last executing test programs: 11.104707164s ago: executing program 0 (id=3017): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x800, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x54, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x8850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.845774741s ago: executing program 0 (id=3021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5d) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0x40000, 0x8000000009ffffc}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000880)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x348, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x334, 0x1, [@m_xt={0x154, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0xbc, 0x6, "8c3c93dcc535294d9b5b9d36771c1bffc8d943111f9699efba0420c6f61fd6b501d36e965d83a8f183b2c7397a7761518fa8548568129fa0338051b58cd21e8460a43dce6f37f55e3c42e0330801223f0400beb907f187a6bceb987e88d315e44b73f750afaf368e0b146a8195237b308892c6f17615a4c349abbaacaf3b05ed83380aa76d618116d7d7d33e93275de478aebb92e4e87519021955494bb7241535d97c58b6a42315524cb9bdcd4ba54641994a180865cc35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x5b, 0x6, "b21c50e1030b17ea54544df58a6baf7d0fbaa5481080be097d6968ab0cc0abad396f30973b0c8d0220a2db4934eb13d938d3453bc9333bfccc6590bc80cafe60d79c2896ce44cd8c4ecea3d747551ffcc36e75a41326c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_bpf={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x6, 0xa, 0x9, 0x4}, {0x6, 0x1, 0xd0, 0x6}, {0x2, 0x3, 0x40, 0x5}, {0x3, 0x9, 0x5c}, {0xb, 0xf4, 0x3, 0x4}]}]}, {0x13, 0x6, "12df59202984a7d58c1b88abb79747"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11f0, 0x2e0, 0x2e0, 0x11f0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpeername$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) close(0x3) r11 = accept$inet(r5, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc}, {0x1, 0x1ffc6}, {0x9, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4080) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r3}, 0x4) 10.641285873s ago: executing program 0 (id=3024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x80}, {0x6}]}, 0x10) 10.194147387s ago: executing program 0 (id=3028): r0 = socket$inet6(0xa, 0x4, 0x4558) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f00000011c0)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000480)={@private=0xa010100, 0x1, 0x0, 0x50, 0x0, [{@private}, {@dev}, {@initdev}, {@local}, {@dev}]}}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000102010800000a000000000000000000fa99d4728167352251627952aa09189623615c07884a3924ca062cc608218a9438d119b091d6a5388fe1cb2d0ac951f8d846219e7d36f4f6e738cea50b651da20bc540b035ef25704aa73dcadcb56d3e2b7046936cc46a71ef769c7df5d2636cf75ea38925ca438e54f2b8015e6d32c8aa0d17aafb8c98fb6781b0740e22589579a4d54793af6f0f2b0b9435f1269cbd843fec49d9d2b3d243c9a953182fcb7e0f26d6ba"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x4, 0x51, 0x7, 0x101, 0x40, @private1, @mcast2, 0x1, 0x40, 0x1, 0x2e38}}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0xffff, 0x5}, {0xfff3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000814}, 0x40) 9.871850025s ago: executing program 0 (id=3033): r0 = socket(0x2000000015, 0x80005, 0x0) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x38, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000849b435fe91e78a4c481000018110000209fa6d52a127ef26007ec15b03c9df7d28a09f16bc3a36bc898bf9b9e8400000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000002000000850000001c000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xe8, &(0x7f0000000280)=""/232, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0x6, 0x1}], 0x10, 0x6}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x3) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) 9.625027315s ago: executing program 0 (id=3036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x1f8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xba, 0x6, "dfd7aa0a8fe96f40839444564c1925ede2fb4718720089f83e3bfcacef9c5e9165309d25ea5b516532b8e0ab0e6dfb34bf8540bf82af08c775fdd925381b90c23c0066c9ccd38c580e1f83121e4d18721ebe770c04450fb38d165701c3938c9f588596f5c4d8429b72ef027b5f331ea83bbb30c56a1ac9c35a0176ce50eaf4d45350230012aee395b35514d8f3852546bcd27dc74e5812f704ed6c803664a9998de4eb9fff77d424b111d012854dfb01651adfe58547"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x33, 0x6, "c1db4e5ab2fb0e6b80ffe1394130bbebcc18d40b19338ef47547a89eedab0cf0628069e34e024269550acdba6ac90f"}, @NFTA_TABLE_USERDATA={0x19, 0x6, "75e59fdc1a92256d621e9c8bfbf5383cf924dbe465"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb3, 0x6, "7160889b08865d53490eaaa0836d604858f8bafb1859f32b10259c7b571dc188026c5e09a5e5af8bb8e1ac9295ed7ef71bfa2053d26e6b366956724fe49e2b81b8712efdb84856fed25fa5e8c7551782d83c596d6ad457a8a0b13bfa67aceffbb63e705d897235bad305e4a4733d714ed64e6dfb4ab1b19f6fd727b38ca73ccd449670c90c2225240d90f225766073b8c8db875d83d79ae13b3d78069feb58d6fa95d8972d5bb44109967e99ef3c52"}]}, @NFT_MSG_DELSET={0x2a0, 0xb, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x82, 0xd, 0x1, 0x0, "a807d3820bddba19189ba9cd95fa541a1d005f24b31cadd6ff19c26e6e0341583b6be4cf2e813a04266806d8c7e832f09439f34f68233a2e45daff7abf5c0e3ad0006e325b5663c7d604e5c6cc6fc2603156627d84319e56fca3ac28abf03bc015ccb0cd56065ea1e6ee68da1668998e54ef0e4c2503deaf126bda164239"}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x15c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c00000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x767}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_DESC_CONCAT={0xe8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1413de86}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f90}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x66}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xdc, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8e, 0x6, "938821c8ae6bdfce3ccf0dbe1394c55d88d45da8aff848a015c2618ddc8f14e86db6d567e190fe3e64df9ad96a9f30f7bc4e0fd3d3a04b6e5f05d9d0c6dfe9e232cdaee92d3e07d1704ff456a8e0a9af80a32097137f17942b53f0198f73fef2b56202d6e9cef378b99dacf7af3e0e485be0da6eba92a505e1913e1b5a8f7f689303f2ca1002aafbf3eb"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x618}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040084}, 0x20000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x61c04d5af3123004}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2c, 0x9, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb8, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) listen(r1, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x254, 0x12, 0x200, 0x70bd27, 0x25dfdbfe, {0x2, 0xe7, 0x3, 0xfc, {0x4e20, 0x4e21, [0xffff, 0x5, 0x2, 0x7], [0x4d3, 0x7a5, 0x200, 0x519], r9, [0xc, 0xc]}, 0x3, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "e683200d138a48bb356f66180b1f5011b508273e5e2d7a06804a5890356c84662092d46780b7946eba78a7d83ca0b909ece32df2d10f8c13e8cddb5deb39d41e67bcdb7f37f75131af98e87d711f67598ae633c1273aabb1526478cdc826b813c9094667da"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "4b745fd2966362e045a82c4f81fe56a6bd4a6f82338faf0f411213cbd8ad092060d266cf4baa25c3f2e9fa88653299e491f359d121aff3fc52a6aa659e1000bef9d46cc0864a3c323b478ba92bf8a1060e83405792b24942c086f5ca416f224a11539b42fef98fbb5092ac86ec078b7734529e7f16bf6a79c637e58c8741b26ed04f6c432f9f6cc1e8d84dc2e36bc618fe3f20291a5162d42946f0f34ba6f171cb8a55321f"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "4ab4f0a0004fae647eafdd5922c3f2fbe4638b2d8fec4489e6f5c5dbf39cef15663b96bdedd755fc94a28da2e6"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "951c9ce0d0c26d7ae16f54ce3d8cd6a719b3282138f63db0ca87d343f079d2f39781c12c21f0e45c848c24d3ec9c34b27108de51c5225e99932ccabef732edc196e74f53f00e0cc4175807ea2cfdf8945b8b7577c73b38dc289051dae21214a925a05c395bc8c3d43bc330419cc4bdee4985163bcc0e1431cbf18972ef39cbcf226708b5d34265cbd1a4726500e986aa535dcb67bbb8d9074a8d38f7bf16dda426904ee159c7b50fc1297804cc50723afed40c271c"}]}, 0x254}, 0x1, 0x0, 0x0, 0x4044800}, 0x80) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa9, 0x7, 0x1, 0x0, "2bd1d5772153912590c432f9c5dab84eb9941eb1390eed8ed6ede0f9f1dd9e10c2691c0c6671230cef6f314e5f657dc9b008b028cce963465ce023c5202705699bfce2e5218226ad396b4014a64ded6bccda2242a3f1159a319f4214ae5cb128370935e113c0b0d739d4a24b958a5739f465ce8b1205c545a6fa368b1dd190a6e32da8055987fcfae31f8a74d6cb16593f778a2d9ab053f072e5c0986cfc06a4dccf91e8af"}]}], {0x14, 0x10}}, 0x108}}, 0x85) r12 = accept4$inet6(r1, 0x0, &(0x7f0000000240), 0x0) accept4$inet6(r12, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c, 0x80800) 6.160787081s ago: executing program 2 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x81, 0x2fe, 0x3, 0x7, 0x6}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x8004, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r3, 0x0, 0x2, [0x8, 0x8001]}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x20010, r1, 0x6c8e2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.007941965s ago: executing program 2 (id=3083): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 5.346138946s ago: executing program 3 (id=3086): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) unshare(0x22020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000890900010073797a30000000000900020073797a3200000000140000001100010000000000000000000083e98d61a461aab14b0710444a487dcb2bb3e4dc156008c0194813920e3a6f4132fe0c1476c4a03f466132c062b7b47f588e"], 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 4.272328903s ago: executing program 3 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000340)=0x7, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f, 0x2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r8, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xb, 0xffff}, {0x3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600014000000000fcffffff0a0000fed406212517971d156dafeed9b412852ea23464734b54e27b172f90d7424df7818bf046a66fe4285f1dedc0d296624cc7d732bb1285a54635ec9dd98861", @ANYRES32=0x0], 0x18}}, 0x0) 4.270700135s ago: executing program 2 (id=3088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56459, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042dbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000040000"], 0x2c}}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x1, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xfffff681}}, [""]}, 0x24}}, 0x44081) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) accept(r4, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8000001d}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x800448d2, 0x0) bind$bt_hci(r12, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) sendmmsg$inet6(r10, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r10, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0xfffffffffffffdd7}], 0x1}}], 0x1, 0x0) 4.048314084s ago: executing program 3 (id=3091): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000004f753f5b4d66ec8407db80a500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv4_delroute={0x20, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000280), 0x4) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r8, 0x1, 0x26, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 3.889521523s ago: executing program 2 (id=3093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x18, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r5, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x5, 0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7be}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40) sendto$inet6(r7, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ff080000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000023ff0b000900000006001100ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 3.130037973s ago: executing program 3 (id=3097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="017fffd0e9bca45aaee7bb4382515782082207ab10032e7a899be303e0aa80ec790206bbfa811997a72ba078c40f411126d77f04bd53d68562a93973ade80a8f314576854773ebe5b7a23ecef4661e7c4a196561fb0c00000000000000b6779e990d4c4dd970b9fd8d5f332fb3388a5312daa0af210d896fa752067a8f6eed7e41a52a6d31ed1f9c853f4f0b811508d0edf55f440e4a8ec975f07d14a02d7d6868e3c618e6b8511d62eee2a0a197532da2dd645405355b119b75b5b41e0d39146fd42aae3091a3ef653b9ea52c31480cead8254dc44134d79c2472eade402ff6cecd57479a68cde061df60e3", @ANYRES16=r1, @ANYBLOB="0b0427bd7000fcdbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) 2.714552836s ago: executing program 3 (id=3099): unshare(0x20000400) unshare(0x0) unshare(0x14020080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, 0x0, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x4) 2.598168673s ago: executing program 2 (id=3100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000001b2dab680d4006704bf5ffe2b5001e00010a00000000000000000700004261b688fa05b8e8f66533a3e45d06e7add312ce34e4250e398163315ecef1e0c7c31271580b55b1796ace3210f16d167edb9102d627347ce8971a0500a95b7b5b748d3a9cf4135b577da60f0543070a2fc4fdc959e8ae14e9c2bf6db85b480f345b0bbe798f57405a0511963d996013d3a352262bddbefdfe050ff80dd890109385b239dec0a68266c3a91b00ebc8feca56850aeb9d5e70e36417af31cf0711ec7ce8b5c39d1dcc71f383c6bb74226c6a741dbbe8085a355c6891728753655bcb"], 0x20}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)='%-5lx \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r4, &(0x7f0000000540)="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"}, 0x20) (async) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="080088f807000000000014000000466f00b400660000401190780a010102ac14141244041c604e204e20009c9078010000000400000031150048e56e0573239361bd8f05c60ff304e7fee8a3221b0000000000000000b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb99ac7f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b93ad9f48b4d287b15c3ca4c92615153aaf76bbf0aead9a0100bcd4dc651600de44f0823cfd119000"/194], 0xc2) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x400002}, 0x0, 0x0) (rerun: 32) 2.391311897s ago: executing program 2 (id=3102): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) close(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xbc, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x3a, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="340004000000000067665bc7a7c3ec12f3c2cdbbaab4d9f40158a6e703a8ba5a38a6611eb9e52072d9a2b058b17687c5e022c8215e357be67bd04004c407584534cfa655c3d30bf3fdd7550d6f3655a4808ca895bdf774b46a8d1846fce72d2a069b7bbb0e64897d74d307d5d33d4a96", @ANYRES16=r7, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000808000c00a60a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @multicast2}, 0x2000002}}, 0x2e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0700000000000000000005000000180001801400020073797a2163c70e000000d36a81f876680000000000000c0003800400038004000100"], 0x38}}, 0x0) connect$pppl2tp(r11, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) 2.329169074s ago: executing program 4 (id=3103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="f5ffffff", @ANYRES16=r3, @ANYBLOB="01000000000000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001000000"], 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'dh\x00', 0x20, 0x1, 0x52}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="00008c08ad7000cbdd5a0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="ab219ff417490221c2d955b8fcc2ed4d", 0x10}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x80) recvmsg$qrtr(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28030000180a01040000000000000000010000052402038054000380140001006261746164765f736c6176655f3100001400010076657468315f746f5f7465616d000000140001007767300000000000000000000000000014000100766574683000000000000000000400000800024080000000a40003801400010070696d72656731000000000000000000140001006261746164765f736c6176655f3100001400010070696d367265670000000000000000001400010076657468315f746f5f626f6e640000001400010064766d727031000000000000000000001400010064756d6d7930000000000000000000001400010076657468305f6d6163767461700000001400010067726574617030000000000000000000a400038014000100766c616e30000000000000000000000014000100626f6e645f736c6176655f30000000001400010064756d6d793000000000000000000000140001007663616e30000000000000000000000014000101006272696467655f736c6176655f3100001400010069703667726574617030000000000000140001006261746164765f736c6176655f3000001400010076657468315f746f5f627269646765007c0003801400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001006970766c616e3100000000000000000014000100626f6e6430000000000000000000000014000100766c616e30000000000000000000000014000100626f6e645f736c6176655f3000000000080007400000000158000380080002400000000608000240000000f50800024000000002080001400000000008000140000000002c000380140001006d6163766c616e310000000000000000140001006d61637365633000000000000000000084000380680003801400010076657468305f746f5f626f6e640000001400010076657468315f746f5f7465616d0000001400010076657468315f746f5f627269646765001400000076657468315f746f5f687372000000001400010067656e657665310000000000000000000800024000000004080001400000000008000140000000000900010973797a3100000000140000001100010000000000000000000000000a"], 0x350}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.126284018s ago: executing program 4 (id=3105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 2.094315347s ago: executing program 4 (id=3106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x60, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "784f2201a8f2d90e7abd8b307aa9ee758a403730d46b794a"}]]}, 0x60}}, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 1.814030632s ago: executing program 4 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x40880) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 1.809041426s ago: executing program 3 (id=3109): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="8be14379", @ANYRES16=r1, @ANYBLOB="000400000000030000000100000008000100", @ANYRES32=r2, @ANYBLOB="4c00088048000080200004000a004e2200000000000000000000000000000000000000010000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x68}}, 0x0) (async) unshare(0x6a040000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x480, 0x0, 0x0) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0xce1e, @dev={0xac, 0x14, 0x14, 0x13}}, 0x41) socket(0x10, 0x2, 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0x15, @random="ced6b9ac6872", 'macsec0\x00'}}, 0x1e) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) close(0x4) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r7, 0x0, 0x0, 0x80800) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.014916627s ago: executing program 1 (id=3111): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 947.473887ms ago: executing program 1 (id=3112): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 936.34013ms ago: executing program 4 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}}, 0x4001) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000060000000000000000060a0b04663d929b956aaf0000000000000000020000002400048020000180070001006374000014000280080001400000000c080002400000000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 809.882613ms ago: executing program 1 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x4004011) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000140)=0x90000, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) 771.637139ms ago: executing program 1 (id=3115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/83, 0x53}], 0x2}, 0x40}], 0x1, 0x102, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket(0x2a, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000280)="903673240fa70328a45d4a339ebc81353a9b5520491fd5d01618cf640e211a7e3e4bfe966a93db0622b9c23335a5d818c65a64d684251a0f92dbb4d27b63b2a7b73ee8064812392b532d9ce33264a1404a3d7c680f82a77d6cf6fd86f5260c7862a3dca75d3fef160fde5287c2d11ebc4115ef8cfb9c5e16fa850ef114dc0ac21aa534848c23230f5b9f478214d76cacc753897f3cb34fae79baec8ef2baba9171a31abc6a20b446a96fc4cfaae598") socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) (async) accept4$alg(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/83, 0x53}], 0x2}, 0x40}], 0x1, 0x102, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket(0x2a, 0x2, 0x0) (async) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) (async) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) (async) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000280)="903673240fa70328a45d4a339ebc81353a9b5520491fd5d01618cf640e211a7e3e4bfe966a93db0622b9c23335a5d818c65a64d684251a0f92dbb4d27b63b2a7b73ee8064812392b532d9ce33264a1404a3d7c680f82a77d6cf6fd86f5260c7862a3dca75d3fef160fde5287c2d11ebc4115ef8cfb9c5e16fa850ef114dc0ac21aa534848c23230f5b9f478214d76cacc753897f3cb34fae79baec8ef2baba9171a31abc6a20b446a96fc4cfaae598") (async) 654.016422ms ago: executing program 1 (id=3116): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054003d09ff0f0000fbdbdf2507000000", @ANYRES64=r1, @ANYBLOB="a934c255", @ANYRES32=r3, @ANYBLOB="00000100fc01000000000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) getsockopt$inet_buf(r2, 0x118, 0x2f, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008040) 1.855435ms ago: executing program 1 (id=3117): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r5, 0x80000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) r8 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r11, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x0, &(0x7f0000000080)=0x644a, 0x3) (async, rerun: 32) bind$inet(r12, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (rerun: 32) connect$inet(r12, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 0s ago: executing program 4 (id=3118): r0 = socket(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f0000000200)="00ead711fb2b88", 0x7, 0x4000080, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r0, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000340)=0x1) kernel console output (not intermixed with test programs): ': attribute type 1 has an invalid length. [ 149.368056][ T8368] netlink: 'syz.4.652': attribute type 2 has an invalid length. [ 149.494956][ T8374] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 149.598886][ T8384] x_tables: duplicate underflow at hook 1 [ 149.602589][ T8374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.657042][ T8374] bond2: (slave gretap1): making interface the new active one [ 149.666032][ T8374] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 150.123954][ T8399] veth7: entered promiscuous mode [ 150.555983][ T8423] pimreg: left allmulticast mode [ 150.597791][ T8426] __nla_validate_parse: 16 callbacks suppressed [ 150.597809][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'. [ 150.745433][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 150.769173][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.674'. [ 150.801763][ T8434] geneve2: entered promiscuous mode [ 150.807020][ T8434] geneve2: entered allmulticast mode [ 150.821013][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 150.832471][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 150.857526][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 150.895250][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 151.043573][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'. [ 151.097063][ T8458] syzkaller1: entered promiscuous mode [ 151.111116][ T8458] syzkaller1: entered allmulticast mode [ 151.220185][ T8469] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 151.231618][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 151.252185][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 151.276373][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 151.400100][ T8479] validate_nla: 4 callbacks suppressed [ 151.400118][ T8479] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 151.453440][ T8479] bond3: (slave gretap2): making interface the new active one [ 151.462463][ T8479] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 151.633715][ T8499] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 151.881860][ T8514] gtp1: entered promiscuous mode [ 151.903585][ T8514] gtp1: entered allmulticast mode [ 151.912747][ T8514] netlink: 248 bytes leftover after parsing attributes in process `syz.1.697'. [ 151.950518][ T8515] netlink: 248 bytes leftover after parsing attributes in process `syz.1.697'. [ 152.062915][ T8525] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 152.219040][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 152.258857][ T8533] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 152.264806][ T8533] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 152.291416][ T8533] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 152.297428][ T8533] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 152.733532][ T8585] geneve3: entered promiscuous mode [ 152.748295][ T8585] geneve3: entered allmulticast mode [ 152.765231][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 152.787453][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 152.826060][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 152.842756][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 152.919761][ T8593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 152.949934][ T8593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.042826][ T8593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 153.053634][ T8593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 153.143238][ T8593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 153.155212][ T8593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 154.425019][ T8614] tipc: Enabling of bearer rejected, failed to enable media [ 154.443618][ T8593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 154.457020][ T8593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 154.539902][ T8618] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.554849][ T8618] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 154.607321][ T8628] unsupported nlmsg_type 40 [ 154.702396][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.718220][ T61] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.744524][ T61] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.754282][ T61] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.768268][ T61] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.777686][ T61] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.808707][ T3587] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.824070][ T3587] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.854955][ T8634] netlink: 'syz.1.728': attribute type 3 has an invalid length. [ 154.980615][ T8645] macvtap1: entered promiscuous mode [ 155.002038][ T8645] macvtap1: entered allmulticast mode [ 155.021972][ T8645] dummy0: entered promiscuous mode [ 155.038797][ T8645] dummy0: entered allmulticast mode [ 155.046503][ T8645] team0: Device macvtap1 failed to register rx_handler [ 155.056242][ T8645] dummy0: left allmulticast mode [ 155.063034][ T8645] dummy0: left promiscuous mode [ 155.099495][ T8656] block nbd3: not configured, cannot reconfigure [ 155.151576][ T8641] macvtap1: entered promiscuous mode [ 155.179449][ T8641] macvtap1: entered allmulticast mode [ 155.185488][ T8641] dummy0: entered promiscuous mode [ 155.190896][ T8641] dummy0: entered allmulticast mode [ 155.198278][ T8641] team0: Device macvtap1 failed to register rx_handler [ 155.205985][ T8641] dummy0: left allmulticast mode [ 155.214151][ T8641] dummy0: left promiscuous mode [ 155.339153][ T8667] openvswitch: netlink: IP tunnel dst address not specified [ 155.647259][ T8683] __nla_validate_parse: 7 callbacks suppressed [ 155.647276][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.743'. [ 155.687888][ T8687] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 155.830531][ T8695] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.844673][ T8695] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 155.857019][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 155.995645][ T8699] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 156.073526][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 156.151458][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 156.168309][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 156.196749][ T8708] syzkaller0: entered promiscuous mode [ 156.203441][ T8708] syzkaller0: entered allmulticast mode [ 156.219468][ T8714] bridge0: port 3(vlan0) entered blocking state [ 156.226280][ T8714] bridge0: port 3(vlan0) entered disabled state [ 156.233398][ T8714] vlan0: entered allmulticast mode [ 156.239857][ T8714] bridge0: entered allmulticast mode [ 156.250480][ T8714] vlan0: left allmulticast mode [ 156.256178][ T8714] bridge0: left allmulticast mode [ 156.493286][ T8734] ipt_REJECT: TCP_RESET invalid for non-tcp [ 156.609433][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 157.878688][ T30] audit: type=1800 audit(1762160444.755:4): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.762" name="memory.events" dev="tmpfs" ino=659 res=0 errno=0 [ 157.901281][ T8754] netlink: zone id is out of range [ 157.906425][ T8754] netlink: zone id is out of range [ 157.930025][ T8754] netlink: zone id is out of range [ 157.937378][ T8754] netlink: zone id is out of range [ 157.945163][ T8754] netlink: zone id is out of range [ 157.951800][ T8754] netlink: zone id is out of range [ 157.961783][ T8754] netlink: zone id is out of range [ 157.967722][ T30] audit: type=1804 audit(1762160444.845:5): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.762" name="/newroot/126/memory.events" dev="tmpfs" ino=659 res=1 errno=0 [ 157.990110][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 158.002466][ T8754] netlink: zone id is out of range [ 158.007611][ T8754] netlink: zone id is out of range [ 158.013028][ T8754] netlink: zone id is out of range [ 158.016893][ T8765] x_tables: duplicate underflow at hook 2 [ 158.861528][ T8824] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.783'. [ 158.881336][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 158.904829][ T8824] dvmrp6: entered allmulticast mode [ 159.012388][ T8832] netlink: 104 bytes leftover after parsing attributes in process `syz.3.787'. [ 159.030714][ T8833] netlink: 'syz.3.787': attribute type 21 has an invalid length. [ 159.237384][ T8852] netlink: 'syz.1.793': attribute type 3 has an invalid length. [ 159.301937][ T8862] raw_sendmsg: syz.3.796 forgot to set AF_INET. Fix it! [ 159.335015][ T8862] SET target dimension over the limit! [ 159.867562][ T8901] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 160.203618][ T8917] netlink: 'syz.1.809': attribute type 30 has an invalid length. [ 160.216444][ T8863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.228931][ T8863] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 160.256319][ T8921] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 160.258792][ T8919] xt_CONNSECMARK: invalid mode: 0 [ 160.287313][ T8863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.301210][ T8863] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 160.312745][ T8863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.325769][ T8863] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 160.377399][ T8863] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.398804][ T8863] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 160.649833][ T8938] netlink: 'syz.0.815': attribute type 6 has an invalid length. [ 160.811771][ T8946] __nla_validate_parse: 5 callbacks suppressed [ 160.811789][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 161.039510][ T8957] pim6reg1: entered promiscuous mode [ 161.049756][ T8957] pim6reg1: entered allmulticast mode [ 161.371033][ T8989] policy can only be matched on NF_INET_PRE_ROUTING [ 161.371052][ T8989] unable to load match [ 161.383394][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'. [ 161.413597][ T8989] tipc: Started in network mode [ 161.421801][ T8989] tipc: Node identity ac14140f, cluster identity 4711 [ 161.434459][ T8989] tipc: New replicast peer: 255.255.255.255 [ 161.441223][ T8989] tipc: Enabled bearer , priority 10 [ 161.452263][ T8998] policy can only be matched on NF_INET_PRE_ROUTING [ 161.452281][ T8998] unable to load match [ 161.585264][ T9011] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 161.610993][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'. [ 161.623373][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'. [ 161.673210][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.686186][ T9011] bond0: (slave team0): Enslaving as an active interface with an up link [ 162.000388][ T9037] lo: entered allmulticast mode [ 162.023085][ T9037] lo: left allmulticast mode [ 162.224418][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.847'. [ 162.243822][ T9057] Cannot find add_set index 2 as target [ 162.279087][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 162.311658][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 162.395058][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 162.473194][ T9074] netlink: 'syz.3.853': attribute type 4 has an invalid length. [ 162.481440][ T9074] netlink: 17 bytes leftover after parsing attributes in process `syz.3.853'. [ 162.491570][ T9069] bond3: option xmit_hash_policy: invalid value (64) [ 162.505214][ T9069] bond3 (unregistering): Released all slaves [ 162.513534][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 162.566479][ T9076] syzkaller0: entered promiscuous mode [ 162.573573][ T6843] tipc: Node number set to 2886997007 [ 162.608379][ T9076] syzkaller0: entered allmulticast mode [ 162.890929][ T9098] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 162.909415][ T9098] netlink: 'syz.1.862': attribute type 2 has an invalid length. [ 163.024583][ T9116] net_ratelimit: 15 callbacks suppressed [ 163.024616][ T9116] openvswitch: netlink: EtherType 53b is less than min 600 [ 163.139567][ T9123] netlink: 'syz.1.869': attribute type 3 has an invalid length. [ 163.709037][ T9176] syzkaller1: entered promiscuous mode [ 163.721922][ T9176] syzkaller1: entered allmulticast mode [ 163.797888][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.895923][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.907561][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.914922][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.921558][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.928008][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.935112][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.944269][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.951024][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.957525][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 163.964620][ T9188] ipt_ECN: cannot use operation on non-tcp rule [ 164.091955][ T9193] bond7 (unregistering): Released all slaves [ 164.246489][ T30] audit: type=1800 audit(1762160451.125:6): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.894" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1041 res=0 errno=0 [ 164.406974][ T9218] validate_nla: 33 callbacks suppressed [ 164.406991][ T9218] netlink: 'syz.1.896': attribute type 6 has an invalid length. [ 164.492273][ T9228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.798585][ T9248] sctp: [Deprecated]: syz.4.906 (pid 9248) Use of int in max_burst socket option. [ 164.798585][ T9248] Use struct sctp_assoc_value instead [ 164.833036][ T9257] netlink: 'syz.1.908': attribute type 83 has an invalid length. [ 164.989113][ T9263] bridge0: port 1(vlan2) entered blocking state [ 164.998975][ T9263] bridge0: port 1(vlan2) entered disabled state [ 165.017360][ T9263] vlan2: entered allmulticast mode [ 165.047095][ T9263] bridge0: entered allmulticast mode [ 165.059800][ T9263] vlan2: left allmulticast mode [ 165.064698][ T9263] bridge0: left allmulticast mode [ 165.203629][ T9273] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 165.829588][ T9331] syzkaller1: entered promiscuous mode [ 165.839509][ T9334] __nla_validate_parse: 94 callbacks suppressed [ 165.839543][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 165.848506][ T9331] syzkaller1: entered allmulticast mode [ 166.056123][ T9351] x_tables: duplicate underflow at hook 1 [ 166.104827][ T9351] xt_l2tp: unknown flags: 10 [ 166.131406][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 166.183726][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'. [ 166.269164][ T9365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.946'. [ 166.504032][ T9380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.109455][ T9419] lo: left promiscuous mode [ 167.123437][ T9419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.219344][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.965'. [ 167.349944][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 167.567981][ T9457] netem: change failed [ 167.849712][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 167.889915][ T9491] IPv6: addrconf: prefix option has invalid lifetime [ 167.995540][ T9499] tipc: Started in network mode [ 168.000698][ T9499] tipc: Node identity 329f5db6d097, cluster identity 4711 [ 168.008015][ T9499] tipc: Enabled bearer , priority 0 [ 168.021666][ T9499] syzkaller0: entered promiscuous mode [ 168.027486][ T9498] netlink: 104 bytes leftover after parsing attributes in process `syz.0.984'. [ 168.037722][ T9499] syzkaller0: entered allmulticast mode [ 168.061108][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 168.126659][ T9511] tipc: Resetting bearer [ 168.181705][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 168.663823][ T9549] tipc: Enabled bearer , priority 0 [ 168.677566][ T9547] syzkaller0: entered promiscuous mode [ 168.687078][ T9547] syzkaller0: entered allmulticast mode [ 168.719633][ T9494] tipc: Resetting bearer [ 168.772403][ T9494] tipc: Disabling bearer [ 168.791996][ T9547] tipc: Resetting bearer [ 168.821059][ T9547] tipc: Disabling bearer [ 169.425898][ T9615] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 169.612532][ T9628] netlink: 'syz.3.1023': attribute type 3 has an invalid length. [ 169.629660][ T9628] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 169.724709][ T9639] vlan2: entered promiscuous mode [ 169.730329][ T9639] bond0: entered promiscuous mode [ 169.735486][ T9639] bond_slave_0: entered promiscuous mode [ 169.741735][ T9639] bond_slave_1: entered promiscuous mode [ 169.747854][ T9639] geneve1: entered promiscuous mode [ 169.753674][ T9639] team0: entered promiscuous mode [ 169.758901][ T9639] team_slave_0: entered promiscuous mode [ 169.764895][ T9639] team_slave_1: entered promiscuous mode [ 170.177845][ T9667] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 170.227552][ T9671] sit0: entered promiscuous mode [ 170.241348][ T9671] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 170.414570][ T9680] netlink: 'syz.0.1040': attribute type 29 has an invalid length. [ 170.440172][ T9680] netlink: 'syz.0.1040': attribute type 29 has an invalid length. [ 170.528458][ T9683] netlink: 'syz.0.1041': attribute type 6 has an invalid length. [ 170.911167][ T9705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.958356][ T9709] __nla_validate_parse: 13 callbacks suppressed [ 170.958373][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1049'. [ 170.973934][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 171.421294][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.657032][ T9722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.674850][ T9722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.028935][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 172.077458][ T9740] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 172.105939][ T9742] netlink: 'syz.0.1057': attribute type 3 has an invalid length. [ 172.115008][ T9740] team0: Device ipvlan2 failed to register rx_handler [ 172.212397][ T7088] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.226540][ T7088] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.228305][ T9751] x_tables: duplicate underflow at hook 1 [ 172.251392][ T9749] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1059'. [ 172.254141][ T7088] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.297472][ T7088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.307315][ T7088] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.327163][ T7088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.443573][ T7088] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.475040][ T7088] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.611680][ T9769] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1066'. [ 172.639658][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 172.648904][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 172.671834][ T9775] syzkaller1: entered promiscuous mode [ 172.685008][ T9775] syzkaller1: entered allmulticast mode [ 172.693683][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 172.808143][ T9781] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 173.261017][ T9805] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 173.417875][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 173.460785][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.481620][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.503573][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.511971][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.557079][ T9824] syzkaller0: entered promiscuous mode [ 173.569244][ T9824] syzkaller0: entered allmulticast mode [ 173.643749][ T9833] netlink: 'syz.0.1087': attribute type 12 has an invalid length. [ 173.646029][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 174.075968][ T9868] 0{X: renamed from gretap0 [ 174.083854][ T9868] 0{X: entered allmulticast mode [ 174.108841][ T9868] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 174.163913][ T9870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.305585][ T9885] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 174.416671][ T9891] macvtap1: entered promiscuous mode [ 174.424395][ T9891] vlan0: entered promiscuous mode [ 174.434339][ T9891] macvtap1: entered allmulticast mode [ 174.440295][ T9891] vlan0: entered allmulticast mode [ 174.445845][ T9891] veth0_vlan: entered allmulticast mode [ 174.492510][ T9896] tipc: Enabled bearer , priority 0 [ 174.513132][ T9896] syzkaller0: entered promiscuous mode [ 174.519490][ T9896] syzkaller0: entered allmulticast mode [ 174.575284][ T9896] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.634138][ T9896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.646201][ T9896] tipc: Resetting bearer [ 174.659419][ T9896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.782938][ T9894] tipc: Resetting bearer [ 174.828101][ T9894] tipc: Disabling bearer [ 175.001138][ T9929] bond3: entered promiscuous mode [ 175.006220][ T9929] bond3: entered allmulticast mode [ 175.021537][ T9929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.237572][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.268104][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.325576][ T9945] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 175.341883][ T9945] bond3 (unregistering): Released all slaves [ 175.367657][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.452452][ T9954] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 175.493678][ T9954] bond4 (unregistering): Released all slaves [ 175.576858][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.756320][ T9982] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 175.795776][ T56] block nbd0: Possible stuck request ffff888024ee5080: control (read@0,1024B). Runtime 90 seconds [ 175.806624][ T56] block nbd0: Possible stuck request ffff888024ee5240: control (read@1024,1024B). Runtime 90 seconds [ 175.818462][ T56] block nbd0: Possible stuck request ffff888024ee5400: control (read@2048,1024B). Runtime 90 seconds [ 175.830124][ T56] block nbd0: Possible stuck request ffff888024ee55c0: control (read@3072,1024B). Runtime 90 seconds [ 175.980704][T10005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.993314][T10005] __nla_validate_parse: 22 callbacks suppressed [ 175.993330][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1132'. [ 176.017934][T10007] netlink: 'syz.1.1133': attribute type 29 has an invalid length. [ 176.031052][T10007] netlink: 'syz.1.1133': attribute type 29 has an invalid length. [ 176.151248][T10018] bond4: entered allmulticast mode [ 176.161375][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 176.192998][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 176.262013][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 176.293752][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 176.319778][T10029] veth9: entered allmulticast mode [ 176.418601][T10034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1141'. [ 176.484069][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1141'. [ 176.533534][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 176.544814][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 176.554206][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 176.798047][T10062] netlink: 'syz.4.1147': attribute type 12 has an invalid length. [ 176.809853][T10062] netlink: 'syz.4.1147': attribute type 12 has an invalid length. [ 177.016448][T10070] bridge0: port 3(vlan2) entered blocking state [ 177.023916][T10070] bridge0: port 3(vlan2) entered disabled state [ 177.040861][T10070] vlan2: entered allmulticast mode [ 177.062885][T10070] vlan2: left allmulticast mode [ 177.134291][T10076] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 177.161480][T10076] bond4 (unregistering): Released all slaves [ 177.461851][T10094] bond0: entered promiscuous mode [ 177.468830][T10094] batadv0: entered promiscuous mode [ 177.475557][T10094] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 177.493995][T10094] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 177.529183][T10094] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 177.545641][T10094] bond0: left promiscuous mode [ 177.569970][T10094] batadv0: left promiscuous mode [ 177.615678][T10103] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 177.627545][T10111] netlink: 'syz.2.1161': attribute type 12 has an invalid length. [ 177.733064][T10113] bond5: (slave geneve3): making interface the new active one [ 177.746827][T10113] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 177.755792][ T7088] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 177.776391][ T7088] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 177.817936][ T7088] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 177.837422][T10122] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 177.864845][ T7088] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 177.901371][T10121] macvtap2: entered promiscuous mode [ 177.907099][T10121] macvtap2: entered allmulticast mode [ 177.925446][T10121] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.332198][T10160] netlink: 'syz.1.1180': attribute type 9 has an invalid length. [ 178.639915][T10182] openvswitch: netlink: Missing key (keys=40, expected=100) [ 178.645608][T10184] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 178.669459][T10184] netlink: 'syz.1.1187': attribute type 2 has an invalid length. [ 178.694522][T10188] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 179.387597][T10246] xt_policy: too many policy elements [ 179.425142][T10242] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.604080][T10267] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 179.645585][T10267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.666312][T10276] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 179.750554][T10285] tipc: Enabled bearer , priority 10 [ 180.072570][T10311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.272149][T10324] bridge_slave_1: left allmulticast mode [ 180.278538][T10324] bridge_slave_1: left promiscuous mode [ 180.284936][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.304730][T10324] bridge_slave_0: left allmulticast mode [ 180.317481][T10324] bridge_slave_0: left promiscuous mode [ 180.337677][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.709485][T10359] tipc: Enabled bearer , priority 0 [ 180.726047][T10359] syzkaller0: entered promiscuous mode [ 180.740865][T10359] syzkaller0: entered allmulticast mode [ 180.780480][T10353] delete_channel: no stack [ 180.920545][T10360] vlan0 (unregistering): left allmulticast mode [ 180.927303][T10360] veth0_vlan (unregistering): left allmulticast mode [ 180.934374][T10360] vlan0 (unregistering): left promiscuous mode [ 180.984637][T10368] vlan2: entered allmulticast mode [ 180.990264][T10368] bridge_slave_0: entered allmulticast mode [ 181.003462][T10372] tipc: Resetting bearer [ 181.022422][T10358] tipc: Resetting bearer [ 181.084707][T10358] tipc: Disabling bearer [ 181.095451][T10374] __nla_validate_parse: 25 callbacks suppressed [ 181.095469][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 181.139929][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1246'. [ 181.147590][T10378] validate_nla: 6 callbacks suppressed [ 181.147607][T10378] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 181.170583][T10378] bridge_slave_1: entered promiscuous mode [ 181.177526][T10378] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 181.290785][T10381] bond3: entered allmulticast mode [ 181.296539][T10381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.305022][T10381] bridge0: port 1(bond3) entered blocking state [ 181.313366][T10381] bridge0: port 1(bond3) entered disabled state [ 181.326260][T10381] bond3: entered promiscuous mode [ 181.340034][T10384] pim6reg: entered allmulticast mode [ 181.345830][T10391] pim6reg: left allmulticast mode [ 181.708799][ T6839] tipc: Node number set to 2512151655 [ 182.045299][T10447] netem: unknown loss type 0 [ 182.051384][T10447] netem: change failed [ 182.073806][T10451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1267'. [ 182.669090][T10494] sock: sock_set_timeout: `syz.2.1280' (pid 10494) tries to set negative timeout [ 182.755217][T10499] bond4: option miimon: invalid value (18446744073709551585) [ 182.762905][T10499] bond4: option miimon: allowed values 0 - 2147483647 [ 182.771281][T10499] bond4 (unregistering): Released all slaves [ 182.933116][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 182.966735][T10510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'. [ 182.999853][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'. [ 183.011895][T10516] tipc: Enabled bearer , priority 0 [ 183.075694][T10516] tipc: Resetting bearer [ 183.121363][T10525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.138793][T10525] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 183.158571][T10525] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.167715][T10525] `: (slave team0): Enslaving as an active interface with an up link [ 183.177407][T10512] tipc: Disabling bearer [ 183.337296][T10531] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 183.457814][T10542] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.482659][T10542] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1296'. [ 183.496295][T10542] tipc: Enabling of bearer rejected, failed to enable media [ 183.696153][T10559] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1303'. [ 183.766334][T10560] IPv6: NLM_F_REPLACE set, but no existing node found! [ 184.120424][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 184.209565][T10576] netlink: 'syz.3.1308': attribute type 21 has an invalid length. [ 184.680783][T10603] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 184.813261][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 184.890314][T10608] bridge_slave_1: left allmulticast mode [ 184.897277][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.941472][T10608] bridge_slave_0: left allmulticast mode [ 184.947929][T10608] bridge_slave_0: left promiscuous mode [ 184.978546][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.125109][T10608] bridge0 (unregistering): left allmulticast mode [ 185.250567][T10624] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 185.600300][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.621827][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.966539][T10671] xt_HMARK: spi-set and port-set can't be combined [ 186.329110][T10693] __nla_validate_parse: 3 callbacks suppressed [ 186.329128][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 186.485362][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1344'. [ 186.754723][T10716] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 186.763597][T10714] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 187.146995][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 187.292033][T10754] Cannot find del_set index 512 as target [ 187.414457][T10762] geneve4: entered promiscuous mode [ 187.492925][T10767] pim6reg1: entered promiscuous mode [ 187.504484][T10767] pim6reg1: entered allmulticast mode [ 187.616673][T10781] netlink: 'syz.3.1369': attribute type 64 has an invalid length. [ 187.624906][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1369'. [ 187.668527][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1370'. [ 187.824030][T10785] netlink: 'syz.1.1371': attribute type 11 has an invalid length. [ 187.888786][T10796] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1373'. [ 188.044718][T10798] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1376'. [ 188.411442][T10836] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1386'. [ 188.421319][T10836] 8021q: VLANs not supported on gre0 [ 188.432892][T10839] netlink: 'syz.2.1387': attribute type 4 has an invalid length. [ 188.576243][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 188.799743][T10855] netlink: 'syz.2.1390': attribute type 18 has an invalid length. [ 188.864647][T10861] netlink: 'syz.4.1393': attribute type 11 has an invalid length. [ 188.874130][T10861] netlink: 'syz.4.1393': attribute type 11 has an invalid length. [ 188.905700][T10861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1393'. [ 189.217391][T10889] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0 [ 189.244113][T10887] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 189.385969][T10895] netlink: 'syz.1.1400': attribute type 21 has an invalid length. [ 189.414199][T10897] netlink: 'syz.4.1401': attribute type 11 has an invalid length. [ 189.469217][T10895] netlink: 'syz.1.1400': attribute type 6 has an invalid length. [ 189.523355][T10897] netlink: 'syz.4.1401': attribute type 15 has an invalid length. [ 189.547307][T10901] geneve2: entered promiscuous mode [ 189.558848][T10901] geneve2: entered allmulticast mode [ 189.575578][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.602735][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.647576][T10897] netlink: 'syz.4.1401': attribute type 15 has an invalid length. [ 189.656071][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.698820][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.737074][ T12] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 189.778300][ T12] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 189.787069][ T12] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 189.857805][ T12] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 189.971851][T10931] tipc: Enabling of bearer rejected, failed to enable media [ 191.856215][T11065] dvmrp0: entered allmulticast mode [ 191.872383][T11065] tipc: Enabling of bearer rejected, failed to enable media [ 191.886220][T11066] tipc: Enabling of bearer rejected, failed to enable media [ 192.059362][T11079] __nla_validate_parse: 11 callbacks suppressed [ 192.059384][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1452'. [ 192.463252][T11106] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1459'. [ 192.528748][T11114] sctp: [Deprecated]: syz.1.1459 (pid 11114) Use of int in maxseg socket option. [ 192.528748][T11114] Use struct sctp_assoc_value instead [ 192.603945][T11120] validate_nla: 4 callbacks suppressed [ 192.603962][T11120] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 192.618132][T11120] netlink: 'syz.3.1465': attribute type 4 has an invalid length. [ 192.626535][T11120] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1465'. [ 192.653569][T11121] netlink: 'syz.0.1463': attribute type 1 has an invalid length. [ 192.716804][T11121] bond4: entered promiscuous mode [ 192.722244][T11121] bond4: entered allmulticast mode [ 192.728026][T11121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.759038][T11132] syz_tun: entered allmulticast mode [ 192.767402][T11124] syz_tun: left allmulticast mode [ 192.780210][T11134] netlink: 'syz.3.1469': attribute type 4 has an invalid length. [ 192.789733][T11127] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1467'. [ 192.791438][T11134] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1469'. [ 192.825635][T11134] `: renamed from bond0 (while UP) [ 192.901680][T11140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.980645][T11146] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1472'. [ 192.999933][T11146] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1472'. [ 193.139541][T11154] netlink: 'syz.1.1474': attribute type 10 has an invalid length. [ 193.156404][T11154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1474'. [ 193.346271][T11163] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1476'. [ 193.476284][T11154] batadv0: entered promiscuous mode [ 193.484217][T11154] batadv0: entered allmulticast mode [ 193.490319][T11154] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 193.507353][T11161] netlink: 'syz.3.1476': attribute type 29 has an invalid length. [ 193.527043][T11162] netlink: 'syz.3.1476': attribute type 29 has an invalid length. [ 193.587752][T11167] netlink: 'syz.4.1478': attribute type 3 has an invalid length. [ 193.640430][T11167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.787385][T11171] `: (slave team0): Releasing backup interface [ 193.887241][T11171] `: (slave bond_slave_0): Releasing backup interface [ 193.929946][T11171] `: (slave bond_slave_1): Releasing backup interface [ 193.949148][T11171] team0: Port device team_slave_0 removed [ 193.959072][T11171] team0: Port device team_slave_1 removed [ 193.965866][T11171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.977140][T11171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.986561][T11171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.105869][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1488'. [ 194.159376][T11195] openvswitch: netlink: Flow key attr not present in new flow. [ 194.354018][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.635916][T11229] team0: Caught tx_queue_len zero misconfig [ 194.791325][T11239] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 194.966150][T11255] ecn_tg_check: 55 callbacks suppressed [ 194.966167][T11255] ipt_ECN: cannot use operation on non-tcp rule [ 195.199195][T11275] netlink: 'syz.1.1511': attribute type 4 has an invalid length. [ 195.760931][T11306] x_tables: duplicate underflow at hook 2 [ 195.783403][T11307] x_tables: duplicate underflow at hook 2 [ 196.015990][T11326] sctp: [Deprecated]: syz.3.1528 (pid 11326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.015990][T11326] Use struct sctp_sack_info instead [ 196.672810][T11377] Bluetooth: MGMT ver 1.23 [ 196.802747][T11379] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 197.065080][T11406] bond5: Invalid ad_actor_system MAC address. [ 197.080119][T11406] bond5: option ad_actor_system: invalid value (1) [ 197.132058][T11406] bond5 (unregistering): Released all slaves [ 197.388712][T11430] netlink: 'syz.0.1559': attribute type 11 has an invalid length. [ 197.396565][T11430] __nla_validate_parse: 19 callbacks suppressed [ 197.396581][T11430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1559'. [ 197.579537][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 197.628820][T11437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1562'. [ 198.025194][T11465] bridge0: Caught tx_queue_len zero misconfig [ 198.061688][T11470] validate_nla: 9 callbacks suppressed [ 198.061706][T11470] netlink: 'syz.0.1568': attribute type 13 has an invalid length. [ 198.084497][T11470] netlink: 'syz.0.1568': attribute type 17 has an invalid length. [ 198.197387][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.227778][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.331486][T11470] 8021q: adding VLAN 0 to HW filter on device ` [ 198.363478][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.415038][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.520044][T11470] bridge_slave_1: left promiscuous mode [ 198.549837][T11470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.565529][T11470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.580341][T11470] veth1_vlan: left promiscuous mode [ 198.591078][T11470] veth1_vlan: entered promiscuous mode [ 198.603680][T11470] veth1_macvtap: left promiscuous mode [ 198.610498][T11470] veth0_macvtap: left promiscuous mode [ 198.617077][T11470] veth0_macvtap: entered promiscuous mode [ 198.629016][T11470] veth1_macvtap: entered promiscuous mode [ 198.658124][T11470] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 198.708743][ T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.752161][ T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.781938][ T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.811292][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.874496][T11512] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1580'. [ 199.072534][T11520] syzkaller0: entered promiscuous mode [ 199.078042][T11520] syzkaller0: entered allmulticast mode [ 199.103144][T11520] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 199.244927][T11530] bond5: option all_slaves_active: invalid value (222) [ 199.258718][T11530] bond5 (unregistering): Released all slaves [ 199.314823][T11526] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 199.453485][T11540] syzkaller1: entered promiscuous mode [ 199.460529][T11540] syzkaller1: entered allmulticast mode [ 199.624076][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1597'. [ 199.800233][T11574] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 199.820530][T11575] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 199.973311][T11585] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 200.030522][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 200.043292][T11587] syzkaller0: entered promiscuous mode [ 200.049067][T11587] syzkaller0: entered allmulticast mode [ 200.100924][T11585] veth7: entered promiscuous mode [ 200.125672][T11585] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 200.137875][T11595] bridge_slave_0: entered promiscuous mode [ 200.157543][T11595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1607'. [ 200.575247][T11617] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 200.585697][T11626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1612'. [ 200.600307][T11617] bond6 (unregistering): Released all slaves [ 200.601977][T11625] netlink: 'syz.3.1615': attribute type 10 has an invalid length. [ 200.639559][T11625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1615'. [ 200.643146][T11622] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 200.670417][T11622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.686262][T11625] team0: Port device geneve0 added [ 200.711819][T11624] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1613'. [ 200.792787][T11636] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 200.837329][T11636] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.864353][T11636] netlink: 'syz.0.1618': attribute type 21 has an invalid length. [ 200.915058][T11639] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 201.061397][T11646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.589721][T11680] ipvlan0: entered promiscuous mode [ 201.595375][T11680] ipvlan0: entered allmulticast mode [ 201.603511][T11680] bridge0: entered allmulticast mode [ 201.756960][T11691] tunl0: entered promiscuous mode [ 201.763298][T11691] tunl0: entered allmulticast mode [ 201.798748][T11690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.406592][T11744] hsr_slave_1 (unregistering): left promiscuous mode [ 202.417608][T11750] __nla_validate_parse: 9 callbacks suppressed [ 202.417615][T11746] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1649'. [ 202.417626][T11750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1648'. [ 202.443963][T11746] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1649'. [ 202.443981][T11747] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1649'. [ 202.678699][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 202.721925][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 203.045975][T11786] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.099734][T11792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.056725][T11833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1673'. [ 204.104549][T11833] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 204.126101][T11833] team0: Device macvtap3 is already an upper device of the team interface [ 204.531400][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'. [ 204.565281][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 204.609076][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 205.232830][T11891] validate_nla: 2 callbacks suppressed [ 205.232848][T11891] netlink: 'syz.0.1688': attribute type 5 has an invalid length. [ 205.239401][T11893] netlink: 'syz.1.1689': attribute type 4 has an invalid length. [ 205.311074][T11891] geneve3: entered promiscuous mode [ 205.348337][T11891] geneve3: entered allmulticast mode [ 205.360220][T11893] `: renamed from bond0 [ 205.406620][ T61] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 205.448315][ T61] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 205.503415][ T61] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 205.572184][ T61] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 205.872015][ T56] block nbd0: Possible stuck request ffff888024ee5080: control (read@0,1024B). Runtime 120 seconds [ 205.886771][ T56] block nbd0: Possible stuck request ffff888024ee5240: control (read@1024,1024B). Runtime 120 seconds [ 205.907228][ T56] block nbd0: Possible stuck request ffff888024ee5400: control (read@2048,1024B). Runtime 120 seconds [ 205.918402][ T56] block nbd0: Possible stuck request ffff888024ee55c0: control (read@3072,1024B). Runtime 120 seconds [ 206.405256][T11949] ip6gre4: entered promiscuous mode [ 206.414946][T11949] ip6gre4: entered allmulticast mode [ 206.426329][T11948] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 206.461348][ T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 206.486206][ T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 206.494782][ T6832] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 206.548274][T11962] netlink: 'syz.0.1706': attribute type 31 has an invalid length. [ 206.729151][T11964] syz.3.1707 (11964) used greatest stack depth: 17832 bytes left [ 206.855015][T11991] netlink: 'syz.1.1715': attribute type 29 has an invalid length. [ 207.058556][ T6839] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 207.308504][ T6832] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 207.418997][T12028] __nla_validate_parse: 10 callbacks suppressed [ 207.419014][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1722'. [ 207.666692][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 207.744396][T12045] netlink: 'syz.3.1724': attribute type 21 has an invalid length. [ 207.789189][T12045] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.520148][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1734'. [ 208.552911][T12084] netlink: 'syz.1.1734': attribute type 7 has an invalid length. [ 208.578319][T12084] netlink: 'syz.1.1734': attribute type 8 has an invalid length. [ 208.586772][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 208.917718][T12103] netlink: 'syz.3.1737': attribute type 8 has an invalid length. [ 209.136022][T12070] vlan0: left allmulticast mode [ 209.141369][T12070] veth0_vlan: left allmulticast mode [ 209.146903][T12070] vlan0: left promiscuous mode [ 209.251071][T12085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.280784][T12102] netlink: 'syz.3.1737': attribute type 3 has an invalid length. [ 209.311911][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1737'. [ 209.366972][ T3587] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 209.395193][ T3587] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 209.417952][ T3587] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 256 - 0 [ 209.460047][ T3587] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 209.489257][ T3587] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 209.513115][ T3587] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 256 - 0 [ 209.573039][ T3587] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 209.599285][ T3587] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 209.638325][ T3587] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 256 - 0 [ 209.668426][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 209.702715][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 209.734828][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 256 - 0 [ 210.027368][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1746'. [ 210.307920][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 210.358134][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 210.885232][T12179] netlink: 'syz.1.1761': attribute type 7 has an invalid length. [ 210.914289][T12183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1758'. [ 210.918846][T12181] openvswitch: netlink: Missing valid actions attribute. [ 210.940763][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.159754][T12189] tun0: tun_chr_ioctl cmd 1074025675 [ 211.180693][T12189] tun0: persist disabled [ 212.357433][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 212.597158][T12261] "syz.3.1785" (12261) uses obsolete ecb(arc4) skcipher [ 213.730463][T12255] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1783'. [ 213.740383][T12255] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1783'. [ 213.749478][T12255] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1783'. [ 213.925911][T12274] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1788'. [ 213.937094][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 213.963105][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1789'. [ 213.975000][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 213.982028][T12276] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 214.009141][T12272] batadv_slave_0: entered promiscuous mode [ 214.015003][T12272] batadv_slave_0: entered allmulticast mode [ 214.080451][T12283] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 214.144391][T12283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.156550][T12293] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 214.367852][T12302] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 214.579113][T12325] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 214.587530][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 214.691498][T12325] team0: Port device dummy0 added [ 214.765284][T12329] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 214.920473][T12352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1805'. [ 215.127389][T12371] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1813'. [ 215.269892][ T1162] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.283876][ T1162] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.310437][ T1162] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.338745][ T1162] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.726784][T12404] RDS: rds_bind could not find a transport for c001:0:20:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 215.896131][T12419] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 216.399705][T12451] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 216.679482][T12465] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 216.736527][T12471] openvswitch: netlink: Message has 2688 unknown bytes. [ 216.745969][ T5825] block nbd1: Receive control failed (result -32) [ 217.013104][T12486] netlink: 'syz.4.1852': attribute type 30 has an invalid length. [ 217.071363][T12492] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 217.098115][T12486] bond4: option arp_missed_max: invalid value (0) [ 217.105722][T12486] bond4: option arp_missed_max: allowed values 1 - 255 [ 217.116821][T12486] bond4 (unregistering): Released all slaves [ 217.414400][T12510] netlink: 'syz.3.1858': attribute type 4 has an invalid length. [ 217.437586][T12513] tipc: Enabled bearer , priority 0 [ 217.465896][T12513] syzkaller0: entered promiscuous mode [ 217.512579][T12513] syzkaller0: entered allmulticast mode [ 217.527988][T12513] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.729843][T12522] tipc: Resetting bearer [ 217.764823][T12511] tipc: Resetting bearer [ 217.795602][T12511] tipc: Disabling bearer [ 217.989960][T12543] netlink: 'syz.2.1865': attribute type 3 has an invalid length. [ 218.326987][T12567] netlink: 'syz.3.1869': attribute type 2 has an invalid length. [ 218.374722][T12567] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 218.514153][T12576] netlink: 'syz.4.1874': attribute type 30 has an invalid length. [ 218.876530][T12609] netlink: 'syz.2.1885': attribute type 11 has an invalid length. [ 218.884789][T12609] __nla_validate_parse: 13 callbacks suppressed [ 218.884807][T12609] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1885'. [ 218.985521][T12618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.223372][T12637] tipc: Enabled bearer , priority 0 [ 219.254013][T12637] syzkaller0: entered promiscuous mode [ 219.268949][T12637] syzkaller0: entered allmulticast mode [ 219.325091][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 219.333126][T12637] tipc: Resetting bearer [ 219.350709][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 219.363637][T12632] tipc: Resetting bearer [ 219.407337][T12632] tipc: Disabling bearer [ 219.444936][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1898'. [ 219.445317][T12652] netlink: 'syz.4.1896': attribute type 10 has an invalid length. [ 219.466750][T12652] bond0: (slave wlan1): Opening slave failed [ 219.590477][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 219.695186][T12661] veth1_to_bond: entered allmulticast mode [ 219.747794][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.779177][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 219.906077][T12677] `: (slave bond_slave_1): Releasing backup interface [ 219.943607][T12677] veth1_to_bond (unregistering): left allmulticast mode [ 220.051068][T12694] netlink: 'syz.1.1909': attribute type 16 has an invalid length. [ 220.068514][T12694] netlink: 'syz.1.1909': attribute type 17 has an invalid length. [ 220.195306][T12705] x_tables: duplicate underflow at hook 1 [ 220.346088][T12712] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1915'. [ 221.072352][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 221.712749][T12822] bond0 (unregistering): Released all slaves [ 221.875221][T12839] Bluetooth: MGMT ver 1.23 [ 222.056559][T12852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1949'. [ 222.245125][T12865] syzkaller1: entered promiscuous mode [ 222.262189][T12865] syzkaller1: entered allmulticast mode [ 222.335028][T12870] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1956'. [ 222.426954][T12875] openvswitch: netlink: IP tunnel dst address not specified [ 222.533647][T12875] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 222.569160][T12875] bond0 (unregistering): Released all slaves [ 222.625106][T12889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.781274][T12894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.831685][T12899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.832469][T12900] tipc: Enabled bearer , priority 0 [ 222.868565][T12901] syzkaller0: entered promiscuous mode [ 222.874082][T12901] syzkaller0: entered allmulticast mode [ 222.919333][T12901] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 223.198391][T12897] tipc: Resetting bearer [ 223.264925][T12897] tipc: Disabling bearer [ 223.521858][T12949] validate_nla: 2 callbacks suppressed [ 223.521876][T12949] netlink: 'syz.0.1981': attribute type 8 has an invalid length. [ 223.815230][T12982] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 223.836529][T12982] vlan3: entered promiscuous mode [ 223.841712][T12982] bridge0: entered promiscuous mode [ 223.884522][T12984] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 223.893384][T12984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.091178][ T30] audit: type=1107 audit(1762160510.975:7): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 224.358839][T13006] netlink: 'syz.1.1998': attribute type 8 has an invalid length. [ 224.369007][T13006] __nla_validate_parse: 7 callbacks suppressed [ 224.369020][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'. [ 224.385558][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'. [ 224.456344][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1998'. [ 224.756126][T13034] xt_ecn: cannot match TCP bits for non-tcp packets [ 224.827745][T13042] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20000 [ 225.034266][T13057] netlink: 'syz.0.2012': attribute type 2 has an invalid length. [ 225.460897][T13085] xt_TCPMSS: Only works on TCP SYN packets [ 225.479562][T13085] x_tables: duplicate underflow at hook 2 [ 225.613151][T13097] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2023'. [ 225.741991][T13100] netlink: 'syz.0.2025': attribute type 18 has an invalid length. [ 225.751922][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2027'. [ 226.179799][T13131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2037'. [ 226.281763][T13140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2038'. [ 226.305023][T13140] netlink: 'syz.0.2038': attribute type 11 has an invalid length. [ 226.366492][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 226.430983][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2040'. [ 226.486427][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 226.830100][T13176] tipc: Enabled bearer , priority 0 [ 226.904184][T13176] syzkaller0: entered promiscuous mode [ 226.910298][T13176] syzkaller0: entered allmulticast mode [ 226.918797][T13176] tipc: Resetting bearer [ 226.970200][T13174] tipc: Resetting bearer [ 227.336198][T13213] netlink: 'syz.3.2058': attribute type 1 has an invalid length. [ 227.962945][ T6842] tipc: Node number set to 2673924147 [ 228.707648][T13174] tipc: Disabling bearer [ 228.720126][T13213] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 228.844517][T13227] bond5 (unregistering): Released all slaves [ 229.162929][T13261] tc_dump_action: action bad kind [ 229.356900][ T1162] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.366514][ T1162] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.376107][ T1162] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.408512][ T1162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.431186][T13283] __nla_validate_parse: 9 callbacks suppressed [ 229.431206][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 229.456845][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 229.492000][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 229.537148][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 229.592801][T13291] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2083'. [ 229.607549][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 229.698583][T13302] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 229.783780][T13305] netlink: 'syz.2.2088': attribute type 8 has an invalid length. [ 229.808982][T13305] bridge0: entered promiscuous mode [ 229.918406][T13322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2093'. [ 230.135753][T13329] veth0: entered promiscuous mode [ 230.141819][T13326] veth0: left promiscuous mode [ 230.174708][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'. [ 230.260386][T13344] xt_nat: multiple ranges no longer supported [ 230.383855][T13355] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2104'. [ 230.493566][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2106'. [ 230.591788][T13372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.592390][T13374] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 230.811576][T13394] sock: sock_timestamping_bind_phc: sock not bind to device [ 230.853639][T13394] netlink: 'syz.3.2113': attribute type 21 has an invalid length. [ 230.946129][T13402] netlink: 'syz.3.2115': attribute type 21 has an invalid length. [ 230.975074][T13402] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 231.355909][T13435] netlink: 'syz.3.2125': attribute type 64 has an invalid length. [ 231.761598][T13465] netlink: 'syz.1.2137': attribute type 9 has an invalid length. [ 231.888575][T13479] netlink: 'syz.3.2140': attribute type 29 has an invalid length. [ 231.932079][T13479] netlink: 'syz.3.2140': attribute type 29 has an invalid length. [ 232.026328][T13483] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 232.081488][T13487] macsec2: entered promiscuous mode [ 232.086742][T13487] bridge0: entered promiscuous mode [ 232.119405][T13487] macsec2: entered allmulticast mode [ 232.124855][T13487] bridge0: entered allmulticast mode [ 232.158975][T13487] bridge0: port 1(macsec2) entered blocking state [ 232.173280][T13487] bridge0: port 1(macsec2) entered disabled state [ 232.184333][T13487] bridge0: left allmulticast mode [ 232.193640][T13487] bridge0: left promiscuous mode [ 232.543961][T13522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.654999][T13526] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 232.706382][T13543] tipc: Enabled bearer , priority 0 [ 232.735996][T13549] team0: Port device geneve3 added [ 232.766571][T13550] batadv0: entered allmulticast mode [ 232.796906][T13543] syzkaller0: entered promiscuous mode [ 232.811856][T13543] syzkaller0: entered allmulticast mode [ 232.867370][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 232.890162][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 232.895209][T13557] xt_l2tp: missing protocol rule (udp|l2tpip) [ 232.906258][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 232.925673][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 232.982825][T13553] tipc: Resetting bearer [ 233.194703][T13578] sit0: entered promiscuous mode [ 233.200171][T13578] netlink: 'syz.0.2166': attribute type 1 has an invalid length. [ 233.455923][T13542] tipc: Resetting bearer [ 233.456130][T13602] netlink: 'syz.4.2175': attribute type 11 has an invalid length. [ 233.473564][T13602] netlink: 'syz.4.2175': attribute type 11 has an invalid length. [ 233.493045][T13600] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 233.505998][T13542] tipc: Disabling bearer [ 233.543779][T13608] netlink: 'syz.4.2175': attribute type 11 has an invalid length. [ 233.557937][T13608] netlink: 'syz.4.2175': attribute type 11 has an invalid length. [ 233.731294][T13620] vlan0: entered promiscuous mode [ 233.744040][T13620] bridge0: entered promiscuous mode [ 234.327036][T13669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.390676][T13682] openvswitch: netlink: Message has 6 unknown bytes. [ 234.442730][T13682] __nla_validate_parse: 22 callbacks suppressed [ 234.442749][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2198'. [ 234.460675][T13684] netlink: 'syz.4.2199': attribute type 10 has an invalid length. [ 234.484614][T13684] veth0_virt_wifi: entered allmulticast mode [ 234.507780][T13684] team0: Port device veth0_virt_wifi added [ 234.537821][T13691] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2202'. [ 234.556887][T13689] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2201'. [ 234.568338][T13691] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2202'. [ 234.577311][T13691] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2202'. [ 234.772943][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 234.828764][T13712] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.882560][T13719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2208'. [ 234.933193][T13719] bond6 (unregistering): Released all slaves [ 234.955133][T13722] bond_slave_0: Caught tx_queue_len zero misconfig [ 235.100588][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'. [ 235.151496][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 235.184813][T13737] validate_nla: 2 callbacks suppressed [ 235.184831][T13737] netlink: 'syz.2.2213': attribute type 10 has an invalid length. [ 235.207697][T13737] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 235.237606][T13737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.270869][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 235.309625][T13745] Cannot find del_set index 4 as target [ 235.330376][T13745] netlink: 'syz.1.2216': attribute type 2 has an invalid length. [ 235.355586][T13747] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 235.435777][T13758] x_tables: duplicate underflow at hook 1 [ 235.547895][T13766] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 235.581863][T13765] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 235.625191][T13774] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 235.779723][T13786] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 235.851876][T13786] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.872113][T13786] bond6: (slave veth0_to_bond): making interface the new active one [ 235.923109][T13786] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 235.949681][ T56] block nbd0: Possible stuck request ffff888024ee5080: control (read@0,1024B). Runtime 150 seconds [ 235.962342][ T56] block nbd0: Possible stuck request ffff888024ee5240: control (read@1024,1024B). Runtime 150 seconds [ 235.973679][ T56] block nbd0: Possible stuck request ffff888024ee5400: control (read@2048,1024B). Runtime 150 seconds [ 235.988895][ T56] block nbd0: Possible stuck request ffff888024ee55c0: control (read@3072,1024B). Runtime 150 seconds [ 235.992782][T13786] bond6: (slave veth5): Enslaving as an active interface with a down link [ 236.023907][T13786] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 236.072760][T13803] pim6reg1: entered promiscuous mode [ 236.078470][T13803] pim6reg1: entered allmulticast mode [ 236.221500][T13810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.282839][T13810] bond7: option tlb_dynamic_lb: invalid value (4) [ 236.293902][T13810] bond7 (unregistering): Released all slaves [ 236.493747][T13835] pimreg: left allmulticast mode [ 236.707787][T13853] netlink: 'syz.1.2249': attribute type 9 has an invalid length. [ 236.730493][T13856] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 236.746062][T13856] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 236.792326][T13861] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 236.884951][T13867] bond7: entered promiscuous mode [ 236.909182][T13860] bond7: left promiscuous mode [ 236.982859][T13878] xt_connbytes: Forcing CT accounting to be enabled [ 237.404334][T13915] lo: Caught tx_queue_len zero misconfig [ 237.647788][T13930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.684704][T13930] netlink: 'syz.0.2272': attribute type 10 has an invalid length. [ 237.704595][T13930] team0: Port device dummy0 added [ 237.902018][T13949] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 238.085313][T13954] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.476661][T13980] syz.4.2286 uses old SIOCAX25GETINFO [ 238.718705][T13998] 0{X: entered promiscuous mode [ 238.724066][T13998] 0{X: left allmulticast mode [ 238.899109][T14017] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.955157][T14019] openvswitch: netlink: Message has 592 unknown bytes. [ 238.962305][T14019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.236546][T14040] tipc: Enabled bearer , priority 0 [ 239.263237][T14040] syzkaller0: entered promiscuous mode [ 239.277289][T14040] syzkaller0: entered allmulticast mode [ 239.295482][T14040] tipc: Resetting bearer [ 239.319928][T14038] tipc: Resetting bearer [ 239.363175][T14038] tipc: Disabling bearer [ 239.523465][T14065] __nla_validate_parse: 33 callbacks suppressed [ 239.523484][T14065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2315'. [ 239.567176][T14064] syzkaller1: entered promiscuous mode [ 239.580159][T14064] syzkaller1: entered allmulticast mode [ 239.787343][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 239.804860][T14080] bond0: entered promiscuous mode [ 239.811452][T14080] batadv0: entered promiscuous mode [ 239.827323][T14080] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 239.862633][T14080] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 239.873953][T14080] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 239.881775][T14086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2318'. [ 240.515472][T14135] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2332'. [ 240.608719][T14140] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2335'. [ 240.693716][T14144] Cannot find del_set index 4 as target [ 241.319251][T14196] xt_TCPMSS: Only works on TCP SYN packets [ 241.486757][T14209] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 241.513522][T14212] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2356'. [ 241.533383][T14212] vlan2: entered allmulticast mode [ 241.546382][T14212] gretap0: entered allmulticast mode [ 241.571511][T14209] validate_nla: 15 callbacks suppressed [ 241.571528][T14209] netlink: 'syz.0.2354': attribute type 3 has an invalid length. [ 241.572454][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 241.880929][T14240] Cannot find del_set index 512 as target [ 241.957247][T14245] x_tables: duplicate underflow at hook 2 [ 241.973080][T14250] x_tables: duplicate underflow at hook 2 [ 242.041899][T14251] openvswitch: netlink: Message has 2688 unknown bytes. [ 242.096427][T14253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.221333][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 242.244192][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 242.436769][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 242.491659][T14280] bridge0: port 2(vlan1) entered blocking state [ 242.516622][T14280] bridge0: port 2(vlan1) entered disabled state [ 242.537462][T14280] vlan1: entered allmulticast mode [ 242.555932][T14280] bridge0: entered allmulticast mode [ 242.610880][T14280] vlan1: left allmulticast mode [ 242.615884][T14280] bridge0: left allmulticast mode [ 242.797451][T14294] syzkaller1: entered promiscuous mode [ 242.807269][T14294] syzkaller1: entered allmulticast mode [ 243.162565][T14328] netlink: zone id is out of range [ 243.575315][T14364] team0: No ports can be present during mode change [ 243.698527][T14371] tipc: Enabled bearer , priority 0 [ 243.706800][T14371] syzkaller0: entered promiscuous mode [ 243.732511][T14371] syzkaller0: entered allmulticast mode [ 243.772567][T14371] tipc: Resetting bearer [ 243.851842][T14371] veth9: entered allmulticast mode [ 243.901331][T14369] tipc: Resetting bearer [ 243.933427][T14369] tipc: Disabling bearer [ 243.987992][T14392] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 244.004793][T14392] bond0 (unregistering): Released all slaves [ 244.730249][T14454] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.905012][ T6842] IPVS: starting estimator thread 0... [ 245.009164][T14469] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.045330][T14475] bond8: option lp_interval: invalid value (0) [ 245.051721][T14475] bond8: option lp_interval: allowed values 1 - 2147483647 [ 245.070203][T14475] bond8 (unregistering): Released all slaves [ 245.211617][T14488] __nla_validate_parse: 6 callbacks suppressed [ 245.211634][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2438'. [ 245.259338][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 245.259578][T14493] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 245.327942][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 245.411555][T14505] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2442'. [ 245.436745][T14509] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2442'. [ 245.520574][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 245.897103][T14538] syzkaller0: entered promiscuous mode [ 245.928078][T14538] syzkaller0: entered allmulticast mode [ 246.294211][T14582] netlink: 'syz.1.2465': attribute type 39 has an invalid length. [ 246.361335][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'. [ 246.370513][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'. [ 246.382192][T14582] netlink: 'syz.1.2465': attribute type 3 has an invalid length. [ 246.392257][T14582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2465'. [ 246.416885][T14582] dvmrp0: entered allmulticast mode [ 246.676778][T14603] bond7: option arp_validate: invalid value (505610240) [ 246.686909][T14603] bond7 (unregistering): Released all slaves [ 246.732425][T14607] syzkaller0: entered promiscuous mode [ 246.738284][T14607] syzkaller0: entered allmulticast mode [ 246.885584][T14613] syzkaller0: entered promiscuous mode [ 246.903343][T14613] syzkaller0: entered allmulticast mode [ 246.952177][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'. [ 247.169586][T14623] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 247.190853][T14623] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 247.509407][T14660] bond7: Removing last arp target with arp_interval on [ 247.672870][T14678] vlan1: MTU too low for tipc bearer [ 247.686058][T14678] tipc: Enabling of bearer rejected, failed to enable media [ 247.874397][T14687] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 247.965969][T14687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.037745][T14693] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 248.060806][T14693] bond8 (unregistering): Released all slaves [ 248.111386][T14695] C: renamed from lo [ 248.409870][T14718] tipc: Enabled bearer , priority 0 [ 248.417636][T14718] syzkaller0: entered promiscuous mode [ 248.428286][T14718] syzkaller0: entered allmulticast mode [ 248.448910][T14718] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.487387][T14718] tipc: Resetting bearer [ 248.516001][T14716] tipc: Resetting bearer [ 248.592365][T14716] tipc: Disabling bearer [ 249.194202][T14780] tipc: Enabled bearer , priority 0 [ 249.233522][T14780] syzkaller0: entered promiscuous mode [ 249.254727][T14780] syzkaller0: entered allmulticast mode [ 249.370496][T14780] tipc: Resetting bearer [ 249.408113][T14779] tipc: Resetting bearer [ 249.455962][T14779] tipc: Disabling bearer [ 249.531407][T14799] x_tables: duplicate underflow at hook 3 [ 249.539524][T14792] veth11: entered allmulticast mode [ 249.844379][T14812] netlink: 'syz.4.2528': attribute type 33 has an invalid length. [ 250.287237][T14839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.337643][T14843] IPVS: Unknown mcast interface: bond_slave_1 [ 250.354872][T14843] __nla_validate_parse: 11 callbacks suppressed [ 250.354891][T14843] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2541'. [ 250.399033][T14845] nbd: must specify a size in bytes for the device [ 250.586151][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'. [ 250.640455][T14860] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2545'. [ 250.664799][T14863] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2547'. [ 250.664820][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'. [ 250.782714][T14873] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2547'. [ 251.034693][T14892] netlink: 'syz.1.2555': attribute type 9 has an invalid length. [ 251.377231][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 251.539033][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 251.647819][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 251.715885][T14941] netlink: 'syz.1.2568': attribute type 39 has an invalid length. [ 251.755042][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 252.069599][T14965] syzkaller1: entered promiscuous mode [ 252.095634][T14965] syzkaller1: entered allmulticast mode [ 252.152654][T14974] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 252.164300][T14974] team0: Device macvtap1 is already an upper device of the team interface [ 252.499933][T14998] tipc: Enabled bearer , priority 0 [ 252.511944][T14997] tipc: Disabling bearer [ 252.621472][T14994] netlink: 'syz.1.2584': attribute type 8 has an invalid length. [ 252.657048][T15006] x_tables: duplicate underflow at hook 1 [ 253.484166][T15036] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 253.507992][T15021] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 253.526306][T15021] syzkaller1: Refused to change device type [ 253.725793][T15055] netlink: 'syz.4.2606': attribute type 4 has an invalid length. [ 253.964506][T15060] xfrm1: entered promiscuous mode [ 253.969877][T15060] xfrm1: entered allmulticast mode [ 254.035633][T15067] nbd: couldn't find device at index 2 [ 254.173411][T15081] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 254.220758][T15081] bond9 (unregistering): Released all slaves [ 254.283525][T15089] netlink: 'syz.2.2618': attribute type 8 has an invalid length. [ 254.851427][T15133] x_tables: duplicate entry at hook 2 [ 254.857426][T15127] can: request_module (can-proto-0) failed. [ 254.914191][T15138] netlink: 'syz.2.2632': attribute type 58 has an invalid length. [ 255.003414][T15143] team0: Caught tx_queue_len zero misconfig [ 255.292737][T15156] tunl0: Caught tx_queue_len zero misconfig [ 255.426574][T15180] __nla_validate_parse: 15 callbacks suppressed [ 255.426594][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2643'. [ 255.473876][T15189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.791642][T15210] tipc: Enabled bearer , priority 0 [ 255.799112][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011447][T15208] tipc: Disabling bearer [ 256.629287][T15267] syzkaller0: entered promiscuous mode [ 256.634930][T15267] syzkaller0: entered allmulticast mode [ 256.967381][T15291] netlink: 'syz.1.2676': attribute type 11 has an invalid length. [ 257.047356][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 257.073362][T15301] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2680'. [ 257.346309][T15320] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}S7\mgFg FҒ?nZe [ 257.413971][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 257.456414][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 257.513980][T15333] netlink: 'syz.4.2689': attribute type 11 has an invalid length. [ 257.547126][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2684'. [ 257.586380][T15335] tipc: Enabled bearer , priority 0 [ 257.607484][ T6838] IPVS: starting estimator thread 0... [ 257.651545][T15334] tipc: Disabling bearer [ 257.659592][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 257.669484][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 257.684156][T15345] xt_cgroup: path and classid specified [ 257.690766][T15345] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2692'. [ 257.690796][T15343] syzkaller1: entered promiscuous mode [ 257.700163][T15345] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 257.713199][T15343] syzkaller1: entered allmulticast mode [ 257.719166][T15340] IPVS: using max 30 ests per chain, 72000 per kthread [ 257.786150][T15347] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2693'. [ 257.945405][T15354] bond0: ARP target 1.0.0.0 is already present [ 257.952478][T15354] bond0: option arp_ip_target: invalid value (1) [ 257.973676][T15354] bond0 (unregistering): Released all slaves [ 258.030222][T15369] syzkaller0: entered promiscuous mode [ 258.035822][T15369] syzkaller0: entered allmulticast mode [ 258.127353][T15374] netlink: 'syz.2.2702': attribute type 21 has an invalid length. [ 258.362700][T15390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.531797][T15400] Cannot find add_set index 0 as target [ 258.593558][T15405] netlink: 'syz.1.2716': attribute type 4 has an invalid length. [ 258.617866][T15401] dvmrp0: entered allmulticast mode [ 258.826985][T15430] ip6t_srh: unknown srh invflags 4000 [ 258.985177][T15438] ksmbd: Unknown IPC event: 1, ignore. [ 259.333501][T15457] tipc: Enabled bearer , priority 0 [ 259.361226][T15457] syzkaller0: entered promiscuous mode [ 259.377025][T15457] syzkaller0: entered allmulticast mode [ 259.445643][T15457] tipc: Resetting bearer [ 259.479058][T15457] tipc: Resetting bearer [ 259.519872][T15457] tipc: Disabling bearer [ 259.831103][T15499] mac80211_hwsim hwsim5 wlan0: Caught tx_queue_len zero misconfig [ 259.873647][T15504] v: renamed from vlan0 [ 260.010428][T15511] tipc: Enabled bearer , priority 0 [ 260.051870][T15511] syzkaller0: entered promiscuous mode [ 260.057386][T15511] syzkaller0: entered allmulticast mode [ 260.085192][T15514] bond0: Error: Cannot enslave bond to itself. [ 260.115177][T15511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.130424][T15516] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 260.143328][T15518] syzkaller1: entered promiscuous mode [ 260.158027][T15518] syzkaller1: entered allmulticast mode [ 260.224719][T15517] tipc: Resetting bearer [ 260.294229][T15525] x_tables: unsorted underflow at hook 3 [ 260.592736][T15533] __nla_validate_parse: 15 callbacks suppressed [ 260.592754][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 260.826191][T15510] tipc: Resetting bearer [ 260.909731][T15510] tipc: Disabling bearer [ 261.021045][T15546] xt_l2tp: v2 tid > 0xffff: 1114244 [ 261.491922][T15574] xt_ipcomp: unknown flags 1D [ 261.571126][T15576] sctp: [Deprecated]: syz.2.2767 (pid 15576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.571126][T15576] Use struct sctp_sack_info instead [ 261.575593][T15581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2766'. [ 261.655346][T15558] team0 (unregistering): Port device team_slave_0 removed [ 261.664619][T15558] team0 (unregistering): Port device team_slave_1 removed [ 261.681466][T15558] team0 (unregistering): Port device veth0_virt_wifi removed [ 261.902526][T15598] IPVS: Error connecting to the multicast addr [ 262.026414][T15609] netlink: 'syz.0.2774': attribute type 4 has an invalid length. [ 262.127981][T15618] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 262.144944][T15620] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2778'. [ 262.467310][T15639] xt_hashlimit: size too large, truncated to 1048576 [ 262.746269][T15653] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 262.754147][ T6787] IPVS: starting estimator thread 0... [ 262.783657][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2781'. [ 262.833962][T15656] sctp: [Deprecated]: syz.1.2784 (pid 15656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.833962][T15656] Use struct sctp_sack_info instead [ 262.858319][T15654] IPVS: using max 28 ests per chain, 67200 per kthread [ 262.961481][T15647] team0: Device wireguard1 is of different type [ 263.175356][T15664] netlink: 'syz.2.2787': attribute type 9 has an invalid length. [ 263.404807][T15675] team0: Device ip6gre2 is of different type [ 263.676884][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2795'. [ 263.953477][T15707] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.954556][T15705] vlan1: entered promiscuous mode [ 263.966650][T15705] geneve1: entered promiscuous mode [ 263.972224][T15705] vlan1: entered allmulticast mode [ 263.977352][T15705] geneve1: entered allmulticast mode [ 264.275731][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2804'. [ 264.362776][T15736] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 264.413524][T15736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.434803][T15736] vlan1: entered allmulticast mode [ 264.441388][T15736] bond0: entered allmulticast mode [ 264.503255][T15736] bond0: (slave gretap2): making interface the new active one [ 264.510953][T15736] gretap2: entered allmulticast mode [ 264.518967][T15736] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 264.574286][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 264.675915][T15737] SET target dimension over the limit! [ 264.864986][T15754] sctp: [Deprecated]: syz.0.2814 (pid 15754) Use of int in maxseg socket option. [ 264.864986][T15754] Use struct sctp_assoc_value instead [ 264.979181][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 264.995127][T15758] netlink: 'syz.2.2815': attribute type 7 has an invalid length. [ 265.017807][T15758] netlink: 'syz.2.2815': attribute type 8 has an invalid length. [ 265.026263][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 265.151397][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.162812][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.188712][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.201511][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.209783][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.241365][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.248963][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.256313][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.267150][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.275624][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.322018][T15775] netlink: 'syz.0.2820': attribute type 1 has an invalid length. [ 265.343549][T15775] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2820'. [ 265.564893][T15766] chnl_net:caif_netlink_parms(): no params data found [ 265.613483][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2823'. [ 265.642978][T15793] dvmrp0: left allmulticast mode [ 265.647860][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2824'. [ 265.745008][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 265.831412][T15766] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.848608][T15766] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.863602][T15766] bridge_slave_0: entered allmulticast mode [ 265.888705][T15766] bridge_slave_0: entered promiscuous mode [ 265.904106][T15766] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.923057][T15766] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.939327][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 265.950371][T15812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2826'. [ 265.952581][T15766] bridge_slave_1: entered allmulticast mode [ 265.986331][T15766] bridge_slave_1: entered promiscuous mode [ 266.017367][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2829'. [ 266.048984][ T56] block nbd0: Possible stuck request ffff888024ee5080: control (read@0,1024B). Runtime 180 seconds [ 266.060135][ T56] block nbd0: Possible stuck request ffff888024ee5240: control (read@1024,1024B). Runtime 180 seconds [ 266.071226][ T56] block nbd0: Possible stuck request ffff888024ee5400: control (read@2048,1024B). Runtime 180 seconds [ 266.082856][ T56] block nbd0: Possible stuck request ffff888024ee55c0: control (read@3072,1024B). Runtime 180 seconds [ 266.143541][T15766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.157477][T15766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.163562][T15821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.209347][T15820] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 266.292500][T15766] team0: Port device team_slave_0 added [ 266.331282][T15766] team0: Port device team_slave_1 added [ 266.460334][T15766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.478716][T15766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.489160][T15839] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2836'. [ 266.512441][T15766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.550294][T15766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.558256][T15766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.622035][T15766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.734740][T15766] hsr_slave_0: entered promiscuous mode [ 266.772686][T15766] hsr_slave_1: entered promiscuous mode [ 266.780380][T15766] debugfs: 'hsr0' already exists in 'hsr' [ 266.786263][T15766] Cannot create hsr debugfs directory [ 266.854932][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 267.176216][T15861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.232664][T15766] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 267.256625][T15766] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 267.309235][ T5825] Bluetooth: hci3: command tx timeout [ 267.324305][T15873] netlink: 'syz.4.2850': attribute type 10 has an invalid length. [ 267.336835][T15871] tipc: Enabled bearer , priority 0 [ 267.368099][T15871] syzkaller0: entered promiscuous mode [ 267.387133][T15876] netlink: 'syz.4.2850': attribute type 10 has an invalid length. [ 267.388640][T15871] syzkaller0: entered allmulticast mode [ 267.430860][T15766] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 267.451729][T15766] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 267.547993][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 267.562837][T15881] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 267.577543][T15888] netlink: 'syz.4.2854': attribute type 23 has an invalid length. [ 267.578151][T15881] bond8 (unregistering): Released all slaves [ 267.607211][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2851'. [ 267.630095][T15766] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 267.643431][T15766] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 267.702935][T15891] tipc: Resetting bearer [ 267.801731][T15766] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 267.824457][T15766] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 267.866394][T15869] tipc: Resetting bearer [ 267.910562][T15869] tipc: Disabling bearer [ 268.142211][T15766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 268.193624][T15766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 268.240081][T15766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.280842][T15766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.350156][T15920] tipc: Enabled bearer , priority 0 [ 268.372988][T15920] syzkaller0: entered promiscuous mode [ 268.378721][T15920] syzkaller0: entered allmulticast mode [ 268.411208][T15920] tipc: Resetting bearer [ 268.428688][T15920] tipc: Resetting bearer [ 268.469427][T15920] tipc: Disabling bearer [ 268.526058][T15945] netlink: 'syz.4.2865': attribute type 13 has an invalid length. [ 268.542487][T15947] netlink: 'syz.3.2872': attribute type 13 has an invalid length. [ 268.561181][T15947] gretap0: refused to change device tx_queue_len [ 268.568117][T15947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.722363][T15766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.756845][T15766] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.782641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.789956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.824515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.831756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.885157][T15766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.062179][T15964] team0: Port device dummy0 removed [ 269.324151][T15766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.390990][ T5825] Bluetooth: hci3: command tx timeout [ 269.403291][T15975] x_tables: unsorted underflow at hook 3 [ 269.403291][T15766] veth0_vlan: entered promiscuous mode [ 269.410971][T15975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.423418][T15766] veth1_vlan: entered promiscuous mode [ 269.456732][T15766] veth0_macvtap: entered promiscuous mode [ 269.470765][T15766] veth1_macvtap: entered promiscuous mode [ 269.495571][T15766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.512878][T15766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.535002][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.544624][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.557220][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.578150][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.702526][T15983] netlink: 'syz.2.2885': attribute type 10 has an invalid length. [ 269.761000][ T7088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.780831][ T7088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.837182][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.871947][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.227598][T16012] sctp: [Deprecated]: syz.4.2894 (pid 16012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.227598][T16012] Use struct sctp_sack_info instead [ 270.832529][T16059] __nla_validate_parse: 14 callbacks suppressed [ 270.832548][T16059] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2907'. [ 270.878112][T16063] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 270.895408][T16062] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 270.958900][T16062] bond6: entered promiscuous mode [ 270.977698][T16062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.066649][T16069] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.080477][T16069] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 271.102700][T16069] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 271.119381][T16069] bond6: (slave wireguard0): making interface the new active one [ 271.147552][T16069] wireguard0: entered promiscuous mode [ 271.164228][T16069] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 271.273224][T16085] netlink: 'syz.3.2912': attribute type 39 has an invalid length. [ 271.470384][ T5825] Bluetooth: hci3: command tx timeout [ 271.532170][T16098] netem: incorrect ge model size [ 271.538087][T16098] netem: change failed [ 271.685345][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 271.750639][T16118] netlink: 'syz.2.2924': attribute type 8 has an invalid length. [ 271.931545][T16128] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 271.944763][T16128] bond8 (unregistering): Released all slaves [ 272.008008][T16138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2931'. [ 272.023962][T16138] netlink: 'syz.1.2931': attribute type 7 has an invalid length. [ 272.039571][T16129] block nbd3: Unsupported socket: should be TCP or UNIX. [ 272.049313][T16138] netlink: 'syz.1.2931': attribute type 8 has an invalid length. [ 272.058044][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2931'. [ 272.441891][T16154] x_tables: duplicate underflow at hook 2 [ 272.485845][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 273.548341][ T5825] Bluetooth: hci3: command tx timeout [ 273.679193][T16216] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 273.752995][T16216] bond7: entered promiscuous mode [ 273.766513][T16216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.818886][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.842733][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.851269][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.871455][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.889446][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.898572][T16222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.912930][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 273.956399][T16222] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 273.977802][T16222] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 274.001851][T16222] bond7: (slave wireguard1): making interface the new active one [ 274.010182][T16222] wireguard1: entered promiscuous mode [ 274.023713][T16222] bond7: (slave wireguard1): Enslaving as an active interface with an up link [ 274.314582][T16247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2957'. [ 274.335261][T16247] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2957'. [ 274.345732][T16247] netlink: 'syz.4.2957': attribute type 5 has an invalid length. [ 274.356037][T16247] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2957'. [ 274.380233][T16252] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2957'. [ 274.507822][T16260] sctp: [Deprecated]: syz.3.2961 (pid 16260) Use of int in maxseg socket option. [ 274.507822][T16260] Use struct sctp_assoc_value instead [ 274.525236][T16259] sctp: [Deprecated]: syz.3.2961 (pid 16259) Use of int in maxseg socket option. [ 274.525236][T16259] Use struct sctp_assoc_value instead [ 274.741693][T16274] ip6tnl0: Caught tx_queue_len zero misconfig [ 274.756824][T16276] block nbd3: Unsupported socket: should be TCP or UNIX. [ 274.812325][T16279] openvswitch: netlink: Message has 1 unknown bytes. [ 274.841192][T16279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.879052][T16227] chnl_net:caif_netlink_parms(): no params data found [ 274.992468][T16290] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 275.126759][T16227] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.134330][T16227] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.149419][T16227] bridge_slave_0: entered allmulticast mode [ 275.164250][T16227] bridge_slave_0: entered promiscuous mode [ 275.173567][T16227] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.181102][T16227] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.189876][T16227] bridge_slave_1: entered allmulticast mode [ 275.198851][T16227] bridge_slave_1: entered promiscuous mode [ 275.292267][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.322669][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.412051][T16309] Z7nz>RA: renamed from lo [ 275.421883][T16227] team0: Port device team_slave_0 added [ 275.442444][T16227] team0: Port device team_slave_1 added [ 275.536152][T16227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.545295][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.617030][T16227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.630761][T16227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.637742][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.676500][T16227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.689585][T16323] netlink: 'syz.3.2979': attribute type 1 has an invalid length. [ 275.817957][T16323] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 275.844020][T16227] hsr_slave_0: entered promiscuous mode [ 275.903839][T16227] hsr_slave_1: entered promiscuous mode [ 275.924606][T16227] debugfs: 'hsr0' already exists in 'hsr' [ 275.936431][T16227] Cannot create hsr debugfs directory [ 275.948491][ T5840] Bluetooth: hci2: command tx timeout [ 275.983548][T16338] __nla_validate_parse: 2 callbacks suppressed [ 275.983565][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 276.085371][T16336] syzkaller0: entered promiscuous mode [ 276.106630][T16336] syzkaller0: entered allmulticast mode [ 276.224046][T16354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2988'. [ 276.425750][T16364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2992'. [ 276.445572][T16367] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2993'. [ 276.456562][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 276.467079][T16368] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2994'. [ 276.470731][T16227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.490158][T16227] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.656440][T16375] netlink: 'syz.4.2997': attribute type 5 has an invalid length. [ 276.683309][T16227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.698481][T16227] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.786557][T16227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.801910][T16227] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.085297][T16401] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3005'. [ 278.028743][ T5840] Bluetooth: hci2: command tx timeout [ 278.614122][T16227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.625590][T16227] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.897168][T16227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.922572][T16227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.967302][T16227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.000143][T16227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.193617][T16458] tipc: Enabled bearer , priority 0 [ 279.222396][T16458] syzkaller0: entered promiscuous mode [ 279.227907][T16458] syzkaller0: entered allmulticast mode [ 279.414936][T16474] tipc: Resetting bearer [ 279.460421][T16474] tipc: Disabling bearer [ 279.494675][T16227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.572917][T16227] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.595798][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.603040][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.698219][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.705429][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.074569][T16516] netlink: 'syz.1.3027': attribute type 4 has an invalid length. [ 280.109292][ T5840] Bluetooth: hci2: command tx timeout [ 280.130886][T16514] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3028'. [ 280.145108][T16516] netlink: 'syz.1.3027': attribute type 4 has an invalid length. [ 280.172898][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3028'. [ 280.366995][T16530] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 280.384352][T16530] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 280.406186][T16227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.511863][T16227] veth0_vlan: entered promiscuous mode [ 280.581129][T16539] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 280.595333][T16539] bond9: entered promiscuous mode [ 280.601062][T16539] bond9: entered allmulticast mode [ 280.606828][T16539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.623129][T16227] veth1_vlan: entered promiscuous mode [ 280.675753][T16227] veth0_macvtap: entered promiscuous mode [ 280.688409][T16227] veth1_macvtap: entered promiscuous mode [ 280.711802][T16227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.736292][T16227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.774092][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.809774][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.821899][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.872162][ T7088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.935365][T16551] ip6gre2: entered allmulticast mode [ 280.970146][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.986609][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.009759][T16551] syzkaller0: entered promiscuous mode [ 281.016139][T16551] syzkaller0: entered allmulticast mode [ 281.090701][T16556] netlink: 'syz.1.3039': attribute type 21 has an invalid length. [ 281.129358][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 281.146203][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.169928][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.492706][T16570] batman_adv: batadv0: Removing interface: dummy0 [ 281.492826][T16574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.546208][T16567] xt_CT: No such helper "snmp_trap" [ 281.580909][T16574] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 281.916379][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 282.194239][ T5840] Bluetooth: hci2: command tx timeout [ 282.294538][T16604] netlink: 'syz.1.3054': attribute type 11 has an invalid length. [ 282.304267][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.317420][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.326243][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.336005][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.353724][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.410377][T16613] netlink: 'syz.3.3055': attribute type 1 has an invalid length. [ 282.535346][T16619] netlink: 'syz.1.3057': attribute type 2 has an invalid length. [ 282.558894][T16619] netlink: 'syz.1.3057': attribute type 2 has an invalid length. [ 282.567886][T16613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.583953][T16619] netlink: 'syz.1.3057': attribute type 2 has an invalid length. [ 282.637124][T16608] bond8: (slave geneve4): making interface the new active one [ 282.668117][T16608] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 282.842486][ T3587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.924021][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3066'. [ 283.015467][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 283.077299][ T3587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.119085][T16652] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 283.131574][T16652] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 283.224504][T16654] team0: Port device team_slave_1 removed [ 283.280451][T16657] macvlan2: entered promiscuous mode [ 283.285816][T16657] macvlan2: entered allmulticast mode [ 283.291834][T16657] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 283.305289][T16658] lo: Caught tx_queue_len zero misconfig [ 283.366076][ T3587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.461244][ T3587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.746156][T16684] batadv_slave_1: entered promiscuous mode [ 283.763140][T16605] chnl_net:caif_netlink_parms(): no params data found [ 283.812182][T16684] batadv_slave_1: left promiscuous mode [ 284.185393][T16714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3082'. [ 284.431445][ T5840] Bluetooth: hci1: command tx timeout [ 284.604732][ T3587] dvmrp0 (unregistering): left allmulticast mode [ 284.902002][T16727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 284.911790][T16727] netlink: 'syz.3.3086': attribute type 7 has an invalid length. [ 284.920940][T16727] netlink: 'syz.3.3086': attribute type 8 has an invalid length. [ 284.929103][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 285.256497][ T3587] ` (unregistering): Released all slaves [ 285.275746][ T3587] bond1 (unregistering): Released all slaves [ 285.314287][ T3587] bond0 (unregistering): left promiscuous mode [ 285.323146][ T3587] bond0 (unregistering): Released all slaves [ 285.344517][ T3587] bond2 (unregistering): Released all slaves [ 285.496006][ T3587] bond3 (unregistering): Released all slaves [ 285.611976][ T3587] bond4 (unregistering): Released all slaves [ 285.626727][ T3587] bond5 (unregistering): (slave veth7): Releasing backup interface [ 285.636767][ T3587] bond5 (unregistering): Released all slaves [ 285.745257][ T3587] bond6 (unregistering): Released all slaves [ 285.757823][ T3587] bond7 (unregistering): Released all slaves [ 285.769736][T16605] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.777150][T16605] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.784775][T16605] bridge_slave_0: entered allmulticast mode [ 285.792353][T16605] bridge_slave_0: entered promiscuous mode [ 285.808247][T16719] batadv_slave_1: entered promiscuous mode [ 285.828611][T16720] batadv_slave_1: left promiscuous mode [ 285.857559][T16605] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.884286][T16605] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.914994][T16605] bridge_slave_1: entered allmulticast mode [ 285.934822][T16605] bridge_slave_1: entered promiscuous mode [ 285.960693][ T3587] tipc: Disabling bearer [ 285.966984][ T3587] tipc: Left network mode [ 286.104524][T16734] bridge1: entered promiscuous mode [ 286.119341][T16734] bridge1: entered allmulticast mode [ 286.126634][ T3587] IPVS: stopping backup sync thread 12419 ... [ 286.146380][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3089'. [ 286.166022][T16733] tc_dump_action: action bad kind [ 286.211975][T16605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.237697][T16605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.251045][T16746] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3091'. [ 286.352642][T16746] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 286.379996][T16605] team0: Port device team_slave_0 added [ 286.410507][T16605] team0: Port device team_slave_1 added [ 286.515695][ T5840] Bluetooth: hci1: command tx timeout [ 286.522654][ T3587] batadv0: left promiscuous mode [ 286.536792][ T3587] hsr_slave_0: left promiscuous mode [ 286.543254][ T3587] hsr_slave_1: left promiscuous mode [ 287.354090][T16605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.361250][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.390182][T16605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.421718][T16605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.440741][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.498134][T16605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.550693][T16763] tipc: Enabled bearer , priority 0 [ 287.558979][T16763] syzkaller0: entered promiscuous mode [ 287.564965][T16763] syzkaller0: entered allmulticast mode [ 287.616093][T16763] tipc: Resetting bearer [ 287.635456][T16763] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 287.676322][T16762] tipc: Resetting bearer [ 287.712899][T16762] tipc: Disabling bearer [ 287.738682][T16605] hsr_slave_0: entered promiscuous mode [ 287.745802][T16605] hsr_slave_1: entered promiscuous mode [ 287.753330][T16605] debugfs: 'hsr0' already exists in 'hsr' [ 287.759475][T16605] Cannot create hsr debugfs directory [ 287.961692][T16783] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3103'. [ 287.999651][T16783] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3103'. [ 288.052119][T16781] syzkaller0: entered promiscuous mode [ 288.059095][T16781] syzkaller0: entered allmulticast mode [ 288.085501][ T3587] IPVS: stop unused estimator thread 0... [ 288.101588][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3102'. [ 288.591687][ T5825] Bluetooth: hci1: command tx timeout [ 290.156822][ T3587] ------------[ cut here ]------------ [ 290.162673][ T3587] WARNING: CPU: 1 PID: 3587 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 290.172539][ T3587] Modules linked in: [ 290.176794][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 290.186403][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.196642][ T3587] Workqueue: netns cleanup_net [ 290.201514][ T3587] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 290.208577][ T3587] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 60 62 c6 ff 48 83 3b 00 75 0c e8 35 ad 60 ff 5b c3 cc cc cc cc cc e8 29 ad 60 ff 90 <0f> 0b 90 5b e9 4f cd e9 08 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 290.228765][ T3587] RSP: 0018:ffffc9000c7b78b0 EFLAGS: 00010293 [ 290.234880][ T3587] RAX: ffffffff825f5747 RBX: ffff88807b502798 RCX: ffff88803086dac0 [ 290.243451][ T3587] RDX: 0000000000000000 RSI: ffffffff8d8f3ee2 RDI: ffff88807b502738 [ 290.251884][ T3587] RBP: ffffc9000c7b7990 R08: ffffffff8f7cdb77 R09: 1ffffffff1ef9b6e [ 290.260454][ T3587] R10: dffffc0000000000 R11: ffffffff8b039ac0 R12: ffffffff8f5ced40 [ 290.268659][ T3587] R13: 1ffff920018f6f3c R14: ffffffff8f5ced20 R15: ffff88807b502528 [ 290.276656][ T3587] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 290.285628][ T3587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.292293][ T3587] CR2: 000000110c2980ed CR3: 000000002fe82000 CR4: 00000000003526f0 [ 290.300319][ T3587] Call Trace: [ 290.303612][ T3587] [ 290.306559][ T3587] ops_undo_list+0x49a/0x990 [ 290.311235][ T3587] ? __pfx_ops_undo_list+0x10/0x10 [ 290.316390][ T3587] ? do_raw_spin_unlock+0x122/0x240 [ 290.321722][ T3587] cleanup_net+0x4d8/0x820 [ 290.326195][ T3587] ? __pfx_cleanup_net+0x10/0x10 [ 290.331243][ T3587] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.336859][ T3587] ? process_scheduled_works+0x9ef/0x17b0 [ 290.343014][ T3587] ? process_scheduled_works+0x9ef/0x17b0 [ 290.348835][ T3587] process_scheduled_works+0xae1/0x17b0 [ 290.355036][ T3587] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.361099][ T3587] worker_thread+0x8a0/0xda0 [ 290.365727][ T3587] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.372143][ T3587] ? __kthread_parkme+0x7b/0x200 [ 290.377119][ T3587] kthread+0x711/0x8a0 [ 290.381270][ T3587] ? __pfx_worker_thread+0x10/0x10 [ 290.386411][ T3587] ? __pfx_kthread+0x10/0x10 [ 290.391096][ T3587] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.396316][ T3587] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.401591][ T3587] ? __pfx_kthread+0x10/0x10 [ 290.406213][ T3587] ret_from_fork+0x4bc/0x870 [ 290.410891][ T3587] ? __pfx_ret_from_fork+0x10/0x10 [ 290.416039][ T3587] ? __switch_to_asm+0x39/0x70 [ 290.420874][ T3587] ? __switch_to_asm+0x33/0x70 [ 290.425669][ T3587] ? __pfx_kthread+0x10/0x10 [ 290.430868][ T3587] ret_from_fork_asm+0x1a/0x30 [ 290.435679][ T3587] [ 290.439009][ T3587] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 290.446284][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 290.455817][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.465869][ T3587] Workqueue: netns cleanup_net [ 290.470646][ T3587] Call Trace: [ 290.473925][ T3587] [ 290.476900][ T3587] dump_stack_lvl+0x99/0x250 [ 290.481495][ T3587] ? __asan_memcpy+0x40/0x70 [ 290.486101][ T3587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.491295][ T3587] ? __pfx__printk+0x10/0x10 [ 290.495889][ T3587] vpanic+0x237/0x6d0 [ 290.499871][ T3587] ? __pfx_vpanic+0x10/0x10 [ 290.504465][ T3587] panic+0xb9/0xc0 [ 290.508534][ T3587] ? __pfx_panic+0x10/0x10 [ 290.512953][ T3587] __warn+0x31b/0x4b0 [ 290.516926][ T3587] ? retire_sysctl_set+0x48/0x60 [ 290.521856][ T3587] ? retire_sysctl_set+0x48/0x60 [ 290.526789][ T3587] report_bug+0x2be/0x4f0 [ 290.531122][ T3587] ? retire_sysctl_set+0x48/0x60 [ 290.536062][ T3587] ? retire_sysctl_set+0x48/0x60 [ 290.540993][ T3587] ? retire_sysctl_set+0x4a/0x60 [ 290.546356][ T3587] handle_bug+0x84/0x160 [ 290.550599][ T3587] exc_invalid_op+0x1a/0x50 [ 290.555112][ T3587] asm_exc_invalid_op+0x1a/0x20 [ 290.559959][ T3587] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 290.565502][ T3587] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 60 62 c6 ff 48 83 3b 00 75 0c e8 35 ad 60 ff 5b c3 cc cc cc cc cc e8 29 ad 60 ff 90 <0f> 0b 90 5b e9 4f cd e9 08 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 290.585105][ T3587] RSP: 0018:ffffc9000c7b78b0 EFLAGS: 00010293 [ 290.591168][ T3587] RAX: ffffffff825f5747 RBX: ffff88807b502798 RCX: ffff88803086dac0 [ 290.599226][ T3587] RDX: 0000000000000000 RSI: ffffffff8d8f3ee2 RDI: ffff88807b502738 [ 290.607201][ T3587] RBP: ffffc9000c7b7990 R08: ffffffff8f7cdb77 R09: 1ffffffff1ef9b6e [ 290.615177][ T3587] R10: dffffc0000000000 R11: ffffffff8b039ac0 R12: ffffffff8f5ced40 [ 290.623154][ T3587] R13: 1ffff920018f6f3c R14: ffffffff8f5ced20 R15: ffff88807b502528 [ 290.631133][ T3587] ? __pfx_sysctl_net_exit+0x10/0x10 [ 290.636530][ T3587] ? retire_sysctl_set+0x47/0x60 [ 290.641581][ T3587] ops_undo_list+0x49a/0x990 [ 290.646180][ T3587] ? __pfx_ops_undo_list+0x10/0x10 [ 290.651287][ T3587] ? do_raw_spin_unlock+0x122/0x240 [ 290.656589][ T3587] cleanup_net+0x4d8/0x820 [ 290.661002][ T3587] ? __pfx_cleanup_net+0x10/0x10 [ 290.665950][ T3587] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.671254][ T3587] ? process_scheduled_works+0x9ef/0x17b0 [ 290.676999][ T3587] ? process_scheduled_works+0x9ef/0x17b0 [ 290.682753][ T3587] process_scheduled_works+0xae1/0x17b0 [ 290.688354][ T3587] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.694375][ T3587] worker_thread+0x8a0/0xda0 [ 290.698989][ T3587] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.705347][ T3587] ? __kthread_parkme+0x7b/0x200 [ 290.710992][ T3587] kthread+0x711/0x8a0 [ 290.715063][ T3587] ? __pfx_worker_thread+0x10/0x10 [ 290.720170][ T3587] ? __pfx_kthread+0x10/0x10 [ 290.724842][ T3587] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.730033][ T3587] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.735229][ T3587] ? __pfx_kthread+0x10/0x10 [ 290.739815][ T3587] ret_from_fork+0x4bc/0x870 [ 290.744414][ T3587] ? __pfx_ret_from_fork+0x10/0x10 [ 290.749608][ T3587] ? __switch_to_asm+0x39/0x70 [ 290.754357][ T3587] ? __switch_to_asm+0x33/0x70 [ 290.759108][ T3587] ? __pfx_kthread+0x10/0x10 [ 290.763699][ T3587] ret_from_fork_asm+0x1a/0x30 [ 290.768554][ T3587] [ 290.771889][ T3587] Kernel Offset: disabled [ 290.776220][ T3587] Rebooting in 86400 seconds..