993cbccf401f5cb86b675ef8be9a2c406b7618244e8c90488d5b4adac1e718c2ca3cf0b7451451823d5c9efd1b23206c161ea539d2ed4f5903a99225ec5ea86b5e9c55b408f933b0bc7208dc91bef9aeeb2126ab5af1bb59b846c875ccdfd0da43336f8048d2443e7222438a02b37d7114ce7efd0bdb5ad88623c9cb69f2e5c68137a580daa2b", 0x97}], 0x3) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="a694e188a360d4ff5be0744a6c1550ef0ba87aae8ae08b824ffc250595229b4dab5bbc819710f6c903e31b548360d7b80085201d353d31c7063d7ed6e0b57676883cd19d10e38fe8608aa198fe435a399486acdfa9343987b48af6061841d321107f6c01ebf8", 0x66}, {&(0x7f00000000c0)="cfde8de7595dc66ef04595e7d30e0e8cfb13506df5f7ef646041a0b548d6d9849dde7b4e791c27b121a49aa32f2d539f09fdaaaead4d9b8aa272807af81fd0efd0e73cfd44252e911bfcee203c3c8983804fcd4586e741c146234d882f0811a8661b", 0x62}, {&(0x7f0000000180)="64d57d9e147cb3b834eca4d5ea7d569f5993cbccf401f5cb86b675ef8be9a2c406b7618244e8c90488d5b4adac1e718c2ca3cf0b7451451823d5c9efd1b23206c161ea539d2ed4f5903a99225ec5ea86b5e9c55b408f933b0bc7208dc91bef9aeeb2126ab5af1bb59b846c875ccdfd0da43336f8048d2443e7222438a02b37d7114ce7efd0bdb5ad88623c9cb69f2e5c68137a580daa2b", 0x97}], 0x3) (async) 0s ago: executing program 0 (id=14842): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @multicast2}}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) close(r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000080)=0x7fffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x5, 0x0) recvfrom$unix(r4, &(0x7f0000000100)=""/50, 0x32, 0x120, 0x0, 0x0) r6 = socket$inet(0x2, 0x6, 0x9) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendto$l2tp6(r2, &(0x7f0000000240)="88d780ed021752b05df21f", 0xb, 0x4000001, &(0x7f0000000280)={0xa, 0x0, 0x3f37, @local, 0x7fffffff, 0x1}, 0x20) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f00000002c0)={0x3b, 0x0, 0x8, 0xc, 0x2, 0x81}) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x23}, @multicast2, 0x0, "a2a2323130a12f7a7962cebbcb6778394bb41256e0d921b9100678aebee1efe4", 0x7, 0x9, 0x6bbe, 0x6}, 0x3c) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000340)={0x0, 0x5, [0x3, 0x7, 0x9, 0x4, 0x75, 0x83]}) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000003c0)={{}, 0x7fffffffffffffff, 0x86, 0x6}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x4c}}, 0x4000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000c80)={0x0, 0x7}, &(0x7f0000000cc0)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000d80)={&(0x7f0000000540)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000580)="9cabd21f7793b55181c7df58d66a5eea58858b083f0ab467119a8f3f5dfc479e076a9f04f97b1018c476d1b057d678070158d84b5dee15384a3faa2a47ab6e9653517d51247dba4c87edaf", 0x4b}, {&(0x7f0000000600)="67b8ab7b78de8a11a7c1ac0fda8d260445c6fc702ec4848112553d9383ad", 0x1e}, {&(0x7f0000000640)="0b5337e09b87c192dc0bc425c5e5e755b4853b6d084d1726573aae3aa7c8e7d3802ebc6c74e8e09cd421406b05b5db08d5787b5978913978dd9bf9ef9a6354d83a4522c978877d1c1b044dccb537cda7f2983e5619b3d08394ab7c001ec71901390ad34a9c72f0059e67f7fc0d6c6f8d72f3", 0x72}, {&(0x7f00000006c0)="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", 0xfa}, {&(0x7f00000007c0)="b209063c390fadbb8b5609c95e7f9306fa8f8557878d53499716b88f1553b726f7954bfe64936ca541a8e511c91fa0b08071d7d45a655a28104dda5cff45e3b09d0bfd1bdb367c3831337713139b1163", 0x50}, {&(0x7f0000000840)="565feaa6fdccd82660ee73ad25eee99a2d741b2a753084c3d1cbcb86f057851fbdd522ac316ceb788c84ccb6fae636004bd2878a4ffb78fe03de0fc275f735729e7224a37f441abbb87e9aad8c8073c9a1e03c8edf49281e8496ecfefe16cf36fe2b396ea0430273496dc6efb988b63a0c7caaa58cb5c59c49f3828f193d8ee614eeb01a3867dca0514fc00304605270e4d894e42af98002cec145b5426d5811e4c2f080a190ffcc0ffa3f4b6624d8e05014b76da2bf7c6ae4aa00b47ebc27f1e7d9", 0xc2}, {&(0x7f0000000940)="27900ce5d133f80f607221becf64294c38327a0d684f98daf0701dc81b8098ba72f7dfb2b9bcb8de069a24a858ef10d6292e14f35e3850b7fb397eee207a9e74353e9fe7a1868fc210cbb7cafc208936d2655c104f542ad5fac18f1d46707fceb96a18e1653d1b330abf405f2e6c310d83b06714787283aa5d674193b3726bd386f203a9ac040350324d7eb35cf762ca2c6115f689eebf7b56855ede349a0aff718a99ed0fcbcfe6a30771a55dca904ad8adf4f463bcdb064341d36f1504c6c5b44e45c1b4e4efbc4dd04ca3a7d365f69624139cf771a172d3872194ae410c5cf0a79fe6ca6682391b7c6d130723", 0xee}, {&(0x7f0000000a40)="2efefdab624ab17cb39a3e6eb3bd6632e90734c948c664dbbf6ee155029a8067749a06eb656586fbc239606465dafd0cad80b46e73dc546413a0313df8ebd3a19a9b6b79e47288713f8885da4c73e5792605957a208903c10276b8fece3629ca3e07fe67348d895296223e58506a204c8af57263077a216a45c0f4b1b216c0769e7be20105ee9ba4e1939bc58994415a5e0d665a5c2320b65b821dca2faa9c07fe061645bd68d4c4f4a4de9d03f42ea252c1036a3713ad65f1b2d2f95f0f3b84345c65b896bc266cc3c547c70afb", 0xce}, {&(0x7f0000000b40)="3a79c11ab6c23c448da5f69f53c23db25224d17659e7f2bf6ebfc84b53aa1051dd9136a5fd21e69d2901d03c2056850e2c36d3c9659808517a994d75c4cd5a41786bc49b1cd367b6c016e91340722bce", 0x50}], 0x9, &(0x7f0000000d00)=[@sndrcv={0x30, 0x84, 0x1, {0xfffa, 0x6b, 0x820b, 0x7, 0x9, 0x6, 0x200, 0x9, r8}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x68, 0x140080c1}, 0x20000000) socket$key(0xf, 0x3, 0x2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000dc0)={0x40, 0x3, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000e00)={0x0, 0x7ff, 0x800, 0x8001}, 0x8) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000f40)={0x2, @rand_addr=0x64010101, 0x4e23, 0x3, 'ovf\x00', 0x30, 0x1, 0x74}, 0x2c) write$bt_hci(r2, &(0x7f0000000f80)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x4}}}, 0x5) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000fc0)={0x0, @null, @bpq0, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8000, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001040)='pim6reg0\x00', 0x10) kernel console output (not intermixed with test programs): allmulticast mode [ 1286.498770][T20573] team0: Port device team_slave_0 added [ 1286.571194][T11987] hsr_slave_0: left promiscuous mode [ 1286.584018][T20803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12647'. [ 1286.599976][T11987] hsr_slave_1: left promiscuous mode [ 1286.616348][T11987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.638999][T11987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.684555][T20814] netlink: 'syz.0.12649': attribute type 10 has an invalid length. [ 1287.221597][T11987] team0 (unregistering): Port device team_slave_1 removed [ 1287.262306][T11987] team0 (unregistering): Port device team_slave_0 removed [ 1287.489664][ C1] bridge0: port 1(dummy0) entered forwarding state [ 1287.496287][ C1] bridge0: topology change detected, propagating [ 1287.502889][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.510115][ C1] bridge0: topology change detected, propagating [ 1287.653832][T20573] team0: Port device team_slave_1 added [ 1287.683287][T20814] bridge0: port 3(team0) entered blocking state [ 1287.691562][T20814] bridge0: port 3(team0) entered disabled state [ 1287.698148][T20814] team0: entered allmulticast mode [ 1287.703419][T20814] team_slave_0: entered allmulticast mode [ 1287.723999][T20814] team_slave_1: entered allmulticast mode [ 1287.726587][ T5829] Bluetooth: hci5: command tx timeout [ 1287.740013][T20814] team0: entered promiscuous mode [ 1287.745085][T20814] team_slave_0: entered promiscuous mode [ 1287.757454][T20814] team_slave_1: entered promiscuous mode [ 1287.763887][T20814] bridge0: port 3(team0) entered blocking state [ 1287.770299][T20814] bridge0: port 3(team0) entered forwarding state [ 1287.855554][T20845] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12652'. [ 1287.870792][T20573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.900554][T20573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.932519][T20847] netlink: 'syz.2.12650': attribute type 1 has an invalid length. [ 1287.938762][T20573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.941676][T20847] netlink: 280 bytes leftover after parsing attributes in process `syz.2.12650'. [ 1287.999105][T20573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.006619][T20573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.054244][T20573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.334321][T20573] hsr_slave_0: entered promiscuous mode [ 1288.357350][T20573] hsr_slave_1: entered promiscuous mode [ 1288.363926][T20573] debugfs: 'hsr0' already exists in 'hsr' [ 1288.383503][T20573] Cannot create hsr debugfs directory [ 1288.422819][T11987] IPVS: stop unused estimator thread 0... [ 1288.735002][T20890] tun0: tun_chr_ioctl cmd 1074025675 [ 1288.767451][T20890] tun0: persist disabled [ 1288.832839][T20897] netlink: 'syz.1.12664': attribute type 3 has an invalid length. [ 1291.192371][T20937] batadv_slave_1: entered promiscuous mode [ 1291.200933][T20938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.208666][T20938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.253257][T20943] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1291.268910][T20943] __nla_validate_parse: 3 callbacks suppressed [ 1291.268927][T20943] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12671'. [ 1291.359732][T20957] IPv6: NLM_F_CREATE should be specified when creating new route [ 1291.494566][T20962] netlink: 'syz.1.12675': attribute type 2 has an invalid length. [ 1291.704747][T20989] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.12680'. [ 1291.911907][T20991] xt_NFQUEUE: number of total queues is 0 [ 1292.295298][T11987] dvmrp0 (unregistering): left allmulticast mode [ 1292.376395][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12689'. [ 1292.422543][T11987] bridge0 (unregistering): left allmulticast mode [ 1292.985956][T11987] bond0 (unregistering): Released all slaves [ 1293.091399][T11987] bond1 (unregistering): Released all slaves [ 1293.198356][T11987] bond2 (unregistering): Released all slaves [ 1293.212417][T11987] bond3 (unregistering): Released all slaves [ 1293.320798][T11987] bond4 (unregistering): Released all slaves [ 1293.334205][T11987] bond5 (unregistering): Released all slaves [ 1293.449367][T11987] bond6 (unregistering): Released all slaves [ 1293.556533][T11987] bond7 (unregistering): Released all slaves [ 1293.576195][T21002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12684'. [ 1293.627491][T21019] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1293.761650][T21024] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12692'. [ 1293.771432][T21029] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12692'. [ 1293.861720][T11987] tipc: Disabling bearer [ 1293.878785][T11987] tipc: Left network mode [ 1294.034943][T21040] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1294.041208][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12695'. [ 1294.208210][ T5829] block nbd3: Receive control failed (result -32) [ 1294.644551][T21069] netlink: 'syz.0.12702': attribute type 9 has an invalid length. [ 1294.781932][T21069] veth1_macvtap: left promiscuous mode [ 1294.800904][T20573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1294.919046][T20573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1295.031662][T20573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1295.045333][T20573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1295.070226][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12705'. [ 1295.174219][ T25] block nbd2: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 30 seconds [ 1295.187078][ T25] block nbd2: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 30 seconds [ 1295.199487][ T25] block nbd2: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 30 seconds [ 1295.210652][ T25] block nbd2: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 30 seconds [ 1295.281885][T21109] netlink: 'syz.4.12709': attribute type 4 has an invalid length. [ 1295.303063][T21109] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12709'. [ 1295.447191][T21109] `: renamed from bond0 (while UP) [ 1295.844216][T20573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.992872][T20573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.052446][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.059647][T11986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.081107][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.088325][T11986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.154476][T11987] hsr_slave_0: left promiscuous mode [ 1296.344107][T11987] pim6reg (unregistering): left allmulticast mode [ 1296.417374][T11987] pimreg3 (unregistering): left allmulticast mode [ 1296.576455][T21175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12721'. [ 1297.512005][T21203] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12723'. [ 1297.603983][T21206] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1297.610459][T21206] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1297.689947][T21203] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12723'. [ 1297.718871][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12726'. [ 1297.768965][T21206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12726'. [ 1298.275578][T20573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.347527][T21249] macvtap1: entered allmulticast mode [ 1298.352945][T21249] veth0_macvtap: entered allmulticast mode [ 1298.363402][T21244] syzkaller1: entered promiscuous mode [ 1298.372540][T21244] syzkaller1: entered allmulticast mode [ 1298.482899][T21256] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12737'. [ 1298.496570][T21256] netlink: 35 bytes leftover after parsing attributes in process `syz.1.12737'. [ 1298.507102][T21256] netlink: 'syz.1.12737': attribute type 5 has an invalid length. [ 1298.514925][T21256] netlink: 35 bytes leftover after parsing attributes in process `syz.1.12737'. [ 1298.536340][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12736'. [ 1298.556824][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12736'. [ 1298.682008][T21266] netlink: 'syz.1.12738': attribute type 21 has an invalid length. [ 1298.737360][T20573] veth0_vlan: entered promiscuous mode [ 1298.781789][T20573] veth1_vlan: entered promiscuous mode [ 1298.858357][T20573] veth0_macvtap: entered promiscuous mode [ 1298.898449][T20573] veth1_macvtap: entered promiscuous mode [ 1298.971356][T20573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.993042][T11986] nci: nci_rx_work: unknown MT 0x7 [ 1299.001157][T20573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.050924][T11987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.066527][T11987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.098635][T11987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.115605][T11987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.873340][T21272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.973019][T21311] netlink: 'syz.0.12746': attribute type 1 has an invalid length. [ 1301.994931][T11994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.007518][T11994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.098385][T21337] __nla_validate_parse: 4 callbacks suppressed [ 1302.098396][T21337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12749'. [ 1302.116134][T21337] netlink: 120 bytes leftover after parsing attributes in process `syz.4.12749'. [ 1302.132105][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12749'. [ 1302.143067][T11984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.151956][T11984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.156979][T21331] sctp: [Deprecated]: syz.1.12747 (pid 21331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1302.156979][T21331] Use struct sctp_sack_info instead [ 1302.328591][T21350] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12585'. [ 1302.376637][T21350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12585'. [ 1302.398451][T21354] netlink: 'syz.4.12753': attribute type 17 has an invalid length. [ 1302.436989][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12753'. [ 1302.464448][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12753'. [ 1302.663019][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12761'. [ 1302.707396][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12761'. [ 1302.763037][T21380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12764'. [ 1302.972623][T21395] netlink: 'syz.0.12769': attribute type 1 has an invalid length. [ 1302.986446][T21395] netlink: 'syz.0.12769': attribute type 11 has an invalid length. [ 1302.986968][T21396] Bluetooth: MGMT ver 1.23 [ 1303.153518][T21414] ip6gre1: entered promiscuous mode [ 1303.159891][T21414] ip6gre1: entered allmulticast mode [ 1303.167008][T21414] team0: Device ip6gre1 is of different type [ 1303.253126][T21416] netlink: 'syz.3.12775': attribute type 2 has an invalid length. [ 1303.602092][T21435] netlink: 'syz.1.12781': attribute type 13 has an invalid length. [ 1303.614805][T21435] netlink: 'syz.1.12781': attribute type 17 has an invalid length. [ 1303.628124][T21435] gre0: left promiscuous mode [ 1303.632919][T21435] gre0: left allmulticast mode [ 1303.690725][T21435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.697941][T21435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.705465][T21435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.712636][T21435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.729392][T21435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1303.915073][T21446] netlink: 'syz.2.12787': attribute type 2 has an invalid length. [ 1303.929261][T21446] : entered promiscuous mode [ 1303.947393][T21448] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1303.960064][T21448] bridge0: port 3(team0) entered disabled state [ 1303.966765][T21448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.974461][T21448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.152459][T21461] netlink: 'syz.0.12791': attribute type 2 has an invalid length. [ 1304.161544][T21461] netlink: 'syz.0.12791': attribute type 1 has an invalid length. [ 1304.263874][T21471] ip6_vti0 speed is unknown, defaulting to 1000 [ 1304.451465][T21487] veth0: entered promiscuous mode [ 1304.466795][T21486] veth0: left promiscuous mode [ 1304.989757][T21471] virt_wifi0 speed is unknown, defaulting to 1000 [ 1305.231255][T21530] sch_fq: defrate 0 ignored. [ 1305.402309][T21543] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1305.461176][T21543] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1306.692847][T21610] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1306.750177][T21610] bond5: entered promiscuous mode [ 1306.755245][T21610] bond5: entered allmulticast mode [ 1306.796897][T21610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1306.812152][T21620] vxcan0: entered allmulticast mode [ 1307.382877][T21656] netlink: 'syz.0.12855': attribute type 11 has an invalid length. [ 1307.401186][T21656] __nla_validate_parse: 28 callbacks suppressed [ 1307.401204][T21656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12855'. [ 1307.526721][T21665] validate_nla: 5 callbacks suppressed [ 1307.526741][T21665] netlink: 'syz.4.12859': attribute type 1 has an invalid length. [ 1307.576781][T21671] netlink: 'syz.2.12861': attribute type 8 has an invalid length. [ 1307.624770][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12863'. [ 1307.650344][T21674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.743080][T21674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.014473][T21691] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12865'. [ 1308.141106][T21703] syzkaller0: entered promiscuous mode [ 1308.149955][T21703] syzkaller0: entered allmulticast mode [ 1308.166462][T21706] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12871'. [ 1308.256495][T21706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1308.438401][T21724] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12877'. [ 1308.493779][T21709] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12870'. [ 1308.527279][T21709] netlink: 'syz.3.12870': attribute type 4 has an invalid length. [ 1308.748558][T21746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12882'. [ 1308.785395][T21746] geneve2: entered promiscuous mode [ 1308.851986][T21738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12880'. [ 1308.861702][T21738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12880'. [ 1309.004358][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12887'. [ 1309.063417][T21762] team0 (unregistering): Port device team_slave_0 removed [ 1309.159557][T21762] team0 (unregistering): Port device team_slave_1 removed [ 1309.174592][T21770] 8021q: VLANs not supported on sit0 [ 1309.822585][T21815] bond1: entered promiscuous mode [ 1309.827969][T21815] bond1: entered allmulticast mode [ 1309.833420][T21815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1309.845352][T21817] macvlan2: entered promiscuous mode [ 1309.850960][T21817] macvlan2: entered allmulticast mode [ 1309.858487][T21817] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1309.923027][T21807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.952611][T21810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1310.226912][T21813] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1310.238146][T21813] bond0 (unregistering): Released all slaves [ 1312.304866][T21779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1312.470810][T21835] openvswitch: netlink: Key type 293 is out of range max 32 [ 1312.494082][T21842] __nla_validate_parse: 4 callbacks suppressed [ 1312.494099][T21842] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12907'. [ 1312.530703][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12905'. [ 1312.622491][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12910'. [ 1312.690383][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12910'. [ 1312.874536][T21867] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12913'. [ 1313.114056][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12919'. [ 1313.163347][T21889] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1313.397581][T21902] netlink: 'syz.0.12923': attribute type 10 has an invalid length. [ 1313.514660][T21902] veth0_macvtap: left promiscuous mode [ 1313.788974][T21924] netlink: 'syz.0.12929': attribute type 16 has an invalid length. [ 1313.801614][T21924] netlink: 'syz.0.12929': attribute type 3 has an invalid length. [ 1313.810672][T21924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12929'. [ 1313.976610][T21934] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1313.984025][T21934] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1314.076788][T21947] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1314.087006][T21945] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 1314.170196][T21953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1314.216689][T21955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12937'. [ 1314.257262][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12938'. [ 1314.362339][T21963] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1314.844319][T21990] team1: entered promiscuous mode [ 1314.853973][T21990] team1: entered allmulticast mode [ 1315.454313][T22049] tun0: tun_chr_ioctl cmd 1074025675 [ 1315.466266][T22049] tun0: persist disabled [ 1315.678364][T22065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1315.687741][T22065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1315.698625][T22065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1315.708358][T22065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1315.717903][T22070] netlink: 'syz.1.12978': attribute type 29 has an invalid length. [ 1315.729482][T22070] netlink: 'syz.1.12978': attribute type 29 has an invalid length. [ 1315.738695][T22065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1315.757818][T22065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1315.784827][T22073] netlink: 'syz.3.12979': attribute type 1 has an invalid length. [ 1315.794988][T22074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.804032][T22073] netlink: 'syz.3.12979': attribute type 1 has an invalid length. [ 1315.868981][T22079] syzkaller0: entered promiscuous mode [ 1315.874528][T22079] syzkaller0: entered allmulticast mode [ 1315.902131][T22079] netlink: 'syz.1.12981': attribute type 5 has an invalid length. [ 1315.948850][T22079] veth5: entered allmulticast mode [ 1316.155519][T22093] netlink: 'syz.2.12984': attribute type 1 has an invalid length. [ 1316.225497][T22102] netlink: 'syz.3.12988': attribute type 1 has an invalid length. [ 1316.250524][T22100] tipc: Invalid UDP bearer configuration [ 1316.250575][T22100] tipc: Enabling of bearer rejected, failed to enable media [ 1316.356555][T22103] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1316.381206][T22109] bond1: (slave ip6gretap1): making interface the new active one [ 1316.391488][T22109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1316.431665][T22109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1316.464080][T22109] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1316.478088][T22111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1316.494780][T22118] ipt_ECN: cannot use operation on non-tcp rule [ 1317.241724][T22171] syzkaller0: entered promiscuous mode [ 1317.269497][T22171] syzkaller0: entered allmulticast mode [ 1317.282648][T22178] IPVS: length: 4096 != 24 [ 1317.938153][T22233] __nla_validate_parse: 22 callbacks suppressed [ 1317.938174][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13025'. [ 1317.957179][T22234] net_ratelimit: 28 callbacks suppressed [ 1317.957196][T22234] openvswitch: netlink: IP tunnel attribute has 208 unknown bytes. [ 1317.988848][T11987] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.009037][T11987] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.043592][T11987] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.088762][T11987] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1318.513913][T22265] validate_nla: 4 callbacks suppressed [ 1318.513932][T22265] netlink: 'syz.3.13033': attribute type 1 has an invalid length. [ 1318.558414][T22265] bond2: entered promiscuous mode [ 1318.564125][T22265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1318.612710][T22265] bond2: (slave bridge4): making interface the new active one [ 1318.622251][T22265] bridge4: entered promiscuous mode [ 1318.629147][T22265] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1318.695611][T22268] openvswitch: netlink: Message has 93 unknown bytes. [ 1318.725139][T22270] netlink: 'syz.3.13035': attribute type 1 has an invalid length. [ 1318.725562][T22268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1318.749633][T22270] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13035'. [ 1318.804980][T22275] netlink: 'syz.2.13034': attribute type 1 has an invalid length. [ 1318.849348][T22275] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1318.914952][T22275] vlan2: entered promiscuous mode [ 1318.939122][T22275] bond8: entered promiscuous mode [ 1318.944539][T22275] vlan2: entered allmulticast mode [ 1318.959147][T22275] bond8: entered allmulticast mode [ 1318.968878][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13034'. [ 1318.990520][T22288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13039'. [ 1319.024460][T22282] bond8: (slave bridge2): making interface the new active one [ 1319.033707][T22282] bridge2: entered promiscuous mode [ 1319.039997][T22282] bridge2: entered allmulticast mode [ 1319.049031][T22282] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 1319.065551][T22290] syzkaller0: entered promiscuous mode [ 1319.076811][T22290] syzkaller0: entered allmulticast mode [ 1319.109891][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13039'. [ 1319.130066][T22293] openvswitch: netlink: Message has 93 unknown bytes. [ 1319.146340][T22293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1319.183349][T22259] delete_channel: no stack [ 1319.299080][T22305] veth0: entered promiscuous mode [ 1319.304657][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13044'. [ 1319.323737][T22306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13043'. [ 1319.434255][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13045'. [ 1319.463942][T22311] team0: left allmulticast mode [ 1319.469062][T22311] team_slave_0: left allmulticast mode [ 1319.474533][T22311] team_slave_1: left allmulticast mode [ 1319.480696][T22311] team0: left promiscuous mode [ 1319.490547][T22311] team_slave_0: left promiscuous mode [ 1319.506666][T22311] team_slave_1: left promiscuous mode [ 1319.524942][T22311] bridge0: port 3(team0) entered disabled state [ 1319.559503][T22311] bridge_slave_1: left allmulticast mode [ 1319.566494][T22311] bridge_slave_1: left promiscuous mode [ 1319.572260][T22311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.610257][T22311] bridge_slave_0: left allmulticast mode [ 1319.618522][T22311] bridge_slave_0: left promiscuous mode [ 1319.643407][T22311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.706923][T22326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1319.717041][T22326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1319.896018][T22334] sctp: [Deprecated]: syz.4.13052 (pid 22334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1319.896018][T22334] Use struct sctp_sack_info instead [ 1321.810243][T22433] IPVS: length: 101 != 24 [ 1322.509800][T22492] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1322.511013][T22476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1322.563814][T22491] netlink: 'syz.3.13095': attribute type 2 has an invalid length. [ 1322.575920][T22491] netlink: 'syz.3.13095': attribute type 4 has an invalid length. [ 1322.878114][T22523] netlink: 'syz.0.13104': attribute type 10 has an invalid length. [ 1322.940829][T22531] xt_hashlimit: size too large, truncated to 1048576 [ 1322.995521][T22529] team0: Port device team_slave_0 removed [ 1323.091493][T22538] gre0: entered promiscuous mode [ 1323.097489][T22538] gre0: entered allmulticast mode [ 1323.101707][T22536] __nla_validate_parse: 7 callbacks suppressed [ 1323.101722][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13109'. [ 1323.123288][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13109'. [ 1323.159844][T22536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.271916][T22542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1323.476881][T22566] IPv6: NLM_F_CREATE should be specified when creating new route [ 1323.577650][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13117'. [ 1323.954339][T22601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13128'. [ 1324.037244][T22608] netlink: 'syz.4.13130': attribute type 2 has an invalid length. [ 1324.045237][T22608] netlink: 'syz.4.13130': attribute type 8 has an invalid length. [ 1324.056510][T22608] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13130'. [ 1324.132337][T22614] tipc: Enabling of bearer rejected, failed to enable media [ 1324.182670][T22614] netlink: 'syz.3.13132': attribute type 29 has an invalid length. [ 1324.214151][T22619] netlink: 'syz.2.13134': attribute type 1 has an invalid length. [ 1324.218862][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13132'. [ 1324.357346][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13137'. [ 1324.477622][T22628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1324.486482][T22639] delete_channel: no stack [ 1324.496453][T22636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13139'. [ 1324.505643][T22623] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13135'. [ 1324.543579][T22632] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 1324.597974][T10931] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.648575][T11974] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.662563][T11974] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.674834][T11974] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1324.865573][T22658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13144'. [ 1324.983346][T22661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1325.090734][T22670] sctp: [Deprecated]: syz.0.13147 (pid 22670) Use of int in max_burst socket option. [ 1325.090734][T22670] Use struct sctp_assoc_value instead [ 1325.247973][ T25] block nbd2: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 60 seconds [ 1325.258868][ T25] block nbd2: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 60 seconds [ 1325.270580][ T25] block nbd2: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 60 seconds [ 1325.281644][ T25] block nbd2: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 60 seconds [ 1325.512801][T22679] netlink: 'syz.2.13149': attribute type 2 has an invalid length. [ 1325.521710][T22679] netlink: 'syz.2.13149': attribute type 2 has an invalid length. [ 1327.714739][T22647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1327.937620][T22699] syzkaller0: entered promiscuous mode [ 1327.944420][T22699] syzkaller0: entered allmulticast mode [ 1328.031582][T22699] Cannot find del_set index 4 as target [ 1328.038378][T22699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1328.093295][T22713] netlink: 'syz.4.13159': attribute type 4 has an invalid length. [ 1328.149269][T22714] netlink: 'syz.4.13159': attribute type 4 has an invalid length. [ 1328.191660][T22717] sit2: entered promiscuous mode [ 1328.198657][T22717] sit2: entered allmulticast mode [ 1328.313133][T22721] netlink: 'syz.1.13163': attribute type 6 has an invalid length. [ 1328.465516][T22735] Cannot find add_set index 2 as target [ 1328.616366][T22748] ip6t_srh: unknown srh match flags 4000 [ 1328.633626][T22748] __nla_validate_parse: 3 callbacks suppressed [ 1328.633643][T22748] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13169'. [ 1328.637905][T22750] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13170'. [ 1328.857273][T22763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13174'. [ 1329.005352][T22778] netlink: 'syz.3.13180': attribute type 2 has an invalid length. [ 1329.017428][T22778] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13180'. [ 1329.055088][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13180'. [ 1329.141656][T22782] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13181'. [ 1329.200457][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13181'. [ 1329.317910][T22789] syzkaller0: entered promiscuous mode [ 1329.324265][T22795] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1329.335968][T22789] syzkaller0: entered allmulticast mode [ 1330.762798][ T5194] udevd[5194]: worker [19362] /devices/virtual/block/nbd2 is taking a long time [ 1331.378520][T22844] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1331.453262][T22852] syzkaller1: entered promiscuous mode [ 1331.462319][T22852] syzkaller1: entered allmulticast mode [ 1331.536067][T22861] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20003 [ 1331.577437][T22866] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1331.705432][T22872] ip6erspan0: entered allmulticast mode [ 1331.747358][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13210'. [ 1331.767570][T22878] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.13211'. [ 1331.788464][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13210'. [ 1331.798875][T22877] netlink: 'syz.4.13211': attribute type 2 has an invalid length. [ 1331.808944][T22877] netlink: 'syz.4.13211': attribute type 2 has an invalid length. [ 1331.809897][T22882] netlink: 'syz.0.13213': attribute type 29 has an invalid length. [ 1331.823966][T22877] netlink: 'syz.4.13211': attribute type 2 has an invalid length. [ 1331.855664][T22877] netlink: 'syz.4.13211': attribute type 2 has an invalid length. [ 1331.936626][T22890] netlink: 'syz.2.13215': attribute type 4 has an invalid length. [ 1332.024430][T22899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1332.434580][T22917] openvswitch: netlink: Flow actions attr not present in new flow. [ 1332.460450][T22923] netlink: 'syz.4.13226': attribute type 10 has an invalid length. [ 1332.497122][T22925] netlink: 'syz.0.13227': attribute type 1 has an invalid length. [ 1332.497226][T22923] team0: Port device dummy0 added [ 1332.573911][T22925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1332.940955][T22959] netlink: 'syz.4.13237': attribute type 9 has an invalid length. [ 1332.949817][T22959] netlink: 'syz.4.13237': attribute type 11 has an invalid length. [ 1333.097139][T30667] Bluetooth: hci3: command 0x0406 tx timeout [ 1333.224803][T22978] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1333.388449][ T30] audit: type=1804 audit(1770403913.349:17): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13247" name="/newroot/254/cgroup.controllers" dev="tmpfs" ino=1305 res=1 errno=0 [ 1333.411837][ T30] audit: type=1800 audit(1770403913.349:18): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13247" name="cgroup.controllers" dev="tmpfs" ino=1305 res=0 errno=0 [ 1333.434637][T22932] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1333.484147][T22989] lo: entered promiscuous mode [ 1333.491900][T22989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1333.508675][T22988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1333.508767][T26792] IPVS: starting estimator thread 0... [ 1333.615880][T22992] IPVS: using max 30 ests per chain, 72000 per kthread [ 1333.840114][T23017] __nla_validate_parse: 8 callbacks suppressed [ 1333.840133][T23017] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13252'. [ 1333.878145][T23009] team0 (unregistering): Port device team_slave_0 removed [ 1333.894108][T23009] team0 (unregistering): Port device team_slave_1 removed [ 1333.977910][T23023] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1334.044886][T23023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13257'. [ 1334.081512][T23023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.151792][T23026] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.13257'. [ 1334.356787][T23064] xt_limit: Overflow, try lower: 271964/0 [ 1334.494349][T23073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1334.507470][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13269'. [ 1334.537256][T23077] atomic_op ffff888034b0e998 conn xmit_atomic 0000000000000000 [ 1334.586114][T23086] openvswitch: netlink: Message has 592 unknown bytes. [ 1334.594015][T23088] ip6t_REJECT: ECHOREPLY is not supported [ 1334.611446][T23088] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13273'. [ 1334.621148][T23086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.664804][T23087] syzkaller0: entered promiscuous mode [ 1334.685175][T23087] syzkaller0: entered allmulticast mode [ 1334.691013][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 1334.710816][T23087] sctp: [Deprecated]: syz.0.13274 (pid 23087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1334.710816][T23087] Use struct sctp_sack_info instead [ 1334.909698][T23103] nbd: must specify at least one socket [ 1335.118985][T23108] mac80211_hwsim hwsim139 : renamed from wlan1 (while UP) [ 1335.260948][T23123] sctp: [Deprecated]: syz.0.13283 (pid 23123) Use of int in maxseg socket option. [ 1335.260948][T23123] Use struct sctp_assoc_value instead [ 1335.365609][T23133] sit0: entered promiscuous mode [ 1335.388610][T23133] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1335.448808][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1335.484064][T23144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1335.498640][T23145] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13289'. [ 1335.572362][T23144] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1335.596920][T23151] netlink: 308 bytes leftover after parsing attributes in process `syz.3.13292'. [ 1335.629196][T23151] netlink: 308 bytes leftover after parsing attributes in process `syz.3.13292'. [ 1335.650113][T23154] gre0: left promiscuous mode [ 1335.777698][T23154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.797990][T23154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.811182][T23154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1335.893385][T23165] IPv6: NLM_F_CREATE should be specified when creating new route [ 1336.221556][T10931] veth0_to_bridge: left allmulticast mode [ 1336.229765][T10931] veth0_to_bridge: left promiscuous mode [ 1336.249107][T10931] bridge0: port 2(veth0_to_bridge) entered disabled state [ 1336.280941][T10931] team0: left allmulticast mode [ 1336.296083][T10931] team_slave_1: left allmulticast mode [ 1336.307508][T10931] team0: left promiscuous mode [ 1336.317464][T10931] team_slave_1: left promiscuous mode [ 1336.335182][T10931] bridge0: port 1(team0) entered disabled state [ 1336.931254][T10931] erspan0 (unregistering): left promiscuous mode [ 1336.964454][T10931] gretap0 (unregistering): left promiscuous mode [ 1336.998837][T10931] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 1337.016883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.437454][T10931] team0: Port device bridge6 removed [ 1337.585190][T10931] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.595650][T10931] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.605480][T10931] ` (unregistering): Released all slaves [ 1337.615611][T10931] bond1 (unregistering): Released all slaves [ 1337.631696][T10931] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1337.640303][T10931] bond2 (unregistering): Released all slaves [ 1337.754857][T10931] bond3 (unregistering): Released all slaves [ 1337.766793][T10931] bond4 (unregistering): Released all slaves [ 1337.786991][T10931] bond0 (unregistering): Released all slaves [ 1337.798850][T10931] bond5 (unregistering): Released all slaves [ 1337.843601][T23211] erspan0: entered promiscuous mode [ 1337.850361][T23211] gretap0: entered promiscuous mode [ 1337.859731][T23211] debugfs: 'hsr1' already exists in 'hsr' [ 1337.865468][T23211] Cannot create hsr debugfs directory [ 1337.996144][T10931] tipc: Disabling bearer [ 1338.001532][T10931] tipc: Disabling bearer [ 1338.037877][T10931] tipc: Left network mode [ 1338.410845][T23258] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1338.658003][T23267] validate_nla: 11 callbacks suppressed [ 1338.658020][T23267] netlink: 'syz.3.13317': attribute type 1 has an invalid length. [ 1338.860969][T23290] __nla_validate_parse: 38 callbacks suppressed [ 1338.860986][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13327'. [ 1338.907056][T23278] veth0: entered promiscuous mode [ 1338.913945][T23277] veth0: left promiscuous mode [ 1338.944643][T23293] syzkaller0: entered promiscuous mode [ 1338.955610][T23293] syzkaller0: entered allmulticast mode [ 1339.019376][T23301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13330'. [ 1339.056842][T23303] openvswitch: netlink: Actions may not be safe on all matching packets [ 1339.117383][T23305] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1339.117383][T23308] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1339.291466][T23313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13334'. [ 1339.695424][T23332] bond2: Removing last ns target with arp_interval on [ 1339.756147][T10931] hsr_slave_0: left promiscuous mode [ 1339.772077][T10931] hsr_slave_1: left promiscuous mode [ 1339.788564][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.814717][T10931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.851962][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.875872][T10931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.898906][T10931] veth1_vlan: left allmulticast mode [ 1339.908729][T10931] vlan0: left allmulticast mode [ 1339.913582][T10931] veth0_vlan: left allmulticast mode [ 1339.919402][T10931] vlan0: left promiscuous mode [ 1339.924489][T10931] veth1_vlan: left promiscuous mode [ 1340.385197][T10931] pim6reg (unregistering): left allmulticast mode [ 1340.712086][T10931] team0 (unregistering): Port device team_slave_1 removed [ 1341.145258][T23358] gre0: entered promiscuous mode [ 1341.160629][T23358] gre0: entered allmulticast mode [ 1341.214274][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13347'. [ 1341.251848][T23362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13347'. [ 1341.509492][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13350'. [ 1341.579981][T23372] netlink: 'syz.3.13350': attribute type 10 has an invalid length. [ 1341.580467][T23387] netlink: 'syz.4.13354': attribute type 1 has an invalid length. [ 1341.699645][T23372] batman_adv: batadv0: Adding interface: netdevsim0 [ 1341.711623][T23372] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.741957][T23372] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1341.792135][T10931] IPVS: stop unused estimator thread 0... [ 1342.057802][T23419] sctp: [Deprecated]: syz.3.13361 (pid 23419) Use of int in max_burst socket option deprecated. [ 1342.057802][T23419] Use struct sctp_assoc_value instead [ 1342.098843][T23413] ip6_vti0 speed is unknown, defaulting to 1000 [ 1342.150460][T23424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13364'. [ 1342.175989][T23424] netlink: 10 bytes leftover after parsing attributes in process `syz.4.13364'. [ 1342.373976][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13366'. [ 1342.767140][T23413] virt_wifi0 speed is unknown, defaulting to 1000 [ 1342.970858][T23444] openvswitch: netlink: IP tunnel dst address not specified [ 1343.050873][T23446] netlink: 'syz.2.13370': attribute type 1 has an invalid length. [ 1343.093165][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13372'. [ 1343.138675][T23446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1343.200489][T23442] bond9: (slave geneve3): making interface the new active one [ 1343.228280][T23442] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 1343.420468][T23461] netlink: 'syz.0.13376': attribute type 1 has an invalid length. [ 1343.614886][ T697] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.626308][ T697] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.637678][T23476] netlink: 'syz.0.13382': attribute type 1 has an invalid length. [ 1343.676077][ T697] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.684820][ T697] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1343.827359][T23483] tipc: Started in network mode [ 1343.834209][T23483] tipc: Node identity 62a3824c96c, cluster identity 4711 [ 1343.863109][T23483] tipc: Enabled bearer , priority 0 [ 1343.884554][T23490] __nla_validate_parse: 7 callbacks suppressed [ 1343.884571][T23490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13386'. [ 1343.905134][T23483] tipc: Disabling bearer [ 1344.021726][T23500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13388'. [ 1344.150057][T23507] bridge2: entered promiscuous mode [ 1344.165452][T23507] bridge2: entered allmulticast mode [ 1344.424887][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13393'. [ 1344.471800][T23527] netlink: 'syz.1.13397': attribute type 1 has an invalid length. [ 1344.564337][T23527] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1344.610739][T23527] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1344.666470][T23527] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1344.767627][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13397'. [ 1344.865472][T23546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13400'. [ 1345.044013][T23546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13400'. [ 1345.047179][T23539] syzkaller0: entered promiscuous mode [ 1345.069525][T23539] syzkaller0: entered allmulticast mode [ 1345.123381][T23562] netlink: 'syz.1.13405': attribute type 1 has an invalid length. [ 1345.193107][T23562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1345.222714][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13406'. [ 1345.810929][T18000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.378069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.386471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.394703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.403005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.411258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.419581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.427805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.436139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.444371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.860578][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13406'. [ 1346.876961][T23573] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1347.085288][T23587] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13411'. [ 1347.217923][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13417'. [ 1347.534444][T23632] geneve4: entered promiscuous mode [ 1347.760958][T23656] veth0: entered promiscuous mode [ 1347.774113][T23655] veth0: left promiscuous mode [ 1347.833678][T23663] netlink: 'syz.1.13432': attribute type 10 has an invalid length. [ 1347.875115][T23663] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1347.973512][T23671] siw: device registration error -23 [ 1348.022860][T23677] netlink: 'syz.3.13439': attribute type 4 has an invalid length. [ 1348.176018][T23684] sctp: [Deprecated]: syz.3.13440 (pid 23684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1348.176018][T23684] Use struct sctp_sack_info instead [ 1348.873396][T23710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.930605][T23710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.944552][T23723] __nla_validate_parse: 59 callbacks suppressed [ 1348.944568][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1348.961594][T23723] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1348.971174][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1349.040705][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13454'. [ 1349.089876][T23719] syzkaller0: entered promiscuous mode [ 1349.095375][T23719] syzkaller0: entered allmulticast mode [ 1349.104666][T23734] siw: device registration error -23 [ 1349.191252][T23741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13456'. [ 1349.227624][T23743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13456'. [ 1349.372155][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13458'. [ 1349.464141][T23757] netlink: 'syz.0.13461': attribute type 32 has an invalid length. [ 1349.488701][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13461'. [ 1349.495177][T23761] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13460'. [ 1350.847782][T26792] net_ratelimit: 19 callbacks suppressed [ 1350.847801][T26792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.009497][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.073318][T23757] bond4: option coupled_control: invalid value (52) [ 1351.098277][T23757] bond4 (unregistering): Released all slaves [ 1351.138511][T23766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13463'. [ 1351.388712][T23784] netlink: 'syz.0.13469': attribute type 21 has an invalid length. [ 1351.441384][T23787] bridge6: port 1(veth0_to_bond) entered blocking state [ 1351.456218][T23787] bridge6: port 1(veth0_to_bond) entered disabled state [ 1351.463383][T23787] veth0_to_bond: entered allmulticast mode [ 1351.464665][T23792] openvswitch: netlink: IP tunnel TTL not specified. [ 1351.494116][T23787] veth0_to_bond: entered promiscuous mode [ 1351.502470][T23792] netlink: 'syz.4.13470': attribute type 28 has an invalid length. [ 1351.516193][T23792] netlink: 'syz.4.13470': attribute type 3 has an invalid length. [ 1351.723765][T23804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.731322][T23804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.739145][T23818] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1351.817764][T23804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.006193][T23818] macvtap2: entered allmulticast mode [ 1352.045292][T28249] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.067063][T28249] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.096351][T28249] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.105242][T28249] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.153983][T28249] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.164239][T28249] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.177467][T28249] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.187127][T28249] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.308731][T23841] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1352.550736][T23848] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1352.732350][T23868] netlink: 'syz.0.13498': attribute type 10 has an invalid length. [ 1352.811386][T23868] bond0: (slave ): Enslaving as an active interface with an up link [ 1352.845452][T23887] pim6reg: entered allmulticast mode [ 1352.852666][T23887] pim6reg: left allmulticast mode [ 1352.864270][T23867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.006061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.014420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.022714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.003358][T23921] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1354.079021][T23924] __nla_validate_parse: 10 callbacks suppressed [ 1354.079034][T23924] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13513'. [ 1355.326870][ T25] block nbd2: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 90 seconds [ 1355.337976][ T25] block nbd2: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 90 seconds [ 1355.348934][ T25] block nbd2: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 90 seconds [ 1355.360941][ T25] block nbd2: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 90 seconds [ 1355.723721][T23872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1355.966660][T23959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13523'. [ 1356.182916][T23971] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13527'. [ 1356.213039][T23970] netlink: 'syz.3.13527': attribute type 1 has an invalid length. [ 1356.262872][T23971] netlink: 124 bytes leftover after parsing attributes in process `syz.3.13527'. [ 1356.323733][T23985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13527'. [ 1356.365955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.374369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.382820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.391228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.406093][T23985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13527'. [ 1356.520831][T24005] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13538'. [ 1356.630818][T23996] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1356.632431][T24012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13541'. [ 1356.661055][T23996] ip6_vti0 speed is unknown, defaulting to 1000 [ 1356.843376][T24020] syzkaller0: entered promiscuous mode [ 1356.854024][T24020] syzkaller0: entered allmulticast mode [ 1356.937271][T24024] tipc: Enabling of bearer rejected, failed to enable media [ 1357.030068][T24032] veth0_to_bond: entered allmulticast mode [ 1357.192071][T24038] syzkaller0: entered promiscuous mode [ 1357.197733][T24038] syzkaller0: entered allmulticast mode [ 1357.256607][T23996] virt_wifi0 speed is unknown, defaulting to 1000 [ 1357.269858][T24038] netlink: 'syz.3.13549': attribute type 11 has an invalid length. [ 1357.278581][T24038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13549'. [ 1357.288217][T24041] netlink: 'syz.4.13551': attribute type 29 has an invalid length. [ 1357.296456][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13551'. [ 1357.636784][T24056] bond5: (slave ip_vti0): Device is not bonding slave [ 1357.652579][T24056] bond5: option active_slave: invalid value (ip_vti0) [ 1357.687143][T24056] bond5 (unregistering): Released all slaves [ 1357.899293][T24064] ip6_vti0 speed is unknown, defaulting to 1000 [ 1358.042992][T24094] netlink: 'syz.4.13564': attribute type 6 has an invalid length. [ 1358.077341][T24094] block nbd0: NBD_DISCONNECT [ 1358.084126][T24094] block nbd0: Send disconnect failed -32 [ 1358.091104][T24094] block nbd0: shutting down sockets [ 1358.489024][T24090] syzkaller0: entered promiscuous mode [ 1358.494644][T24090] syzkaller0: entered allmulticast mode [ 1358.514454][T24092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1359.727436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.735776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.744057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.752377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.668642][T24104] netlink: 'syz.1.13566': attribute type 4 has an invalid length. [ 1360.724570][T24064] virt_wifi0 speed is unknown, defaulting to 1000 [ 1360.874013][T24138] __nla_validate_parse: 8 callbacks suppressed [ 1360.874032][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13573'. [ 1360.890387][T24133] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1360.917408][T24133] bridge0: entered allmulticast mode [ 1360.980134][T24139] pimreg: entered allmulticast mode [ 1361.044898][T24147] netlink: 'syz.1.13575': attribute type 1 has an invalid length. [ 1361.258703][T24154] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 1361.337825][T24154] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 1361.427641][T24156] gretap1: entered promiscuous mode [ 1361.443578][ T697] bond1: left allmulticast mode [ 1361.450992][ T697] bond1: left promiscuous mode [ 1361.456776][ T697] bridge0: port 3(bond1) entered disabled state [ 1361.457109][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13578'. [ 1361.688514][ T697] erspan0 (unregistering): left promiscuous mode [ 1361.716777][ T697] gretap0 (unregistering): left promiscuous mode [ 1361.825090][ T697] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1362.006862][ T697] bond3 (unregistering): (slave bridge2): Releasing active interface [ 1362.014987][ T697] bridge2 (unregistering): left promiscuous mode [ 1362.023829][ T697] bridge2 (unregistering): left allmulticast mode [ 1362.210151][ T697] bond8 (unregistering): (slave bridge6): Releasing active interface [ 1362.413821][ T697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1362.424457][ T697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1362.437208][ T697] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1362.451702][ T697] bond0 (unregistering): Released all slaves [ 1362.555259][ T697] bond1 (unregistering): Released all slaves [ 1362.659277][ T697] bond2 (unregistering): Released all slaves [ 1362.770271][ T697] bond3 (unregistering): Released all slaves [ 1362.873656][ T697] bond4 (unregistering): Released all slaves [ 1362.885446][ T697] bond5 (unregistering): Released all slaves [ 1362.991618][ T697] bond6 (unregistering): Released all slaves [ 1363.089825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.098105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.106431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.125184][ T697] bond7 (unregistering): Released all slaves [ 1363.138100][ T697] bond8 (unregistering): Released all slaves [ 1363.243247][ T697] bond9 (unregistering): Released all slaves [ 1363.256611][ T697] bond10 (unregistering): Released all slaves [ 1363.269145][ T697] bond11 (unregistering): Released all slaves [ 1363.356994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1363.442108][ T697] : left promiscuous mode [ 1363.543600][ T697] tipc: Disabling bearer [ 1363.554048][ T697] tipc: Left network mode [ 1363.719075][T24187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1363.773104][T24190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13588'. [ 1363.800573][T24190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13588'. [ 1363.879271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1363.958853][T24190] ip6_vti0 speed is unknown, defaulting to 1000 [ 1364.419238][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13597'. [ 1364.592278][T24219] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13598'. [ 1364.607386][T24219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13598'. [ 1364.653112][ T697] hsr_slave_0: left promiscuous mode [ 1364.663789][ T697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.684505][ T697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.718734][ T697] veth1_vlan: left allmulticast mode [ 1364.729966][ T697] veth0_macvtap: left promiscuous mode [ 1364.737052][ T697] veth1_vlan: left promiscuous mode [ 1365.691276][T24249] delete_channel: no stack [ 1365.943444][T24270] IPVS: Scheduler module ip_vs_sip not found [ 1365.983076][T24190] virt_wifi0 speed is unknown, defaulting to 1000 [ 1366.006963][ T697] IPVS: stop unused estimator thread 0... [ 1366.303211][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13616'. [ 1366.445954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.454351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.462741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.483808][T24302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13619'. [ 1366.511124][T24303] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13620'. [ 1366.545932][T24303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13620'. [ 1366.555428][T24303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.13620'. [ 1366.612030][T24303] netlink: 'syz.2.13620': attribute type 3 has an invalid length. [ 1366.655767][T24303] netlink: 'syz.2.13620': attribute type 2 has an invalid length. [ 1366.678366][T24303] netlink: 31 bytes leftover after parsing attributes in process `syz.2.13620'. [ 1366.703155][T24316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13624'. [ 1367.511699][T24344] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13632'. [ 1367.582969][T24346] syzkaller0: entered promiscuous mode [ 1367.590651][T24346] syzkaller0: entered allmulticast mode [ 1367.772493][T24362] geneve3: entered promiscuous mode [ 1367.785927][T24362] geneve3: entered allmulticast mode [ 1367.817582][ T700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1367.842273][T24369] netlink: 'syz.0.13637': attribute type 11 has an invalid length. [ 1367.856050][ T700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1367.897673][ T700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1367.933215][ T700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1368.318899][T24387] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1368.430838][T24397] tipc: Started in network mode [ 1368.458364][T24397] tipc: Node identity ac14140f, cluster identity 4711 [ 1368.470298][T24397] tipc: Enabling of bearer rejected, failed to enable media [ 1368.731439][T24411] netlink: 'syz.4.13649': attribute type 4 has an invalid length. [ 1368.740131][T24411] netlink: 193176 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1369.138844][T24440] netlink: 'syz.3.13655': attribute type 15 has an invalid length. [ 1369.390250][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13665'. [ 1369.693805][T24468] gretap1: entered promiscuous mode [ 1369.703224][T24468] gretap1: entered allmulticast mode [ 1369.975467][T24482] netlink: 'syz.3.13674': attribute type 4 has an invalid length. [ 1369.994037][T24482] netlink: 'syz.3.13674': attribute type 1 has an invalid length. [ 1370.519513][T24519] netlink: 'syz.2.13685': attribute type 1 has an invalid length. [ 1370.639185][T24532] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1370.734692][T24536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.742031][T24536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.959960][T24551] netlink: 'syz.2.13695': attribute type 1 has an invalid length. [ 1371.070116][T24555] netlink: 'syz.1.13697': attribute type 23 has an invalid length. [ 1371.518850][T24572] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 1371.537733][T24572] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 1371.663574][T24584] netlink: 'syz.4.13706': attribute type 19 has an invalid length. [ 1371.673687][T24583] ip6t_srh: unknown srh invflags 4000 [ 1371.680210][T24584] __nla_validate_parse: 4 callbacks suppressed [ 1371.680229][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1371.697352][T24584] netlink: 'syz.4.13706': attribute type 19 has an invalid length. [ 1371.713654][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13706'. [ 1371.727296][T24588] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1371.899708][T24595] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1371.984810][T24595] bond10 (unregistering): Released all slaves [ 1372.367428][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13716'. [ 1372.492804][T24624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13718'. [ 1372.615592][T24628] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13719'. [ 1372.678350][T24628] 0{X: renamed from gretap0 [ 1372.685274][T24630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13721'. [ 1372.720296][T24628] 0{X: entered allmulticast mode [ 1372.747857][T24628] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1373.099686][T24648] x_tables: unsorted underflow at hook 3 [ 1373.287175][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13727'. [ 1373.304191][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13729'. [ 1373.476152][T24675] netlink: 'syz.3.13733': attribute type 64 has an invalid length. [ 1373.522324][T24680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13732'. [ 1373.557766][T24680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13732'. [ 1373.774283][T24705] netlink: 'syz.4.13739': attribute type 1 has an invalid length. [ 1373.822885][T24705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1373.924281][T24706] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1373.931928][T24705] vlan2: entered allmulticast mode [ 1373.937860][T24705] veth1: entered allmulticast mode [ 1373.947898][T24705] bond5: (slave vlan2): Opening slave failed [ 1374.351562][T24750] geneve2: entered promiscuous mode [ 1374.357462][T24750] geneve2: entered allmulticast mode [ 1374.483442][T24766] tipc: Started in network mode [ 1374.494030][T24766] tipc: Node identity ac14140f, cluster identity 4711 [ 1374.509336][T24766] tipc: New replicast peer: 255.255.255.255 [ 1374.548730][T24766] tipc: Enabled bearer , priority 10 [ 1374.611127][T24773] syzkaller0: entered promiscuous mode [ 1374.656108][T24773] syzkaller0: entered allmulticast mode [ 1375.139653][T11979] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.167747][T11979] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.177701][T11979] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.187906][T24813] syzkaller0: entered promiscuous mode [ 1375.193519][T24813] syzkaller0: entered allmulticast mode [ 1375.202581][T11979] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.218813][T24813] tipc: Enabled bearer , priority 0 [ 1375.236983][T24813] tipc: Resetting bearer [ 1375.251498][T24812] tipc: Resetting bearer [ 1375.289074][T24812] tipc: Disabling bearer [ 1375.363930][T24818] syzkaller0: entered promiscuous mode [ 1375.386501][T24818] syzkaller0: entered allmulticast mode [ 1376.070925][T24848] netlink: 'syz.4.13784': attribute type 11 has an invalid length. [ 1377.595207][T26792] tipc: Node number set to 2886997007 [ 1377.679108][T24860] __nla_validate_parse: 17 callbacks suppressed [ 1377.679128][T24860] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.13787'. [ 1377.697109][T24860] netlink: Unknown conntrack attr (type=2304, max=9) [ 1377.822916][T24875] netlink: 'syz.3.13791': attribute type 1 has an invalid length. [ 1377.843488][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13791'. [ 1377.863002][T24875] netlink: 658 bytes leftover after parsing attributes in process `syz.3.13791'. [ 1377.867661][T24879] netlink: 'syz.0.13793': attribute type 10 has an invalid length. [ 1377.882787][T24875] netlink: 'syz.3.13791': attribute type 1 has an invalid length. [ 1377.906901][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13791'. [ 1378.121852][T24895] netlink: 'syz.2.13798': attribute type 11 has an invalid length. [ 1378.166480][T24897] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13799'. [ 1378.178627][T24897] netlink: 'syz.4.13799': attribute type 4 has an invalid length. [ 1378.246148][T24903] netlink: 'syz.2.13798': attribute type 10 has an invalid length. [ 1378.266226][T24903] team0: Device ipvlan1 failed to register rx_handler [ 1378.325190][T24907] tipc: Enabling of bearer rejected, failed to enable media [ 1378.390871][T24910] ip6erspan0: entered promiscuous mode [ 1378.444266][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13804'. [ 1378.489186][T24918] sctp: [Deprecated]: syz.3.13805 (pid 24918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1378.489186][T24918] Use struct sctp_sack_info instead [ 1378.596228][T24931] Cannot find map_set index 65533 as target [ 1378.729652][T24935] netlink: 'syz.3.13809': attribute type 19 has an invalid length. [ 1378.740434][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13809'. [ 1378.763098][T28245] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.772523][T28245] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.798037][T24935] netlink: 'syz.3.13809': attribute type 19 has an invalid length. [ 1378.815237][T28245] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.824823][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13809'. [ 1378.849688][T28245] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.938184][T24948] IPv6: addrconf: prefix option has invalid lifetime [ 1378.938758][T24952] netlink: 'syz.1.13816': attribute type 1 has an invalid length. [ 1378.963561][T24952] netlink: 212 bytes leftover after parsing attributes in process `syz.1.13816'. [ 1378.994939][T24956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13818'. [ 1379.112025][T24963] openvswitch: netlink: Message has 8 unknown bytes. [ 1379.135826][T24963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.165239][T24971] 8021q: VLANs not supported on wg2 [ 1379.179816][T24972] xt_l2tp: v2 doesn't support IP mode [ 1379.335637][T24980] openvswitch: netlink: IP tunnel dst address not specified [ 1379.358758][T24980] netlink: 'syz.4.13825': attribute type 1 has an invalid length. [ 1379.414160][T24980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1379.456298][T24992] openvswitch: netlink: Duplicate key (type 32). [ 1379.490387][T24986] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1379.526690][T24980] bond6: (slave gretap1): making interface the new active one [ 1379.557632][T24980] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1379.731889][T25010] netlink: 'syz.4.13833': attribute type 1 has an invalid length. [ 1379.827522][T25010] bond7 (unregistering): Released all slaves [ 1380.022482][T25028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1380.029805][T25028] IPv6: NLM_F_CREATE should be set when creating new route [ 1380.037072][T25028] IPv6: NLM_F_CREATE should be set when creating new route [ 1380.037191][T25028] IPv6: NLM_F_CREATE should be set when creating new route [ 1380.038561][T25028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1380.433013][T25064] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1380.518131][T25069] bond0: entered allmulticast mode [ 1380.525580][T25071] No such timeout policy "syz1" [ 1380.529426][T25069] bond_slave_0: entered allmulticast mode [ 1380.546739][T25069] bond_slave_1: entered allmulticast mode [ 1380.552485][T25069] syz_tun: entered allmulticast mode [ 1380.728552][T25085] bridge_slave_1: left allmulticast mode [ 1380.734237][T25085] bridge_slave_1: left promiscuous mode [ 1380.759437][T25085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.815116][T25085] bridge_slave_0: left allmulticast mode [ 1380.832173][T25085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.951720][T25095] netem: unknown loss type 0 [ 1380.958500][T25095] netem: change failed [ 1381.376268][T25123] ip6_vti0 speed is unknown, defaulting to 1000 [ 1381.880475][T25169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 1382.049869][T25172] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1382.121447][T25123] virt_wifi0 speed is unknown, defaulting to 1000 [ 1382.377179][T25205] xt_NFQUEUE: number of total queues is 0 [ 1382.484775][T25208] syzkaller1: entered promiscuous mode [ 1382.505940][T25208] syzkaller1: entered allmulticast mode [ 1382.783639][T25224] IPv6: sit1: Disabled Multicast RS [ 1383.191393][T25253] sit1: entered promiscuous mode [ 1383.205338][T25253] sit1: entered allmulticast mode [ 1383.434311][T25277] __nla_validate_parse: 12 callbacks suppressed [ 1383.434329][T25277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13916'. [ 1383.471173][T25282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13917'. [ 1383.610631][T25285] 8021q: VLANs not supported on pimreg [ 1383.676515][T25289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13915'. [ 1383.994860][T25305] validate_nla: 7 callbacks suppressed [ 1383.994881][T25305] netlink: 'syz.3.13924': attribute type 1 has an invalid length. [ 1384.093179][T25305] netlink: 280 bytes leftover after parsing attributes in process `syz.3.13924'. [ 1384.120081][T25311] netlink: 'syz.2.13926': attribute type 18 has an invalid length. [ 1384.286524][T30667] Bluetooth: hci0: command 0x0c1a tx timeout [ 1384.392162][T25323] syzkaller1: entered promiscuous mode [ 1384.406398][T25323] syzkaller1: entered allmulticast mode [ 1384.420296][T25324] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13929'. [ 1384.763857][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13939'. [ 1385.101826][T25376] netlink: 'syz.2.13947': attribute type 10 has an invalid length. [ 1385.157050][T25387] xt_hashlimit: size too large, truncated to 1048576 [ 1385.289006][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13947'. [ 1385.405073][T25404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13951'. [ 1385.421564][ T25] block nbd2: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 120 seconds [ 1385.432564][ T25] block nbd2: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 120 seconds [ 1385.444629][ T25] block nbd2: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 120 seconds [ 1385.455866][ T25] block nbd2: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 120 seconds [ 1385.456611][T25404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13951'. [ 1385.586829][T25410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.659528][T25415] Bluetooth: MGMT ver 1.23 [ 1386.231521][T25445] netlink: 'syz.0.13962': attribute type 7 has an invalid length. [ 1386.241880][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13962'. [ 1388.003159][T25431] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1388.005333][T25443] tipc: Enabled bearer , priority 10 [ 1388.023444][T25445] netlink: 'syz.0.13962': attribute type 7 has an invalid length. [ 1388.162634][T25463] netlink: 'syz.4.13966': attribute type 39 has an invalid length. [ 1388.179700][T25464] netlink: 'syz.4.13966': attribute type 39 has an invalid length. [ 1388.571895][T25497] __nla_validate_parse: 1 callbacks suppressed [ 1388.571912][T25497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13974'. [ 1388.761672][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13977'. [ 1388.787357][T25507] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1388.810210][T25510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13979'. [ 1388.856041][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1388.876259][T25514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1388.977928][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1388.987252][T25514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1388.999248][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13985'. [ 1389.110964][T25530] netlink: 'syz.2.13988': attribute type 14 has an invalid length. [ 1389.184661][T26790] tipc: Node number set to 2936110974 [ 1389.215620][T25537] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1389.260458][T25547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13991'. [ 1389.270943][T25547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13991'. [ 1389.293284][T25543] Unknown options in mask b7f2 [ 1389.389734][T25555] netlink: 'syz.2.13994': attribute type 3 has an invalid length. [ 1389.418089][T30667] Bluetooth: hci1: command 0x0419 tx timeout [ 1389.598830][T25571] netlink: 'syz.4.13998': attribute type 7 has an invalid length. [ 1389.738186][T25571] netlink: 'syz.4.13998': attribute type 7 has an invalid length. [ 1389.848204][T25593] netlink: 'syz.2.14006': attribute type 4 has an invalid length. [ 1390.418350][T25640] batman_adv: batadv0: Adding interface: dummy0 [ 1390.425874][T25640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.485747][T25640] batman_adv: batadv0: Interface activated: dummy0 [ 1390.512716][T25645] netlink: 'syz.2.14020': attribute type 4 has an invalid length. [ 1390.538012][T25641] batadv0: mtu less than device minimum [ 1390.562413][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.574108][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.585864][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.597438][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.609199][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.620830][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.632554][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.643597][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.655328][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.667001][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.678760][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.690507][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.702259][T25641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1390.932235][T25659] syzkaller0: entered promiscuous mode [ 1390.937930][T25659] syzkaller0: entered allmulticast mode [ 1391.106349][T25670] veth1_to_bond: entered allmulticast mode [ 1391.443195][T25693] netlink: 'syz.0.14033': attribute type 4 has an invalid length. [ 1391.524327][T25688] : entered promiscuous mode [ 1391.651756][T25699] netlink: 'syz.1.14036': attribute type 10 has an invalid length. [ 1391.678362][T25699] batman_adv: batadv0: Interface deactivated: dummy0 [ 1391.712745][T25699] batman_adv: batadv0: Removing interface: dummy0 [ 1391.886219][ T5829] Bluetooth: hci5: command 0x0405 tx timeout [ 1392.084419][T25727] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1392.154940][T25728] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 1392.262552][T25745] netlink: 'syz.4.14048': attribute type 28 has an invalid length. [ 1392.279955][T25745] netlink: 'syz.4.14048': attribute type 3 has an invalid length. [ 1392.806960][T25778] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1393.073428][T25810] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1393.086179][T25810] bond5 (unregistering): Released all slaves [ 1393.512347][T25844] netlink: 'syz.0.14074': attribute type 11 has an invalid length. [ 1393.512382][T25845] netlink: 'syz.0.14074': attribute type 11 has an invalid length. [ 1393.614029][T25850] __nla_validate_parse: 26 callbacks suppressed [ 1393.614048][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14075'. [ 1393.791013][T25866] vlan0: entered promiscuous mode [ 1393.796790][T25866] vlan0: entered allmulticast mode [ 1393.802850][T25866] hsr_slave_1: entered allmulticast mode [ 1393.916610][T25875] siw: device registration error -23 [ 1394.067686][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14088'. [ 1394.082774][T25890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14088'. [ 1394.246672][T25903] netlink: 42 bytes leftover after parsing attributes in process `syz.4.14095'. [ 1394.373278][T25909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14097'. [ 1394.383255][T25909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14097'. [ 1394.545991][T25928] validate_nla: 5 callbacks suppressed [ 1394.546010][T25928] netlink: 'syz.1.14103': attribute type 1 has an invalid length. [ 1394.568384][T25928] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14103'. [ 1394.578195][T25928] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14103'. [ 1394.632124][T25928] netlink: 'syz.1.14103': attribute type 1 has an invalid length. [ 1394.640145][T25933] netlink: 'syz.3.14104': attribute type 3 has an invalid length. [ 1394.652729][T25933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14104'. [ 1394.671024][T25928] netlink: 618 bytes leftover after parsing attributes in process `syz.1.14103'. [ 1395.034063][T25958] tipc: Enabled bearer , priority 0 [ 1395.051646][T25965] syzkaller0: entered promiscuous mode [ 1395.062494][T25965] syzkaller0: entered allmulticast mode [ 1395.175393][T25958] tipc: Resetting bearer [ 1395.223708][T25956] tipc: Resetting bearer [ 1395.276819][T25956] tipc: Disabling bearer [ 1395.558125][T26004] netlink: 'syz.2.14125': attribute type 18 has an invalid length. [ 1395.882486][T26037] sctp: [Deprecated]: syz.1.14135 (pid 26037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1395.882486][T26037] Use struct sctp_sack_info instead [ 1396.117122][T26050] net_ratelimit: 8 callbacks suppressed [ 1396.117141][T26050] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1396.144246][T26060] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1396.161616][T26055] syzkaller1: entered promiscuous mode [ 1396.171102][T26055] syzkaller1: entered allmulticast mode [ 1396.203514][T26050] geneve5: entered promiscuous mode [ 1396.217509][T26050] geneve5: entered allmulticast mode [ 1396.250889][T26062] netlink: 'syz.1.14142': attribute type 33 has an invalid length. [ 1396.336944][T26058] syzkaller1: entered promiscuous mode [ 1396.343834][T26058] syzkaller1: entered allmulticast mode [ 1396.351605][T11975] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1396.374548][T26065] tipc: Enabling of bearer rejected, failed to enable media [ 1396.384422][T21466] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1396.394961][T21466] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1396.410080][T21466] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1396.889368][T26092] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1396.903735][T26094] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1396.916431][T26094] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1397.087205][T26103] netlink: 'syz.1.14158': attribute type 29 has an invalid length. [ 1398.060474][T26183] xfrm1: entered allmulticast mode [ 1398.149599][T26181] syzkaller1: entered promiscuous mode [ 1398.155209][T26181] syzkaller1: entered allmulticast mode [ 1398.268608][T26201] netlink: 'syz.0.14190': attribute type 1 has an invalid length. [ 1398.342709][T26201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1398.427255][T26207] bond5: (slave geneve3): making interface the new active one [ 1398.461198][T26207] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1398.608173][T26224] bond6 (unregistering): Released all slaves [ 1398.650327][T26207] IPVS: Unknown mcast interface: ip6gretap0 [ 1398.914731][T26249] __nla_validate_parse: 21 callbacks suppressed [ 1398.914749][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14203'. [ 1399.149470][T26266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14206'. [ 1399.221639][T26235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1399.244854][T26235] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1399.297134][T26266] team1: entered promiscuous mode [ 1399.302491][T26266] team1: entered allmulticast mode [ 1399.316204][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14207'. [ 1399.316591][T26235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1399.397568][T26235] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1399.529805][T26290] ksmbd: Unknown IPC event: 3, ignore. [ 1399.636231][T26235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1399.645915][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 1399.660061][T26235] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1399.672276][T26287] syzkaller0: entered promiscuous mode [ 1399.685975][T26287] syzkaller0: entered allmulticast mode [ 1399.711538][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14217'. [ 1399.732558][T26299] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14217'. [ 1399.742698][T26298] netlink: 'syz.2.14217': attribute type 5 has an invalid length. [ 1399.751914][T26298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14217'. [ 1399.765392][T26235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1399.776969][T26235] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1399.782412][T26303] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1399.791682][T26296] gre0: left promiscuous mode [ 1399.796686][T26296] gre0: left allmulticast mode [ 1399.898715][T26302] netlink: 'syz.3.14216': attribute type 20 has an invalid length. [ 1399.910080][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14216'. [ 1399.945392][T26302] netlink: 'syz.3.14216': attribute type 20 has an invalid length. [ 1399.953652][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14216'. [ 1400.009769][T26235] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1400.048865][T26235] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1400.150117][T26314] netlink: 'syz.1.14219': attribute type 4 has an invalid length. [ 1400.166820][T26321] netlink: 'syz.3.14221': attribute type 1 has an invalid length. [ 1400.233419][T26321] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14221'. [ 1400.359679][T26337] netlink: 'syz.2.14225': attribute type 11 has an invalid length. [ 1400.492253][T26345] netlink: 'syz.3.14226': attribute type 11 has an invalid length. [ 1400.525559][T26345] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14226'. [ 1400.552604][T26348] pim6reg: entered allmulticast mode [ 1400.583102][T26346] syzkaller0: entered promiscuous mode [ 1400.599373][T26346] syzkaller0: entered allmulticast mode [ 1400.633689][T26348] pim6reg: left allmulticast mode [ 1400.940193][T26372] syzkaller0: entered promiscuous mode [ 1400.946060][T26372] syzkaller0: entered allmulticast mode [ 1400.952493][T26374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1400.998281][T26372] tipc: Enabled bearer , priority 0 [ 1401.029826][T26374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1401.053870][T26371] tipc: Resetting bearer [ 1401.132950][T26371] tipc: Disabling bearer [ 1401.356993][T26399] netlink: 'syz.2.14239': attribute type 24 has an invalid length. [ 1401.482281][T26421] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1401.575169][T26422] pim6reg1: entered promiscuous mode [ 1401.601592][T26422] pim6reg1: entered allmulticast mode [ 1402.053007][T26456] block nbd2: NBD_DISCONNECT [ 1402.086102][T26456] block nbd2: Send disconnect failed -32 [ 1402.104499][T26456] block nbd2: shutting down sockets [ 1402.135801][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.145637][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1402.163145][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.172694][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1402.180535][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.190038][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1402.197869][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.207380][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1402.227263][T19362] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.246409][T19362] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1402.260318][T19362] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.288353][T19362] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1402.306101][T19362] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.306919][T26473] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1402.316773][T19362] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1402.330273][T19362] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.340669][T19362] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1402.348825][T19362] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.358815][T19362] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1402.370016][T19362] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1402.379666][T19362] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1402.388183][T19362] ldm_validate_partition_table(): Disk read failed. [ 1402.396053][T19362] Dev nbd2: unable to read RDB block 0 [ 1402.402159][T19362] nbd2: unable to read partition table [ 1402.423229][T19362] ldm_validate_partition_table(): Disk read failed. [ 1402.470806][T19362] Dev nbd2: unable to read RDB block 0 [ 1402.490951][T19362] nbd2: unable to read partition table [ 1402.678783][T26500] x_tables: ip_tables: state.0 match: invalid size 8 (kernel) != (user) 40 [ 1402.689412][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1402.741911][T26501] netlink: 'syz.1.14266': attribute type 2 has an invalid length. [ 1402.773127][T26505] netlink: 'syz.2.14267': attribute type 1 has an invalid length. [ 1402.889571][T26510] IPv6: sit2: Disabled Multicast RS [ 1404.097252][T26597] syzkaller0: entered promiscuous mode [ 1404.113061][T26597] syzkaller0: entered allmulticast mode [ 1404.388271][T26622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1404.749827][T26653] validate_nla: 3 callbacks suppressed [ 1404.749845][T26653] netlink: 'syz.2.14304': attribute type 58 has an invalid length. [ 1404.777872][T26648] __nla_validate_parse: 17 callbacks suppressed [ 1404.777891][T26648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14305'. [ 1404.815644][T26653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14304'. [ 1404.825611][T26648] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1404.845450][T26661] netlink: 'syz.1.14303': attribute type 1 has an invalid length. [ 1404.864939][T26661] netlink: 'syz.1.14303': attribute type 2 has an invalid length. [ 1404.885776][T26662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14304'. [ 1404.894761][T26662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14304'. [ 1404.952989][T26666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14308'. [ 1405.276428][T26689] ipvlan2: entered allmulticast mode [ 1405.281776][T26689] batadv_slave_1: entered allmulticast mode [ 1405.309929][T26689] batman_adv: batadv0: Adding interface: ipvlan2 [ 1405.329923][T26689] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.381591][T26689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.417201][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14317'. [ 1405.446498][T26689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.462852][T26689] batman_adv: batadv0: Interface activated: ipvlan2 [ 1405.691458][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14321'. [ 1405.712862][T26717] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.14321'. [ 1405.799164][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14324'. [ 1406.242603][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14330'. [ 1406.464800][T26765] netlink: 'syz.4.14335': attribute type 15 has an invalid length. [ 1406.501868][ T697] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1406.502041][T26765] netlink: 'syz.4.14335': attribute type 15 has an invalid length. [ 1406.578963][ T697] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1406.607255][ T697] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1406.727110][ T697] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1406.777314][T26794] netlink: 'syz.4.14340': attribute type 58 has an invalid length. [ 1406.837234][T26783] netlink: 'syz.3.14339': attribute type 13 has an invalid length. [ 1406.871746][T26779] ip6_vti0 speed is unknown, defaulting to 1000 [ 1407.195844][T26815] syzkaller0: entered promiscuous mode [ 1407.201461][T26815] syzkaller0: entered allmulticast mode [ 1407.353564][T26834] sctp: [Deprecated]: syz.0.14349 (pid 26834) Use of int in maxseg socket option. [ 1407.353564][T26834] Use struct sctp_assoc_value instead [ 1407.401624][T26838] netlink: 'syz.2.14348': attribute type 5 has an invalid length. [ 1407.477483][T26838] netlink: 'syz.2.14348': attribute type 83 has an invalid length. [ 1409.750463][T26882] netlink: 'syz.1.14358': attribute type 1 has an invalid length. [ 1409.766243][T26882] netlink: 'syz.1.14358': attribute type 2 has an invalid length. [ 1409.806451][T26882] netlink: 'syz.1.14358': attribute type 1 has an invalid length. [ 1409.931985][T26886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.946032][T26895] netlink: 'syz.0.14360': attribute type 21 has an invalid length. [ 1410.081538][T26901] netlink: 'syz.2.14362': attribute type 13 has an invalid length. [ 1410.112867][T26901] netlink: 'syz.2.14362': attribute type 17 has an invalid length. [ 1410.144508][T26901] gre0: left promiscuous mode [ 1410.157491][T26901] gre0: left allmulticast mode [ 1410.193896][T26901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.232052][T26779] virt_wifi0 speed is unknown, defaulting to 1000 [ 1410.324699][T26915] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002 [ 1410.549850][T26924] __nla_validate_parse: 14 callbacks suppressed [ 1410.549869][T26924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14368'. [ 1411.005508][T26954] openvswitch: netlink: Message has 93 unknown bytes. [ 1411.027190][T26954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1411.057670][T26954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14377'. [ 1411.061129][T26957] syzkaller0: entered promiscuous mode [ 1411.091327][T26957] syzkaller0: entered allmulticast mode [ 1411.156670][T26957] netlink: 'syz.1.14378': attribute type 2 has an invalid length. [ 1411.196815][T26966] siw: device registration error -23 [ 1411.242836][T26973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14383'. [ 1411.256630][T26973] openvswitch: netlink: Flow key attr not present in new flow. [ 1411.280980][T26975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.292754][T26975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.292754][T26973] netlink: 'syz.0.14383': attribute type 1 has an invalid length. [ 1411.315156][T26975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.324863][T26975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.346633][T26975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.367147][T26975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.381277][T26975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14384'. [ 1411.513806][T26985] bond6: option lp_interval: invalid value (0) [ 1411.520495][T26985] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1411.532185][T26985] bond6 (unregistering): Released all slaves [ 1411.990195][T27015] syzkaller0: entered promiscuous mode [ 1412.003223][T27015] syzkaller0: entered allmulticast mode [ 1412.083896][T27017] ip6_vti0 speed is unknown, defaulting to 1000 [ 1412.118832][T27022] openvswitch: netlink: IP tunnel dst address not specified [ 1412.218739][T27025] syzkaller1: entered allmulticast mode [ 1412.584381][T27017] virt_wifi0 speed is unknown, defaulting to 1000 [ 1412.772948][T27056] IPVS: Error connecting to the multicast addr [ 1413.482512][T27090] netlink: 'syz.2.14420': attribute type 10 has an invalid length. [ 1413.493001][T27091] netlink: 'syz.2.14420': attribute type 25 has an invalid length. [ 1413.502253][T27090] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1413.513421][T27090] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1413.546991][T27091] netlink: 'syz.2.14420': attribute type 25 has an invalid length. [ 1413.555099][T28245] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1413.576570][T28245] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1413.585324][T28245] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1413.620463][T28245] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1413.854865][T27118] dvmrp1: entered allmulticast mode [ 1413.911085][T27120] ksmbd: Unknown IPC event: 3, ignore. [ 1414.559724][T27160] openvswitch: netlink: Flow key attr not present in new flow. [ 1414.680396][T27163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1414.743784][T27177] siw: device registration error -23 [ 1414.869933][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1414.898087][T27186] validate_nla: 2 callbacks suppressed [ 1414.898107][T27186] netlink: 'syz.1.14446': attribute type 32 has an invalid length. [ 1415.113494][T27179] netlink: 'syz.2.14442': attribute type 13 has an invalid length. [ 1415.153914][T27186] bond7: option coupled_control: invalid value (52) [ 1415.164296][T27186] bond7 (unregistering): Released all slaves [ 1415.200979][T27202] openvswitch: netlink: Key type 131 is out of range max 32 [ 1415.469878][T27219] Unsupported ieee802154 address type: 0 [ 1415.486855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1415.557346][T27224] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1415.814243][T27243] __nla_validate_parse: 77 callbacks suppressed [ 1415.814265][T27243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14460'. [ 1415.859187][T27243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14460'. [ 1415.869570][T27243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14460'. [ 1416.019368][T27245] team0 (unregistering): Port device team_slave_0 removed [ 1416.072228][T27272] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14467'. [ 1416.086909][T27245] team0 (unregistering): Port device team_slave_1 removed [ 1416.266620][T27281] veth0: entered promiscuous mode [ 1416.278143][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14470'. [ 1416.469859][T27299] netlink: 'syz.1.14475': attribute type 1 has an invalid length. [ 1416.568387][T27305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1416.646490][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14478'. [ 1416.834580][T27323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.890368][T27323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.902607][T27328] netlink: 88 bytes leftover after parsing attributes in process `syz.4.14482'. [ 1416.963589][T27333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14485'. [ 1416.986048][T27333] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1417.019291][T27335] netlink: 'syz.3.14486': attribute type 11 has an invalid length. [ 1417.226728][T27352] openvswitch: netlink: IP tunnel dst address not specified [ 1417.262500][T27314] sock: sock_set_timeout: `syz.2.14480' (pid 27314) tries to set negative timeout [ 1417.262778][T27357] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14489'. [ 1417.300197][T27357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.307471][T27357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.579474][T27378] xt_nat: multiple ranges no longer supported [ 1417.686536][T27390] netlink: 'syz.2.14498': attribute type 10 has an invalid length. [ 1417.694661][T27390] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14498'. [ 1417.793449][T27396] openvswitch: netlink: Flow actions attr not present in new flow. [ 1418.298076][T27415] tipc: Enabled bearer , priority 10 [ 1418.354361][T27404] veth0: entered promiscuous mode [ 1418.400161][T27404] veth0 (unregistering): left promiscuous mode [ 1418.879860][T27450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.016597][T27457] ip6gre2: entered allmulticast mode [ 1419.796589][T27505] batman_adv: batadv0: Adding interface: dummy0 [ 1419.802864][T27505] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.832627][T27505] batman_adv: batadv0: Interface activated: dummy0 [ 1419.844860][T27508] batadv0: mtu less than device minimum [ 1419.852238][T27508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1420.167974][T27531] veth0_virt_wifi: default FDB implementation only supports local addresses [ 1420.493110][T30667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.503909][T30667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.516480][T30667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.534172][T30667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.543418][T30667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1420.626291][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.658667][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.678275][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.695329][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.703638][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1420.815127][T27551] bond11: entered promiscuous mode [ 1420.833620][T27551] bond11: entered allmulticast mode [ 1420.839518][T27551] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1420.858153][T27558] veth0: entered promiscuous mode [ 1420.898848][T27553] veth0: left promiscuous mode [ 1420.997186][T27541] ip6_vti0 speed is unknown, defaulting to 1000 [ 1421.095941][T27569] __nla_validate_parse: 11 callbacks suppressed [ 1421.095961][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14553'. [ 1421.120589][T27575] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14556'. [ 1421.228693][T27579] netlink: 'syz.4.14558': attribute type 1 has an invalid length. [ 1421.281385][T27582] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14559'. [ 1421.316590][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14559'. [ 1421.330889][T27573] ip6_vti0 speed is unknown, defaulting to 1000 [ 1421.381651][T27583] bond12: (slave geneve5): making interface the new active one [ 1421.390359][T27583] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 1421.400055][ T704] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1421.410553][ T704] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1421.420685][ T704] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1421.430567][ T704] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1421.708865][T27541] virt_wifi0 speed is unknown, defaulting to 1000 [ 1421.861506][T27600] netlink: 'syz.3.14564': attribute type 1 has an invalid length. [ 1421.881659][T27600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14564'. [ 1421.899558][T27600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14564'. [ 1422.001334][T27573] virt_wifi0 speed is unknown, defaulting to 1000 [ 1422.241160][T27618] netlink: 'syz.4.14567': attribute type 3 has an invalid length. [ 1422.253256][T27541] chnl_net:caif_netlink_parms(): no params data found [ 1422.264883][T27613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14567'. [ 1422.621385][T27541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.638765][T27541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.676074][T27541] bridge_slave_0: entered allmulticast mode [ 1422.686176][T27541] bridge_slave_0: entered promiscuous mode [ 1422.722602][T27541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.731693][T27541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.756350][T27541] bridge_slave_1: entered allmulticast mode [ 1422.767397][T30667] Bluetooth: hci2: command tx timeout [ 1422.794136][T27541] bridge_slave_1: entered promiscuous mode [ 1422.947485][T27541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.962596][T27541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.001890][T27660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14578'. [ 1423.018223][T27541] team0: Port device team_slave_0 added [ 1423.031572][T27541] team0: Port device team_slave_1 added [ 1423.057850][T27541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.064806][T27541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.094792][T27541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.109871][T27541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.117296][T27541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.143734][T27541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.203492][T27541] hsr_slave_0: entered promiscuous mode [ 1423.211070][T27541] hsr_slave_1: entered promiscuous mode [ 1423.303441][T27665] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1423.315220][T27665] bond7 (unregistering): Released all slaves [ 1423.474525][T27541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.496854][T27541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.530043][T27671] 8021q: VLANs not supported on wg2 [ 1423.537788][T27675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14581'. [ 1423.582244][T27677] netlink: 'syz.0.14584': attribute type 1 has an invalid length. [ 1423.610857][T27541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.630884][T27541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.713508][T27677] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1423.750317][T27683] bond7: (slave veth1): Enslaving as an active interface with a down link [ 1423.788601][T27541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.799758][T27541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.843091][T27688] bond7: (slave veth0_to_bond): making interface the new active one [ 1423.891019][T27688] veth0_to_bond: entered promiscuous mode [ 1423.901667][T27688] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1423.934502][T27697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14588'. [ 1423.961032][T27677] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1423.971439][T27677] netlink: 'syz.0.14584': attribute type 1 has an invalid length. [ 1423.982878][T27677] netlink: 'syz.0.14584': attribute type 2 has an invalid length. [ 1424.009018][T27703] net_ratelimit: 18 callbacks suppressed [ 1424.009037][T27703] openvswitch: netlink: Flow key attr not present in new flow. [ 1424.027060][T27541] bond0: (slave netdevsim0): Releasing backup interface [ 1424.040391][T27541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.052093][T27541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.075498][T27695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1424.081930][T27695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1424.104468][T21466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.113783][T21466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.123106][T21466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.167941][T21466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.474120][T27723] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1424.525571][T27541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1424.568151][T27541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1424.589141][T27541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1424.622409][T27541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1424.739135][T27740] veth7: entered promiscuous mode [ 1424.818217][T27755] Cannot find del_set index 4 as target [ 1424.850236][T30667] Bluetooth: hci2: command tx timeout [ 1424.995057][T27541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.043462][T27541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.058577][T28245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.065743][T28245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.092289][ T704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.099516][ T704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.376944][T27774] netlink: 'syz.3.14608': attribute type 1 has an invalid length. [ 1425.439269][T27541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.599465][T27541] veth0_vlan: entered promiscuous mode [ 1425.622776][T27541] veth1_vlan: entered promiscuous mode [ 1425.661736][T27541] veth0_macvtap: entered promiscuous mode [ 1425.673233][T27541] veth1_macvtap: entered promiscuous mode [ 1425.709070][T27541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.740545][T27541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.756601][T21466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.766517][T21466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.784053][T21466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.819913][T21466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.913241][ T700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.931643][ T700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.026838][ T704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.041324][ T704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.086117][T27808] veth0: entered promiscuous mode [ 1426.310079][T27822] __nla_validate_parse: 14 callbacks suppressed [ 1426.310096][T27822] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14622'. [ 1426.335064][T27818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14621'. [ 1426.347753][T27818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14621'. [ 1426.359528][T27818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14621'. [ 1426.728710][T27852] bond13: option min_links: invalid value (18446744073709551614) [ 1426.743866][T27852] bond13: option min_links: allowed values 0 - 2147483647 [ 1426.764486][T27852] bond13 (unregistering): Released all slaves [ 1426.923918][T27864] netlink: 'syz.0.14632': attribute type 21 has an invalid length. [ 1426.936053][T30667] Bluetooth: hci2: command tx timeout [ 1426.946322][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14632'. [ 1427.131971][T27883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14636'. [ 1427.572377][T27911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.703394][T27923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14646'. [ 1427.714703][T27919] syzkaller0: entered promiscuous mode [ 1427.729070][T27919] syzkaller0: entered allmulticast mode [ 1427.821585][T27940] sctp: [Deprecated]: syz.0.14646 (pid 27940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1427.821585][T27940] Use struct sctp_sack_info instead [ 1428.111776][T27959] xt_nat: multiple ranges no longer supported [ 1428.131564][T27952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14650'. [ 1428.174240][T27952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14650'. [ 1428.311099][T27967] ip6_vti0 speed is unknown, defaulting to 1000 [ 1428.696913][T27987] netlink: 'syz.0.14659': attribute type 1 has an invalid length. [ 1428.812173][T27967] virt_wifi0 speed is unknown, defaulting to 1000 [ 1429.006905][T30667] Bluetooth: hci2: command tx timeout [ 1429.077699][T28003] netlink: 'syz.2.14662': attribute type 39 has an invalid length. [ 1429.156137][T28010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14662'. [ 1429.674861][T28024] ip6_vti0 speed is unknown, defaulting to 1000 [ 1429.681891][T28034] bond0: Caught tx_queue_len zero misconfig [ 1430.086507][T28057] netlink: 'syz.0.14676': attribute type 10 has an invalid length. [ 1430.214851][T28057] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1430.238404][T28060] vlan3: entered allmulticast mode [ 1430.243541][T28060] gretap0: entered allmulticast mode [ 1430.463272][T28076] tipc: Enabling of bearer rejected, failed to enable media [ 1430.565456][T28084] syz_tun: entered allmulticast mode [ 1430.833614][T28024] virt_wifi0 speed is unknown, defaulting to 1000 [ 1431.088531][T30667] Bluetooth: hci2: command tx timeout [ 1431.232727][T28124] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1431.376307][T28131] __nla_validate_parse: 3 callbacks suppressed [ 1431.376324][T28131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14698'. [ 1431.818267][T28164] sctp: [Deprecated]: syz.2.14708 (pid 28164) Use of int in maxseg socket option. [ 1431.818267][T28164] Use struct sctp_assoc_value instead [ 1431.833479][T28165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14709'. [ 1431.931799][T28169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14709'. [ 1432.114466][T28175] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14712'. [ 1432.176240][T28185] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14715'. [ 1432.374753][T28199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14717'. [ 1432.402716][T28198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14717'. [ 1432.613113][T28214] ip6t_srh: unknown srh invflags 4000 [ 1432.658553][T28219] netlink: 'syz.3.14724': attribute type 1 has an invalid length. [ 1432.680089][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14724'. [ 1432.734563][T28232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.002774][T28266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14735'. [ 1433.061290][T28270] netlink: 'syz.3.14736': attribute type 6 has an invalid length. [ 1433.283421][T28286] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.14739'. [ 1433.342509][T28287] openvswitch: netlink: Message has 6 unknown bytes. [ 1433.362677][T28286] openvswitch: netlink: Message has 6 unknown bytes. [ 1433.397759][T28288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.102100][ T30] audit: type=1107 audit(1770404014.059:19): pid=28319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1435.019998][T11994] veth0_to_bond: left promiscuous mode [ 1435.799940][T28394] netlink: 'syz.2.14770': attribute type 16 has an invalid length. [ 1435.813358][T28394] netlink: 'syz.2.14770': attribute type 17 has an invalid length. [ 1435.837759][T28397] netlink: 'syz.1.14771': attribute type 1 has an invalid length. [ 1435.845629][T28397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.037348][T28394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.045083][T28394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.342281][T28429] netlink: 'syz.0.14773': attribute type 1 has an invalid length. [ 1436.408533][T28429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.502531][T28394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.522946][T28394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.735089][T11975] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.768088][T11975] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.855495][T28431] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1436.873945][T28433] __nla_validate_parse: 9 callbacks suppressed [ 1436.873963][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14775'. [ 1436.880205][T11975] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.880248][T11975] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.009773][T28433] bond1: option xmit_hash_policy: invalid value (64) [ 1437.058643][T28433] bond1 (unregistering): Released all slaves [ 1437.166517][T28439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.173744][T28439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1437.181359][T28439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.188544][T28439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1437.199851][T28439] bridge0: entered allmulticast mode [ 1437.370027][T28459] x_tables: duplicate underflow at hook 1 [ 1437.404491][T28466] IPv6: NLM_F_CREATE should be specified when creating new route [ 1437.526284][T28470] siw: device registration error -23 [ 1437.582618][T28472] syzkaller0: entered promiscuous mode [ 1437.591632][T28474] xt_policy: too many policy elements [ 1437.596006][T28472] syzkaller0: entered allmulticast mode [ 1437.816878][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14790'. [ 1437.849535][T28486] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1437.929930][T28496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14792'. [ 1438.203011][T28513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14795'. [ 1438.264622][T28518] pim6reg527: entered allmulticast mode [ 1438.288356][T28523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14801'. [ 1438.343429][T28523] netlink: 'syz.3.14801': attribute type 1 has an invalid length. [ 1438.418307][T28530] netlink: 'syz.0.14802': attribute type 10 has an invalid length. [ 1438.644175][T28548] 8021q: VLANs not supported on sit0 [ 1438.833455][T28558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14810'. [ 1438.861880][T28560] netlink: 'syz.4.14811': attribute type 1 has an invalid length. [ 1438.888282][T28561] netlink: 'syz.4.14811': attribute type 1 has an invalid length. [ 1438.896542][T28560] netlink: 'syz.4.14811': attribute type 2 has an invalid length. [ 1438.904501][T28561] netlink: 'syz.4.14811': attribute type 2 has an invalid length. [ 1438.917807][T28560] netlink: 'syz.4.14811': attribute type 1 has an invalid length. [ 1438.928664][T28561] netlink: 'syz.4.14811': attribute type 1 has an invalid length. [ 1438.937569][T28560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14811'. [ 1438.951852][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14811'. [ 1439.097044][T28571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14814'. [ 1439.152387][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14815'. [ 1439.163698][T28575] nbd: must specify a size in bytes for the device [ 1439.402279][T28593] No such timeout policy "syz0" [ 1439.435069][T26791] IPVS: starting estimator thread 0... [ 1439.536575][T28603] IPVS: using max 35 ests per chain, 84000 per kthread [ 1439.627347][T28614] netlink: 'syz.0.14826': attribute type 1 has an invalid length. [ 1439.693641][T28614] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1439.703449][T28618] netlink: 'syz.2.14827': attribute type 21 has an invalid length. [ 1439.759765][T28619] bond9: (slave veth7): Enslaving as an active interface with a down link [ 1439.788752][T28614] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1439.796771][T28614] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1440.038650][T28630] lo: Caught tx_queue_len zero misconfig [ 1440.319814][T28647] delete_channel: no stack [ 1440.475564][T28655] bond1: entered promiscuous mode [ 1440.483472][T28655] bond1: entered allmulticast mode [ 1440.490253][T28655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1440.572549][T28661] [ 1440.574912][T28661] ====================================================== [ 1440.581930][T28661] WARNING: possible circular locking dependency detected [ 1440.588950][T28661] syzkaller #0 Not tainted [ 1440.593351][T28661] ------------------------------------------------------ [ 1440.600352][T28661] syz.0.14842/28661 is trying to acquire lock: [ 1440.606488][T28661] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1440.615628][T28661] [ 1440.615628][T28661] but task is already holding lock: [ 1440.622983][T28661] ffff888088b3ae70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1440.632206][T28661] [ 1440.632206][T28661] which lock already depends on the new lock. [ 1440.632206][T28661] [ 1440.642597][T28661] [ 1440.642597][T28661] the existing dependency chain (in reverse order) is: [ 1440.651596][T28661] [ 1440.651596][T28661] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1440.659578][T28661] _raw_spin_lock_bh+0x36/0x50 [ 1440.664860][T28661] nr_rt_ioctl+0x215/0xf90 [ 1440.669785][T28661] sock_do_ioctl+0x101/0x320 [ 1440.674884][T28661] sock_ioctl+0x5c6/0x7f0 [ 1440.679726][T28661] __se_sys_ioctl+0xfc/0x170 [ 1440.684825][T28661] do_syscall_64+0xe2/0xf80 [ 1440.689834][T28661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.696237][T28661] [ 1440.696237][T28661] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1440.704044][T28661] _raw_spin_lock_bh+0x36/0x50 [ 1440.709323][T28661] nr_rt_device_down+0xbe/0x860 [ 1440.714687][T28661] nr_device_event+0x137/0x150 [ 1440.719957][T28661] notifier_call_chain+0x19d/0x3a0 [ 1440.725572][T28661] __dev_notify_flags+0x16d/0x310 [ 1440.731111][T28661] netif_change_flags+0xe8/0x1a0 [ 1440.736559][T28661] dev_change_flags+0x130/0x260 [ 1440.741917][T28661] dev_ioctl+0x7b4/0x1150 [ 1440.746754][T28661] sock_do_ioctl+0x23e/0x320 [ 1440.751850][T28661] sock_ioctl+0x5c6/0x7f0 [ 1440.756691][T28661] __se_sys_ioctl+0xfc/0x170 [ 1440.761793][T28661] do_syscall_64+0xe2/0xf80 [ 1440.766808][T28661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.773211][T28661] [ 1440.773211][T28661] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1440.781107][T28661] __lock_acquire+0x15a5/0x2cf0 [ 1440.786471][T28661] lock_acquire+0x106/0x330 [ 1440.791485][T28661] _raw_spin_lock_bh+0x36/0x50 [ 1440.796761][T28661] nr_rt_ioctl+0x40c/0xf90 [ 1440.801692][T28661] sock_do_ioctl+0x101/0x320 [ 1440.806785][T28661] sock_ioctl+0x5c6/0x7f0 [ 1440.811631][T28661] __se_sys_ioctl+0xfc/0x170 [ 1440.816732][T28661] do_syscall_64+0xe2/0xf80 [ 1440.821742][T28661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.828139][T28661] [ 1440.828139][T28661] other info that might help us debug this: [ 1440.828139][T28661] [ 1440.838348][T28661] Chain exists of: [ 1440.838348][T28661] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1440.838348][T28661] [ 1440.852156][T28661] Possible unsafe locking scenario: [ 1440.852156][T28661] [ 1440.859591][T28661] CPU0 CPU1 [ 1440.864939][T28661] ---- ---- [ 1440.870284][T28661] lock(&nr_node->node_lock); [ 1440.875037][T28661] lock(nr_node_list_lock); [ 1440.882130][T28661] lock(&nr_node->node_lock); [ 1440.889399][T28661] lock(nr_neigh_list_lock); [ 1440.894069][T28661] [ 1440.894069][T28661] *** DEADLOCK *** [ 1440.894069][T28661] [ 1440.902199][T28661] 2 locks held by syz.0.14842/28661: [ 1440.907468][T28661] #0: ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1440.916952][T28661] #1: ffff888088b3ae70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1440.926605][T28661] [ 1440.926605][T28661] stack backtrace: [ 1440.932479][T28661] CPU: 0 UID: 0 PID: 28661 Comm: syz.0.14842 Not tainted syzkaller #0 PREEMPT(full) [ 1440.932499][T28661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1440.932510][T28661] Call Trace: [ 1440.932516][T28661] [ 1440.932524][T28661] dump_stack_lvl+0xe8/0x150 [ 1440.932547][T28661] print_circular_bug+0x2e1/0x300 [ 1440.932565][T28661] check_noncircular+0x12e/0x150 [ 1440.932583][T28661] __lock_acquire+0x15a5/0x2cf0 [ 1440.932606][T28661] ? irqentry_exit+0x59c/0x620 [ 1440.932622][T28661] ? lockdep_hardirqs_on+0x7a/0x110 [ 1440.932638][T28661] ? irqentry_exit+0x59c/0x620 [ 1440.932653][T28661] ? trace_irq_disable+0x37/0x100 [ 1440.932672][T28661] ? nr_rt_ioctl+0x40c/0xf90 [ 1440.932690][T28661] lock_acquire+0x106/0x330 [ 1440.932709][T28661] ? nr_rt_ioctl+0x40c/0xf90 [ 1440.932729][T28661] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1440.932747][T28661] ? nr_rt_ioctl+0x40c/0xf90 [ 1440.932770][T28661] _raw_spin_lock_bh+0x36/0x50 [ 1440.932791][T28661] ? nr_rt_ioctl+0x40c/0xf90 [ 1440.932811][T28661] nr_rt_ioctl+0x40c/0xf90 [ 1440.932835][T28661] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1440.932858][T28661] ? apparmor_capable+0x137/0x1a0 [ 1440.932883][T28661] ? capable+0x88/0xe0 [ 1440.932897][T28661] ? nr_ioctl+0x1b1/0x3b0 [ 1440.932914][T28661] sock_do_ioctl+0x101/0x320 [ 1440.932930][T28661] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1440.932944][T28661] ? do_futex+0x333/0x420 [ 1440.932968][T28661] sock_ioctl+0x5c6/0x7f0 [ 1440.932991][T28661] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.933013][T28661] ? __fget_files+0x2a/0x420 [ 1440.933029][T28661] ? __fget_files+0x3a0/0x420 [ 1440.933045][T28661] ? __fget_files+0x2a/0x420 [ 1440.933062][T28661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1440.933081][T28661] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.933106][T28661] __se_sys_ioctl+0xfc/0x170 [ 1440.933128][T28661] do_syscall_64+0xe2/0xf80 [ 1440.933144][T28661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.933158][T28661] ? trace_irq_disable+0x37/0x100 [ 1440.933173][T28661] ? clear_bhb_loop+0x60/0xb0 [ 1440.933189][T28661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.933204][T28661] RIP: 0033:0x7ff5eef9aeb9 [ 1440.933219][T28661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.933233][T28661] RSP: 002b:00007ff5efe01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.933250][T28661] RAX: ffffffffffffffda RBX: 00007ff5ef215fa0 RCX: 00007ff5eef9aeb9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1440.933262][T28661] RDX: 0000200000000040 RSI: 00000000000089e2 RDI: 0000000000000005 [ 1440.933273][T28661] RBP: 00007ff5ef008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1440.933283][T28661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.933293][T28661] R13: 00007ff5ef216038 R14: 00007ff5ef215fa0 R15: 00007ffff9893158 [ 1440.933311][T28661] [ 1441.706652][T20180] bond0: (slave syz_tun): Releasing backup interface [ 1441.736680][T20180] syz_tun (unregistering): left allmulticast mode [ 1441.854733][T11975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.873046][T11975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1441.892270][T11975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1441.902896][T11975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1441.955137][T27541] syz_tun (unregistering): left allmulticast mode [ 1441.972257][T11975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.982990][T11975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1441.995087][T11975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1442.006451][T11975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1442.088017][T11975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.099235][T11975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1442.110768][T11975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1442.121803][T11975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1442.175358][T11975] batman_adv: batadv0: Removing interface: netdevsim0 [ 1442.183069][T11975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.193420][T11975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1442.203773][T11975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1442.214767][T11975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1442.303016][T11975] veth0_to_bond: left allmulticast mode [ 1442.309430][T11975] veth0_to_bond: left promiscuous mode [ 1442.317955][T11975] bridge6: port 1(veth0_to_bond) entered disabled state [ 1442.360084][T11975] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1442.664645][T11975] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 1442.673063][T11975] bridge4 (unregistering): left promiscuous mode [ 1442.828642][T11975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.838299][T11975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.847722][T11975] bond0 (unregistering): Released all slaves [ 1442.855153][T11975] bond1 (unregistering): Released all slaves [ 1442.955805][T11975] bond2 (unregistering): Released all slaves [ 1443.051734][T11975] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1443.060747][T11975] bond3 (unregistering): (slave veth9): Releasing backup interface [ 1443.069680][T11975] bond3 (unregistering): Released all slaves [ 1443.078496][T11975] bond4 (unregistering): Released all slaves [ 1443.088526][T11975] bond5 (unregistering): Released all slaves [ 1443.097846][T11975] bond6 (unregistering): Released all slaves [ 1443.159930][T11975] tipc: Left network mode [ 1443.552012][T11975] hsr_slave_0: left promiscuous mode [ 1443.567406][T11975] hsr_slave_1: left promiscuous mode [ 1443.573170][T11975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.581813][T11975] batman_adv: batadv0: Interface deactivated: dummy0 [ 1443.588654][T11975] batman_adv: batadv0: Removing interface: dummy0 [ 1443.625285][T11975] pimreg (unregistering): left allmulticast mode [ 1444.500270][T11975] IPVS: stop unused estimator thread 0... [ 1444.642191][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.660359][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1444.671589][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.682178][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1444.695090][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1444.755240][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.768463][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1444.780143][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.790674][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1444.801595][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1444.867946][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.878621][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1444.890602][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.900958][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1444.911795][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1444.982929][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.994175][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1445.006347][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.017283][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1445.027781][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1445.112394][T11975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.123419][T11975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.161331][T11975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.172698][T11975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.231010][T11975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.241620][T11975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.338052][T11975] bond0: (slave netdevsim0): Releasing backup interface [ 1445.347121][T11975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.357614][T11975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.765959][T11975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.776675][T11975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.831255][T11975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.841805][T11975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.911514][T11975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.922038][T11975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.992542][T11975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.003650][T11975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.100162][T11975] bridge_slave_1: left allmulticast mode [ 1446.109109][T11975] bridge_slave_1: left promiscuous mode [ 1446.114792][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.123716][T11975] bridge_slave_0: left allmulticast mode [ 1446.130814][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.152501][T11975] bridge_slave_1: left allmulticast mode [ 1446.158241][T11975] bridge_slave_1: left promiscuous mode [ 1446.163912][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.177036][T11975] bridge_slave_0: left allmulticast mode [ 1446.182684][T11975] bridge_slave_0: left promiscuous mode [ 1446.188738][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.204229][T11975] bridge_slave_1: left allmulticast mode [ 1446.210075][T11975] bridge_slave_1: left promiscuous mode [ 1446.216021][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.224493][T11975] bridge_slave_0: left allmulticast mode [ 1446.231210][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.525564][T11975] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1446.607529][T11975] bond12 (unregistering): (slave geneve5): Releasing active interface [ 1447.060498][T11975] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1447.070158][T11975] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1447.079962][T11975] ` (unregistering): Released all slaves [ 1447.176702][T11975] bond1 (unregistering): left allmulticast mode [ 1447.182950][T11975] bond1 (unregistering): left promiscuous mode [ 1447.196428][T11975] team0: Port device macvlan2 removed [ 1447.203585][T11975] bond1 (unregistering): Released all slaves [ 1447.299191][T11975] bond2 (unregistering): Released all slaves [ 1447.394422][T11975] bond3 (unregistering): Released all slaves [ 1447.496759][T11975] bond4 (unregistering): Released all slaves [ 1447.506156][T11975] bond0 (unregistering): Released all slaves [ 1447.604121][T11975] bond5 (unregistering): Released all slaves [ 1447.702419][T11975] bond6 (unregistering): Released all slaves [ 1447.799019][T11975] bond7 (unregistering): Released all slaves [ 1447.897369][T11975] bond8 (unregistering): Released all slaves [ 1447.992802][T11975] bond9 (unregistering): Released all slaves [ 1448.001696][T11975] bond10 (unregistering): Released all slaves [ 1448.098507][T11975] bond11 (unregistering): Released all slaves [ 1448.107466][T11975] bond12 (unregistering): Released all slaves [ 1448.199214][T11975] dvmrp1 (unregistering): left allmulticast mode [ 1448.207498][T11975] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1448.362164][T11975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.372283][T11975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.382424][T11975] bond0 (unregistering): (slave ): Releasing backup interface [ 1448.392738][T11975] bond0 (unregistering): Released all slaves [ 1448.490186][T11975] bond1 (unregistering): Released all slaves [ 1448.498883][T11975] bond2 (unregistering): Released all slaves [ 1448.507775][T11975] bond3 (unregistering): Released all slaves [ 1448.516956][T11975] bond4 (unregistering): (slave veth3): Releasing active interface [ 1448.526402][T11975] bond4 (unregistering): Released all slaves [ 1448.538590][T11975] bond5 (unregistering): Released all slaves [ 1448.638774][T11975] bond6 (unregistering): Released all slaves [ 1448.650063][T11975] bond7 (unregistering): (slave veth1): Releasing active interface [ 1448.658609][T11975] veth0_to_bond: entered promiscuous mode [ 1448.665814][T11975] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1448.675494][T11975] bond7 (unregistering): (slave veth5): Releasing active interface [ 1448.686398][T11975] bond7 (unregistering): Released all slaves [ 1448.694803][T11975] bond8 (unregistering): Released all slaves [ 1448.794243][T11975] bond9 (unregistering): (slave veth7): Releasing active interface [ 1448.803161][T11975] bond9 (unregistering): Released all slaves [ 1449.041026][T11975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.050433][T11975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.059607][T11975] bond0 (unregistering): Released all slaves [ 1449.069901][T11975] bond1 (unregistering): Released all slaves [ 1449.144037][T11975] erspan0 (unregistering): left promiscuous mode [ 1449.160106][T11975] gretap0 (unregistering): left promiscuous mode [ 1449.461442][T11975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.470358][T11975] bond_slave_0: left allmulticast mode [ 1449.477079][T11975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.486621][T11975] bond_slave_1: left allmulticast mode [ 1449.492629][T11975] bond0 (unregistering): Released all slaves [ 1449.587986][T11975] bond1 (unregistering): Released all slaves [ 1449.683209][T11975] bond2 (unregistering): Released all slaves [ 1449.691846][T11975] bond3 (unregistering): Released all slaves [ 1449.787551][T11975] bond4 (unregistering): Released all slaves [ 1449.796200][T11975] bond5 (unregistering): Released all slaves [ 1449.891126][T11975] bond6 (unregistering): Released all slaves [ 1449.900135][T11975] bond7 (unregistering): Released all slaves [ 1450.076284][T11975] tipc: Disabling bearer [ 1450.082567][T11975] tipc: Disabling bearer [ 1450.109898][T11975] tipc: Left network mode [ 1450.114618][T11975] tipc: Left network mode [ 1450.134702][T11975] tipc: Left network mode [ 1450.180454][T11975] IPVS: stopping master sync thread 21019 ...