last executing test programs: 11.816453553s ago: executing program 4 (id=4124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @random="e15e1cfb536c"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0xe, 0x7, 0x6364, 0x1, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0xd054}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0x8, 0x2, 0x5, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0) 11.710548869s ago: executing program 1 (id=4126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) shutdown(r1, 0x1) sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000000c0)="a9050000000074640006000000003552bde5c064", 0x14}], 0x1}}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x3a, 0xb, 0x70bd26, 0x4002, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[{0x0, 0x2, 0x9, 0x7}, {0x5, 0x4, 0x2, 0x1}, {0x0, 0x3, 0xe, 0xb}, {0x1, 0x2, 0x7, 0x5}], 0x10, 0x10}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0xd, 0x1, 0x67e6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x8, 0x48, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r8}, 0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r9, 0x0, 0xd, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r6, r2, 0x5, 0x34, 0x0, @void, @void, @void, @value=r8, r5}, 0x20) 11.702165725s ago: executing program 0 (id=4127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000000240)={@local, @random="0bb9127c3fe8", @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x0, [{@loopback}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}, "5effe20712c82fb92f838caf48687890a4dc061ca8a63b22af149b29f6aa5752432af51fb616716df65051739b946238b9ce650a7b06ba7d75"}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000001400000004"], 0x50) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50200000000000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x0, 0x40}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r3}) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000340), 0x10) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x0, 0x3}}], 0x9}, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000002c0)=0x1, 0x4) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r8, &(0x7f00000008c0), 0x40000000000002d, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x8009) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34408}, [@IFLA_CARRIER={0x5, 0x21, 0xcd}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.458767974s ago: executing program 1 (id=4130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210e3000cd7a010060008100", 0x12, 0x20000000, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd5, 0x6, @broadcast}, 0x14) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x30000011}) close(r9) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x5}, 0x94) (async) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/137, 0x89}], 0x1, 0x80000000, 0xa7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r10) sendmsg$NFC_CMD_ENABLE_SE(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0x3, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 11.386372134s ago: executing program 0 (id=4131): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth1_virt_wifi\x00', @broadcast}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth1_virt_wifi\x00', @broadcast}) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) (async) 11.270119141s ago: executing program 4 (id=4133): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x16, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) 11.201745393s ago: executing program 1 (id=4135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) getuid() r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000002280), &(0x7f00000022c0)=0x12, 0x800) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x44070, r6, 0xc0296000) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002d004ea0acfc00000000000008000000", @ANYRES32=r5, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r11 = syz_open_procfs$namespace(r8, &(0x7f0000001780)='ns/ipc\x00') r12 = getpid() sendmmsg$unix(r7, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}], 0x20, 0x240440d0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r9}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40004) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r14, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r14, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r14, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r14, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) 11.184012212s ago: executing program 4 (id=4136): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="f899614dadbcdb37ecfcb92cfbd5bcfd0424920ba93facadacb7550c4843af283f0c768538d55a317ddbd10c6d4566a45b344b10e5a30eb702ecace531e93b7dac3dfa77853dab3425e005f1950e9358d471bc7de61daa1f714cc20d8714e8a5e64276da01505f805dcd90d06e0e3ef1c5e3f8efa8805c6445c3ab90aaa39eeb9b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 11.179216543s ago: executing program 2 (id=4137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRESOCT=r2, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 11.11344146s ago: executing program 0 (id=4138): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) socket(0x28, 0xa, 0x2) r1 = socket$inet(0x2, 0x4, 0x7ff) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000300)={0x5e, @multicast1, 0x4e21, 0x0, 'rr\x00', 0x9, 0x40000000, 0x54}, 0x2c) 11.113098931s ago: executing program 3 (id=4139): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0419d12dafcf"}, @NL80211_ATTR_SSID={0x21, 0x34, @random="e00d736cd4dae7ec1aea8223434d6588d1d8a9d2e2ae05c17a673e152b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc844}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x74}}, 0x4000840) (async) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x34, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @private=0xa010101, @local}}}}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a3200000000f10900010073797a300000000034000480300001800a0001006d617463680000002000028005000300e40000000b000100736f636b65740000080002400000000214000000110001000000000000000000030000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 11.057881792s ago: executing program 1 (id=4140): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0xabd51331167845cd}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.033267156s ago: executing program 0 (id=4141): bind$x25(0xffffffffffffffff, &(0x7f0000000040), 0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) 10.936397958s ago: executing program 2 (id=4142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x4, 0x8, 0x80}, 0xc) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4044040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x0) 10.935905215s ago: executing program 3 (id=4143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x6, 0x1, {{0x1b, 0x4, 0x3, 0x36, 0x6c, 0x64, 0x0, 0xf5, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xc8, [@broadcast, @multicast1, @loopback, @loopback, @multicast2, @multicast2, @private=0xa010102]}, @lsrr={0x83, 0x1f, 0x1d, [@broadcast, @multicast1, @broadcast, @empty, @multicast2, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x2, [{@remote, 0x9}, {@multicast2}]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x8, 0x9, 0x0, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x68, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x1b, 0x65, [@rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x31}]}, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x6, [{@multicast2, 0x800}, {@multicast1}, {@empty, 0x80}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000000300)={0x1074, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_EEE_MODES_OURS={0x100c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffff00}]}, 0x1074}, 0x1, 0x0, 0x0, 0x40}, 0x4008014) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001400)={0x0, @adiantum}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x4, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f00000014c0)='syzkaller\x00', 0x2205, 0xfc, &(0x7f0000001500)=""/252, 0x41000, 0xc, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x0, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000001440)='writeback_queue_io\x00', r6, 0x0, 0x6f}, 0x18) r7 = accept(r0, &(0x7f0000001740)=@hci, &(0x7f00000017c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001880)={'syztnl0\x00', &(0x7f0000001800)={'syztnl2\x00', r5, 0x29, 0x80, 0xaf, 0x20000000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x2f, 0x0, 0x3}}) r8 = socket$kcm(0x29, 0x7, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001900), r0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x80, r9, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x80}}, 0x40094) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, r9, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x49}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c00)={0x140, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6d, 0xa8, @random="f70af9de567a3ef750a414b23fb932359f1d70c9750d3b3715d7e1e5b915a9be2d542f9c4cffe7a2bd469aff6321434c82b09fe2476d30758d5c13e5532e6a020e65c440053e5db36ad273b08e1cbdf925754af2e09e06113738226b17310075075dd714c6f8386b25"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x20000095) sendfile(r8, r7, &(0x7f0000001dc0)=0x400, 0x3) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r13, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x34, r14, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000001fc0), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x68, r16, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_I_TEI={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0xc080}, 0x20044890) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000002100)={0x0, @bcast, @bpq0, 0x1, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff, 0x4, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000002240)=@rose={'rose', 0x0}, 0x10) 10.919368907s ago: executing program 0 (id=4144): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1800000014000100000000000000000008001300", @ANYRES32, @ANYBLOB="4279d13bd16576a7e5eef929277ba403457c141b3224fa34b95228a1e314af4f5253052126454f3412962b59bd3f7f2074d2a84b7c4010ce8ae9a45bf911976ce2f621fa787b179b8163c3f64f89983ea72712bc43e5a17f4b3b4f3ab1459dd2ef032d1ed8a2cac321e1dbd07ed20ebfe2d3621377419c164524be44d882b6b9b551ebbdc710241533f2c0dab60ee5b6450c68c42ef165e7c67476f7c069aa1b33f6fbb3e03a32cc3636ef73"], 0x18}], 0x1}, 0x0) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x4000}, 0x1c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0xb}, 0x8) (async) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="1491ac07", 0x4}], 0x1}}], 0x1, 0xc2) (async) r2 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c, 0x80800) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r5}, 0x20) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x3, 0x5}, &(0x7f0000000200)=0x8) 10.911600988s ago: executing program 1 (id=4145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r1, 0x4103}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000004000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003e40)=[{{&(0x7f0000000540)=@ax25={{0x3, @rose}, [@remote, @default, @null, @netrom, @null, @remote, @default]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f00000005c0)=""/23, 0x17}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000880)=""/193, 0xc1}], 0x4, &(0x7f0000000a00)}, 0x80000000}, {{&(0x7f0000000a40)=@ax25={{}, [@default, @remote, @rose, @netrom, @remote, @bcast, @netrom]}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/78, 0x4e}], 0x1, &(0x7f0000000b80)=""/138, 0x8a}, 0x28c}, {{&(0x7f0000000c40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000cc0)=""/242, 0xf2}, {&(0x7f0000000dc0)=""/190, 0xbe}, {&(0x7f0000000e80)=""/239, 0xef}, {&(0x7f0000001fc0)=""/155, 0x9b}, {&(0x7f0000000f80)=""/13, 0xd}, {&(0x7f0000002080)}, {&(0x7f00000020c0)=""/166, 0xa6}], 0x7, &(0x7f0000002200)=""/158, 0x9e}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000022c0)=""/175, 0xaf}, {&(0x7f0000002380)=""/230, 0xe6}, {&(0x7f0000002480)=""/5, 0x5}, {&(0x7f00000024c0)=""/56, 0x38}, {&(0x7f0000002500)=""/166, 0xa6}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003640)=""/128, 0x80}, 0xffff0000}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000003800)=""/251, 0xfb}, {&(0x7f00000036c0)}, {&(0x7f0000003900)=""/226, 0xe2}, {&(0x7f0000003740)=""/90, 0x5a}, {&(0x7f0000003a00)=""/86, 0x56}, {&(0x7f0000003a80)=""/215, 0xd7}], 0x6, &(0x7f0000003c00)=""/160, 0xa0}, 0x601}, {{&(0x7f0000003cc0)=@pppol2tpv3, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d40)=""/166, 0xa6}], 0x1}, 0x2}], 0x6, 0x11, &(0x7f0000003fc0)={0x0, 0x3938700}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x40fa1f24de734a8f, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="c67c4dc823f99b1298887aae44bc977c", 0x10) shutdown(r0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd25, 0x70bd25, 0x70bd27, 0xcc}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x1000) 10.827516586s ago: executing program 3 (id=4146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) 10.827209254s ago: executing program 4 (id=4147): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000300)=[@iv={0x0, 0x117, 0x2, 0x0, "7ef65504b5dc8698916ae9c206187f7cbf072b422882e351ab224dd928db66ba5ff05d030f603c5703f6896d2de8dfec0a1bdcb73a4a178b58c9337e990fc2a54700a617d4beb776ee3afe549d022d7be0ab6523e98302ca6ad93c4cfc84a1f60f4c4d51e295c189877be39c28531a22741a941612627f371a"}], 0x0, 0x20000000}], 0x340, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 10.826415191s ago: executing program 2 (id=4148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100b63600"/14], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) 10.783743388s ago: executing program 0 (id=4149): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 10.736488036s ago: executing program 2 (id=4150): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x2, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0xfffffffe, 0x20000, 0x1319, 0x0, 0x0, 0xffffffff]}}, 0x5c) 10.640876849s ago: executing program 3 (id=4151): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x1c0, 0x310, 0xffffffff, 0x268, 0x268, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x96, 0x0, 0x1}}, @common=@unspec=@limit={{0x48}, {0xf, 0x101, 0x5, 0x3, 0x400005, 0x1, 0x81}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @gre_key=0x4, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @empty, @icmp_id=0x64, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x1ff}) 10.637551005s ago: executing program 2 (id=4152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000200000000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 10.608966558s ago: executing program 4 (id=4153): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a8755e94", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf258800000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20005800) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}, {&(0x7f00000000c0)="154b6481096a6208dbb5beb817b71def1850567abc81593a4e01ee22315260dc05684633b432d45e8863a70ed12d862846e10279b8b78bad3ce94fdcec32a9beaf13f298ee5a4edc35f159815c2480f63b25fcb62bee51364a99ed46a3484cf12cc8ed7a5a6e4d9249b7ea98430001125b4e4ee36d878ce0ca0f655d1340d5d575d298db15cf23b64755740d13a8493b628d303339e7ef8dc5e9b2d449b8fa4ee695584c9d1165294ccedf8050", 0xad}, {&(0x7f0000000180)="2dd51ccb968fce5b61fd37fb6f844a154252daba700aaffd098fbbd9cbefa4515f441842e684a6a9116b68a4a1586a95f39757a05d9bf85faae41f62c013339933d3a84d5a0f502720a3237023dd2da8f90310a085fa5034522a870d0026af9927864896c1928cc0f7a7b365978e770a69a70e126c41d0f572fc2125757a9054bafdf1d55f5f43244595bd697c469498e74648082ba6e954e88cedfbdf0e7dc961f0fc6daa8c6df54480da64701071280a9d18f920467e1f03be15d4", 0xbc}, {&(0x7f0000000000)="5dc54933b2dc2046ec26bfdf2560a7901455baa5ee76c3e10c06", 0x1a}], 0x4) 10.557337116s ago: executing program 3 (id=4154): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10.557059179s ago: executing program 2 (id=4155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030500000000000000000000dd9a63c7d47ebaa813f7963843125594f84df8448a3e80008c59ed588adfafd90f3cec35259acda6024f88ef1b831094f471d9042ecad080ce0d7320b430df1b3edc2d114b98f994f94208120e59f46e6f0beeb1607f434e474258", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100767469001400028008000200000000000800030004000000"], 0x40}, 0x1, 0x7500}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004050}, 0xc1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) (async) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000008c311e7be2c0f03d7ec842706aee3d8ade83c031bd3ec4453633af78c6f989", @ANYRES16=r8, @ANYBLOB="010028bd70000700000002000000080001005d219be709c20aad36e35f7dbbcc72d0aa8073ccb98ab7823e1cdcee39adda0250e6775e3fce101d3f451cdcea11e850f75b30cf52393cfe375c0d7708d062976f21b731e297a548e9c104f09d7318785e96eeabcd7a828542080d9c633389744fb7bfdc686df98b1287677934c704000000eb7ace9c1a895a214c", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRES8=r12, @ANYRES32=r10], 0x1c}}, 0x8004) (async) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRES8=r12, @ANYRES32=r10], 0x1c}}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x500, 0x70bd2b, 0x5dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) (async) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x500, 0x70bd2b, 0x5dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) 10.526126603s ago: executing program 3 (id=4156): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1d, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.476847579s ago: executing program 4 (id=4157): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @empty, 0x1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000001811000085ad5cf4d698d4881c94470000005c015521f594bb7b17b1516ec2e29507e287cdc371f095417aa7a7c9102a761aacf72758e276caeead44d68742f4583219", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="0000e7ffffff000000fc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, 0x0, &(0x7f00000002c0)=""/26}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r8, &(0x7f0000000080)=""/38, 0x26) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r9 = openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, 0x0) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x9c8b547a07cb6ac3}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800e600", @ANYRES16=r13, @ANYBLOB="280328bd7000fbdbdf250a0000001c0003800800020078f1ffff080001000400000008000200090000000c00098008000200ff0f00000c0002800800020000802a01"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f00000044c0)=[{r14, 0x209}], 0x1, 0x8000) 0s ago: executing program 1 (id=4158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x100, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x200040c2}, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.0.2178'. [ 225.634937][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 225.644117][T13609] syz_tun: entered promiscuous mode [ 225.881313][T13624] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 226.195151][T13642] netlink: 'syz.4.2190': attribute type 6 has an invalid length. [ 226.240935][T13645] SET target dimension over the limit! [ 226.464444][T13658] syzkaller0: entered promiscuous mode [ 226.471920][T13658] syzkaller0: entered allmulticast mode [ 226.693362][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'. [ 226.787292][T13682] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 226.866516][T13682] 9: entered promiscuous mode [ 226.959406][T13689] wg1 speed is unknown, defaulting to 1000 [ 227.664189][T13745] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 227.800317][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 227.843271][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 227.949641][T13765] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 228.019534][T13772] sctp: [Deprecated]: syz.1.2226 (pid 13772) Use of int in max_burst socket option deprecated. [ 228.019534][T13772] Use struct sctp_assoc_value instead [ 228.068525][T13774] netlink: 'syz.0.2228': attribute type 4 has an invalid length. [ 228.106477][T13774] syzkaller0: entered promiscuous mode [ 228.134436][T13774] syzkaller0: entered allmulticast mode [ 228.301908][T13786] dvmrp6: entered allmulticast mode [ 228.388949][T13794] tipc: Enabling of bearer rejected, failed to enable media [ 228.622781][T13805] tipc: Enabling of bearer rejected, failed to enable media [ 228.991821][T13828] team0: Port device team_slave_0 removed [ 229.741248][T13897] bond4: option resend_igmp: invalid value (32767) [ 229.748334][T13897] bond4: option resend_igmp: allowed values 0 - 255 [ 229.763590][T13897] bond4 (unregistering): Released all slaves [ 229.797850][T13900] tipc: Enabled bearer , priority 0 [ 229.807099][T13900] tipc: Resetting bearer [ 229.818963][T13899] tipc: Disabling bearer [ 230.153644][T13922] netlink: 'syz.1.2272': attribute type 10 has an invalid length. [ 230.251251][T13929] __nla_validate_parse: 4 callbacks suppressed [ 230.251269][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 230.411708][T13939] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2275'. [ 230.568195][T13951] syzkaller1: entered promiscuous mode [ 230.587543][T13951] syzkaller1: entered allmulticast mode [ 230.823279][T13959] veth0_virt_wifi: renamed from veth1_vlan [ 230.840201][T13963] tipc: Enabling of bearer rejected, already enabled [ 230.904697][ T6681] nci: nci_ntf_packet: unknown ntf opcode 0x806 [ 231.028880][T13990] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 231.094209][T13990] bond10: (slave bridge7): making interface the new active one [ 231.105969][T13990] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 231.124947][T13990] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 231.356421][T14006] wg1 speed is unknown, defaulting to 1000 [ 231.405234][T14003] netlink: 'syz.1.2288': attribute type 6 has an invalid length. [ 231.607095][T13997] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2287'. [ 232.125666][T14039] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 232.238003][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 232.249693][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 232.262163][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 232.278325][T14039] ip6tnl1: entered promiscuous mode [ 232.283628][T14039] ip6tnl1: entered allmulticast mode [ 232.349581][T14053] netlink: 'syz.1.2297': attribute type 4 has an invalid length. [ 233.449072][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 233.458337][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 233.550550][T14060] : entered promiscuous mode [ 233.631479][T14062] netlink: 'syz.0.2305': attribute type 1 has an invalid length. [ 233.662584][T14062] netlink: 'syz.0.2305': attribute type 1 has an invalid length. [ 233.729157][T14076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2308'. [ 233.734477][T14062] bond11: entered promiscuous mode [ 233.747073][T14062] 8021q: adding VLAN 0 to HW filter on device bond11 [ 233.777566][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2308'. [ 233.808250][T14062] bond11: (slave bridge8): making interface the new active one [ 233.820915][T14062] bridge8: entered promiscuous mode [ 233.839243][T14062] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 234.264040][ T5902] IPVS: starting estimator thread 0... [ 234.366784][T14119] IPVS: using max 33 ests per chain, 79200 per kthread [ 234.521303][T14138] vlan2: entered promiscuous mode [ 234.660936][ T154] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.682685][ T154] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.706163][ T154] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.722050][ T154] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.791718][T14157] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 234.851970][T14157] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 234.898273][T14168] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.952747][T14157] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 235.091947][T14157] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 235.646064][T14220] __nla_validate_parse: 4 callbacks suppressed [ 235.646081][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'. [ 235.803593][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2347'. [ 235.889932][T14233] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2350'. [ 236.233176][T14263] validate_nla: 14 callbacks suppressed [ 236.233201][T14263] netlink: 'syz.3.2357': attribute type 2 has an invalid length. [ 236.921621][T14273] bond0: entered promiscuous mode [ 236.945814][T14273] bond_slave_0: entered promiscuous mode [ 236.956119][T14273] bond_slave_1: entered promiscuous mode [ 236.974354][T14273] batadv0: entered promiscuous mode [ 236.998071][T14273] debugfs: 'hsr1' already exists in 'hsr' [ 237.019134][T14273] Cannot create hsr debugfs directory [ 237.035257][T14273] hsr1: entered allmulticast mode [ 237.044895][T14273] bond0: entered allmulticast mode [ 237.062349][T14273] bond_slave_0: entered allmulticast mode [ 237.079605][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 237.092940][T14273] bond_slave_1: entered allmulticast mode [ 237.099664][T14273] batadv0: entered allmulticast mode [ 237.105719][T14273] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 237.116275][T14273] bond0: left promiscuous mode [ 237.127250][T14273] bond_slave_0: left promiscuous mode [ 237.132819][T14273] bond_slave_1: left promiscuous mode [ 237.145447][T14273] batadv0: left promiscuous mode [ 237.170666][T14275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2362'. [ 237.194245][T14289] syzkaller0: entered promiscuous mode [ 237.201579][T14289] syzkaller0: entered allmulticast mode [ 237.207710][T14292] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2367'. [ 237.630899][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2374'. [ 237.655595][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2374'. [ 237.680325][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 238.268598][T14356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.452904][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 238.563134][T14380] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 238.585276][T14382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.827677][T14400] tipc: Enabled bearer , priority 0 [ 238.847562][T14400] syzkaller0: entered promiscuous mode [ 238.861953][T14400] syzkaller0: entered allmulticast mode [ 238.928364][T14400] tipc: Resetting bearer [ 238.942074][T14400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.950676][T14400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.026906][T14399] tipc: Resetting bearer [ 239.054286][T14415] netlink: 'syz.0.2403': attribute type 12 has an invalid length. [ 239.062399][T14415] netlink: 'syz.0.2403': attribute type 11 has an invalid length. [ 239.079781][T14399] tipc: Disabling bearer [ 239.210549][T14424] netlink: 'syz.0.2405': attribute type 1 has an invalid length. [ 239.229444][T14424] sock: sock_timestamping_bind_phc: sock not bind to device [ 239.251199][T14426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.285575][T14423] syzkaller0: entered promiscuous mode [ 239.292713][T14423] syzkaller0: entered allmulticast mode [ 239.524472][T14442] netlink: 'syz.3.2412': attribute type 9 has an invalid length. [ 239.533862][T14442] netlink: 'syz.3.2412': attribute type 11 has an invalid length. [ 239.542198][T14442] netlink: 'syz.3.2412': attribute type 12 has an invalid length. [ 241.083745][T14487] netlink: 'syz.0.2423': attribute type 11 has an invalid length. [ 241.107937][T14487] netlink: 'syz.0.2423': attribute type 11 has an invalid length. [ 241.119942][T14487] __nla_validate_parse: 6 callbacks suppressed [ 241.119957][T14487] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2423'. [ 241.162801][T14492] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2424'. [ 241.478631][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'. [ 241.645122][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2434'. [ 260.690884][T14542] "syz.3.2441" (14542) uses obsolete ecb(arc4) skcipher [ 260.778263][T14549] syzkaller0: entered promiscuous mode [ 260.800461][T14549] syzkaller0: entered allmulticast mode [ 261.029730][T14574] netlink: 'syz.3.2450': attribute type 21 has an invalid length. [ 261.052604][T14574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2450'. [ 261.100021][T14574] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 261.433686][ T30] audit: type=1800 audit(1765353821.806:3): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2453" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2569 res=0 errno=0 [ 261.517109][T14601] netlink: 'syz.2.2455': attribute type 2 has an invalid length. [ 261.620643][T14606] syzkaller0: entered promiscuous mode [ 261.635078][T14606] syzkaller0: entered allmulticast mode [ 261.702402][T14606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.709702][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 261.717053][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 261.724292][T14606] IPv6: NLM_F_CREATE should be set when creating new route [ 261.778042][T14607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.019960][T14636] netlink: 'syz.0.2463': attribute type 12 has an invalid length. [ 262.054199][T14620] wg1 speed is unknown, defaulting to 1000 [ 262.238173][T14649] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2466'. [ 262.299620][T14651] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2468'. [ 262.401273][T14654] x_tables: duplicate underflow at hook 2 [ 262.408714][T14654] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2469'. [ 263.115198][T14691] netlink: 'syz.4.2480': attribute type 10 has an invalid length. [ 263.136431][T14691] veth0_virt_wifi: entered allmulticast mode [ 263.168966][T14691] team0: Port device veth0_virt_wifi added [ 263.343811][T14714] erspan0: entered allmulticast mode [ 263.544628][T14730] netlink: 'syz.1.2490': attribute type 11 has an invalid length. [ 263.579783][T14732] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 263.631821][T14732] syzkaller0: entered promiscuous mode [ 263.648223][T14732] syzkaller0: entered allmulticast mode [ 263.755713][T14745] SET target dimension over the limit! [ 263.910613][T14762] syzkaller0: entered promiscuous mode [ 263.918750][T14762] syzkaller0: entered allmulticast mode [ 263.927432][T14761] tipc: Started in network mode [ 263.932708][T14761] tipc: Node identity e62c917211bb, cluster identity 4711 [ 263.940765][T14761] tipc: Enabled bearer , priority 0 [ 263.952773][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 263.981617][T14761] tipc: Resetting bearer [ 264.029216][T14761] tipc: Disabling bearer [ 264.082070][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2504'. [ 264.212165][T14785] syzkaller1: entered promiscuous mode [ 264.225275][T14785] syzkaller1: entered allmulticast mode [ 264.244098][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2507'. [ 264.254459][T14788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2507'. [ 264.626246][T14814] syzkaller0: entered promiscuous mode [ 264.634108][T14814] syzkaller0: entered allmulticast mode [ 264.647962][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2513'. [ 264.789956][T14822] netem: incorrect ge model size [ 264.795318][T14822] netem: change failed [ 265.132297][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'. [ 265.461390][T14871] netlink: 'syz.0.2533': attribute type 11 has an invalid length. [ 265.586879][T14873] veth0: entered promiscuous mode [ 265.785842][T14883] Bluetooth: MGMT ver 1.23 [ 266.117134][T14889] netlink: 'syz.4.2539': attribute type 10 has an invalid length. [ 266.182469][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.230683][T14889] team0: entered allmulticast mode [ 266.235846][T14889] team_slave_1: entered allmulticast mode [ 266.263313][T14889] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.300606][T14895] xt_l2tp: missing protocol rule (udp|l2tpip) [ 266.929336][T14928] netlink: 'syz.1.2549': attribute type 11 has an invalid length. [ 266.980544][T14928] __nla_validate_parse: 5 callbacks suppressed [ 266.980560][T14928] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2549'. [ 267.115852][T14937] syzkaller1: entered promiscuous mode [ 267.143201][T14937] syzkaller1: entered allmulticast mode [ 267.171091][T14934] netlink: 'syz.2.2552': attribute type 8 has an invalid length. [ 267.479557][T14955] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 267.853182][T14976] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2562'. [ 267.863320][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 267.972436][T14980] syzkaller0: entered promiscuous mode [ 267.992971][T14980] syzkaller0: entered allmulticast mode [ 268.042754][T14990] netlink: 'syz.4.2565': attribute type 4 has an invalid length. [ 268.100581][T14995] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.2568'. [ 268.377508][T15010] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2574'. [ 268.628140][T15031] tipc: Enabling of bearer rejected, failed to enable media [ 268.693997][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 268.794874][T15037] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2579'. [ 269.290292][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 269.308205][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2587'. [ 269.595485][T15089] syzkaller0: entered promiscuous mode [ 269.625201][T15089] syzkaller0: entered allmulticast mode [ 269.741876][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2600'. [ 269.951451][T15114] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 269.962109][T15114] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 270.162515][T15124] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 270.163922][T15122] netlink: 'syz.1.2606': attribute type 12 has an invalid length. [ 270.344222][T15134] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 270.518933][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.538230][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.554398][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.568409][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.711055][T15147] netlink: 'syz.1.2613': attribute type 12 has an invalid length. [ 271.137212][T15174] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 271.149672][T15174] netlink: 'syz.4.2622': attribute type 3 has an invalid length. [ 271.184600][T15174] tipc: Enabling of bearer rejected, failed to enable media [ 271.408455][T15187] netlink: 'syz.0.2625': attribute type 3 has an invalid length. [ 271.431826][T15190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.893941][T15222] IPv6: NLM_F_REPLACE set, but no existing node found! [ 271.911205][T15224] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20003 [ 271.920501][T15222] netlink: 'syz.4.2634': attribute type 11 has an invalid length. [ 272.140252][T15239] __nla_validate_parse: 18 callbacks suppressed [ 272.140281][T15239] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2640'. [ 272.352731][T15257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2642'. [ 272.422478][T15257] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 272.548901][T15268] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2647'. [ 272.626876][T15268] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2647'. [ 272.727597][T15282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2650'. [ 272.782758][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2649'. [ 272.795609][T15287] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2650'. [ 272.805844][T15286] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 272.819374][T15279] erspan0: left allmulticast mode [ 272.835623][T15282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2650'. [ 272.930293][T15282] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 272.943068][T15282] bond7 (unregistering): Released all slaves [ 290.740342][T15311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.868764][T15321] netlink: 'syz.0.2663': attribute type 2 has an invalid length. [ 290.879337][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 290.883628][T15320] netlink: 'syz.0.2663': attribute type 2 has an invalid length. [ 290.911159][T15319] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2664'. [ 290.917763][T15323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2666'. [ 290.957420][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 291.406209][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 291.524446][T15375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2681'. [ 291.557883][T15375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.659943][T15388] vlan3: entered promiscuous mode [ 291.709841][T15393] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2686'. [ 291.809819][T15399] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 291.834648][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 291.844366][T15399] netlink: 'syz.2.2687': attribute type 3 has an invalid length. [ 291.863521][T15406] syzkaller0: entered promiscuous mode [ 291.865679][T15399] netlink: 'syz.2.2687': attribute type 7 has an invalid length. [ 291.869428][T15406] syzkaller0: entered allmulticast mode [ 291.889622][T15399] netlink: 'syz.2.2687': attribute type 8 has an invalid length. [ 291.910513][T15399] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2687'. [ 291.921257][T15399] NCSI netlink: No device for ifindex 131092 [ 292.035312][T15414] netlink: 'syz.3.2692': attribute type 39 has an invalid length. [ 292.367180][T15439] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2699'. [ 292.388406][T15438] netlink: 'syz.1.2700': attribute type 3 has an invalid length. [ 292.409269][T15444] delete_channel: no stack [ 292.534878][T15454] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 292.574044][T15458] netlink: 'syz.3.2707': attribute type 4 has an invalid length. [ 292.721440][T15470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.125432][T15477] bridge6: entered promiscuous mode [ 293.134603][T15477] bridge6: entered allmulticast mode [ 293.146114][T15477] team0: Port device bridge6 added [ 294.295319][T15525] syzkaller0: entered promiscuous mode [ 294.305212][T15525] syzkaller0: entered allmulticast mode [ 294.315533][T15523] tipc: Enabled bearer , priority 0 [ 294.325972][T15535] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 294.328979][T15527] syzkaller0: entered promiscuous mode [ 294.350115][T15527] syzkaller0: entered allmulticast mode [ 294.361993][T15527] tipc: Enabled bearer , priority 0 [ 294.392685][T15523] tipc: Resetting bearer [ 294.455487][T15523] tipc: Disabling bearer [ 294.492172][T15539] tipc: Resetting bearer [ 294.548358][T15539] tipc: Disabling bearer [ 294.599072][T15553] bridge0: left allmulticast mode [ 294.615874][T15553] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.722616][T15560] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 294.756914][T15558] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 295.023557][T15575] xt_cgroup: invalid path, errno=-2 [ 295.065196][T15572] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 295.073144][T15572] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 295.081083][T15572] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 295.089046][T15572] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 295.096967][T15572] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 295.349633][T15591] tipc: Enabling of bearer rejected, failed to enable media [ 295.615230][T15606] ip6gre0: entered promiscuous mode [ 295.725146][T15611] delete_channel: no stack [ 295.735087][T15611] pim6reg: left allmulticast mode [ 295.744148][T15613] xt_policy: neither incoming nor outgoing policy selected [ 295.907695][T15621] syzkaller0: entered promiscuous mode [ 295.933088][T15621] syzkaller0: entered allmulticast mode [ 295.957836][T15617] net_ratelimit: 49 callbacks suppressed [ 295.957854][T15617] openvswitch: netlink: IPv6 tunnel dst address is zero [ 296.075253][T15635] validate_nla: 6 callbacks suppressed [ 296.075269][T15635] netlink: 'syz.2.2761': attribute type 3 has an invalid length. [ 296.267138][T15649] netlink: 'syz.2.2764': attribute type 23 has an invalid length. [ 296.426292][T15660] __nla_validate_parse: 17 callbacks suppressed [ 296.426312][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 296.508162][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 296.555076][T15669] netlink: 'syz.1.2771': attribute type 2 has an invalid length. [ 296.800726][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 296.881719][T15696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 296.890792][T15696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 296.990396][T15702] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2781'. [ 296.999697][T15702] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2781'. [ 297.012407][T15702] netlink: 'syz.1.2781': attribute type 5 has an invalid length. [ 297.022515][T15702] netlink: 'syz.1.2781': attribute type 6 has an invalid length. [ 297.030913][T15702] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2781'. [ 297.063695][T15705] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2782'. [ 297.082173][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 297.350845][T15718] netlink: 'syz.0.2788': attribute type 1 has an invalid length. [ 297.369388][T15722] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 297.441253][T15728] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 298.036452][T15783] netlink: 'syz.3.2808': attribute type 9 has an invalid length. [ 298.047350][T15783] netlink: 'syz.3.2808': attribute type 11 has an invalid length. [ 298.055412][T15783] netlink: 'syz.3.2808': attribute type 12 has an invalid length. [ 298.095511][T15786] delete_channel: no stack [ 298.356470][T15793] tipc: Resetting bearer [ 298.422799][T15801] syzkaller0: entered promiscuous mode [ 298.429146][T15801] syzkaller0: entered allmulticast mode [ 298.454840][T15793] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 298.550850][T15793] bond23: entered promiscuous mode [ 298.556521][T15793] bond23: entered allmulticast mode [ 298.570540][T15793] 8021q: adding VLAN 0 to HW filter on device bond23 [ 298.598058][T15797] macvlan2: entered promiscuous mode [ 298.603918][T15797] macvlan2: entered allmulticast mode [ 298.624495][T15797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.679408][T15816] macvlan0: left promiscuous mode [ 298.865586][T15822] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 298.952486][T15830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.060557][T15837] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 299.078990][T15837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.244377][T15848] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 299.888313][T15839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.894541][T15839] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 299.915804][T15839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.922085][T15839] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 299.935681][T15839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.941926][T15839] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 300.341549][T15839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.349274][T15839] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 300.981072][T15945] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 300.991346][T15945] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 301.010783][T15945] bond7: (slave xfrm1): making interface the new active one [ 301.019497][T15945] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 301.101096][T15954] openvswitch: netlink: Flow key attr not present in new flow. [ 301.190513][T15956] tipc: Enabled bearer , priority 0 [ 301.260772][T15962] syzkaller0: MTU too low for tipc bearer [ 301.286695][T15962] tipc: Disabling bearer [ 301.878710][T16007] ipt_ECN: cannot use operation on non-tcp rule [ 302.003358][T16023] validate_nla: 4 callbacks suppressed [ 302.003376][T16023] netlink: 'syz.3.2871': attribute type 42 has an invalid length. [ 302.042926][T16023] __nla_validate_parse: 21 callbacks suppressed [ 302.042945][T16023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2871'. [ 302.266199][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2879'. [ 302.446186][T16057] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 302.458467][T16057] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2885'. [ 302.523474][T16059] --map-set only usable from mangle table [ 302.552760][T16068] netlink: 'syz.2.2885': attribute type 1 has an invalid length. [ 302.564320][T16068] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2885'. [ 302.708618][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 302.721406][T16077] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.729407][T16077] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2890'. [ 302.740148][T16077] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 302.789807][T16079] syzkaller0: entered promiscuous mode [ 302.795390][T16079] syzkaller0: entered allmulticast mode [ 303.689578][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.700458][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.709548][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.736924][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.749316][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.782518][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.790073][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.802836][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.824758][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.832552][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.462033][T16090] pim6reg: entered allmulticast mode [ 304.562115][T16096] wg1 speed is unknown, defaulting to 1000 [ 304.745670][T16120] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 304.761840][T16120] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 304.811360][T16125] 8021q: adding VLAN 0 to HW filter on device bond8 [ 304.932482][T16135] netlink: 'syz.2.2906': attribute type 11 has an invalid length. [ 304.940947][T16135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2906'. [ 304.969523][T16137] sctp: [Deprecated]: syz.3.2907 (pid 16137) Use of int in max_burst socket option. [ 304.969523][T16137] Use struct sctp_assoc_value instead [ 305.003909][T16135] pim6reg1: entered promiscuous mode [ 305.015401][T16135] pim6reg1: entered allmulticast mode [ 305.032571][T16139] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 305.043372][T16139] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2908'. [ 305.046436][T16096] chnl_net:caif_netlink_parms(): no params data found [ 305.056509][T16139] netlink: 'syz.3.2908': attribute type 58 has an invalid length. [ 305.069246][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2908'. [ 305.113814][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2909'. [ 305.302238][T16096] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.312196][T16156] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 305.320407][T16096] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.332152][T16096] bridge_slave_0: entered allmulticast mode [ 305.348548][T16096] bridge_slave_0: entered promiscuous mode [ 305.408644][T16096] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.416078][T16096] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.423718][T16096] bridge_slave_1: entered allmulticast mode [ 305.437677][T16096] bridge_slave_1: entered promiscuous mode [ 305.481595][T16162] bond6: (slave ip6gretap1): making interface the new active one [ 305.524537][T16162] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 305.664042][T16096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.699626][T16096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.893924][ T52] Bluetooth: hci5: command tx timeout [ 305.958453][T16096] team0: Port device team_slave_0 added [ 305.987867][T16096] team0: Port device team_slave_1 added [ 306.047623][T16198] netlink: 'syz.3.2924': attribute type 5 has an invalid length. [ 306.154442][T16096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.166227][T16096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.215290][T16096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.231176][T16096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.239432][T16096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.274314][T16096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.455632][T16096] hsr_slave_0: entered promiscuous mode [ 306.473241][T16096] hsr_slave_1: entered promiscuous mode [ 306.487539][T16096] debugfs: 'hsr0' already exists in 'hsr' [ 306.493307][T16096] Cannot create hsr debugfs directory [ 306.700349][T16221] syzkaller0: entered promiscuous mode [ 306.716302][T16221] syzkaller0: entered allmulticast mode [ 306.785521][ T30] audit: type=1107 audit(1765353867.156:4): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!ҷԌ{":|*g͞GSxc;4 ׆+K<[m [ 306.785521][ T30] zRg' [ 307.956753][ T52] Bluetooth: hci5: command tx timeout [ 308.127898][T16240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.130732][T16254] netlink: 'syz.0.2940': attribute type 1 has an invalid length. [ 308.146496][T16254] __nla_validate_parse: 2 callbacks suppressed [ 308.146510][T16254] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2940'. [ 308.156751][T16240] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.301187][T16263] SET target dimension over the limit! [ 308.307505][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2945'. [ 308.340099][T16240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.347792][T16264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2943'. [ 308.360150][T16240] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.365151][T16264] nbd: couldn't find a device at index 0 [ 308.416865][T16263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2944'. [ 308.478489][T16240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.488097][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2944'. [ 308.489157][T16240] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.568184][T16096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.580489][T16096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.627335][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 308.639748][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.650623][T16240] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.691518][T16096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.702343][T16096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.805616][T16096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.827932][T16096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.851092][ T3426] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.866767][ T3426] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.894844][ T6145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.903455][ T6145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.934319][T16096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.944978][T16096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.964865][ T2997] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.973431][ T2997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.996318][ T154] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.004974][ T154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.162218][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 309.166783][T16096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.198822][T16096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.221965][T16096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.250246][T16096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.260262][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 309.432308][T16300] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 309.463745][T16303] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20002 [ 309.494012][T16096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.539804][T16096] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.570377][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.577568][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.599252][T16311] netlink: 'syz.3.2955': attribute type 10 has an invalid length. [ 309.614017][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.621225][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.634455][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.643903][T16311] bond0: (slave team0): Enslaving as an active interface with an up link [ 310.026957][ T52] Bluetooth: hci5: command tx timeout [ 310.141375][T16096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.279491][T16096] veth0_vlan: entered promiscuous mode [ 310.307411][T16343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2962'. [ 310.328128][T16340] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 310.364448][T16096] veth1_vlan: entered promiscuous mode [ 310.419053][T16350] netlink: 'syz.3.2964': attribute type 10 has an invalid length. [ 310.443770][T16355] netlink: 'syz.4.2963': attribute type 2 has an invalid length. [ 310.470933][T16096] veth0_macvtap: entered promiscuous mode [ 310.504478][T16357] dvmrp0: entered allmulticast mode [ 310.515650][T16096] veth1_macvtap: entered promiscuous mode [ 310.631747][T16096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.654501][T16096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.680688][ T2997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.691570][ T2997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.705820][ T2997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.730771][ T2997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.883559][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 310.894570][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.908905][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.921340][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 310.995145][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.008572][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.452784][T16412] openvswitch: netlink: Flow actions attr not present in new flow. [ 311.605520][T16415] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 311.794639][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.806244][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.815590][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.824976][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.846879][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.990403][T16425] wg1 speed is unknown, defaulting to 1000 [ 312.107634][ T52] Bluetooth: hci5: command tx timeout [ 312.373226][T16425] chnl_net:caif_netlink_parms(): no params data found [ 312.539890][T16480] veth0: entered promiscuous mode [ 312.659825][T16479] veth0: left promiscuous mode [ 312.712610][T16425] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.723005][T16491] xt_CONNSECMARK: invalid mode: 0 [ 312.731112][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.739073][T16425] bridge_slave_0: entered allmulticast mode [ 312.758755][T16425] bridge_slave_0: entered promiscuous mode [ 312.787072][T16425] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.794360][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.801924][T16425] bridge_slave_1: entered allmulticast mode [ 312.809882][T16425] bridge_slave_1: entered promiscuous mode [ 312.921660][T16425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.950773][T16425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.110699][T16425] team0: Port device team_slave_0 added [ 313.143028][T16425] team0: Port device team_slave_1 added [ 313.287310][T16425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.312814][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.406065][T16425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.454309][T16425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.491433][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.605528][T16425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.624075][T16521] __nla_validate_parse: 8 callbacks suppressed [ 313.624092][T16521] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3012'. [ 313.820174][T16529] SET target dimension over the limit! [ 313.833707][T16425] hsr_slave_0: entered promiscuous mode [ 313.847860][T16425] hsr_slave_1: entered promiscuous mode [ 313.863966][T16425] debugfs: 'hsr0' already exists in 'hsr' [ 313.877786][T16425] Cannot create hsr debugfs directory [ 313.958118][ T52] Bluetooth: hci0: command tx timeout [ 314.077990][T16537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3017'. [ 314.251560][T16425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.263969][T16425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 314.275529][T16425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.286063][T16425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.379324][T16549] veth1_to_bond: entered allmulticast mode [ 314.407485][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 314.455451][T16425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.467433][T16425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 314.478997][T16425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.490851][T16425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.543290][T16549] bond0: (slave bond_slave_1): Releasing backup interface [ 314.590487][T16549] veth1_to_bond (unregistering): left allmulticast mode [ 314.629233][T16425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.651055][T16425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 314.676676][T16425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.699460][T16425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.726491][T16555] tipc: Enabling of bearer rejected, failed to enable media [ 314.755251][T16557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.852647][T16425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.877190][T16425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2048 - 0 [ 314.900246][T16425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.925714][T16425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 315.123055][T16571] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 315.240545][T16571] bond1 (unregistering): Released all slaves [ 315.350544][T16425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.381333][T16425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.395262][T16425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.418284][T16425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.504870][T16597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3033'. [ 315.517234][T16597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3033'. [ 315.527166][T16596] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3032'. [ 315.549349][T16596] macvlan3: entered promiscuous mode [ 315.554682][T16596] macvlan3: entered allmulticast mode [ 315.682447][T16603] Bluetooth: MGMT ver 1.23 [ 315.720191][T16425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.743124][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 315.763508][T16425] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.794893][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.802095][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.816727][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3035'. [ 315.852265][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.859510][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.028092][ T52] Bluetooth: hci0: command tx timeout [ 316.192052][T16624] netlink: 'syz.3.3040': attribute type 33 has an invalid length. [ 316.229264][T16626] syzkaller0: entered promiscuous mode [ 316.234801][T16626] syzkaller0: entered allmulticast mode [ 316.240605][T16624] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3040'. [ 316.490558][T16626] team0 (unregistering): Port device team_slave_0 removed [ 316.503378][T16626] team0 (unregistering): Port device team_slave_1 removed [ 316.576048][T16425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.715495][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3046'. [ 316.740124][T16425] veth0_vlan: entered promiscuous mode [ 316.780934][T16425] veth1_vlan: entered promiscuous mode [ 316.878376][T16425] veth0_macvtap: entered promiscuous mode [ 316.922781][T16425] veth1_macvtap: entered promiscuous mode [ 316.960708][T16425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.988592][T16425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.021238][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.056763][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.080964][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.112705][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.301545][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.332911][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.448797][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.456888][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.767054][T16698] IPVS: set_ctl: invalid protocol: 255 172.30.0.2:20001 [ 318.101673][T16708] openvswitch: netlink: Invalid VLAN frame [ 318.118550][ T52] Bluetooth: hci0: command tx timeout [ 318.542775][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.559133][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.567138][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.570591][T16734] netlink: 'syz.0.3067': attribute type 5 has an invalid length. [ 318.596991][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.606960][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.667199][T16734] __nla_validate_parse: 8 callbacks suppressed [ 318.667217][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3067'. [ 318.744663][ T6145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.784666][T16731] wg1 speed is unknown, defaulting to 1000 [ 318.814064][T16734] geneve2: entered promiscuous mode [ 318.829499][T16734] geneve2: entered allmulticast mode [ 318.842279][ T6285] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 318.870755][ T6145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.009338][T16740] syzkaller0: entered promiscuous mode [ 319.047751][T16740] syzkaller0: entered allmulticast mode [ 319.078957][ T6285] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 319.108903][ T2997] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 320.197562][ T52] Bluetooth: hci0: command tx timeout [ 320.680304][ T52] Bluetooth: hci1: command tx timeout [ 320.769091][ T2997] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 320.788784][ T6145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.898455][ T6145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.977378][T16766] IPv6: sit4: Disabled Multicast RS [ 321.066386][T16775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3077'. [ 321.368002][T16787] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 322.603640][T16788] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3078'. [ 322.613677][T16788] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3078'. [ 322.650170][T16787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.664731][T16792] bond1: (slave geneve2): making interface the new active one [ 322.702138][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'. [ 322.718447][T16792] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 322.755131][ T52] Bluetooth: hci1: command tx timeout [ 322.835397][T16795] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3081'. [ 322.893982][T16809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3085'. [ 322.946514][T16809] team_slave_0: entered promiscuous mode [ 322.952823][T16809] team_slave_1: entered promiscuous mode [ 322.962849][T16809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.992194][T16811] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 323.051658][T16817] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3087'. [ 323.203841][T16826] xt_l2tp: missing protocol rule (udp|l2tpip) [ 323.311932][ T6145] bridge_slave_0: left allmulticast mode [ 323.327301][ T6145] bridge_slave_0: left promiscuous mode [ 323.338963][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.442057][ T6145] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 323.575541][ T6145] gretap0 (unregistering): left promiscuous mode [ 323.634917][ T6145] dvmrp6 (unregistering): left allmulticast mode [ 324.015552][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.025642][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.036304][ T6145] bond0 (unregistering): (slave team0): Releasing backup interface [ 324.046507][ T6145] bond0 (unregistering): Released all slaves [ 324.139507][ T6145] bond1 (unregistering): Released all slaves [ 324.153810][ T6145] bond2 (unregistering): Released all slaves [ 324.168160][ T6145] bond3 (unregistering): Released all slaves [ 324.182237][ T6145] bond4 (unregistering): Released all slaves [ 324.199118][ T6145] bond5 (unregistering): Released all slaves [ 324.212427][ T6145] bond6 (unregistering): Released all slaves [ 324.349522][T16842] wg1 speed is unknown, defaulting to 1000 [ 324.363582][T16731] chnl_net:caif_netlink_parms(): no params data found [ 324.410009][ T6145] : left promiscuous mode [ 324.500396][ T6145] tipc: Disabling bearer [ 324.526920][ T6145] tipc: Left network mode [ 324.546325][ T6145] IPVS: stopping backup sync thread 10186 ... [ 324.546818][T16859] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3097'. [ 324.695453][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 324.780995][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.796858][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.827598][ T52] Bluetooth: hci1: command tx timeout [ 324.829273][T16731] bridge_slave_0: entered allmulticast mode [ 324.878049][T16731] bridge_slave_0: entered promiscuous mode [ 324.893793][T16878] netlink: 'syz.0.3103': attribute type 11 has an invalid length. [ 324.918688][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.925883][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.934600][T16731] bridge_slave_1: entered allmulticast mode [ 324.942058][T16731] bridge_slave_1: entered promiscuous mode [ 325.017037][ T6145] hsr_slave_0: left promiscuous mode [ 325.023411][ T6145] hsr_slave_1: left promiscuous mode [ 325.031598][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.041793][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.467862][ T6145] team0 (unregistering): Port device team_slave_1 removed [ 325.505211][ T6145] team0 (unregistering): Port device team_slave_0 removed [ 325.806358][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.825526][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.949657][T16894] netlink: 'syz.0.3108': attribute type 83 has an invalid length. [ 325.950204][T16731] team0: Port device team_slave_0 added [ 325.988825][T16731] team0: Port device team_slave_1 added [ 326.090811][T16903] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 326.104934][T16903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.145252][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.156507][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.187434][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.207402][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3111'. [ 326.216378][T16905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3111'. [ 326.229295][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.237661][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.316635][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.414417][ T6145] IPVS: stop unused estimator thread 0... [ 326.465787][T16731] hsr_slave_0: entered promiscuous mode [ 326.502919][T16731] hsr_slave_1: entered promiscuous mode [ 326.530536][T16731] debugfs: 'hsr0' already exists in 'hsr' [ 326.542892][T16731] Cannot create hsr debugfs directory [ 326.907366][ T52] Bluetooth: hci1: command tx timeout [ 327.051271][T16941] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 327.063680][T16941] bond9 (unregistering): Released all slaves [ 327.213050][T16731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.336155][T16731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.340434][ T9] IPVS: starting estimator thread 0... [ 327.395193][T16952] netlink: 'syz.0.3120': attribute type 10 has an invalid length. [ 327.405623][T16955] netlink: 'syz.2.3122': attribute type 32 has an invalid length. [ 327.407899][T16731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.420978][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 327.497776][T16953] IPVS: using max 34 ests per chain, 81600 per kthread [ 327.544206][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3123'. [ 327.578872][T16964] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3124'. [ 327.617562][T16966] netlink: 'syz.1.3124': attribute type 11 has an invalid length. [ 327.625586][T16966] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3124'. [ 327.722585][T16955] bond9: Setting coupled_control to off (0) [ 327.731402][T16731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.851198][T16979] syzkaller0: entered promiscuous mode [ 327.857571][T16979] syzkaller0: entered allmulticast mode [ 327.994874][T16981] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3128'. [ 328.020291][T16981] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3128'. [ 328.057063][T16981] openvswitch: netlink: Flow key attr not present in new flow. [ 328.126039][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.222010][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.246454][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.253724][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.318313][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.325564][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.439993][T17012] geneve2: entered promiscuous mode [ 328.445248][T17012] geneve2: entered allmulticast mode [ 328.494891][T17022] netlink: 'syz.0.3142': attribute type 32 has an invalid length. [ 328.575696][T17022] bond1: option coupled_control: invalid value (52) [ 328.584847][T17022] bond1 (unregistering): Released all slaves [ 328.743939][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.834178][T16731] veth0_vlan: entered promiscuous mode [ 328.853713][T16731] veth1_vlan: entered promiscuous mode [ 328.884596][T17043] IPVS: length: 252 != 24 [ 328.905399][T16731] veth0_macvtap: entered promiscuous mode [ 328.929689][T16731] veth1_macvtap: entered promiscuous mode [ 328.972367][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.007891][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.030024][ T2963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.045794][ T2963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.056001][ T2963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.070120][ T2963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.256155][ T6674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.277365][ T6674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.345184][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.368293][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.596345][T17074] __nla_validate_parse: 5 callbacks suppressed [ 329.596363][T17074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3157'. [ 329.725194][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3057'. [ 329.766639][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'. [ 329.794861][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 329.816411][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3057'. [ 329.919559][T17091] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 330.022644][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 330.066785][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'. [ 330.096711][T17096] netlink: 'syz.0.3166': attribute type 12 has an invalid length. [ 330.104637][T17096] netlink: 'syz.0.3166': attribute type 11 has an invalid length. [ 330.280732][T17106] wg1 speed is unknown, defaulting to 1000 [ 330.299994][T17109] netlink: 'syz.0.3170': attribute type 21 has an invalid length. [ 330.479471][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3174'. [ 330.494800][T17119] netlink: 'syz.0.3174': attribute type 7 has an invalid length. [ 330.517088][T17122] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.525297][T17119] netlink: 'syz.0.3174': attribute type 8 has an invalid length. [ 330.535407][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 330.691874][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.702880][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.712334][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.721682][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.734037][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.900450][T17123] wg1 speed is unknown, defaulting to 1000 [ 330.989068][T17138] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3180'. [ 331.010918][T17138] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 331.032009][T17144] netlink: 'syz.4.3178': attribute type 21 has an invalid length. [ 331.322107][T17156] geneve3: entered promiscuous mode [ 331.328982][T17156] geneve3: entered allmulticast mode [ 331.405481][T17123] chnl_net:caif_netlink_parms(): no params data found [ 331.641032][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.650487][T17176] nbd: must specify at least one socket [ 331.667784][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.682139][T17123] bridge_slave_0: entered allmulticast mode [ 331.695627][T17123] bridge_slave_0: entered promiscuous mode [ 331.705607][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.713370][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.722335][T17123] bridge_slave_1: entered allmulticast mode [ 331.730472][T17123] bridge_slave_1: entered promiscuous mode [ 331.778834][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.790550][T17183] netlink: 'syz.1.3192': attribute type 4 has an invalid length. [ 331.808315][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.865205][T17123] team0: Port device team_slave_0 added [ 331.888634][T17123] team0: Port device team_slave_1 added [ 332.002011][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.009491][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.047008][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.062767][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.070158][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.097851][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.185594][T17123] hsr_slave_0: entered promiscuous mode [ 332.192604][T17123] hsr_slave_1: entered promiscuous mode [ 332.203671][T17123] debugfs: 'hsr0' already exists in 'hsr' [ 332.210157][T17123] Cannot create hsr debugfs directory [ 332.513939][T17123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.527062][T17123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.537569][T17123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.644395][T17123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.656935][T17123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.668518][T17123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.769900][T17123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.783748][T17123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.795796][T17123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.826730][ T52] Bluetooth: hci4: command tx timeout [ 332.888256][T17224] syzkaller0: entered promiscuous mode [ 332.895499][T17224] syzkaller0: entered allmulticast mode [ 332.922521][T17123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.933376][T17123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.943975][T17123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 333.198490][T17123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.224028][T17123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.257569][T17123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.289179][T17123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.434589][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.712370][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.748411][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.755611][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.793618][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.800846][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.845210][T17285] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 334.907003][ T52] Bluetooth: hci4: command tx timeout [ 334.912583][T17283] __nla_validate_parse: 10 callbacks suppressed [ 334.912600][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3221'. [ 334.971420][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3221'. [ 335.068426][T17300] netlink: 'syz.1.3224': attribute type 4 has an invalid length. [ 335.076213][T17300] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3224'. [ 335.110625][T17302] Cannot find add_set index 0 as target [ 335.270637][T17310] ksmbd: Daemon and kernel module version mismatch. ksmbd: 250, kernel module: 1. User-space ksmbd should terminate. [ 335.418350][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3231'. [ 335.464779][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.634845][T17123] veth0_vlan: entered promiscuous mode [ 335.721689][T17123] veth1_vlan: entered promiscuous mode [ 335.795599][T17346] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 335.820405][T17346] bond4: entered promiscuous mode [ 335.825466][T17346] bond4: entered allmulticast mode [ 335.857117][T17346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.938277][T17123] veth0_macvtap: entered promiscuous mode [ 335.992513][T17123] veth1_macvtap: entered promiscuous mode [ 336.022936][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.060050][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.083965][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.128107][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.154215][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.202864][T17372] nbd: must specify an index to disconnect [ 336.247445][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.356062][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3243'. [ 336.390613][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.412042][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.472616][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.488273][T17379] openvswitch: netlink: Missing valid actions attribute. [ 336.506364][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.519838][T17379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.548488][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'. [ 336.591514][T17387] netlink: 'syz.1.3246': attribute type 24 has an invalid length. [ 336.714432][T17390] vlan2: entered promiscuous mode [ 336.720285][T17390] vlan2: entered allmulticast mode [ 336.725509][T17390] hsr_slave_1: entered allmulticast mode [ 336.899994][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'. [ 336.969310][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3253'. [ 336.994285][ T52] Bluetooth: hci4: command tx timeout [ 337.037748][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 337.096427][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3257'. [ 337.125493][T17422] netlink: 'syz.3.3260': attribute type 1 has an invalid length. [ 337.134099][T17422] netlink: 'syz.3.3260': attribute type 3 has an invalid length. [ 337.223970][T17415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.247871][T17415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.404658][T17415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.418171][T17415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.452779][T17449] vlan0: entered promiscuous mode [ 337.537486][T17415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.570635][T17415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.671338][T17415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.681836][T17415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.786188][T17458] syzkaller1: entered promiscuous mode [ 337.800890][T17458] syzkaller1: entered allmulticast mode [ 337.921488][T17469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.968531][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 337.981271][ T61] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.030012][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 338.045036][ T61] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.077229][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 338.090298][ T61] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.112756][ T6145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 338.122746][ T6145] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.377126][T17500] netlink: 'syz.1.3278': attribute type 9 has an invalid length. [ 338.412051][T17494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.421060][T17494] bond_slave_0: left allmulticast mode [ 338.430083][T17494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.441918][T17494] bond_slave_1: left allmulticast mode [ 338.456391][T17494] bond0 (unregistering): (slave team0): Releasing backup interface [ 338.465327][T17494] team0: left allmulticast mode [ 338.470726][T17494] team_slave_1: left allmulticast mode [ 338.484274][T17494] bond0 (unregistering): Released all slaves [ 338.647009][T17510] syzkaller0: entered promiscuous mode [ 338.662101][T17510] syzkaller0: entered allmulticast mode [ 338.791080][T17518] netlink: 'syz.4.3283': attribute type 1 has an invalid length. [ 338.803511][T17518] nbd: must specify at least one socket [ 339.066638][ T52] Bluetooth: hci4: command tx timeout [ 339.141717][T17547] netlink: 'syz.2.3293': attribute type 1 has an invalid length. [ 339.350786][T17556] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 339.599946][T17578] pim6reg1: entered promiscuous mode [ 339.646689][T17578] pim6reg1: entered allmulticast mode [ 340.013451][T17602] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 340.042957][T17602] __nla_validate_parse: 44 callbacks suppressed [ 340.042974][T17602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3306'. [ 340.043968][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.078140][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.098485][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.111703][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.119916][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.184389][T17603] wg1 speed is unknown, defaulting to 1000 [ 340.283636][T17612] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3307'. [ 340.319374][T17612] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3307'. [ 340.339896][T17616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3308'. [ 340.423878][T17620] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3307'. [ 340.589886][T17628] x_tables: duplicate underflow at hook 1 [ 340.621955][T17603] chnl_net:caif_netlink_parms(): no params data found [ 340.825733][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.901483][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.911407][T17603] bridge_slave_0: entered allmulticast mode [ 340.921631][T17603] bridge_slave_0: entered promiscuous mode [ 340.931868][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.939423][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.947916][T17603] bridge_slave_1: entered allmulticast mode [ 340.959220][T17603] bridge_slave_1: entered promiscuous mode [ 341.014882][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.031395][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.091545][T17603] team0: Port device team_slave_0 added [ 341.109992][T17603] team0: Port device team_slave_1 added [ 341.146831][ T52] Bluetooth: hci4: command tx timeout [ 341.159510][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.167257][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.195066][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.209426][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.216823][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.243936][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.328850][T17603] hsr_slave_0: entered promiscuous mode [ 341.345808][T17603] hsr_slave_1: entered promiscuous mode [ 341.357267][T17603] debugfs: 'hsr0' already exists in 'hsr' [ 341.372881][T17603] Cannot create hsr debugfs directory [ 341.634184][T17649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3315'. [ 341.656120][T17649] sch_tbf: burst 88 is lower than device vlan1 mtu (1514) ! [ 341.688231][T17649] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3315'. [ 341.712583][T17603] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.726339][T17603] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.763348][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 341.766029][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 341.781372][T17653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3317'. [ 341.827238][T17603] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.837208][T17603] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.896524][T17664] openvswitch: netlink: IP tunnel TTL not specified. [ 341.913641][T17603] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.929747][T17603] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.007764][T17603] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.031434][T17603] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.056077][T17668] netlink: 'syz.0.3322': attribute type 10 has an invalid length. [ 342.066156][T17666] veth1_to_bond: entered allmulticast mode [ 342.095463][T17666] bond0: (slave bond_slave_1): Releasing backup interface [ 342.127125][T17666] veth1_to_bond (unregistering): left allmulticast mode [ 342.138101][T17668] dummy0: entered promiscuous mode [ 342.143984][T17668] bridge0: port 3(dummy0) entered blocking state [ 342.150874][T17668] bridge0: port 3(dummy0) entered disabled state [ 342.160144][T17668] dummy0: entered allmulticast mode [ 342.170138][T17668] bridge0: port 3(dummy0) entered blocking state [ 342.176586][T17668] bridge0: port 3(dummy0) entered forwarding state [ 342.186860][ T52] Bluetooth: hci2: command tx timeout [ 342.282826][T17677] IPv6: addrconf: prefix option has invalid lifetime [ 342.405824][T17603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.420748][T17603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.443332][T17603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.457669][T17603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.487480][T17687] tipc: Started in network mode [ 342.492502][T17687] tipc: Node identity 1236e3dbd06a, cluster identity 4711 [ 342.500043][T17687] tipc: Enabled bearer , priority 0 [ 342.517178][T17688] syzkaller0: entered promiscuous mode [ 342.540259][T17688] syzkaller0: entered allmulticast mode [ 342.604500][T17687] tipc: Resetting bearer [ 342.646912][T17686] tipc: Resetting bearer [ 342.686202][T17686] tipc: Disabling bearer [ 342.836365][T17603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.850909][T17718] netlink: 'syz.0.3333': attribute type 13 has an invalid length. [ 342.913029][T17672] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 342.922059][T17672] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 343.011541][T17722] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.017525][T17724] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 343.022286][T17722] syzkaller0: entered promiscuous mode [ 343.035351][T17722] syzkaller0: entered allmulticast mode [ 343.100842][T17672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.101792][T17718] tipc: Started in network mode [ 343.123105][T17672] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 343.123770][T17718] tipc: Node identity e23329902b6, cluster identity 4711 [ 343.142966][T17718] tipc: Enabled bearer , priority 0 [ 343.154644][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.163777][T17727] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 343.241231][T17672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.248224][T17672] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 343.274592][T17728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.283332][T17728] bond1: (slave bond2): making interface the new active one [ 343.292523][T17728] bond1: (slave bond2): Enslaving as an active interface with an up link [ 343.303092][T17718] tipc: Resetting bearer [ 343.322947][T17718] tipc: Disabling bearer [ 343.369639][T17733] tipc: Started in network mode [ 343.375612][T17733] tipc: Node identity 8ed88b59139b, cluster identity 4711 [ 343.383999][T17733] tipc: Enabled bearer , priority 0 [ 343.414363][T17672] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.421328][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.422411][T17672] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 343.428508][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.455921][T17732] tipc: Disabling bearer [ 343.502343][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.509565][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.560405][T17672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.566519][T17672] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 343.619780][T17754] mac80211_hwsim hwsim43 : renamed from wlan1 [ 344.062867][T17778] ip6tnl0: Caught tx_queue_len zero misconfig [ 344.145944][T17603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.694204][T17826] veth0: entered promiscuous mode [ 344.724228][T17825] veth0: left promiscuous mode [ 344.787338][T17830] macvlan1: entered allmulticast mode [ 344.858361][T17603] veth0_vlan: entered promiscuous mode [ 344.905274][T17603] veth1_vlan: entered promiscuous mode [ 344.914404][T17842] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 345.048000][T17603] veth0_macvtap: entered promiscuous mode [ 345.063280][T17853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.103312][T17603] veth1_macvtap: entered promiscuous mode [ 345.120439][T17857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.160574][T17860] netlink: 'syz.2.3368': attribute type 142 has an invalid length. [ 345.194222][T17603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.243556][T17603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.392696][ T6286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.433403][T17849] infiniband !yz!: set down [ 345.445746][T17849] infiniband !yz!: added team_slave_0 [ 345.461404][ T6286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.515321][T17849] RDS/IB: !yz!: added [ 345.522315][ T6286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.533320][T17849] smc: adding ib device !yz! with port count 1 [ 345.544260][ T6286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.558753][T17849] smc: ib device !yz! port 1 has no pnetid [ 345.579441][T17879] sctp: [Deprecated]: syz.0.3378 (pid 17879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.579441][T17879] Use struct sctp_sack_info instead [ 345.604902][T17880] __nla_validate_parse: 12 callbacks suppressed [ 345.604919][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'. [ 345.672163][T17880] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3378'. [ 345.689742][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'. [ 345.752635][T17875] syzkaller0: entered promiscuous mode [ 345.790792][T17875] syzkaller0: entered allmulticast mode [ 345.875948][T17884] netlink: 'syz.3.3380': attribute type 25 has an invalid length. [ 345.960476][T17882] bridge_slave_0: left allmulticast mode [ 345.971569][T17882] bridge_slave_0: left promiscuous mode [ 345.979651][T17882] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.994300][T17882] bridge_slave_1: left allmulticast mode [ 346.002108][T17882] bridge_slave_1: left promiscuous mode [ 346.009472][T17882] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.025443][T17882] bond0: (slave bond_slave_0): Releasing backup interface [ 346.040122][T17882] bond0: (slave bond_slave_1): Releasing backup interface [ 346.060563][T17882] team0: Port device team_slave_0 removed [ 346.072493][T17882] team0: Port device team_slave_1 removed [ 346.080685][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.088808][T17882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.099017][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.107883][T17882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.119199][T17882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.378247][T17889] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 347.465402][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.497596][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.574959][ T6286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.592019][ T6286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.762065][T17908] netlink: 'syz.4.3299': attribute type 1 has an invalid length. [ 347.781043][T17908] netlink: 'syz.4.3299': attribute type 5 has an invalid length. [ 347.854652][T17912] openvswitch: netlink: Invalid VLAN frame [ 348.047686][T17914] syzkaller0: entered promiscuous mode [ 348.070582][T17914] syzkaller0: entered allmulticast mode [ 348.113477][T17914] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 348.180061][ T52] block nbd4: Receive control failed (result -32) [ 348.186007][T17931] netlink: 'syz.3.3394': attribute type 13 has an invalid length. [ 348.262611][T17931] veth0_macvtap: left promiscuous mode [ 348.286719][T17941] sctp: [Deprecated]: syz.3.3394 (pid 17941) Use of int in max_burst socket option. [ 348.286719][T17941] Use struct sctp_assoc_value instead [ 348.353074][T17931] macvtap0: entered allmulticast mode [ 348.365893][T17931] macvtap0: refused to change device tx_queue_len [ 348.445025][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 348.852676][T17972] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3408'. [ 348.872037][T17974] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3407'. [ 348.887252][T17975] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3407'. [ 349.168963][T17987] syzkaller0: entered promiscuous mode [ 349.175138][T17987] syzkaller0: entered allmulticast mode [ 349.395098][T17999] tipc: Enabling of bearer rejected, failed to enable media [ 349.552092][T18013] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3418'. [ 349.905895][T18035] 8021q: VLANs not supported on ip6_vti0 [ 350.384486][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3428'. [ 350.438480][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3428'. [ 350.712106][T18066] IPVS: persistence engine module ip_vs_pe_ not found [ 350.841091][T18075] __nla_validate_parse: 1 callbacks suppressed [ 350.841110][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 350.990399][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 351.321547][T18102] smc: net device gre0 applied user defined pnetid SYZ1 [ 351.349053][T18102] smc: net device gre0 erased user defined pnetid SYZ1 [ 351.694108][T18129] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 351.712080][T18129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.746028][T18129] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 351.766747][T18129] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 351.789010][T18129] netlink: 'syz.4.3448': attribute type 83 has an invalid length. [ 351.861895][T18135] netlink: 'syz.0.3450': attribute type 6 has an invalid length. [ 351.903794][T18141] team_slave_0: entered promiscuous mode [ 351.909557][T18141] team_slave_1: entered promiscuous mode [ 351.959584][T18141] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.008428][T18145] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 352.048233][T18141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3453'. [ 352.066785][T18141] nbd: couldn't find a device at index 0 [ 352.157874][T18161] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 352.170325][T18163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3459'. [ 352.372445][T18178] netlink: 'syz.0.3465': attribute type 1 has an invalid length. [ 352.483442][T18186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3467'. [ 352.530349][T18185] bond1: (slave gretap1): making interface the new active one [ 352.559117][T18192] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 352.562265][T18185] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 352.619899][T18192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 352.696372][T18204] netlink: 'syz.0.3473': attribute type 8 has an invalid length. [ 352.805554][T18207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 352.836320][T18211] team0: Caught tx_queue_len zero misconfig [ 352.848259][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.898607][T18213] pim6reg1: entered promiscuous mode [ 352.904498][T18213] pim6reg1: entered allmulticast mode [ 352.989664][T18217] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 353.063443][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'. [ 353.380871][T18236] IPv6: sit1: Disabled Multicast RS [ 353.999549][T18273] can: request_module (can-proto-5) failed. [ 354.135041][T18287] bond0: entered promiscuous mode [ 354.158067][T18287] bond_slave_0: entered promiscuous mode [ 354.175324][T18287] dummy0: entered promiscuous mode [ 354.191457][T18287] batadv0: entered promiscuous mode [ 354.210436][T18287] hsr1: entered allmulticast mode [ 354.215525][T18287] bond0: entered allmulticast mode [ 354.234790][T18287] bond_slave_0: entered allmulticast mode [ 354.243638][T18287] dummy0: entered allmulticast mode [ 354.250277][T18287] batadv0: entered allmulticast mode [ 354.257678][T18287] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 354.270250][T18287] bond0: left promiscuous mode [ 354.275148][T18287] bond_slave_0: left promiscuous mode [ 354.282258][T18287] dummy0: left promiscuous mode [ 354.290209][T18287] batadv0: left promiscuous mode [ 354.307653][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3505'. [ 354.382101][T18290] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.468597][T18290] bridge_slave_1 (unregistering): left allmulticast mode [ 354.475912][T18290] bridge_slave_1 (unregistering): left promiscuous mode [ 354.484800][T18290] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.661093][T18319] 8021q: VLANs not supported on ip_vti0 [ 354.902357][T18337] syz_tun: entered allmulticast mode [ 354.937545][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 354.950610][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3517'. [ 355.183549][T18351] : renamed from bridge_slave_0 (while UP) [ 355.224934][T18351] netlink: 'syz.0.3522': attribute type 3 has an invalid length. [ 355.754521][T18400] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 355.800506][T18402] netlink: 'syz.4.3537': attribute type 1 has an invalid length. [ 355.831336][T18402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.872312][T18402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.879633][T18402] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.891265][T18402] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 355.915222][T18406] __nla_validate_parse: 2 callbacks suppressed [ 355.915239][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3538'. [ 355.944283][T18404] veth3: entered promiscuous mode [ 355.953706][T18404] bond1: (slave veth3): Enslaving as an active interface with a down link [ 355.976117][T18407] vlan2: entered allmulticast mode [ 355.981448][T18407] bond1: entered allmulticast mode [ 356.162259][T18417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3542'. [ 356.171440][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 356.217223][T18419] x_tables: duplicate underflow at hook 1 [ 356.513200][T18430] geneve2: entered promiscuous mode [ 356.522826][T18430] geneve2: entered allmulticast mode [ 356.542393][ T995] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.566885][T18438] team0: Device ipvlan1 failed to register rx_handler [ 356.582648][ T995] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.617205][T18440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3552'. [ 356.623002][ T995] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.646229][ T995] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.810894][T18452] netlink: 'syz.0.3557': attribute type 11 has an invalid length. [ 356.846726][T18452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3557'. [ 356.879600][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 357.198519][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'. [ 357.382164][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 357.495598][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 357.702855][T18519] lo: Caught tx_queue_len zero misconfig [ 357.898349][T18535] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3578'. [ 357.948639][T18544] openvswitch: netlink: Message has 8 unknown bytes. [ 358.026398][T18522] syzkaller0: entered promiscuous mode [ 358.041481][T18522] syzkaller0: entered allmulticast mode [ 358.078480][T18544] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 358.344292][T18569] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 359.624033][T18569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 359.758601][T18580] netlink: 'syz.1.3592': attribute type 2 has an invalid length. [ 359.975914][T18604] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 360.885486][T18669] C: renamed from lo (while UP) [ 360.898714][T18666] syzkaller0: entered promiscuous mode [ 360.904566][T18666] syzkaller0: entered allmulticast mode [ 360.925357][T18667] syzkaller0: entered promiscuous mode [ 360.940906][T18667] syzkaller0: entered allmulticast mode [ 361.167869][T18681] __nla_validate_parse: 7 callbacks suppressed [ 361.167886][T18681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3619'. [ 361.273367][T18684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.407410][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 361.423392][T18705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3626'. [ 361.450669][T18684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.532001][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 361.583182][T18684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.677769][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3631'. [ 361.692388][T18684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.827088][T18723] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3634'. [ 361.857818][ T6289] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.883374][ T6289] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.894341][T18728] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3633'. [ 361.939786][ T6289] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.986524][ T6289] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.011004][T18683] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.026256][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'. [ 362.035855][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3637'. [ 362.177870][T18683] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.282171][T18683] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.444913][T18683] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.480300][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 362.566140][T18759] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 362.644513][T18757] bond2 (unregistering): Released all slaves [ 362.788736][T18778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.817137][T18783] tc_dump_action: action bad kind [ 363.014981][T18799] netlink: 'syz.4.3659': attribute type 10 has an invalid length. [ 363.067559][T18801] netlink: 'syz.0.3658': attribute type 1 has an invalid length. [ 363.914698][T18811] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 364.133481][T18865] netlink: 'syz.2.3679': attribute type 9 has an invalid length. [ 364.141801][T18865] netlink: 'syz.2.3679': attribute type 6 has an invalid length. [ 364.156082][T18866] netlink: 'syz.2.3679': attribute type 9 has an invalid length. [ 364.165714][T18866] netlink: 'syz.2.3679': attribute type 6 has an invalid length. [ 364.546468][T18886] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 365.677036][T18907] syzkaller0: entered promiscuous mode [ 365.682701][T18907] syzkaller0: entered allmulticast mode [ 365.725293][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.860322][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.886713][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.943696][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.195816][T18939] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 366.278425][T18944] __nla_validate_parse: 7 callbacks suppressed [ 366.278450][T18944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3701'. [ 366.489110][T18960] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.3708'. [ 366.538193][T18967] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 366.638690][T18974] veth1_vlan: left promiscuous mode [ 366.696469][T18974] netlink: 'syz.0.3711': attribute type 2 has an invalid length. [ 366.755778][T18967] bond1: (slave ip6gretap1): making interface the new active one [ 366.778819][T18967] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 367.214270][T19002] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20003 [ 367.265439][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3722'. [ 367.361311][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 367.670138][T19026] pim6reg: entered allmulticast mode [ 367.876501][T19045] netlink: 'syz.2.3736': attribute type 3 has an invalid length. [ 367.909687][T19042] vlan2: entered promiscuous mode [ 367.914956][T19042] geneve1: entered promiscuous mode [ 367.920555][T19042] vlan2: entered allmulticast mode [ 367.925662][T19042] geneve1: entered allmulticast mode [ 367.931824][T19045] netlink: 'syz.2.3736': attribute type 3 has an invalid length. [ 368.106120][T19057] delete_channel: no stack [ 368.114237][T19051] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 368.138998][T19057] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 368.377169][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'. [ 368.415058][T19074] veth0_macvtap: left promiscuous mode [ 368.483806][T19090] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3749'. [ 368.649411][T19099] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3752'. [ 368.716269][T19108] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3753'. [ 368.881524][T19118] netlink: 'syz.4.3758': attribute type 2 has an invalid length. [ 369.096292][T19132] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3763'. [ 369.163364][T19136] netlink: 'syz.2.3764': attribute type 6 has an invalid length. [ 369.175995][T19138] x_tables: duplicate underflow at hook 2 [ 369.186929][T19136] netlink: 'syz.2.3764': attribute type 6 has an invalid length. [ 369.641855][T19168] veth3: entered allmulticast mode [ 369.789779][T19177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3777'. [ 371.300405][T19265] __nla_validate_parse: 11 callbacks suppressed [ 371.300423][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3802'. [ 371.339258][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3802'. [ 371.362841][T19049] udevd[19049]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 371.378242][T19265] netlink: 'syz.3.3802': attribute type 12 has an invalid length. [ 371.407675][T19265] netlink: 'syz.3.3802': attribute type 11 has an invalid length. [ 371.473246][T19270] macsec1: entered promiscuous mode [ 371.656199][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 371.814421][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 371.824083][T19299] bridge0: entered promiscuous mode [ 371.826997][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3810'. [ 371.839050][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 371.855877][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3810'. [ 371.991601][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3814'. [ 372.035358][ T1146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.044425][ T1146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.060418][ T1146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.078932][ T1146] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.113705][T19308] netlink: 'syz.2.3816': attribute type 10 has an invalid length. [ 372.139960][T19308] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3816'. [ 372.154436][T19308] team0: entered promiscuous mode [ 372.162316][T19308] team_slave_0: entered promiscuous mode [ 372.168991][T19308] team_slave_1: entered promiscuous mode [ 372.175272][T19308] bridge0: port 3(team0) entered blocking state [ 372.181878][T19308] bridge0: port 3(team0) entered disabled state [ 372.188738][T19308] team0: entered allmulticast mode [ 372.193999][T19308] team_slave_0: entered allmulticast mode [ 372.200822][T19308] team_slave_1: entered allmulticast mode [ 372.210463][T19308] bridge0: port 3(team0) entered blocking state [ 372.216939][T19308] bridge0: port 3(team0) entered forwarding state [ 372.424562][T19321] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3820'. [ 372.490293][T19321] tipc: Enabled bearer , priority 0 [ 372.555647][T19321] syzkaller0: entered promiscuous mode [ 372.595633][T19321] syzkaller0: entered allmulticast mode [ 372.642333][T19295] bridge0: left promiscuous mode [ 372.691442][T19321] tipc: Resetting bearer [ 372.704550][T19321] netlink: 'syz.0.3820': attribute type 5 has an invalid length. [ 372.725150][T19333] tipc: Started in network mode [ 372.749333][T19333] tipc: Node identity b65959a3024e, cluster identity 4711 [ 372.767423][T19333] tipc: Enabled bearer , priority 0 [ 372.784277][T19318] tipc: Resetting bearer [ 372.794262][T19338] openvswitch: netlink: Key type 220 is out of range max 32 [ 372.802958][T19340] --map-set only usable from mangle table [ 372.808944][T19341] --map-set only usable from mangle table [ 372.824158][T19318] tipc: Disabling bearer [ 372.864521][T19333] syzkaller0: entered promiscuous mode [ 372.876679][T19333] syzkaller0: entered allmulticast mode [ 373.034288][T19333] tipc: Resetting bearer [ 373.079403][T19332] tipc: Resetting bearer [ 373.147644][T19332] tipc: Disabling bearer [ 373.621069][T19380] netlink: 'syz.3.3837': attribute type 1 has an invalid length. [ 375.293835][T19380] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 375.294241][T19383] netlink: 'syz.2.3835': attribute type 7 has an invalid length. [ 375.493495][T19419] netlink: 'syz.2.3843': attribute type 63 has an invalid length. [ 375.546882][T19427] x_tables: unsorted entry at hook 3 [ 375.601073][T19431] x_tables: unsorted entry at hook 3 [ 376.245477][T19468] netlink: 'syz.3.3857': attribute type 1 has an invalid length. [ 376.341584][T19471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.352010][T19470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.458286][T19487] __nla_validate_parse: 9 callbacks suppressed [ 376.458303][T19487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3860'. [ 376.768130][T19500] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3863'. [ 376.902046][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3865'. [ 376.918965][ T5895] IPVS: starting estimator thread 0... [ 377.006693][T19518] IPVS: using max 33 ests per chain, 79200 per kthread [ 377.169601][T19532] netlink: 'syz.4.3871': attribute type 1 has an invalid length. [ 377.179616][T19537] netlink: 'syz.3.3873': attribute type 4 has an invalid length. [ 377.231856][T19542] openvswitch: netlink: IPv4 tunnel dst address is zero [ 377.237715][T19532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.254071][T19538] bond0: (slave rose0): Enslaving as an active interface with an up link [ 377.293939][T19545] bond2: (slave geneve3): making interface the new active one [ 377.304595][T19545] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 377.393618][T19551] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 377.470488][T19558] openvswitch: netlink: IP tunnel dst address not specified [ 377.499641][T19561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.591502][T19565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.690129][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'. [ 377.709461][T19573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3884'. [ 377.717163][T19572] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3885'. [ 377.783756][T19571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.797897][T19571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.831240][T19571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.838849][T19571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.914706][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 377.924673][T19578] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.932386][T19578] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.320377][T19600] : renamed from bond_slave_0 (while UP) [ 378.377850][T19602] netlink: 'syz.4.3896': attribute type 17 has an invalid length. [ 378.411437][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3896'. [ 378.442061][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3896'. [ 378.512419][T19608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3899'. [ 378.545332][T19611] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 378.820309][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.828311][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.836194][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.844149][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.852085][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.860050][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.868032][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.875924][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.883854][T19625] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 378.937274][T19628] IPv6: Can't replace route, no match found [ 378.974340][T19628] bond2: Unable to set up delay as MII monitoring is disabled [ 378.984158][T19628] bond2 (unregistering): Released all slaves [ 379.124047][T19639] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 379.396284][T19659] block nbd5: Unsupported socket: should be TCP or UNIX. [ 379.565810][T19671] x_tables: duplicate underflow at hook 2 [ 379.610079][T19675] macvlan0: entered promiscuous mode [ 379.639501][T19673] netlink: 'syz.0.3919': attribute type 83 has an invalid length. [ 380.258726][T19719] : entered promiscuous mode [ 380.271231][T19724] wg1 speed is unknown, defaulting to 1000 [ 380.382774][T19730] netlink: 'syz.0.3939': attribute type 21 has an invalid length. [ 380.664975][T19747] netlink: 'syz.4.3942': attribute type 11 has an invalid length. [ 380.687714][T19750] batadv_slave_0: entered promiscuous mode [ 380.734570][T19751] batadv_slave_0: left promiscuous mode [ 380.756725][T19747] netlink: 'syz.4.3942': attribute type 11 has an invalid length. [ 380.765386][T19753] Cannot find map_set index 0 as target [ 381.221130][T19770] syzkaller0: entered promiscuous mode [ 381.236948][T19770] syzkaller0: entered allmulticast mode [ 381.475152][T19801] __nla_validate_parse: 12 callbacks suppressed [ 381.475170][T19801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3954'. [ 381.515658][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'. [ 381.531339][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 381.744999][T19818] wg1 speed is unknown, defaulting to 1000 [ 381.973412][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3964'. [ 381.985707][T19837] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3964'. [ 382.202175][T19838] bond2: option lp_interval: invalid value (0) [ 382.227814][T19838] bond2: option lp_interval: allowed values 1 - 2147483647 [ 382.243489][T19838] bond2 (unregistering): Released all slaves [ 382.575352][T19859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 383.060801][T19882] tipc: Enabled bearer , priority 2 [ 383.124134][T19886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3976'. [ 383.160309][T19889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3977'. [ 383.175561][T19864] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 383.178715][T19886] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 383.207316][T19886] netlink: 'syz.0.3976': attribute type 3 has an invalid length. [ 383.225114][T19886] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3976'. [ 383.267672][T19886] NCSI netlink: No device for ifindex 813332851 [ 383.320529][T19898] syzkaller0: entered promiscuous mode [ 383.326116][T19898] syzkaller0: entered allmulticast mode [ 383.495744][T19905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.627073][T19905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.639920][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3984'. [ 383.693247][T19916] syzkaller0: entered promiscuous mode [ 383.699712][T19916] syzkaller0: entered allmulticast mode [ 383.740940][T19905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.762296][T19914] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 383.942493][T19905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.085313][ T6286] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.109556][ T9] tipc: Node number set to 2638449497 [ 384.175746][ T6286] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.258583][ T6286] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.304948][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.370841][T19934] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 384.471639][T19940] netlink: 'syz.3.3994': attribute type 10 has an invalid length. [ 384.503804][T19938] netlink: 'syz.2.3993': attribute type 9 has an invalid length. [ 384.523158][T19938] netlink: 'syz.2.3993': attribute type 11 has an invalid length. [ 384.537487][T19938] netlink: 'syz.2.3993': attribute type 12 has an invalid length. [ 384.760803][T19956] netlink: 'syz.0.4000': attribute type 1 has an invalid length. [ 384.861987][T19956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.928543][T19959] syzkaller0: entered allmulticast mode [ 384.939015][T19959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.035606][T19978] net_ratelimit: 48 callbacks suppressed [ 385.035619][T19978] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 385.440279][ T6674] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.456911][ T6674] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.670078][T20027] openvswitch: netlink: Flow key attribute not present in set flow. [ 385.998403][T20011] bridge0: port 3(dummy0) entered disabled state [ 386.005023][T20011] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.012699][T20011] bridge0: port 1() entered disabled state [ 386.078442][T20011] team_slave_0: left promiscuous mode [ 386.093261][T20011] team_slave_1: left promiscuous mode [ 386.112101][T19946] udevd[19946]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 386.396103][T20011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.433587][T20011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.587671][T20011] macvlan1: left allmulticast mode [ 386.626423][T20011] geneve2: left promiscuous mode [ 386.631748][T20011] geneve2: left allmulticast mode [ 386.657982][T20011] vlan2: left promiscuous mode [ 386.662904][T20011] vlan2: left allmulticast mode [ 386.674167][T20011] hsr_slave_1: left allmulticast mode [ 386.712163][ T6674] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.720778][ T6674] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.782643][ T6674] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 386.795715][ T6674] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.806503][ T6674] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 386.816948][ T6674] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.841060][ T6674] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 386.874067][ T6674] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.912693][ T6674] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 386.936460][ T6674] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.947588][T20068] __nla_validate_parse: 7 callbacks suppressed [ 386.947603][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4029'. [ 386.984965][T20071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4030'. [ 387.017767][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 387.050472][T20073] bridge_slave_0: left allmulticast mode [ 387.059487][T20073] bridge_slave_0: left promiscuous mode [ 387.060843][T20080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4029'. [ 387.065349][T20073] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.172324][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 387.490899][T20106] delete_channel: no stack [ 387.744377][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4040'. [ 387.882836][T20136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4046'. [ 387.911001][T20136] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4046'. [ 387.989683][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4040'. [ 388.166404][T20155] netlink: 'syz.2.4050': attribute type 7 has an invalid length. [ 388.302831][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4055'. [ 388.495461][T20184] team0: left allmulticast mode [ 388.505520][T20186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.506983][T20188] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 388.515361][T20184] team_slave_0: left allmulticast mode [ 388.521229][T20188] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 388.527335][T20184] team_slave_1: left allmulticast mode [ 388.539888][T20184] bridge0: port 3(team0) entered disabled state [ 388.551684][T20184] bridge_slave_1: left allmulticast mode [ 388.557475][T20184] bridge_slave_1: left promiscuous mode [ 388.568093][T20184] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.578273][T20184] bridge_slave_0: left allmulticast mode [ 388.583927][T20184] bridge_slave_0: left promiscuous mode [ 388.590943][T20184] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.728272][T20188] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 388.740306][T20188] bond3 (unregistering): Released all slaves [ 389.438461][T20221] netlink: 'syz.3.4066': attribute type 4 has an invalid length. [ 389.765933][T20255] netlink: 'syz.2.4073': attribute type 10 has an invalid length. [ 389.779934][T20255] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 389.791748][T20255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.871183][T20262] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 389.893466][T20262] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 390.106286][T20283] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 390.220781][T20294] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 390.240216][T20294] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 390.582303][T20314] netlink: 'syz.0.4092': attribute type 2 has an invalid length. [ 390.594816][T20314] 9: entered promiscuous mode [ 390.693218][T20318] IPVS: set_ctl: invalid protocol: 23 172.20.20.170:20000 [ 390.701924][T20318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.833033][T20328] syzkaller1: entered allmulticast mode [ 391.284881][T20360] syz_tun: entered allmulticast mode [ 391.292632][T20358] syz_tun: left allmulticast mode [ 391.336160][T20365] tipc: Enabling of bearer rejected, failed to enable media [ 391.490177][T20372] nbd: couldn't find a device at index 0 [ 391.999299][T20411] tipc: Started in network mode [ 392.004237][T20411] tipc: Node identity 6eb55d0ff6e5, cluster identity 4711 [ 392.035175][T20411] tipc: Enabled bearer , priority 0 [ 392.043581][T20411] syzkaller0: entered allmulticast mode [ 392.060270][T20411] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 392.093316][T20420] __nla_validate_parse: 9 callbacks suppressed [ 392.093332][T20420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4127'. [ 392.146492][T20411] tipc: Resetting bearer [ 392.220111][T20406] tipc: Resetting bearer [ 392.279970][T20406] tipc: Disabling bearer [ 392.340763][T20433] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 392.392304][T20439] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4131'. [ 392.481437][T20447] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 392.597055][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4136'. [ 392.617801][T20458] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 392.626200][T20452] netlink: 'syz.4.4136': attribute type 9 has an invalid length. [ 392.646610][T20459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4139'. [ 392.835883][T20473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 392.884070][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4146'. [ 392.958157][T20482] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 393.002990][T20490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4149'. [ 393.118563][T20497] tunl0: entered promiscuous mode [ 393.141787][T20497] netlink: 'syz.4.4153': attribute type 3 has an invalid length. [ 393.163971][T20497] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4153'. [ 393.178611][T20502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4155'. [ 393.266894][T20504] can: request_module (can-proto-0) failed. [ 403.537262][ C0] hrtimer: interrupt took 10278025828 ns [ 508.576570][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 508.583594][ C1] rcu: 0-...!: (1 GPs behind) idle=96a4/0/0x1 softirq=76773/76774 fqs=1 [ 508.592980][ C1] rcu: (detected by 1, t=10502 jiffies, g=68933, q=695 ncpus=2) [ 508.600725][ C1] Sending NMI from CPU 1 to CPUs 0: [ 508.600758][ C0] NMI backtrace for cpu 0 [ 508.600791][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 508.600826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.600848][ C0] RIP: 0010:advance_sched+0xe/0xc90 [ 508.600872][ C0] Code: cc fb ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 81 ec 98 00 00 00 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 f9 [ 508.600887][ C0] RSP: 0018:ffffc90000007d08 EFLAGS: 00000046 [ 508.600907][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff8dc95280 [ 508.600925][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: ffff88808d02c300 [ 508.600936][ C0] RBP: ffffc90000007e90 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 508.600948][ C0] R10: dffffc0000000000 R11: ffffffff89620b40 R12: ffff88808d02c300 [ 508.600960][ C0] R13: 1ffffffff1b92bb3 R14: ffffffff89620b40 R15: ffffffff8dc95d98 [ 508.600973][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 508.600986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.600998][ C0] CR2: 00007f6f625b7198 CR3: 0000000043768000 CR4: 00000000003526f0 [ 508.601012][ C0] Call Trace: [ 508.601024][ C0] [ 508.601033][ C0] ? __pfx_advance_sched+0x10/0x10 [ 508.601050][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 508.601070][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 508.601095][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 508.601113][ C0] ? read_tsc+0x9/0x20 [ 508.601137][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 508.601169][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 508.601188][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 508.601209][ C0] [ 508.601214][ C0] [ 508.601220][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 508.601237][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 508.601257][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 508.601270][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 508.601283][ C0] RAX: d91e7c18a4500c00 RBX: ffffffff8197438a RCX: d91e7c18a4500c00 [ 508.601295][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd90 RDI: ffffffff8bbfc660 [ 508.601307][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 508.601319][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 508.601330][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 508.601343][ C0] ? do_idle+0x1ea/0x520 [ 508.601364][ C0] default_idle+0x13/0x20 [ 508.601385][ C0] default_idle_call+0x73/0xb0 [ 508.601406][ C0] do_idle+0x1ea/0x520 [ 508.601421][ C0] ? irqentry_exit+0x5ba/0x660 [ 508.601443][ C0] ? __pfx_do_idle+0x10/0x10 [ 508.601466][ C0] cpu_startup_entry+0x44/0x60 [ 508.601482][ C0] rest_init+0x2de/0x300 [ 508.601498][ C0] start_kernel+0x3ae/0x410 [ 508.601516][ C0] x86_64_start_reservations+0x24/0x30 [ 508.601536][ C0] x86_64_start_kernel+0x143/0x1c0 [ 508.601556][ C0] common_startup_64+0x13e/0x147 [ 508.601582][ C0] [ 508.601751][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g68933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 508.925174][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 508.935310][ C1] rcu: RCU grace-period kthread stack dump: [ 508.941202][ C1] task:rcu_preempt state:R running task stack:27336 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 508.954710][ C1] Call Trace: [ 508.957991][ C1] [ 508.960930][ C1] __schedule+0x14bc/0x5000 [ 508.965461][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 508.970666][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 508.976559][ C1] ? __pfx___schedule+0x10/0x10 [ 508.981426][ C1] ? schedule+0x91/0x360 [ 508.985682][ C1] schedule+0x165/0x360 [ 508.989841][ C1] schedule_timeout+0x12b/0x270 [ 508.994688][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 509.000058][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 509.005950][ C1] ? __pfx_process_timeout+0x10/0x10 [ 509.011244][ C1] ? prepare_to_swait_event+0x341/0x380 [ 509.016797][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 509.021659][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 509.027559][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 509.032843][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 509.038043][ C1] ? finish_swait+0xcd/0x1f0 [ 509.042634][ C1] rcu_gp_kthread+0x99/0x390 [ 509.047226][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 509.052420][ C1] ? __kthread_parkme+0x7b/0x200 [ 509.057356][ C1] ? __kthread_parkme+0x1a1/0x200 [ 509.062395][ C1] kthread+0x711/0x8a0 [ 509.066479][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 509.071709][ C1] ? __pfx_kthread+0x10/0x10 [ 509.076303][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 509.081559][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 509.086759][ C1] ? __pfx_kthread+0x10/0x10 [ 509.091355][ C1] ret_from_fork+0x599/0xb30 [ 509.095954][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 509.101081][ C1] ? __switch_to_asm+0x39/0x70 [ 509.105843][ C1] ? __switch_to_asm+0x33/0x70 [ 509.110604][ C1] ? __pfx_kthread+0x10/0x10 [ 509.115198][ C1] ret_from_fork_asm+0x1a/0x30 [ 509.119977][ C1] [ 509.122990][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 509.129309][ C1] CPU: 1 UID: 0 PID: 16096 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 509.138844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.148896][ C1] RIP: 0010:smp_call_function_many_cond+0xccf/0x12b0 [ 509.155578][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 94 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 8f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d9 8f [ 509.175184][ C1] RSP: 0018:ffffc9000baef560 EFLAGS: 00000293 [ 509.181248][ C1] RAX: ffffffff81b5ba87 RBX: 1ffff11017108545 RCX: ffff888078cdbd00 [ 509.189212][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 509.197177][ C1] RBP: ffffc9000baef6e0 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 509.205143][ C1] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffff8880b8842a28 [ 509.213110][ C1] R13: dffffc0000000000 R14: ffff8880b893b9c0 R15: 0000000000000000 [ 509.221166][ C1] FS: 000055557706e500(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 509.230089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.236664][ C1] CR2: 00007fbc81d156c0 CR3: 00000000756de000 CR4: 00000000003526f0 [ 509.244630][ C1] Call Trace: [ 509.247903][ C1] [ 509.250836][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 509.256047][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 509.262391][ C1] ? ldt_dup_context+0x336/0x3e0 [ 509.267341][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.272105][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 509.277300][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 509.282420][ C1] flush_tlb_mm_range+0x6b1/0x1280 [ 509.287553][ C1] ? dup_mmap+0x157b/0x1b10 [ 509.292060][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 509.297624][ C1] dup_mmap+0x1594/0x1b10 [ 509.301973][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 509.306665][ C1] ? mm_init+0xa91/0xc60 [ 509.310917][ C1] copy_mm+0x13c/0x4b0 [ 509.314990][ C1] copy_process+0x165d/0x3950 [ 509.319675][ C1] ? copy_process+0x915/0x3950 [ 509.324441][ C1] ? __pfx_copy_process+0x10/0x10 [ 509.329468][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 509.334408][ C1] kernel_clone+0x21e/0x820 [ 509.338910][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 509.344022][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 509.349054][ C1] ? count_memcg_event_mm+0x21/0x260 [ 509.354342][ C1] __x64_sys_clone+0x18b/0x1e0 [ 509.359108][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 509.364420][ C1] ? do_syscall_64+0xbe/0xf80 [ 509.369099][ C1] do_syscall_64+0xfa/0xf80 [ 509.373636][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.379700][ C1] ? clear_bhb_loop+0x60/0xb0 [ 509.384384][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.390272][ C1] RIP: 0033:0x7fbc80f85e93 [ 509.394707][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 509.414309][ C1] RSP: 002b:00007ffcb30446b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 509.422722][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc80f85e93 [ 509.430709][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 509.438674][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 509.446639][ C1] R10: 000055557706e7d0 R11: 0000000000000246 R12: 0000000000000000 [ 509.454608][ C1] R13: 0000000000000063 R14: 0000000000062833 R15: 00007ffcb3044850 [ 509.462598][ C1]