last executing test programs: 1m58.50265263s ago: executing program 1 (id=2325): syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 1m58.351415509s ago: executing program 1 (id=2327): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0xc000) poll(&(0x7f0000000740)=[{r2, 0xa403}], 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1m58.093701179s ago: executing program 1 (id=2331): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x5f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m57.929528332s ago: executing program 1 (id=2335): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)=""/84, &(0x7f0000000000)=0x54) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@float={0xe, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x0, 0x30, 0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000480)=""/128, 0x2d, 0x80, 0x1, 0x2, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="7dffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500000000000000000000000063000010000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000080)="a4685d0ce10455bf514789", &(0x7f0000000180), &(0x7f0000000600)="eeaaa9ebcdb966a20ccca8e194d0c7a5881a99f6f5998825018c06d07717ab9a7a9b28e45a518d8565c981acaa84a7749a6fe839f6882a19cfdc57a7cdc4c1000869d86b0b3e3e23ece8b0e5976c40d80f1e3250383cecceaf82fb865f3ec1e071bd42d274f5703dafd1969bd2550b3c484924fe48b7b65174b921100fe05cb1b9356d6ca5ecba17e27aff1fd9653d22626ede73d783933b16ea1ba7f886a5f32e5ada76d549ba1ec1fa1f04c9afbef762db456f04808a2d786ea83d6eb863ebc90c22239251b3a5537419c8c87091960c7f7666cf6c65c847931843bed4875c9d496040b540f854153f24a5568d7338733c0d7b6fe56d779e6957c5", &(0x7f00000002c0)="922a17547d7ab199201711eb72346d4a5af95075776b077c86e20124fa657e6ba1a2d3c4d84410938533d9ce4b70d9af3fc2b36b0dcf26f557037c26f05f704c536f844b263467a0a8be3b66608194ef07817616ed929e78150db89356603e09e2bcb06c006c71fbe1306f877bbe3479cef083061a0eacfbba326e171a5a580fa5", 0x7, r1, 0x4}, 0x38) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e20, @remote}}) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r0, 0x0, 0x0, 0x24040010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) 1m57.766816637s ago: executing program 1 (id=2339): r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="eb"], 0x30}}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m57.667568994s ago: executing program 1 (id=2342): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) write$6lowpan_control(r1, 0x0, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000050420f01630c02000000000000000000000d000000b3875719002e3d53c0d8ed70db8ffd319a00f5a39a84593c"], 0x0, 0x34}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="82827f54", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000060016000d0000000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.5905269s ago: executing program 32 (id=2342): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0) write$6lowpan_control(r1, 0x0, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000000050420f01630c02000000000000000000000d000000b3875719002e3d53c0d8ed70db8ffd319a00f5a39a84593c"], 0x0, 0x34}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="82827f54", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000060016000d0000000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.719442171s ago: executing program 4 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x18, 0x5, 0x1) getsockname$packet(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x4ac, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#).^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%[\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42a4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc115}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',:$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x32c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x11, 0x4, "933e5e380b3b7c862cdfb1b6cd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+}]-:/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*!+/(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '^*^}&*-#/:]-\xe5:!],/,-*\xed\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\x1d\',#\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x135}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.@##\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e78}]}]}, @ETHTOOL_A_BITSET_MASK={0x7d, 0x5, "d7eefc66bd30b3284c621538e3b87a5cf18a55683615180b1e3ab5a45f69d557f5fa64da410d234ced9ad437a97516a36b428bcfb2c0c96e79bc9ac97f63154f2c9b74842c82ee773924e4112d2577866607ef8088659ba32a1218a2fa65a5e935e976e841ae22f18e16c1af51410639f94eae9bab9513071c"}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "24ed5c7913b3888df9acd14d0489f1f1fdb0ec70044f12344480f66b83fea893831d0a2b5fee55443ec334a0951177d804d2fecb87e0a5e42f360c5e7f8d333502c50f566d2dafd018540fe7b9107571a388fc37106ec926ee6e4c473754a6e47069e97c3c5836799e5173eea4bbf1213618a324c9deb36cf108f2e82a869e149456ddccb8ad2ea5314332820fa7baea4f17538f72"}]}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099", @ANYBLOB="6401e8b279921be3c637378b8bb2d5"], 0x38}], 0x1}, 0x0) 9.578725341s ago: executing program 4 (id=2974): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close(0x4) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000c000780080012400006000010000300496173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000fc0400010007000000"], 0x54}}, 0x0) 8.725709466s ago: executing program 4 (id=2977): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@un=@abs, &(0x7f0000000040)=0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r2, 0xff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e", @ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 8.723643042s ago: executing program 4 (id=2979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000980)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x2, 0x4) 8.717726207s ago: executing program 4 (id=2982): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8, 0x3856, 0x6, 0x1, {{0x2f, 0x4, 0x0, 0x8, 0xbc, 0x64, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x11}, {[@end, @timestamp_prespec={0x44, 0x3c, 0xc8, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x8}, {@private=0xa010100, 0x6}, {@private=0xa010100, 0x39c8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@broadcast}, {@local, 0x7}]}, @generic={0x94, 0x10, "967f452cc3c41ef772cbda90373f"}, @cipso={0x86, 0x39, 0xa92bc71468c77817, [{0x6, 0x7, "9065c40977"}, {0x2, 0xb, "668b7a9c08b8a6424c"}, {0x6, 0xa, "d788ab08620a96af"}, {0x7, 0x5, "a317bf"}, {0x2, 0x10, "a0741ef8606feec3b6699fad40a3"}, {0x5, 0x2}]}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x7, [0x4, 0x10000, 0x4, 0x8, 0x140e, 0x3]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newaddr={0x78, 0x14, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0xf8, 0x4, 0xfd, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, @IFA_LABEL={0x14}, @IFA_RT_PRIORITY={0x8, 0x9, 0x48f3781c}, @IFA_FLAGS={0x8, 0x8, 0x480}, @IFA_LABEL={0x14, 0x3, 'dummy0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x563492221fc22b49}, 0x4004) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f00000005c0)=""/219, 0xdb}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/52, 0x34}, {&(0x7f0000000780)=""/88, 0x58}], 0x9, &(0x7f00000008c0)=""/213, 0xd5}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@bridge_getvlan={0x58, 0x72, 0x4, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b40)={r2, 0x10001, 0x5, 0x5}) connect$can_j1939(r3, &(0x7f0000000b80)={0x1d, r1, 0x2, {0x2, 0x1, 0x4}, 0x42a27793782c9f25}, 0x18) bind(r0, &(0x7f0000000bc0)=@xdp={0x2c, 0x8, r1, 0x40}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r3, r1, 0x25, 0x8, @void}, 0x10) accept$unix(r3, &(0x7f0000000c80)=@abs, &(0x7f0000000d00)=0x6e) recvmmsg$unix(r3, &(0x7f0000004f40)=[{{&(0x7f0000000d40), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/129, 0x81}, {&(0x7f0000000e80)=""/27, 0x1b}, {&(0x7f0000000ec0)=""/84, 0x54}, {&(0x7f0000000f40)=""/32, 0x20}], 0x4, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000004440)=[{&(0x7f00000011c0)=""/239, 0xef}, {&(0x7f00000012c0)=""/188, 0xbc}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/151, 0x97}], 0x6, &(0x7f00000044c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000004740)=[{&(0x7f0000004680)=""/107, 0x6b}, {&(0x7f0000004700)=""/10, 0xa}], 0x2, &(0x7f0000004780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000004800)=@abs, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004880)=""/179, 0xb3}, {&(0x7f0000004940)=""/122, 0x7a}, {&(0x7f00000049c0)=""/193, 0xc1}, {&(0x7f0000004ac0)=""/227, 0xe3}, {&(0x7f0000004bc0)=""/73, 0x49}, {&(0x7f0000004c40)=""/143, 0x8f}, {&(0x7f0000004d00)=""/81, 0x51}], 0x7, &(0x7f0000004e00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000004e40), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004ec0)=""/12, 0xc}], 0x1}}], 0x5, 0x10000, 0x0) recvmsg$can_raw(r7, &(0x7f0000006380)={&(0x7f0000005080)=@qipcrtr, 0x80, &(0x7f0000006280)=[{&(0x7f0000005100)}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/168, 0xa8}, {&(0x7f0000006200)=""/69, 0x45}], 0x4, &(0x7f00000062c0)=""/154, 0x9a}, 0x40002040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006680)={r11, 0xe0, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000063c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000006400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000006440)=[0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000006480)=[{}], 0x8, 0x10, &(0x7f00000064c0), &(0x7f0000006500), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000006540)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000066c0)={r10, r1, 0x25, 0x9, @val=@target_btf_id=r21}, 0x14) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000006700), &(0x7f0000006740)=0x4) ioctl$BTRFS_IOC_SEND(r10, 0x40489426, &(0x7f00000067c0)={{r0}, 0x3, &(0x7f0000006780)=[0x7f, 0x9, 0x5], 0x3, 0x4, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000006980)={'syztnl1\x00', &(0x7f0000006840)={'tunl0\x00', r1, 0x10, 0x10, 0x80000000, 0x8001, {{0x46, 0x4, 0x3, 0x14, 0x118, 0x67, 0x0, 0xa9, 0x4, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x69, 0x3, [{0x2, 0xa, "41d2ec4d89db4007"}, {0x0, 0x8, "394b47abe0cf"}, {0x5, 0xc, "5b07382ab5af1fa05589"}, {0x1, 0x11, "34bfcc4095482407e9015f6f9b9a9b"}, {0x6, 0xf, "b8e4262fd7608eb8d2742d906d"}, {0x5, 0x3, "d3"}, {0x6, 0xb, "6822803d652f4718c3"}, {0x2, 0xf, "2574bedc6340f56d2841245b76"}, {0x6, 0x8, "c67d2ee1b598"}]}, @end, @timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x2, [{@broadcast, 0x101}, {@private=0xa010102, 0xffffffff}, {@empty, 0x2}]}, @timestamp_addr={0x44, 0x14, 0xec, 0x1, 0x4, [{@remote, 0x9f2}, {@multicast1, 0x5}]}, @lsrr={0x83, 0x1f, 0xd9, [@empty, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @remote, @multicast1]}, @timestamp={0x44, 0x18, 0xb8, 0x0, 0x5, [0x5, 0x10, 0x7, 0x8, 0xdd6]}, @timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}]}, @timestamp_prespec={0x44, 0x24, 0xa8, 0x3, 0x9, [{@multicast1, 0x9}, {@remote, 0x8}, {@remote, 0xd8}, {@rand_addr=0x64010100, 0x6}]}]}}}}}) recvmsg$can_raw(r13, &(0x7f0000006cc0)={&(0x7f00000069c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006a40)=""/223, 0xdf}, {&(0x7f0000006b40)=""/247, 0xf7}, {&(0x7f0000006c40)=""/56, 0x38}], 0x3}, 0x2102) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, 0x0) r23 = socket$kcm(0x29, 0xa, 0x0) close(r23) r24 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007000)=@bpf_ext={0x1c, 0x16, &(0x7f0000006d00)=@raw=[@call={0x85, 0x0, 0x0, 0x95}, @jmp={0x5, 0x1, 0x4, 0x1, 0x2, 0x8, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x6f}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], &(0x7f0000006dc0)='GPL\x00', 0x7, 0x95, &(0x7f0000006e00)=""/149, 0x41100, 0x4, '\x00', r20, 0x0, r18, 0x8, &(0x7f0000006ec0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000006f00)={0x1, 0x7, 0x9, 0x3}, 0x10, 0x3a46, 0xffffffffffffffff, 0x7, &(0x7f0000006f40)=[r17, r12], &(0x7f0000006f80)=[{0x5, 0x4, 0xb, 0xc}, {0x1, 0x3, 0x8, 0x3}, {0x5, 0x3, 0x0, 0x4}, {0x4, 0x5, 0xf, 0x6}, {0x1, 0x1, 0x6, 0xa}, {0x2, 0x2, 0xf, 0x4}, {0x3, 0x2, 0x8, 0x4}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000071c0)={@cgroup=r6, 0x34, 0x1, 0x200, &(0x7f00000070c0)=[0x0], 0x1, 0x0, &(0x7f0000007100)=[0x0, 0x0], &(0x7f0000007140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000007180)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000007200)={@ifindex=r22, r8, 0x1a, 0x20, r24, @void, @void, @void, @value=r19, r25}, 0x20) ioctl$sock_SIOCADDRT(r14, 0x890b, &(0x7f0000007280)={0x0, @qipcrtr={0x2a, 0x1, 0xfffffffe}, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x5, 0x0, 0x0, 0x0, 0xf770, &(0x7f0000007240)='veth0_virt_wifi\x00', 0x4, 0xd9, 0xfff9}) r26 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r26, &(0x7f0000007300)={0x1d, r20}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r16, 0x84, 0x6b, &(0x7f0000007340)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x7, @empty, 0x6574}, @in={0x2, 0x4e24, @remote}], 0x3c) sendmsg$TIPC_NL_NODE_GET(r13, &(0x7f0000007740)={&(0x7f0000007380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007700)={&(0x7f0000007400)={0x2ec, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd1f00000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d79a0dad909b273af58941d48df579488f4e78f583"}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3f0fc7c70258584c5f020920d5fb500040773a08d7f590"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c47ac60cbb329fc0c515baaec0d8f9e53b9a2c41cf571bb78f39e27ccf9d9a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "4174d064f088c822bc42be40f921b92e2d254d8f9ee983cb2e2d77be5f9f"}}]}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "426f3bf51724dee088aaf997620c637e33534221e8"}}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "e175c19f4e208ff96ece0d5054c10185d4a1d43da7292291f8681e78f2b406dd8aa79ffb500a5c468fb04ebbb2e6d502afbc3f8acb986cacb724876911903db54612a304f560fbaebb61001209af547c32a404897ee77ecbb133c739623b99c5627114122d72ec9036015d1e2997cd0440b99884118e5cd93842d9"}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "26084cbfe1dfa2642a035260b4d74059a97b18bb2c204a825539130fce6dde0ae6009d87b817132a3cdf89e6bf13afa8751bb26bb9a4b2c44f6fe9a7956b4ff69d1502e9cf42858af7c35f2e7e6a6d9bf1424001d5833c1cae28981509094590071a0f9ae71e4f41b93d35cf19c6153757fedf772b0f1cfc8903306531ebf88ac09e1965ee47d1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000010) 8.60986964s ago: executing program 4 (id=2985): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) r1 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x800}}], 0x2, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006300)={{{@in=@multicast2, @in6=@local}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000006400)=0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r5, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r6]}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8) close(r13) r14 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r14, r13, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private, @in6=@local}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) getgid() r15 = getpid() syz_open_procfs$namespace(r15, &(0x7f0000000040)='ns/time_for_children\x00') r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r16, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002c000100000000000000000008000000", @ANYRES32=r18, @ANYBLOB="0b000080976b640868603000180001e290000d80905176c518740da397a9423603000000"], 0x3c}], 0x1}, 0x0) 3.178161875s ago: executing program 2 (id=3034): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0xf16ada4e0f6c1325) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) 3.105777629s ago: executing program 2 (id=3035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@updsa={0x224, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@remote, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x40, 0x20, 0x734c4b15b9d5c4b4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x2b}, @in6=@empty, {0x7, 0x4, 0x5, 0x5, 0x0, 0x3ba, 0x8000, 0x1}, {0x7, 0x9, 0x30, 0xa}, {0x7a0c39ff, 0x0, 0x2}, 0x70bd28, 0x3506, 0xa, 0x2, 0x67, 0x49}, [@algo_comp={0x133, 0x3, {{'deflate\x00'}, 0x758, "f010ae92fe7ebe9652799506db9e9b02bf20a9a66d06e92d6404ffe0eacfeac3454c974ca324cdb327cf16cf04f89d4d4639e976d3ab2741e5419d5fe8e61d576021215d29ffa9e7b00173c60de3550852623ea7d5a4a4fcdf467642dac616c39c949a26b8f976adadf187db44583b73274631165c92803d266e376b8e1ca46a6cc168ce935c84f6250bdf44c873cc4c5dc8807bb002e57ee9b19fdba862223febd0b7712751fc5ddc1f397e89f70db1585e8027f78008455e9719e37880cd47a572f489b3fa1065a489c2075a9977536d4afa4339b6b90f82107dbae3c7e63d7c9d41088507a92c49829b"}}]}, 0x224}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) 2.569725987s ago: executing program 2 (id=3038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1a0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x178, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52570463}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x21c}, 0x1, 0x0, 0x0, 0x8011}, 0x8080) 2.51751754s ago: executing program 0 (id=3039): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_EVENT={0x8, 0x2c, 0xfffeffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040091}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'dummy0\x00', @local}) r2 = socket$rxrpc(0x21, 0x2, 0xa) listen(r2, 0xfffff71a) 2.358954682s ago: executing program 2 (id=3040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@getqdisc={0x40, 0x26, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xffff, 0xfff1}, {0xa, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x44080) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbb}, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async) socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000580)=""/245, 0xf5, 0x0, &(0x7f0000001940)=""/4078, 0xfee}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x4}, 0x50) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async, rerun: 32) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x12, @mcast2}, 0x1c) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 32) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f00000002c0)={0x1}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async, rerun: 32) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$sock_timeval(r11, 0x1, 0x42, &(0x7f0000000400), &(0x7f0000000480)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="010000000100000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async, rerun: 64) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) (async, rerun: 64) sendmmsg$inet6(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)='|', 0x1}], 0x1}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x401}, 0x1c, &(0x7f0000002940)=[{&(0x7f00000007c0)="1c633b27d2245e374ef940d6605d6292822670b6ba3d7d6cac972fdd646da9e3699b7e0eaa14c968a6c255685ce4494fe003213406b50cc6ee174a3c6dba0445519885d2972e6bf67545c69a01d4ea124a311bd1e9cfc0ae90c9b445701dffddbe35d1c8a0f80ae6a14e36bf83d71e8b07bde882ae1d13407db7d9afb9d2aaccda117447fae0343abe7476246959ff316b55674a9ebefdb8559f8bd92c1ee4264abb7bb3d12b6bd780ecbecfd21b93d0e7eeff4f90ac1340ed7d4aeb139dffd3f8240ef65f3dfd11d6cd965c4c990e704c33abb21e05e95a7ae578d46ef8", 0xde}, {&(0x7f0000000740)="12a5d21aca4e2b646a36b2c1ca1eebafb0", 0x11}, {&(0x7f0000000940)="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", 0x1000}], 0x3, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"/319, @ANYRES32=r4, @ANYBLOB="0000000098000000000000002900000039000000261001060000000020010000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000000000000000000000000000100000000000000000000ffffe0000002fc020000000000000000000000000000fe880000000000000000000000000101fe80000000000000000000000000001b20000000000000002900000037000000870000000000000005020005000100001400000000000000290000003e0000004c09000000000000"], 0x208}}], 0x2, 0x400c404) (async) writev(r8, &(0x7f0000000280)=[{&(0x7f00000001c0)="2b5438cb299c45d594cda7b9a066357276250fa56578344e20f4a4cacdcb71cc427bf0a53788", 0x26}], 0x1) 2.294666601s ago: executing program 5 (id=3041): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) 2.27417555s ago: executing program 3 (id=3042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf2a0040b667ae20ed010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x737}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x4f, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x2b, 0x0, 0xa}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x60, 0x0, 0x1}, {0x6}]}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000001a40), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) write$nbd(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xb4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x30d, @local, 0x7ffffffe}, 0x1c) 2.273607553s ago: executing program 0 (id=3043): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xb, @empty, 0x4e23, 0x3, 'none\x00', 0x20, 0x2, 0x19}, 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 2.178503596s ago: executing program 2 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="1ad8669fb1f0b23ccdf0b33e015835928678889da2db9a85f34f80bdd0fa26bf468b30f7fe0fbd5ac386e2cdc542fc191e55ab51e1d115fa4ecbbd960d41961258fd92e5405e7c6a97e2964c422ccf9b53bdb6a540fffd847eead2f81a3b6d2bac5eca50490eda9ee48bfdf19d38360eb19d5d3142eb821face91323539132731d870224298b00650e58067cdb7b51940def3ee24bf84c08ac25113f3abe58c04fc18c24e3b1ef6668f206ead5ff24b3f53f35a197b069058846f67eef3cc068ddc1856e4f4a47753393bfafd712a4ed80c375b723bed66d1973be5e772348925ee966e5db061b4259"}], 0x0, &(0x7f00000000c0)=[@mark={{0x0, 0x1, 0x24, 0x10000}}, @mark={{0x0, 0x1, 0x24, 0x10001}}, @timestamping={{0x0, 0x1, 0x25, 0xac77}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000210000000000000000000a00000a20000000020a010300000000000000000200000a0900010073797a3000000013749b224329497a75140000001100010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="1ad8669fb1f0b23ccdf0b33e015835928678889da2db9a85f34f80bdd0fa26bf468b30f7fe0fbd5ac386e2cdc542fc191e55ab51e1d115fa4ecbbd960d41961258fd92e5405e7c6a97e2964c422ccf9b53bdb6a540fffd847eead2f81a3b6d2bac5eca50490eda9ee48bfdf19d38360eb19d5d3142eb821face91323539132731d870224298b00650e58067cdb7b51940def3ee24bf84c08ac25113f3abe58c04fc18c24e3b1ef6668f206ead5ff24b3f53f35a197b069058846f67eef3cc068ddc1856e4f4a47753393bfafd712a4ed80c375b723bed66d1973be5e772348925ee966e5db061b4259"}], 0x0, &(0x7f00000000c0)=[@mark={{0x0, 0x1, 0x24, 0x10000}}, @mark={{0x0, 0x1, 0x24, 0x10001}}, @timestamping={{0x0, 0x1, 0x25, 0xac77}}], 0x48}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000210000000000000000000a00000a20000000020a010300000000000000000200000a0900010073797a3000000013749b224329497a75140000001100010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async) 2.058856264s ago: executing program 0 (id=3045): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x9b72) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0xc45, 0x4, 0x2}, 0xc) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r3, 0x0, 0xb) (async) syz_init_net_socket$ax25(0x27, 0x0, 0xc3) 2.043820579s ago: executing program 2 (id=3046): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x100, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0) 2.025788928s ago: executing program 3 (id=3047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140)={0x6000200d}) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000157b0a01020000000000000000000000000800034000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 1.031054368s ago: executing program 5 (id=3048): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8", @ANYBLOB="0f80cd02c2c00f5b093d46345ab62d093187252b748b57fbff44514771b474c3901d2f51af672bd92fb0420201f3739bd22f418dc457fb4002ef444815d54e4e8aa42665cc48b8a2797cc2dfcd8bc79d3b008b003b0a315452b78d81a79f62f5aca087502023de2bbdeedc451f297fd8d75a7dd4c9191502e9026ed25400a5d189fb235233f61643af7d9e03771100b3181998b8a735c129b8b523d169a9589945075f93a7357aefabeb67afe965587f2334", @ANYRES8=r0], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.030436323s ago: executing program 3 (id=3049): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601000000000300000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050001000700000005000500000000000500010006"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="61a000fe000000006910a500100000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 946.75715ms ago: executing program 5 (id=3050): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000600000000000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 914.993843ms ago: executing program 3 (id=3051): syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaab2aaaaaa0208004503005c00000000002f907800000000e000000124808100000000001000080010000000000086dd080088be00000002100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) write$tun(r2, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 714.75053ms ago: executing program 0 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x101, 0xca6}, @mpls={[], @generic="6e68a46f4fe2cbf2f54a591b357c4de04df4c725de5fee6f4ca2f83920b7fc3dc9134dfba771bef266"}}, 0x37) 714.03661ms ago: executing program 5 (id=3053): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x0, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) 541.762684ms ago: executing program 5 (id=3054): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) write$tun(r1, &(0x7f0000000700)={@void, @val={0x2, 0x3, 0x1000, 0x8, 0x0, 0xa}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x34}, @random="ecde5ba210df", @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x3e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x4, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x268e6b36}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6af53048}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29738a7f}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x354c9b33}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa9b}}, @generic={0x3f, 0xb, 0x3, 0x64, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @map_fd={0x18, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x58, 0xc5, &(0x7f00000003c0)=""/197, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x0, 0x3, 0x2, 0x2}, {0x2, 0x1, 0x8, 0x9}, {0x2, 0x4, 0xa, 0xc}, {0x2, 0x2, 0x4, 0x4}, {0x4, 0x5, 0x3, 0x7}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000)=r3, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000280)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="27000000002f1eafacf706e105000000884800050003ee0b802ea955e2578ddbba9b37785a42327e2078dab3553601ad98b8f0af0fc6ae", 0x37}], 0x1}, 0x0) 308.313385ms ago: executing program 0 (id=3055): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc00180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000090780b0000000023"], 0x0) 214.707945ms ago: executing program 3 (id=3056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4004) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010056797a3000000000080005400000000d08000640ffffff0008000340000000390c000b400000000000000008140000001000010080000000000000000084000a00"/128], 0x80}}, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) (async) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000000000040007bb690005000a000000050001000700000005000400000000000900020073797a310000008016000300686173683a6e65742c706f72742c6e657400"/84], 0x54}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 214.045361ms ago: executing program 5 (id=3057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0xb34, 0xff16) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x102}], 0x1, 0x45833af92e4b38bf, 0x0) syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) 157.354875ms ago: executing program 0 (id=3058): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6f1}, &(0x7f0000000100)=0x8) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_team\x00', {0x3}, 0x1}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@\x00\x00\x00VI\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fd8500"/28], 0x50) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = accept4$inet(r4, &(0x7f0000000400), &(0x7f0000001d40)=0x10, 0x800) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$802154_raw(r1, &(0x7f0000001e40)={&(0x7f0000001d80)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000001e00)={&(0x7f0000001dc0)="25c4c1b0faa66a9c18ca0907d46559c71bacdc786474f84bdf171886e4a7147edbe3d61e1b", 0x25}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000001bc0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @remote}, 0x4, 0x0, 0x4}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000240)="ce030a9875ed26686eb5f22e18febbd77a9ac190eb3d17f55b82bc767e8203d90d83fd313c3f4ab5f4211c86f5f4933218b3d6508e89c7c5216f8c7c3c0f937ff77ac477a19f03e363816c2fd32637930f2a7aaf2eb4269013afd33faa19cdea04eb3a6549df3bb8b21b4333668f0a6e30b447ef380b3d710837ca3a0cb636d0983dcb1478618d9716a92ce0841d507f7ec3", 0x92}, {&(0x7f0000000980)="a884e88446790aa8cc29adab508efb999aa248921c14af4895b4c020c12ff3c86641a9573f6b2539aaf3719aab213ebe5229fe77f0362957c46f19df5288075b2c71ef4cfc0c8a4891ba54410e39b802d7a40ba94552850ef953939351e93faf192e1f8ba07f006c853ca6b685089e86ccaaf9b4b1c4b4bbbb0ee573320ebe36a93d7f6a5969324e4479dc164e5c25952fd147b953c8e4192f3363b761131bd2f289d7967ad2b28e353ae358883867aacbc3332619f27283dcfe0356437ab84bb8437a8ea195ea73735e9d84cf30fb", 0xcf}, {&(0x7f0000001ac0)="16acd2b6d9d7fcb0c64b919e50f602fa96591f904d6912562c4e2193404abd098a1ba4ce2a35d07cbbb47635d3908680de215df103f9deb6f99f82781e1c66e774e264b676201205ed54e15db049e32a2398e50fa98c8304173d8bf4bd6b83e156a50aa81b453785b01967dc5256d70666749946e65470c65b7f75c864656eca15a03768b47af61b675aff304b7066a189e843a9dae7bd7870d76265b20e1c3930439f96a4c1cec4933847e20be5853aa8fa99be59dd7b28bff66954259165350b41721de7d819fd8bf3d89e401680a8cf72598745902c21a6f44a33383c574188dad91dcd4a1c99e4560b6abc08bbc3", 0xf0}], 0x4, &(0x7f0000001f40)=ANY=[@ANYRES64=r5], 0x180}, 0x4000000) r8 = socket$kcm(0x2, 0x922000000001, 0x106) socket$inet6(0xa, 0x800000000000002, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x4086, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2, 0x1, 0x8}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0x45, &(0x7f00000008c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)=""/245, 0xf5}], 0x5}, 0x12101) sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 0s ago: executing program 3 (id=3059): r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd2, &(0x7f0000000080)=""/210, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 278.058585][ T9480] syzkaller0: entered allmulticast mode [ 278.066401][ T9487] tipc: Started in network mode [ 278.073465][ T9487] tipc: Node identity 626fcad704c3, cluster identity 4711 [ 278.082174][ T9487] tipc: Enabled bearer , priority 0 [ 278.114294][ T9489] syzkaller0: entered promiscuous mode [ 278.120533][ T9489] syzkaller0: entered allmulticast mode [ 279.409019][ T9499] IPv6: sit1: Disabled Multicast RS [ 279.415280][ T9499] sit1: entered allmulticast mode [ 279.460920][ T9486] tipc: Resetting bearer [ 279.477252][ T9486] tipc: Disabling bearer [ 279.486999][ T9] tipc: Node number set to 1722600151 [ 279.703283][ T9509] delete_channel: no stack [ 279.719369][ T9509] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 279.732353][ T9509] netlink: 'syz.2.933': attribute type 17 has an invalid length. [ 279.740234][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 279.802384][ T9513] pim6reg1: entered promiscuous mode [ 279.808137][ T9513] pim6reg1: entered allmulticast mode [ 280.456839][ T9553] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 280.463418][ T9553] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 280.487708][ T9553] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 280.525672][ T9553] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 280.997688][ T9579] netlink: 'syz.4.957': attribute type 7 has an invalid length. [ 281.236126][ T9590] bond6 (unregistering): Released all slaves [ 281.457961][ T9601] netlink: 'syz.4.962': attribute type 4 has an invalid length. [ 281.468429][ T9604] netlink: 'syz.2.964': attribute type 6 has an invalid length. [ 281.500435][ T9601] __nla_validate_parse: 9 callbacks suppressed [ 281.500457][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 281.584483][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 281.707556][ T9613] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 281.832807][ T9621] netlink: 512 bytes leftover after parsing attributes in process `syz.1.970'. [ 282.111282][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.132588][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.154093][ T9647] netlink: 'syz.0.978': attribute type 12 has an invalid length. [ 282.173336][ T9647] netlink: 'syz.0.978': attribute type 29 has an invalid length. [ 282.190979][ T9647] netlink: 148 bytes leftover after parsing attributes in process `syz.0.978'. [ 282.203667][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.224230][ T9647] netlink: 'syz.0.978': attribute type 2 has an invalid length. [ 282.243867][ T9651] netlink: 48 bytes leftover after parsing attributes in process `syz.0.978'. [ 282.254399][ T9647] netlink: 23 bytes leftover after parsing attributes in process `syz.0.978'. [ 282.263593][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.284275][ T9644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.310116][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 282.325506][ T9647] veth0_macvtap: left promiscuous mode [ 282.583569][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 282.621313][ T9671] bridge_slave_1: left allmulticast mode [ 282.636525][ T9671] bridge_slave_1: left promiscuous mode [ 282.661598][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.690678][ T9671] bridge_slave_0: left allmulticast mode [ 282.714950][ T9671] bridge_slave_0: left promiscuous mode [ 282.740577][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.796252][ T9677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 282.855453][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 282.920989][ T9684] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 282.931780][ T9685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.082764][ T9685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.386114][ T9712] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 283.466759][ T9713] Cannot find map_set index 0 as target [ 283.478050][ T9712] team0: Port device dummy0 added [ 283.649761][ T9725] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 283.821003][ T9734] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.079057][ T9746] 8021q: VLANs not supported on ip6_vti0 [ 284.647438][ T9774] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 285.096498][ T9784] vlan3: entered promiscuous mode [ 285.103015][ T9784] geneve1: entered promiscuous mode [ 285.119954][ T9784] vlan3: entered allmulticast mode [ 285.130619][ T9784] geneve1: entered allmulticast mode [ 285.790165][ T9851] sctp: [Deprecated]: syz.3.1033 (pid 9851) Use of int in max_burst socket option. [ 285.790165][ T9851] Use struct sctp_assoc_value instead [ 285.928369][ T9851] xt_ecn: cannot match TCP bits for non-tcp packets [ 286.542229][ T9894] delete_channel: no stack [ 286.994110][ T9928] __nla_validate_parse: 21 callbacks suppressed [ 286.994131][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 287.640960][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 287.810493][ T9980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1069'. [ 287.844897][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 287.969423][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 288.159593][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1073'. [ 288.238964][ T1105] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x25 [ 288.476893][T10018] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1080'. [ 288.506443][ T5891] IPVS: starting estimator thread 0... [ 288.529542][T10020] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 288.600079][T10021] IPVS: using max 30 ests per chain, 72000 per kthread [ 288.667071][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 288.761981][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 288.908683][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 289.717161][T10089] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 289.763842][T10089] bond4 (unregistering): Released all slaves [ 289.787437][T10094] team_slave_0: left promiscuous mode [ 289.794123][T10094] team_slave_1: left promiscuous mode [ 289.910426][T10099] validate_nla: 1 callbacks suppressed [ 289.910444][T10099] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 289.952801][T10094] team0 (unregistering): Port device team_slave_0 removed [ 289.965022][T10094] team0 (unregistering): Port device team_slave_1 removed [ 290.036850][T10099] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 290.228045][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1107'. [ 290.265994][T10115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.175035][T10180] netlink: 'syz.2.1123': attribute type 15 has an invalid length. [ 291.184180][T10178] netlink: 'syz.2.1123': attribute type 15 has an invalid length. [ 291.204911][T10180] netlink: 'syz.2.1123': attribute type 15 has an invalid length. [ 291.213732][ T38] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 3328 - 0 [ 291.214709][T10178] netlink: 'syz.2.1123': attribute type 15 has an invalid length. [ 291.253107][ T38] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 3328 - 0 [ 291.270926][ T38] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 3328 - 0 [ 291.303429][ T38] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 3328 - 0 [ 291.405249][T10189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.412989][T10189] IPv6: NLM_F_CREATE should be set when creating new route [ 291.444183][T10189] lo: entered allmulticast mode [ 291.458178][T10189] tunl0: entered allmulticast mode [ 291.475090][T10189] gre0: entered allmulticast mode [ 291.520085][T10189] gretap0: entered allmulticast mode [ 291.537394][T10189] erspan0: entered allmulticast mode [ 291.576432][T10189] ip_vti0: entered allmulticast mode [ 291.586136][T10189] ip6_vti0: entered allmulticast mode [ 291.596641][T10189] sit0: entered allmulticast mode [ 291.609334][T10189] ip6tnl0: entered allmulticast mode [ 291.653902][T10189] ip6gre0: entered allmulticast mode [ 291.665265][T10189] syz_tun: entered allmulticast mode [ 291.681509][T10189] ip6gretap0: entered allmulticast mode [ 291.710932][T10189] bond0: entered allmulticast mode [ 291.717702][T10189] bond_slave_0: entered allmulticast mode [ 291.724115][T10189] bond_slave_1: entered allmulticast mode [ 291.731272][T10189] bridge_slave_1: entered allmulticast mode [ 291.737322][T10189] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 291.756185][T10189] team0: entered allmulticast mode [ 291.763069][T10189] team_slave_0: entered allmulticast mode [ 291.769597][T10189] team_slave_1: entered allmulticast mode [ 291.775777][T10189] dummy0: entered allmulticast mode [ 291.821739][T10189] nlmon0: entered allmulticast mode [ 291.831986][T10189] caif0: entered allmulticast mode [ 291.837834][T10189] batadv0: entered allmulticast mode [ 291.873765][T10189] vxcan0: entered allmulticast mode [ 291.883910][T10189] vxcan1: entered allmulticast mode [ 291.891382][T10189] veth0: entered allmulticast mode [ 291.901372][T10189] veth1: entered allmulticast mode [ 291.912758][T10189] wg0: entered allmulticast mode [ 291.925001][T10189] wg1: entered allmulticast mode [ 291.935447][T10189] wg2: entered allmulticast mode [ 291.944125][T10189] veth0_to_bridge: entered allmulticast mode [ 291.962458][T10189] bridge_slave_0: entered allmulticast mode [ 291.970971][T10189] veth1_to_bridge: entered allmulticast mode [ 291.984438][T10189] veth0_to_bond: entered allmulticast mode [ 291.996334][T10189] veth1_to_bond: entered allmulticast mode [ 292.009918][T10189] veth0_to_team: entered allmulticast mode [ 292.048319][T10189] veth1_to_team: entered allmulticast mode [ 292.061271][T10189] veth1_to_batadv: entered allmulticast mode [ 292.070217][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.078304][T10189] batadv_slave_1: entered allmulticast mode [ 292.100357][T10189] xfrm0: entered allmulticast mode [ 292.109946][T10189] veth0_to_hsr: entered allmulticast mode [ 292.120401][T10189] hsr_slave_0: entered allmulticast mode [ 292.129856][T10189] veth1_to_hsr: entered allmulticast mode [ 292.161889][T10189] hsr_slave_1: entered allmulticast mode [ 292.191568][T10189] hsr0: entered allmulticast mode [ 292.215724][T10189] veth1_virt_wifi: entered allmulticast mode [ 292.241649][T10189] veth0_virt_wifi: entered allmulticast mode [ 292.395779][T10189] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 292.414270][T10189] veth1_macvtap: entered allmulticast mode [ 292.436317][T10189] veth0_macvtap: entered allmulticast mode [ 292.470189][T10189] macvtap0: entered allmulticast mode [ 292.490042][T10189] macsec0: entered allmulticast mode [ 292.527914][T10189] geneve0: entered allmulticast mode [ 292.563988][T10189] geneve1: entered allmulticast mode [ 292.591704][T10189] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 292.610562][T10189] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 292.624899][T10189] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 292.643306][T10189] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 292.654596][T10189] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 292.662361][T10189] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 292.679443][T10189] bond1: entered allmulticast mode [ 292.686343][T10189] veth2: entered allmulticast mode [ 292.692506][T10189] veth3: entered allmulticast mode [ 292.698256][T10189] ip6tnl1: entered allmulticast mode [ 292.704966][T10189] bond2: left promiscuous mode [ 292.713763][T10189] erspan1: entered allmulticast mode [ 292.721507][T10189] bond3: entered allmulticast mode [ 292.730540][T10189] veth4: entered allmulticast mode [ 292.737101][T10189] veth5: entered allmulticast mode [ 292.745523][T10189] bridge1: entered allmulticast mode [ 292.759355][T10189] bridge0: entered allmulticast mode [ 292.764903][T10189] ;: entered allmulticast mode [ 292.770043][T10189] gtp0: entered allmulticast mode [ 292.775322][T10189] bridge2: entered allmulticast mode [ 292.786077][T10191] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 292.794790][T10191] netlink: 'syz.0.1129': attribute type 2 has an invalid length. [ 292.807894][ T4047] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.863483][ T4047] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.875801][ T4047] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.917226][ T4047] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.034362][T10230] __nla_validate_parse: 9 callbacks suppressed [ 293.034384][T10230] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1140'. [ 293.036438][T10231] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 293.096461][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 293.128626][T10239] ip6gre1: entered promiscuous mode [ 293.134146][T10239] ip6gre1: entered allmulticast mode [ 293.546364][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 293.557144][T10265] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1151'. [ 293.630171][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 293.641971][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 293.695976][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'. [ 293.971251][T10287] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1158'. [ 294.081183][T10294] bond2: (slave lo): Device is not bonding slave [ 294.087756][T10294] bond2: option active_slave: invalid value (lo) [ 294.110915][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 294.121735][T10294] bond2 (unregistering): Released all slaves [ 294.403783][ T5976] IPVS: starting estimator thread 0... [ 294.468611][T10322] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1170'. [ 294.524328][T10318] IPVS: using max 27 ests per chain, 64800 per kthread [ 294.580996][T10320] geneve2: entered promiscuous mode [ 294.782000][T10337] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 294.813382][T10341] netlink: 'syz.1.1176': attribute type 2 has an invalid length. [ 294.981756][T10353] nbd: illegal input index 2958377 [ 295.062909][T10357] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 295.165367][T10357] bond4: entered promiscuous mode [ 295.197192][T10357] bond4: entered allmulticast mode [ 295.220998][T10357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.348010][T10374] : entered promiscuous mode [ 295.470855][T10383] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 295.502043][T10381] netlink: 'syz.1.1188': attribute type 16 has an invalid length. [ 295.522361][T10381] netlink: 'syz.1.1188': attribute type 3 has an invalid length. [ 295.562470][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.780339][T10401] netlink: 'syz.4.1192': attribute type 13 has an invalid length. [ 295.807055][T10401] lo: left allmulticast mode [ 295.812480][T10401] tunl0: left allmulticast mode [ 295.817797][T10401] gre0: left allmulticast mode [ 295.840154][T10401] gretap0: left allmulticast mode [ 295.863371][T10401] erspan0: left allmulticast mode [ 295.873636][T10401] ip_vti0: left allmulticast mode [ 295.880034][T10401] ip6_vti0: left allmulticast mode [ 295.887152][T10401] sit0: left allmulticast mode [ 295.902954][T10401] ip6tnl0: left allmulticast mode [ 295.919881][T10401] ip6gre0: left allmulticast mode [ 295.948104][T10401] syz_tun: left allmulticast mode [ 295.996626][T10401] ip6gretap0: left allmulticast mode [ 296.033657][T10401] bond0: left allmulticast mode [ 296.039610][T10401] team0: left allmulticast mode [ 296.054733][T10401] dummy0: left allmulticast mode [ 296.062273][T10401] nlmon0: left allmulticast mode [ 296.071480][T10401] caif0: left allmulticast mode [ 296.077032][T10401] batadv0: left allmulticast mode [ 296.083126][T10401] vxcan0: left allmulticast mode [ 296.093932][T10401] vxcan1: left allmulticast mode [ 296.103964][T10401] veth0: left allmulticast mode [ 296.110673][T10401] veth1: left allmulticast mode [ 296.117407][T10401] wg0: left allmulticast mode [ 296.123206][T10401] wg1: left allmulticast mode [ 296.130539][T10401] wg2: left allmulticast mode [ 296.150103][T10401] veth0_to_bridge: left allmulticast mode [ 296.162005][T10401] bridge_slave_0: left allmulticast mode [ 296.177954][T10401] veth1_to_bridge: left allmulticast mode [ 296.185152][T10401] bridge_slave_1: left allmulticast mode [ 296.192518][T10401] veth0_to_bond: left allmulticast mode [ 296.199031][T10401] bond_slave_0: left allmulticast mode [ 296.205206][T10401] veth1_to_bond: left allmulticast mode [ 296.211893][T10401] bond_slave_1: left allmulticast mode [ 296.219045][T10401] veth0_to_team: left allmulticast mode [ 296.226687][T10401] team_slave_0: left allmulticast mode [ 296.233294][T10401] veth1_to_team: left allmulticast mode [ 296.240526][T10401] team_slave_1: left allmulticast mode [ 296.246570][T10401] veth1_to_batadv: left allmulticast mode [ 296.253585][T10401] batadv_slave_1: left allmulticast mode [ 296.260075][T10401] xfrm0: left allmulticast mode [ 296.265683][T10401] veth0_to_hsr: left allmulticast mode [ 296.274755][T10401] veth1_to_hsr: left allmulticast mode [ 296.282955][T10401] hsr0: left allmulticast mode [ 296.287875][T10401] hsr_slave_0: left allmulticast mode [ 296.295552][T10401] hsr_slave_1: left allmulticast mode [ 296.301846][T10401] veth1_virt_wifi: left allmulticast mode [ 296.308917][T10401] veth0_virt_wifi: left allmulticast mode [ 296.315260][T10401] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 296.323454][T10401] veth1_macvtap: left allmulticast mode [ 296.329924][T10401] veth0_macvtap: left allmulticast mode [ 296.336191][T10401] macvtap0: left allmulticast mode [ 296.393977][T10401] macsec0: left allmulticast mode [ 296.401390][T10401] geneve0: left allmulticast mode [ 296.406918][T10401] geneve1: left allmulticast mode [ 296.412834][T10401] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 296.483415][T10401] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 296.539714][T10401] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 296.582585][T10401] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 296.597330][T10401] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 296.605188][T10401] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 296.612994][T10401] bond1: left allmulticast mode [ 296.618754][T10401] veth2: left allmulticast mode [ 296.625204][T10401] veth3: left allmulticast mode [ 296.632261][T10401] ip6tnl1: left allmulticast mode [ 296.637802][T10401] bond2: left allmulticast mode [ 296.643827][T10401] erspan1: left allmulticast mode [ 296.649189][T10401] bond3: left allmulticast mode [ 296.654486][T10401] veth4: left allmulticast mode [ 296.659891][T10401] veth5: left allmulticast mode [ 296.665143][T10401] bridge1: left allmulticast mode [ 296.670844][T10401] bridge0: left allmulticast mode [ 296.676252][T10401] ;: left allmulticast mode [ 296.681297][T10401] gtp0: left allmulticast mode [ 296.686434][T10401] bridge2: left allmulticast mode [ 296.807111][T10435] netlink: 'syz.4.1202': attribute type 30 has an invalid length. [ 296.884369][T10437] tipc: Enabled bearer , priority 13 [ 297.760211][T10495] syz_tun: entered allmulticast mode [ 298.099490][T10518] __nla_validate_parse: 10 callbacks suppressed [ 298.099514][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1222'. [ 298.131923][T10517] netlink: 'syz.1.1221': attribute type 19 has an invalid length. [ 298.149180][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 298.364824][T10529] tipc: Enabling of bearer rejected, failed to enable media [ 298.380331][T10529] s5: renamed from veth0 [ 298.680255][T10544] x_tables: duplicate underflow at hook 1 [ 298.831978][T10551] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1233'. [ 299.010357][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 299.086574][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1239'. [ 299.104772][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1239'. [ 299.209766][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1239'. [ 300.032476][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 300.351884][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1252'. [ 300.561897][T10628] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1255'. [ 300.938360][T10644] netlink: 'syz.2.1263': attribute type 29 has an invalid length. [ 300.949660][T10644] netlink: 'syz.2.1263': attribute type 29 has an invalid length. [ 300.958798][T10644] unsupported nla_type 58 [ 301.777482][T10698] netdevsim netdevsim2 : renamed from netdevsim0 [ 301.897626][T10703] syzkaller1: entered promiscuous mode [ 301.903386][T10703] syzkaller1: entered allmulticast mode [ 301.997469][T10706] syzkaller0: entered promiscuous mode [ 302.023341][T10706] syzkaller0: entered allmulticast mode [ 302.451446][T10728] syzkaller1: entered promiscuous mode [ 302.468578][T10728] syzkaller1: entered allmulticast mode [ 302.676692][T10737] veth1_macvtap: entered allmulticast mode [ 303.042451][T10754] syzkaller0: entered promiscuous mode [ 303.051734][T10754] syzkaller0: entered allmulticast mode [ 303.181153][T10767] openvswitch: netlink: IP tunnel dst address not specified [ 303.307930][T10774] __nla_validate_parse: 10 callbacks suppressed [ 303.307954][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 303.570696][T10795] ip6t_rpfilter: unknown options [ 303.794137][T10807] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 304.114729][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 304.325002][T10847] team0: Port device dummy0 removed [ 304.326237][T10850] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 304.399680][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'. [ 305.238798][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 305.632814][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'. [ 305.692540][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'. [ 306.115434][T10939] vlan0: entered promiscuous mode [ 306.144444][T10939] bridge0: entered promiscuous mode [ 306.212607][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.241066][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.262258][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.301954][T10951] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 306.341963][T10955] : entered promiscuous mode [ 306.352808][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.366359][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.390472][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.427732][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.467235][T10951] wg1 speed is unknown, defaulting to 1000 [ 306.510580][T10963] sctp: [Deprecated]: syz.0.1356 (pid 10963) Use of int in maxseg socket option. [ 306.510580][T10963] Use struct sctp_assoc_value instead [ 306.925102][T10986] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 306.967581][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 307.062662][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.075972][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 307.100964][T10998] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 307.111220][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 307.125651][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.135948][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.146897][T10998] bond2 (unregistering): Released all slaves [ 307.159596][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.172104][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.192408][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.210299][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.225617][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.233135][T11002] kthread_run failed with err -4 [ 307.240438][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.248017][T10996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 307.270539][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 307.280921][T11007] netlink: 'syz.3.1368': attribute type 1 has an invalid length. [ 307.292522][T11009] hsr_slave_0: left promiscuous mode [ 307.351594][T11009] hsr_slave_1: left promiscuous mode [ 307.591212][T11012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.601851][T11012] bond5: (slave bond6): making interface the new active one [ 307.620671][T11012] bond5: (slave bond6): Enslaving as an active interface with an up link [ 307.666449][T11029] netlink: 'syz.2.1376': attribute type 1 has an invalid length. [ 307.861302][T11039] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.881809][T11029] bond7: (slave ip6gretap1): making interface the new active one [ 307.892726][T11029] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 307.999432][T11046] xt_socket: unknown flags 0x50 [ 308.095048][T11050] netlink: 'syz.2.1381': attribute type 10 has an invalid length. [ 308.343628][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 308.667304][T11089] bond5: option lp_interval: invalid value (0) [ 308.676907][T11089] bond5: option lp_interval: allowed values 1 - 2147483647 [ 308.700769][T11089] bond5 (unregistering): Released all slaves [ 308.809627][T11091] netlink: 'syz.1.1394': attribute type 13 has an invalid length. [ 308.892616][T11103] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.909104][T11109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1399'. [ 309.047874][T11116] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 309.125139][T11116] bond5: entered promiscuous mode [ 309.132222][T11116] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.268778][T11116] bond5: (slave bridge3): making interface the new active one [ 309.290765][T11116] bridge3: entered promiscuous mode [ 309.320597][T11116] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 309.437589][T11136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'. [ 309.645519][T11153] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.1411'. [ 309.824257][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 309.992163][T11172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1416'. [ 310.002712][T11172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1416'. [ 310.015579][T11174] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1415'. [ 310.070986][T11177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.437227][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'. [ 310.470444][T11192] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1424'. [ 310.525852][T11197] bond2: option mode: invalid value (133) [ 310.589380][T11197] bond2 (unregistering): Released all slaves [ 311.154964][T11239] netlink: 'syz.4.1437': attribute type 3 has an invalid length. [ 311.175137][T11237] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 311.240986][T11236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.260372][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.418020][T11249] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 311.960048][T11287] netlink: 'syz.1.1452': attribute type 14 has an invalid length. [ 312.374875][T11313] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 312.483520][T11308] wg1 speed is unknown, defaulting to 1000 [ 312.636057][T11327] macvtap1: entered allmulticast mode [ 312.650100][T11327] veth0_macvtap: entered allmulticast mode [ 313.396807][T11370] __nla_validate_parse: 8 callbacks suppressed [ 313.396827][T11370] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1471'. [ 313.429869][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 313.480062][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1470'. [ 313.503762][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 313.533429][T11383] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 313.666774][ T1107] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 313.759776][T11390] x_tables: unsorted underflow at hook 1 [ 313.779592][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 313.839189][T11396] bond7: option all_slaves_active: invalid value (222) [ 313.858633][T11396] bond7 (unregistering): Released all slaves [ 313.911711][T11401] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1481'. [ 314.247491][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 314.292179][T11422] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 314.369468][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.392885][T11422] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.644481][T11443] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1497'. [ 314.875960][T11457] pim6reg527: entered allmulticast mode [ 314.946416][T11453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1500'. [ 315.104966][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.346291][T11480] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1509'. [ 315.389070][T11480] netlink: 'syz.0.1509': attribute type 3 has an invalid length. [ 315.420552][T11480] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 315.455214][T11480] NCSI netlink: No device for ifindex 813332851 [ 315.505983][T11491] IPVS: Unknown mcast interface: vcan0 [ 315.789830][T11492] dvmrp6: entered allmulticast mode [ 316.124713][T11512] v: renamed from dummy0 (while UP) [ 316.175401][T11507] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 316.227335][T11507] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.236767][T11507] gretap2: entered promiscuous mode [ 316.245697][T11507] gretap2: entered allmulticast mode [ 316.295745][T11521] syzkaller0: entered promiscuous mode [ 316.303007][T11521] syzkaller0: entered allmulticast mode [ 317.241940][T11543] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 318.067140][T11560] Cannot find add_set index 65532 as target [ 318.082018][T11562] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 318.151097][T11562] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.527031][T11596] gtp0: entered promiscuous mode [ 318.753897][T11607] tipc: Enabled bearer , priority 0 [ 318.791511][T11613] __nla_validate_parse: 6 callbacks suppressed [ 318.791531][T11613] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1546'. [ 318.845358][T11607] syzkaller0: entered promiscuous mode [ 318.852095][T11607] syzkaller0: entered allmulticast mode [ 318.872124][T11607] tipc: Resetting bearer [ 318.881767][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 318.955971][ T4047] tipc: Resetting bearer [ 318.976466][T11606] tipc: Resetting bearer [ 319.112098][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'. [ 319.666433][T11627] netlink: 'syz.0.1550': attribute type 8 has an invalid length. [ 319.781493][T11630] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 320.383034][T11606] tipc: Disabling bearer [ 320.473370][T11625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.494666][T11625] team0: Port device batadv0 added [ 320.572935][T11634] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 320.587532][T11634] netlink: 'syz.3.1552': attribute type 11 has an invalid length. [ 320.608530][T11634] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1552'. [ 320.903201][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1560'. [ 320.992113][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 321.091872][T11668] netlink: 'syz.3.1563': attribute type 21 has an invalid length. [ 321.111868][T11668] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1563'. [ 321.734212][T11704] openvswitch: netlink: Flow key attr not present in new flow. [ 321.875597][T11710] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 321.901265][T11710] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 321.922766][T11710] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 321.933855][T11710] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 322.244787][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 322.318519][ T5835] block nbd0: Receive control failed (result -32) [ 322.344363][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 322.408953][T11737] openvswitch: netlink: Message has 592 unknown bytes. [ 322.428646][T11737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.439021][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1586'. [ 322.522010][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.688104][T11749] validate_nla: 3 callbacks suppressed [ 322.688126][T11749] netlink: 'syz.0.1590': attribute type 39 has an invalid length. [ 322.854637][T11753] macsec2: entered promiscuous mode [ 323.399877][T11784] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 323.411748][T11784] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 323.537790][T11782] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 323.573318][T11782] bond9 (unregistering): Released all slaves [ 323.686138][T11784] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 324.029262][T11803] syzkaller1: entered promiscuous mode [ 324.065305][T11803] syzkaller1: entered allmulticast mode [ 324.084526][T11819] __nla_validate_parse: 2 callbacks suppressed [ 324.084545][T11819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1609'. [ 324.135701][T11819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1609'. [ 324.308134][T11829] syzkaller0: entered allmulticast mode [ 324.439894][T11834] syzkaller0: entered promiscuous mode [ 324.445760][T11834] syzkaller0: entered allmulticast mode [ 325.170232][T11858] netlink: 'syz.3.1617': attribute type 2 has an invalid length. [ 325.994131][T11858] : entered promiscuous mode [ 326.149493][T11865] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 326.173624][T11866] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 326.293865][T11865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 326.478607][T11893] netlink: 'syz.2.1627': attribute type 11 has an invalid length. [ 326.486710][T11893] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1627'. [ 326.526746][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 326.739224][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1633'. [ 326.894377][T11908] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.294929][T11937] syzkaller0: entered promiscuous mode [ 327.311891][T11937] syzkaller0: entered allmulticast mode [ 327.518965][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 327.849614][T11979] netlink: 'syz.4.1652': attribute type 10 has an invalid length. [ 327.858269][T11979] bond0: (slave wlan1): Opening slave failed [ 328.138844][T11994] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 328.285520][T12000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.292900][T12000] IPv6: NLM_F_CREATE should be set when creating new route [ 328.300241][T12000] IPv6: NLM_F_CREATE should be set when creating new route [ 328.372851][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 328.476788][T12010] sctp: [Deprecated]: syz.1.1660 (pid 12010) Use of int in maxseg socket option. [ 328.476788][T12010] Use struct sctp_assoc_value instead [ 328.671650][T12014] bond5: entered promiscuous mode [ 328.676881][T12014] bond5: entered allmulticast mode [ 328.683179][T12014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.685026][T12024] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3632622656/3632622657 [ 328.703100][T12024] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3632622656/3632622657 [ 328.822808][T12030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 328.916850][T12037] netlink: 'syz.2.1671': attribute type 21 has an invalid length. [ 328.953276][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 329.063039][T12040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.101255][T12040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.227510][T12040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.260083][T12049] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 329.262382][T12040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.447466][T12040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.478950][T12040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.605817][T12040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.661898][T12072] netlink: 'syz.0.1680': attribute type 39 has an invalid length. [ 329.664870][T12040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 329.874243][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1684'. [ 329.943417][ T38] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.956820][ T38] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 330.017577][T12087] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.027664][ T38] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.059263][ T38] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 330.099325][ T38] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.107830][ T38] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 330.152367][ T6434] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.176424][ T6434] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 330.348018][T12102] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1691'. [ 330.459738][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 330.670630][T12116] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1694'. [ 331.016490][T12132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1701'. [ 331.117677][T12139] netlink: 'syz.4.1704': attribute type 15 has an invalid length. [ 331.133273][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1704'. [ 331.432949][T12152] dvmrp0: entered allmulticast mode [ 331.455842][T12152] dvmrp0: left allmulticast mode [ 331.527306][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 331.734102][T12162] netlink: 'syz.0.1710': attribute type 5 has an invalid length. [ 332.686712][T12196] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1719'. [ 334.244450][T12222] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.765937][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 335.783781][T12260] geneve2: entered promiscuous mode [ 335.940229][T12263] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1735'. [ 335.957352][T12263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1735'. [ 336.476434][T12289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1744'. [ 336.629672][T12304] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1748'. [ 337.146576][T12332] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 337.171161][T12331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1760'. [ 337.181152][T12331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1760'. [ 337.235841][T12332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.373383][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 337.530803][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 337.582625][T12361] netlink: 'syz.2.1769': attribute type 4 has an invalid length. [ 337.609507][T12363] netlink: 'syz.2.1769': attribute type 4 has an invalid length. [ 337.648179][T12361] netlink: 'syz.2.1769': attribute type 4 has an invalid length. [ 337.663059][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 337.985623][T12384] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 338.013860][T12384] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 338.129192][T12393] veth0: entered promiscuous mode [ 338.373323][T12400] netlink: 'syz.3.1778': attribute type 2 has an invalid length. [ 338.619784][T12407] netlink: 'syz.4.1781': attribute type 39 has an invalid length. [ 338.663414][T12407] syz_tun (unregistering): left allmulticast mode [ 339.080612][T12441] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 339.132460][T12444] netlink: 'syz.3.1792': attribute type 23 has an invalid length. [ 339.201133][T12449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.410336][T12458] netlink: 'syz.2.1796': attribute type 23 has an invalid length. [ 340.811910][T12480] __nla_validate_parse: 10 callbacks suppressed [ 340.811933][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 341.059481][T12506] netem: unknown loss type 0 [ 341.064467][T12506] netem: change failed [ 341.102912][T12506] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 341.256217][T12516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1810'. [ 341.293829][T12518] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 341.338264][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1810'. [ 341.592932][T12537] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 341.632834][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 341.652643][T12535] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 341.764416][T12542] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1819'. [ 341.782516][T12542] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 341.828503][T12542] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1819'. [ 341.842446][T12542] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1819'. [ 341.856241][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1818'. [ 341.950557][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 342.339282][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 342.548980][T12583] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 342.575958][T12583] bond9 (unregistering): Released all slaves [ 342.985199][T12611] IPVS: persistence engine module ip_vs_pe_ not found [ 343.235841][T12631] vcan0: entered promiscuous mode [ 343.251874][T12631] vcan0: entered allmulticast mode [ 344.223910][T12687] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 344.587497][T12717] nbd: device at index 64 is going down [ 344.998543][T12740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.021282][ T8277] udevd[8277]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 345.102027][ T8277] udevd[8277]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 345.333256][T12744] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 345.478785][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.494882][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.675387][T12758] netlink: 'syz.4.1886': attribute type 29 has an invalid length. [ 345.781530][ T8792] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.791822][ T8792] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.801654][ T8792] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.811242][ T8792] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.821319][T12765] netlink: 'syz.4.1886': attribute type 29 has an invalid length. [ 345.928906][T12779] __nla_validate_parse: 13 callbacks suppressed [ 345.928925][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 345.947854][ T8792] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.978963][ T8792] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.985117][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 346.025731][T12785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 346.041917][ T8792] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.088891][ T8792] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.376897][T12802] tipc: Started in network mode [ 346.382005][T12802] tipc: Node identity 2e93dc69522c, cluster identity 4711 [ 346.406813][T12802] tipc: Enabled bearer , priority 0 [ 346.457569][T12810] syzkaller0: entered promiscuous mode [ 346.463466][T12810] syzkaller0: entered allmulticast mode [ 346.490846][T12806] netlink: 'syz.1.1899': attribute type 4 has an invalid length. [ 347.167509][T12819] tipc: Resetting bearer [ 347.194955][T12801] tipc: Resetting bearer [ 347.240742][T12821] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1904'. [ 347.268075][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 347.285134][T12801] tipc: Disabling bearer [ 347.295249][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 347.595165][T12844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1907'. [ 347.868220][T12864] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 347.876275][T12864] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1915'. [ 347.885427][T12864] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1915'. [ 347.951534][T12868] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1917'. [ 348.068182][T12882] netlink: 'syz.2.1921': attribute type 10 has an invalid length. [ 348.257480][T12887] syzkaller0: entered promiscuous mode [ 348.288611][T12887] syzkaller0: entered allmulticast mode [ 348.581382][T12899] syzkaller1: entered promiscuous mode [ 348.594828][T12899] syzkaller1: entered allmulticast mode [ 348.629802][T12899] syzkaller1: left promiscuous mode [ 348.635096][T12899] syzkaller1: left allmulticast mode [ 348.644523][T12901] ipvlan1: entered promiscuous mode [ 349.060300][T12937] syzkaller0: entered promiscuous mode [ 349.076671][T12937] syzkaller0: entered allmulticast mode [ 349.180477][T12948] netlink: 'syz.1.1942': attribute type 3 has an invalid length. [ 349.211378][T12943] syzkaller1: entered promiscuous mode [ 349.232994][T12943] syzkaller1: entered allmulticast mode [ 349.247491][T12944] tipc: Enabled bearer , priority 0 [ 349.283757][T12944] syzkaller0: entered promiscuous mode [ 349.303725][T12944] syzkaller0: entered allmulticast mode [ 349.355299][T12941] tipc: Resetting bearer [ 349.404199][T12941] tipc: Disabling bearer [ 349.464126][T12900] ipvlan1: left promiscuous mode [ 349.745475][T12968] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 349.910192][T12985] netem: change failed [ 350.163457][T13002] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 350.858072][T13046] syz.0.1970 uses old SIOCAX25GETINFO [ 351.127155][T13074] __nla_validate_parse: 6 callbacks suppressed [ 351.127178][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1976'. [ 351.287937][T13085] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 351.302229][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1979'. [ 351.322759][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 351.344179][T13085] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 351.734358][T13108] netlink: 'syz.2.1983': attribute type 14 has an invalid length. [ 351.817102][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1983'. [ 352.019477][T13108] netlink: 'syz.2.1983': attribute type 14 has an invalid length. [ 352.031659][T13127] netlink: 'syz.0.1990': attribute type 1 has an invalid length. [ 352.039399][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1983'. [ 352.058560][T13127] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1990'. [ 352.076870][T13127] netlink: 'syz.0.1990': attribute type 1 has an invalid length. [ 352.132790][T13131] syzkaller0: entered promiscuous mode [ 352.138350][T13131] syzkaller0: entered allmulticast mode [ 352.436782][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'. [ 352.579189][T13158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1998'. [ 352.612864][T13160] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 352.815686][T13141] team0 (unregistering): Port device team_slave_0 removed [ 352.827487][T13171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2000'. [ 352.839985][T13141] team0 (unregistering): Port device team_slave_1 removed [ 352.855573][T13141] team0 (unregistering): Port device batadv0 removed [ 352.902677][T13164] team0: Port device team_slave_0 removed [ 353.147589][T13165] team0 (unregistering): Port device team_slave_0 removed [ 353.157329][T13165] team0 (unregistering): Port device team_slave_1 removed [ 353.209214][T13180] gre0: entered promiscuous mode [ 353.236386][T13180] gre0: entered allmulticast mode [ 353.542240][T13195] netlink: 'syz.0.2008': attribute type 30 has an invalid length. [ 353.586251][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2009'. [ 354.909197][T13284] netlink: 'syz.3.2027': attribute type 12 has an invalid length. [ 354.943317][T13284] netlink: 'syz.3.2027': attribute type 29 has an invalid length. [ 354.966535][T13284] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 355.277086][T13293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.394447][T13293] IPVS: Scheduler module ip_vs_sip not found [ 355.667648][T13318] syzkaller1: entered promiscuous mode [ 355.717258][T13318] syzkaller1: entered allmulticast mode [ 355.943173][T13337] syz_tun: entered allmulticast mode [ 356.036046][T13350] gtp0: entered promiscuous mode [ 356.081096][T13350] gtp0: entered allmulticast mode [ 356.325291][T13359] 0: reclassify loop, rule prio 0, protocol 800 [ 356.849254][T13395] gre0: left promiscuous mode [ 356.854015][T13395] gre0: left allmulticast mode [ 357.265560][T13419] syz_tun: entered allmulticast mode [ 357.447818][T13420] __nla_validate_parse: 7 callbacks suppressed [ 357.447837][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 357.677736][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 406.780317][T13508] ip6t_REJECT: ECHOREPLY is not supported [ 406.840559][T13501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.868705][T13501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.372227][T13542] openvswitch: netlink: Flow actions attr not present in new flow. [ 407.706567][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2083'. [ 407.784267][T13560] syzkaller0: entered promiscuous mode [ 407.798492][T13560] syzkaller0: entered allmulticast mode [ 408.304810][T13581] syzkaller0: entered promiscuous mode [ 408.342443][T13581] syzkaller0: entered allmulticast mode [ 408.865972][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 408.934369][T13607] : entered promiscuous mode [ 408.998901][T13612] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 409.007060][T13612] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2095'. [ 409.037954][T13612] team0: entered promiscuous mode [ 409.045039][T13612] team_slave_1: entered promiscuous mode [ 409.051686][T13612] geneve0: entered promiscuous mode [ 409.071679][T13612] bond0: (slave team0): Releasing backup interface [ 409.122032][T13612] bridge0: port 2(team0) entered blocking state [ 409.145292][T13612] bridge0: port 2(team0) entered disabled state [ 409.172784][T13612] team0: entered allmulticast mode [ 409.185922][T13612] team_slave_1: entered allmulticast mode [ 409.201558][T13612] geneve0: entered allmulticast mode [ 409.417761][T13634] bridge0: entered allmulticast mode [ 409.465317][T13639] netlink: 'syz.4.2103': attribute type 10 has an invalid length. [ 409.490912][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2100'. [ 409.521359][T13639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2103'. [ 409.539108][T13639] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 409.686125][T13648] nbd: couldn't find a device at index 768 [ 409.702310][T13645] nbd: couldn't find a device at index 768 [ 409.720136][T13652] tipc: Enabled bearer , priority 13 [ 409.776234][T13649] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2106'. [ 409.909779][T13659] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2110'. [ 409.992293][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 410.028800][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 410.057499][T13665] netlink: 'syz.4.2113': attribute type 2 has an invalid length. [ 410.066331][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 410.086412][T13667] netlink: 'syz.2.2112': attribute type 6 has an invalid length. [ 410.519394][T13659] bond0: (slave bond_slave_0): Releasing backup interface [ 410.531083][T13659] bond0: (slave bond_slave_1): Releasing backup interface [ 410.541410][T13659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.596814][T13671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.610776][T13671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.659644][T13674] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 410.673868][T13674] bond10 (unregistering): Released all slaves [ 410.690466][T13686] IPVS: set_ctl: invalid protocol: 33 172.20.20.68:20002 [ 410.754102][T13688] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2119'. [ 410.794904][T13688] netlink: 'syz.0.2119': attribute type 2 has an invalid length. [ 410.966988][T13702] netlink: 'syz.0.2122': attribute type 28 has an invalid length. [ 411.211681][T13714] syzkaller0: entered promiscuous mode [ 411.223952][T13714] syzkaller0: entered allmulticast mode [ 411.237647][T13704] syzkaller1: entered promiscuous mode [ 411.252470][T13704] syzkaller1: entered allmulticast mode [ 413.118051][T13736] netlink: 'syz.4.2131': attribute type 19 has an invalid length. [ 413.263491][T13741] Cannot find del_set index 4 as target [ 413.356007][T13748] syzkaller0: entered promiscuous mode [ 413.361953][T13748] syzkaller0: entered allmulticast mode [ 413.524590][T13756] __nla_validate_parse: 4 callbacks suppressed [ 413.524611][T13756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2138'. [ 413.543055][T13756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2138'. [ 413.580914][T13763] netlink: 'syz.2.2139': attribute type 64 has an invalid length. [ 413.597915][T13756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2138'. [ 413.627818][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2139'. [ 414.032489][T13786] netlink: 'syz.3.2144': attribute type 10 has an invalid length. [ 414.093155][T13786] team0: left allmulticast mode [ 414.098118][T13786] team_slave_1: left allmulticast mode [ 414.117209][T13786] geneve0: left allmulticast mode [ 414.123526][T13786] team0: left promiscuous mode [ 414.132289][T13786] team_slave_1: left promiscuous mode [ 414.138214][T13786] geneve0: left promiscuous mode [ 414.145131][T13786] bridge0: port 2(team0) entered disabled state [ 414.156949][T13786] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.167492][T13786] bond0: (slave team0): Enslaving as an active interface with an up link [ 414.187015][T13792] sch_fq: defrate 0 ignored. [ 414.203423][T13789] tipc: Enabling of bearer rejected, failed to enable media [ 414.215859][T13792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2148'. [ 414.612767][T13814] pimreg3: entered allmulticast mode [ 414.646191][T13820] veth0: entered promiscuous mode [ 414.691131][T13811] veth0: left promiscuous mode [ 415.018128][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 415.048543][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2154'. [ 415.116862][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 415.178512][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 415.193773][ T8792] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.219046][ T8792] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.237827][ T8792] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.254772][ T8792] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.412654][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2158'. [ 415.616922][T13871] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 415.681083][T13871] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 415.691823][T13871] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 415.704218][T13871] bond8: (slave xfrm1): making interface the new active one [ 415.713117][T13871] bond8: (slave xfrm1): Enslaving as an active interface with an up link [ 415.731692][T13876] SET target dimension over the limit! [ 415.743279][T13874] netlink: 'syz.2.2163': attribute type 21 has an invalid length. [ 415.856230][T13874] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 416.226247][T13904] netlink: 'syz.4.2169': attribute type 32 has an invalid length. [ 416.287613][T13904] bond9: Setting coupled_control to off (0) [ 416.684744][T13922] netlink: 'syz.0.2175': attribute type 12 has an invalid length. [ 416.733741][T13925] netlink: 'syz.1.2176': attribute type 10 has an invalid length. [ 416.742004][T13925] dummy0: entered promiscuous mode [ 416.750361][T13925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 416.939734][T13929] syzkaller0: entered promiscuous mode [ 416.945678][T13929] syzkaller0: entered allmulticast mode [ 417.259299][T13941] netlink: 'syz.0.2185': attribute type 2 has an invalid length. [ 417.421570][T13943] syz.1.2184 (13943) used greatest stack depth: 17688 bytes left [ 417.460237][T13952] tipc: Enabling of bearer rejected, failed to enable media [ 417.631775][T13961] C: renamed from team_slave_0 [ 417.652160][T13961] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 417.681753][T13961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 418.113117][T13984] syzkaller0: entered promiscuous mode [ 418.140596][T13984] syzkaller0: entered allmulticast mode [ 418.552057][T14010] __nla_validate_parse: 14 callbacks suppressed [ 418.552077][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 418.708003][T14012] bond3: Unable to set up delay as MII monitoring is disabled [ 418.719668][T14012] bond3 (unregistering): Released all slaves [ 418.738137][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 418.788108][T14023] netlink: 'syz.4.2202': attribute type 5 has an invalid length. [ 418.836020][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 418.876062][T14023] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2202'. [ 418.930489][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 418.944780][T14017] bond5: left promiscuous mode [ 418.998685][T14017] bridge3: left promiscuous mode [ 419.097163][T14018] syzkaller1: entered promiscuous mode [ 419.108301][T14018] syzkaller1: entered allmulticast mode [ 419.146974][T14023] geneve2: entered promiscuous mode [ 419.179849][T14023] geneve2: entered allmulticast mode [ 419.232094][T14032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.260749][T14033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.344388][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 419.353935][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 419.364238][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 419.446359][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 419.522816][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 419.555720][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 420.049147][T14072] veth6: entered allmulticast mode [ 420.062392][T14072] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 420.083437][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2215'. [ 420.095123][T14074] netlink: 'syz.1.2216': attribute type 11 has an invalid length. [ 420.149214][T14081] sch_fq: defrate 0 ignored. [ 420.154029][T14074] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2216'. [ 420.342158][T14088] raw_sendmsg: syz.1.2220 forgot to set AF_INET. Fix it! [ 420.584813][T14103] validate_nla: 1 callbacks suppressed [ 420.584838][T14103] netlink: 'syz.0.2225': attribute type 2 has an invalid length. [ 421.124310][T14131] netlink: 'syz.1.2230': attribute type 1 has an invalid length. [ 421.158585][T14131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.206676][T14134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2232'. [ 421.269438][T14134] pimreg3: entered allmulticast mode [ 421.492814][T14141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.559342][T14143] macsec2: entered promiscuous mode [ 421.741440][T14148] bridge5: entered promiscuous mode [ 421.747379][T14148] bridge5: entered allmulticast mode [ 422.056542][T14168] netlink: 'syz.0.2242': attribute type 14 has an invalid length. [ 422.064838][T14168] netlink: 'syz.0.2242': attribute type 13 has an invalid length. [ 422.111199][T14170] IPVS: sh: FWM 3 0x00000003 - no destination available [ 422.120019][T14170] IPVS: sh: FWM 3 0x00000003 - no destination available [ 422.481101][T14181] block nbd4: not configured, cannot reconfigure [ 422.618810][T14192] veth1_to_bond: entered allmulticast mode [ 422.741091][T14192] bond0: (slave bond_slave_1): Releasing backup interface [ 422.823900][T14192] veth1_to_bond (unregistering): left allmulticast mode [ 423.004620][T14209] openvswitch: netlink: Flow key attr not present in new flow. [ 423.030956][T14209] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 423.181356][T14219] x_tables: duplicate underflow at hook 3 [ 424.507842][T14279] dummy0: left promiscuous mode [ 424.550757][T14279] veth0_macvtap: left allmulticast mode [ 424.557805][T14279] macvtap1: left allmulticast mode [ 424.572476][T14286] __nla_validate_parse: 8 callbacks suppressed [ 424.572496][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 424.601108][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2273'. [ 424.613515][T14286] netlink: 'syz.1.2271': attribute type 5 has an invalid length. [ 424.623679][T14286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2271'. [ 424.700151][T14286] geneve5: entered promiscuous mode [ 424.706239][T14286] geneve5: entered allmulticast mode [ 424.740191][ T6153] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 424.774350][ T6153] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 424.797611][ T6153] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 424.822547][ T6153] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 424.869581][T14299] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2277'. [ 424.921735][T14301] netlink: 'syz.3.2279': attribute type 23 has an invalid length. [ 424.988882][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 424.998682][T14308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2280'. [ 425.199877][T14309] syzkaller1: entered promiscuous mode [ 425.210751][T14309] syzkaller1: entered allmulticast mode [ 425.229427][T14312] netlink: 'syz.0.2282': attribute type 5 has an invalid length. [ 425.516385][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2288'. [ 425.721678][T14341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.464902][T14369] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2301'. [ 426.489872][T14369] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2301'. [ 426.511494][T14369] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2301'. [ 427.372422][T14407] can: request_module (can-proto-3) failed. [ 427.561582][T14419] veth0_to_bond: entered allmulticast mode [ 427.704245][T14429] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 427.961092][T14441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.163015][T14459] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 428.604795][T14492] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 428.673413][T14491] bond10: option lp_interval: invalid value (0) [ 428.679960][T14491] bond10: option lp_interval: allowed values 1 - 2147483647 [ 428.704162][T14491] bond10 (unregistering): Released all slaves [ 429.138142][T14533] netlink: 'syz.3.2347': attribute type 11 has an invalid length. [ 429.154199][T14533] netlink: 'syz.3.2347': attribute type 11 has an invalid length. [ 429.554609][T14552] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 429.569394][T14552] netlink: 'syz.3.2354': attribute type 33 has an invalid length. [ 429.620980][T14555] __nla_validate_parse: 93 callbacks suppressed [ 429.621005][T14555] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2355'. [ 429.667611][T14555] x_tables: duplicate underflow at hook 4 [ 429.716187][T14557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2356'. [ 429.879100][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 429.899171][T14563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2358'. [ 429.911330][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 429.956110][ T1107] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.956430][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 429.965123][ T1107] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.965168][ T1107] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.965207][ T1107] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.104813][T14575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2362'. [ 430.319437][T14582] vlan1 (unregistering): left allmulticast mode [ 430.333424][T14582] veth0_vlan: left allmulticast mode [ 430.364626][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2366'. [ 430.553805][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 430.779130][T14607] netlink: 'syz.3.2372': attribute type 15 has an invalid length. [ 431.782966][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 431.806040][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 431.858232][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 431.900193][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 431.931273][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 431.960738][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 431.984241][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 432.003619][T14641] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2382'. [ 432.018917][T14637] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 432.812056][T14676] xt_TCPMSS: Only works on TCP SYN packets [ 432.996302][T14682] tipc: Enabled bearer , priority 0 [ 433.023148][T14682] syzkaller0: entered promiscuous mode [ 433.041440][T14682] syzkaller0: entered allmulticast mode [ 433.064831][T14682] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 433.129441][T14683] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 433.189745][T14685] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 433.250332][T14683] tipc: Resetting bearer [ 433.319704][T14683] tipc: Disabling bearer [ 433.551196][T14702] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 434.285960][ T1107] tipc: Subscription rejected, illegal request [ 434.317081][T14761] 9: entered promiscuous mode [ 434.595310][T14774] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.822332][T14779] __nla_validate_parse: 8 callbacks suppressed [ 434.822351][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 434.837975][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2422'. [ 434.907636][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2426'. [ 435.309874][T14799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2430'. [ 435.563679][T14816] bridge0: left allmulticast mode [ 436.410348][T14828] validate_nla: 61 callbacks suppressed [ 436.410368][T14828] netlink: 'syz.4.2437': attribute type 59 has an invalid length. [ 436.424472][T14828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2437'. [ 436.811936][T14850] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.822724][T14850] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.834306][T14850] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 436.978795][T14850] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.026359][T14850] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.038252][T14850] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 437.125006][T14850] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.135519][T14850] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.147114][T14850] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 437.219723][T14850] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.235798][T14850] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.246541][T14850] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 437.346831][ T6153] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.358661][ T6153] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.367165][ T6153] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 437.389834][ T6153] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.398475][ T6153] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.406799][ T6153] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 437.437664][ T6153] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.456339][ T6153] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.465066][ T6153] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 437.492447][ T6153] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.508725][ T6153] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.517040][ T6153] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 438.111191][T14890] vcan0: entered promiscuous mode [ 438.116305][T14890] vcan0: entered allmulticast mode [ 438.170349][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2456'. [ 438.585576][T14915] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 438.639589][T14913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2461'. [ 438.652100][T14920] netlink: 'syz.0.2463': attribute type 11 has an invalid length. [ 438.748035][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 438.760324][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 438.850882][T14929] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 438.901540][T14930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2464'. [ 439.106356][T14937] macsec2: entered promiscuous mode [ 439.183093][T14932] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 439.221308][T14938] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 439.428264][T14953] nbd: illegal input index -8454144 [ 439.503274][T14961] netlink: 'syz.4.2470': attribute type 10 has an invalid length. [ 439.864951][T14979] erspan0: entered allmulticast mode [ 440.004963][T14984] 8021q: adding VLAN 0 to HW filter on device bond9 [ 440.137807][T14990] bond10: Removing last ns target with arp_interval on [ 440.530764][T15011] syzkaller1: entered promiscuous mode [ 440.538749][T15011] syzkaller1: entered allmulticast mode [ 440.641571][T15001] syzkaller1: left promiscuous mode [ 440.662942][T15001] syzkaller1: left allmulticast mode [ 440.992187][T15023] netlink: 'syz.4.2481': attribute type 3 has an invalid length. [ 441.670739][ T30] audit: type=1800 audit(1767117952.469:2): pid=15036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2485" name="memory.events" dev="tmpfs" ino=2471 res=0 errno=0 [ 441.877992][T15058] __nla_validate_parse: 3 callbacks suppressed [ 441.878032][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 441.979455][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'. [ 441.999524][T15059] veth9: entered allmulticast mode [ 442.183419][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 442.200299][T15070] netlink: 'syz.0.2496': attribute type 39 has an invalid length. [ 442.201894][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2495'. [ 442.363058][T15078] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2500'. [ 442.648782][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2501'. [ 443.383376][T15107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2504'. [ 443.416692][T15107] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2504'. [ 443.438506][T15107] netlink: 'syz.4.2504': attribute type 5 has an invalid length. [ 443.446315][T15107] netlink: 'syz.4.2504': attribute type 6 has an invalid length. [ 443.485154][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 443.502039][T15107] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2504'. [ 443.723656][T15118] macvtap0: entered promiscuous mode [ 443.735213][T15118] vlan0: entered promiscuous mode [ 443.770128][T15118] macvtap0: entered allmulticast mode [ 443.787808][T15118] vlan0: entered allmulticast mode [ 443.797925][T15118] veth0_vlan: entered allmulticast mode [ 443.843665][T15124] sit0: entered promiscuous mode [ 443.893558][T15124] netlink: 'syz.3.2508': attribute type 1 has an invalid length. [ 444.171024][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.181664][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.190954][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.201590][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.210414][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.242040][T15149] nbd: must specify a device to reconfigure [ 444.352009][T15144] wg1 speed is unknown, defaulting to 1000 [ 444.469779][T15162] netlink: 'syz.4.2519': attribute type 3 has an invalid length. [ 445.037575][T15144] chnl_net:caif_netlink_parms(): no params data found [ 445.411771][T15201] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2529:15201 [ 445.471054][T15144] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.493824][T15144] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.530882][T15144] bridge_slave_0: entered allmulticast mode [ 445.566750][T15144] bridge_slave_0: entered promiscuous mode [ 445.608224][T15144] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.650577][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.657915][T15144] bridge_slave_1: entered allmulticast mode [ 445.727393][T15144] bridge_slave_1: entered promiscuous mode [ 445.802729][T15226] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 445.907891][T14514] syz_tun (unregistering): left allmulticast mode [ 446.079285][T15226] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.123349][T15226] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.181197][T15235] netlink: 'syz.3.2533': attribute type 4 has an invalid length. [ 446.204679][T15235] netlink: 'syz.3.2533': attribute type 1 has an invalid length. [ 446.252786][T15226] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.273959][ T5148] Bluetooth: hci5: command tx timeout [ 446.292294][T15144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.318198][T15232] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 446.333500][T15226] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.357078][T15226] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.371586][T15144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.395149][T15226] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.459960][T15226] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 446.532864][T15144] team0: Port device team_slave_0 added [ 446.553623][T15144] team0: Port device team_slave_1 added [ 446.698950][T15144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.712361][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.763492][T15144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.954381][T15144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.963661][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.001740][T15144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.103851][T15261] __nla_validate_parse: 10 callbacks suppressed [ 447.103872][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2540'. [ 447.120213][T15261] netlink: 'syz.2.2540': attribute type 7 has an invalid length. [ 447.128011][T15261] netlink: 'syz.2.2540': attribute type 8 has an invalid length. [ 447.165407][T15144] hsr_slave_0: entered promiscuous mode [ 447.190440][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 447.203637][T15144] hsr_slave_1: entered promiscuous mode [ 447.211257][T15266] netlink: 'syz.0.2541': attribute type 4 has an invalid length. [ 447.213743][T15144] debugfs: 'hsr0' already exists in 'hsr' [ 447.225687][T15144] Cannot create hsr debugfs directory [ 447.249957][T15266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2541'. [ 447.321662][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 447.532384][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 447.680600][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 447.813486][T15299] IPVS: set_ctl: invalid protocol: 33 172.30.1.4:20003 [ 447.987119][T15144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 448.022949][T15144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 448.074422][T15144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.156093][T15317] macsec2: entered promiscuous mode [ 448.215900][T15144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 448.242351][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2557'. [ 448.317230][T15323] 8021q: adding VLAN 0 to HW filter on device bond11 [ 448.349205][ T5148] Bluetooth: hci5: command tx timeout [ 448.379831][T15339] 8021q: adding VLAN 0 to HW filter on device bond11 [ 448.404330][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 448.414027][T15339] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 448.427141][T15339] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 448.652315][T15144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.676138][T15144] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.699321][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.706522][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.735933][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.743181][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.062535][T15373] netlink: 'syz.4.2569': attribute type 21 has an invalid length. [ 449.072390][T15371] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 449.073240][T15373] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 449.114688][T15381] netlink: 'syz.4.2569': attribute type 21 has an invalid length. [ 449.123999][T15381] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 449.393363][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 449.424789][T15400] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 449.454189][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 449.475401][T15403] xt_hashlimit: overflow, rate too high: 0 [ 449.517506][T15144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.431806][ T5148] Bluetooth: hci5: command tx timeout [ 452.508836][ T5148] Bluetooth: hci5: command tx timeout [ 454.391824][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 456.303394][T15144] veth0_vlan: entered promiscuous mode [ 456.317223][T15144] veth1_vlan: entered promiscuous mode [ 456.355816][T15144] veth0_macvtap: entered promiscuous mode [ 456.365456][T15144] veth1_macvtap: entered promiscuous mode [ 456.385559][T15144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.401613][T15144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.416735][ T8777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.426085][ T8777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.436973][ T8777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.451736][ T8777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.543870][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.568422][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.613854][ T8777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.622891][ T8777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.713043][T15423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2511'. [ 456.730086][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2511'. [ 502.274315][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2584'. [ 502.320457][T15433] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2581'. [ 502.651258][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'. [ 503.175895][T15485] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2595'. [ 503.440966][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2599'. [ 503.481275][T15504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.491055][T15499] bond1: entered allmulticast mode [ 503.497142][T15499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.620938][T15514] xfrm0: entered promiscuous mode [ 503.638867][T15514] xfrm0: entered allmulticast mode [ 503.650187][T15516] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2602'. [ 503.709017][T15518] netlink: 'syz.5.2603': attribute type 1 has an invalid length. [ 503.717077][T15516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2602'. [ 503.750803][T15516] openvswitch: netlink: Flow key attr not present in new flow. [ 503.821874][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'. [ 503.843030][T15523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 503.953185][T15531] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 504.192727][T15545] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.2611'. [ 504.242159][T15547] nbd: socks must be embedded in a SOCK_ITEM attr [ 504.487470][T15560] SET target dimension over the limit! [ 504.822077][T15588] netlink: 'syz.4.2621': attribute type 11 has an invalid length. [ 504.879373][T15579] bond11: (slave lo): Device is not bonding slave [ 504.889550][T15579] bond11: option active_slave: invalid value (lo) [ 504.911134][T15579] bond11 (unregistering): Released all slaves [ 504.965304][T15592] netlink: 'syz.2.2625': attribute type 29 has an invalid length. [ 505.062582][T15602] netlink: 'syz.3.2626': attribute type 4 has an invalid length. [ 505.835789][T15637] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 507.192430][T15496] udevd[15496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 507.226136][T15458] udevd[15458]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 507.242997][T15710] netlink: 'syz.4.2654': attribute type 7 has an invalid length. [ 507.268051][T15709] netlink: 'syz.4.2654': attribute type 7 has an invalid length. [ 507.289289][T15710] netlink: 'syz.4.2654': attribute type 8 has an invalid length. [ 507.299604][T15709] netlink: 'syz.4.2654': attribute type 8 has an invalid length. [ 507.307387][T15709] __nla_validate_parse: 45 callbacks suppressed [ 507.307406][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 507.352104][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 507.647270][T15727] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20004 [ 507.664742][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2660'. [ 507.803056][T15744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2664'. [ 507.869428][T15749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2664'. [ 508.131225][T15768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2669'. [ 508.150147][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2666'. [ 508.284734][T15773] smc: net device gre0 applied user defined pnetid SYZ1 [ 508.302988][T15773] smc: net device gre0 erased user defined pnetid SYZ1 [ 508.827213][T15805] delete_channel: no stack [ 508.837268][T15805] delete_channel: no stack [ 508.915657][T15812] netlink: 'syz.5.2680': attribute type 29 has an invalid length. [ 508.996675][T15817] netlink: 'syz.5.2680': attribute type 29 has an invalid length. [ 509.669920][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2689'. [ 509.735817][T15862] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2691'. [ 513.076192][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2695'. [ 513.120379][T15878] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2696'. [ 513.131282][T15878] netlink: Conntrack attr has 4 unknown bytes [ 513.138080][T15878] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2696'. [ 513.179149][T15878] netlink: Conntrack attr has 4 unknown bytes [ 513.185998][T15878] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2696'. [ 513.196273][T15878] netlink: Conntrack attr has 4 unknown bytes [ 513.298077][T15892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.308668][T15887] openvswitch: netlink: Flow key attr not present in new flow. [ 513.575260][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2706'. [ 513.676169][T15912] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2709'. [ 513.744735][T15908] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 514.021010][T15925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.054602][T15925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.085166][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2713'. [ 514.171402][T15933] bond0: (slave bridge_slave_1): Releasing backup interface [ 514.181069][T15933] bridge_slave_1 (unregistering): left promiscuous mode [ 514.189921][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 514.375050][T15950] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 514.395860][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2718'. [ 514.407905][T15950] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 514.435636][T15953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2719'. [ 514.480005][T15959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.616148][T15971] syzkaller1: entered promiscuous mode [ 514.622029][T15971] syzkaller1: entered allmulticast mode [ 514.678398][T15976] netlink: 'syz.2.2726': attribute type 10 has an invalid length. [ 514.692913][T15976] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 514.703299][T15976] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 514.880356][T15986] bond12: Unable to set down delay as MII monitoring is disabled [ 514.899715][T15986] bond12 (unregistering): Released all slaves [ 515.035815][T15994] syzkaller0: entered promiscuous mode [ 515.044312][T15994] syzkaller0: entered allmulticast mode [ 515.074737][T15994] delete_channel: no stack [ 515.476305][T16021] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 515.504586][T16021] netlink: 'syz.4.2740': attribute type 2 has an invalid length. [ 515.526182][T16021] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 515.562953][T16024] : renamed from hsr0 [ 516.108906][T16053] netlink: 'syz.2.2749': attribute type 2 has an invalid length. [ 516.134587][T16054] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 516.231735][T16064] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 516.256789][T16064] netlink: 'syz.3.2751': attribute type 2 has an invalid length. [ 516.266116][T16064] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 516.274197][T16064] netlink: 'syz.3.2751': attribute type 3 has an invalid length. [ 516.370561][T16067] veth0_to_team: entered promiscuous mode [ 516.445753][T16073] ipvlan0: entered allmulticast mode [ 516.975907][T16113] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 517.013881][T16114] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 517.752128][T16156] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 517.787980][T16156] Unsupported ieee802154 address type: 0 [ 519.407273][T16161] team0: Port device geneve0 added [ 519.649517][T16183] __nla_validate_parse: 13 callbacks suppressed [ 519.649540][T16183] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2784'. [ 519.674465][T16184] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2785'. [ 520.196980][T16227] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 520.490435][T16235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2799'. [ 520.874655][T16253] validate_nla: 14 callbacks suppressed [ 520.874677][T16253] netlink: 'syz.5.2802': attribute type 1 has an invalid length. [ 520.971679][T16260] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2803'. [ 521.041277][T16253] bond3: entered promiscuous mode [ 521.046961][T16253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.108248][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2803'. [ 521.213964][T16253] bond3: (slave bridge1): making interface the new active one [ 521.237296][T16274] Cannot find set identified by id 1 to match [ 521.248591][T16253] bridge1: entered promiscuous mode [ 521.263049][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 521.280442][T16253] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 521.281236][T16275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2807'. [ 521.750433][T16296] sctp: [Deprecated]: syz.4.2811 (pid 16296) Use of int in maxseg socket option. [ 521.750433][T16296] Use struct sctp_assoc_value instead [ 521.821597][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 522.083508][T16305] netlink: 'syz.2.2816': attribute type 1 has an invalid length. [ 522.144366][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.154078][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.163424][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.171871][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.181385][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.389490][T16305] 8021q: adding VLAN 0 to HW filter on device bond12 [ 522.489571][T16312] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3504984609/3504984611 [ 522.514662][T16311] bond12: (slave veth3): Enslaving as an active interface with a down link [ 522.572118][T16317] bridge7: entered promiscuous mode [ 522.585787][T16317] bridge7: entered allmulticast mode [ 522.692505][T16307] wg1 speed is unknown, defaulting to 1000 [ 523.367547][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2827'. [ 523.392280][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 523.421804][T16307] chnl_net:caif_netlink_parms(): no params data found [ 523.811177][T16307] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.819642][T16307] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.827798][T16307] bridge_slave_0: entered allmulticast mode [ 523.837176][T16307] bridge_slave_0: entered promiscuous mode [ 523.846408][T16307] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.855258][T16307] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.863026][T16307] bridge_slave_1: entered allmulticast mode [ 523.881041][T16307] bridge_slave_1: entered promiscuous mode [ 524.003979][T16307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.024085][T16307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.133451][T16307] team0: Port device team_slave_0 added [ 524.156789][T16307] team0: Port device team_slave_1 added [ 524.247482][T16307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.262508][T16307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.269940][ T5148] Bluetooth: hci0: command tx timeout [ 524.300093][T16307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.316807][T16307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.327624][T16307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.354718][T16307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.471398][T16307] hsr_slave_0: entered promiscuous mode [ 524.478805][T16307] hsr_slave_1: entered promiscuous mode [ 524.485522][T16307] debugfs: 'hsr0' already exists in 'hsr' [ 524.492023][T16307] Cannot create hsr debugfs directory [ 524.559698][T16422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.586544][T16417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.912692][T16447] __nla_validate_parse: 1 callbacks suppressed [ 524.912713][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 524.979611][T16307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.991847][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 525.004818][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 525.017070][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2845'. [ 525.054474][T16452] netem: incorrect ge model size [ 525.060457][T16452] netem: change failed [ 525.072429][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 525.118161][T16452] veth5: entered allmulticast mode [ 525.131032][T16454] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2848'. [ 525.140750][T16454] openvswitch: netlink: Message has 6 unknown bytes. [ 525.169884][T16307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.298200][T16462] netlink: 'syz.4.2851': attribute type 22 has an invalid length. [ 525.304066][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2850'. [ 525.320772][T16307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.491189][T16307] batman_adv: batadv0: Removing interface: netdevsim0 [ 525.545810][T16307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.639217][T16460] syzkaller0: entered promiscuous mode [ 525.644759][T16460] syzkaller0: entered allmulticast mode [ 525.824341][T16486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.353563][ T5148] Bluetooth: hci0: command tx timeout [ 527.643902][T16307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 527.673316][T16307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 527.706799][T16307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.720721][T16515] xt_socket: unknown flags 0xe4 [ 527.748082][T16307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.996965][T16307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.006790][T16545] netlink: 'syz.4.2869': attribute type 21 has an invalid length. [ 528.043927][T16307] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.071950][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.079245][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.092059][T16547] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2870'. [ 528.150720][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.157986][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.431876][ T5148] Bluetooth: hci0: command tx timeout [ 528.565717][T16567] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 528.589334][T16567] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 528.647115][T16564] erspan0: left allmulticast mode [ 528.860818][T16564] veth0_to_bond: left allmulticast mode [ 528.871107][T16564] geneve2: left promiscuous mode [ 528.876399][T16564] geneve2: left allmulticast mode [ 528.887348][T16564] bridge5: left promiscuous mode [ 528.894511][T16564] bridge5: left allmulticast mode [ 528.923243][T16564] bridge7: left promiscuous mode [ 528.937577][T16564] bridge7: left allmulticast mode [ 529.042229][ T8801] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 529.072663][ T8801] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 529.101344][ T8801] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 529.128933][T16586] netlink: 'syz.3.2877': attribute type 1 has an invalid length. [ 529.141407][T16588] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2878'. [ 529.179499][T16586] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2877'. [ 529.202818][ T8801] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 529.256926][T16307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.398097][T16307] veth0_vlan: entered promiscuous mode [ 529.431529][T16307] veth1_vlan: entered promiscuous mode [ 529.500782][T16307] veth0_macvtap: entered promiscuous mode [ 529.523313][T16307] veth1_macvtap: entered promiscuous mode [ 529.556962][T16307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.578217][T16307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.640204][T16606] bond0 (unregistering): left promiscuous mode [ 529.646429][T16606] bond_slave_0: left promiscuous mode [ 529.660060][T16606] bond_slave_1: left promiscuous mode [ 529.666658][T16606] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 529.680915][T16606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.694173][T16606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.708229][T16606] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 529.727188][T16606] bond0 (unregistering): Released all slaves [ 529.761881][ T1084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.803348][ T4047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.851629][ T4047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.894706][ T4047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.970097][T16616] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 529.983725][T16616] bond12 (unregistering): Released all slaves [ 530.195262][ T8777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.223217][ T8777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.335991][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.350395][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.508960][ T5148] Bluetooth: hci0: command tx timeout [ 530.530469][T16650] __nla_validate_parse: 2 callbacks suppressed [ 530.530490][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2895'. [ 531.088046][T16313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.101182][T16313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.110179][T16313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.128582][T16313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.136455][T16313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.367931][T16663] wg1 speed is unknown, defaulting to 1000 [ 531.585460][ T5840] syz_tun (unregistering): left allmulticast mode [ 531.599837][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 531.614218][T16684] openvswitch: netlink: Missing key (keys=40, expected=80) [ 531.726139][T16694] vlan0: entered promiscuous mode [ 531.754356][T16694] geneve1: entered promiscuous mode [ 531.774851][T16694] vlan0: entered allmulticast mode [ 531.796954][T16694] geneve1: entered allmulticast mode [ 532.096759][T16663] chnl_net:caif_netlink_parms(): no params data found [ 532.260359][T16713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2914'. [ 532.514015][T16663] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.528771][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.547999][T16663] bridge_slave_0: entered allmulticast mode [ 532.570418][T16663] bridge_slave_0: entered promiscuous mode [ 532.589365][T16309] Bluetooth: hci0: command tx timeout [ 532.604278][T16663] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.612424][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.620279][T16663] bridge_slave_1: entered allmulticast mode [ 532.628787][T16663] bridge_slave_1: entered promiscuous mode [ 532.656958][T16730] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2918'. [ 532.703959][T16730] unsupported nlmsg_type 40 [ 532.752476][T16663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.784714][T16663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.903659][T16663] team0: Port device team_slave_0 added [ 532.956136][T16663] team0: Port device team_slave_1 added [ 533.105287][T16743] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2921'. [ 533.117353][T16663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.126424][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.155348][T16663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.183899][T16663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.198884][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.229852][T16309] Bluetooth: hci1: command tx timeout [ 533.248751][T16663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.348575][T16663] hsr_slave_0: entered promiscuous mode [ 533.358047][T16663] hsr_slave_1: entered promiscuous mode [ 533.366331][T16663] debugfs: 'hsr0' already exists in 'hsr' [ 533.372344][T16663] Cannot create hsr debugfs directory [ 533.634540][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2930'. [ 533.756899][T16777] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 533.819545][T16779] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2933'. [ 533.855303][T16663] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.876932][T16663] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.900534][T16663] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 534.025200][T16663] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.064481][T16663] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.106480][T16663] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 534.238021][T16797] pimreg0: option packets_per_slave: invalid value (18446744073709551615) [ 534.247094][T16797] pimreg0: option packets_per_slave: allowed values 0 - 65535 [ 534.259696][T16797] pimreg0 (unregistering): Released all slaves [ 534.355747][T16663] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.380107][T16663] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.417605][T16663] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 534.562259][T16663] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.580951][T16663] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.596096][T16663] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 534.616999][T16817] veth1_to_bond: entered allmulticast mode [ 534.632546][T16816] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 534.737076][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 534.942298][T16825] veth1_to_bond (unregistering): left allmulticast mode [ 535.015037][T16663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.097541][T16663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.129386][T16663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.157804][T16838] ip6gre1: entered allmulticast mode [ 535.169868][T16663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.313270][T16309] Bluetooth: hci1: command tx timeout [ 535.366492][T16860] macvlan0: entered promiscuous mode [ 535.538223][T16872] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2956'. [ 535.611650][T16663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.655181][T16663] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.689573][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.696825][ T8801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.747335][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.754616][ T8801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.785556][T16881] netlink: 'syz.2.2959': attribute type 3 has an invalid length. [ 535.861817][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2957'. [ 535.913317][T16887] xt_policy: output policy not valid in PREROUTING and INPUT [ 536.141528][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2962'. [ 536.819857][T16663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.952950][T16663] veth0_vlan: entered promiscuous mode [ 536.986774][T16663] veth1_vlan: entered promiscuous mode [ 537.044878][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2976'. [ 537.074720][T16663] veth0_macvtap: entered promiscuous mode [ 537.093109][T16663] veth1_macvtap: entered promiscuous mode [ 537.119839][T16663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.136462][T16663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.174277][ T1084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.214753][ T1084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.231284][ T1084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.244424][ T1084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.261429][T16953] ipt_REJECT: TCP_RESET invalid for non-tcp [ 537.389334][T16309] Bluetooth: hci1: command tx timeout [ 537.415932][T16960] netlink: 'syz.5.2980': attribute type 1 has an invalid length. [ 537.509477][T16960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.543661][T16954] udevd[16954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 537.580226][T16954] udevd[16954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 537.602647][T16965] netem: change failed [ 537.639459][ T4047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.667021][ T4047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.747404][ T8801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.765952][ T8801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.879926][T16981] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2986'. [ 538.013972][T16986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2896'. [ 538.457204][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 538.467757][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 538.477818][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.491115][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.499575][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.553818][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 538.624508][T17004] wg1 speed is unknown, defaulting to 1000 [ 539.402249][T17004] chnl_net:caif_netlink_parms(): no params data found [ 539.425495][T17045] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3006'. [ 539.473427][ T5148] Bluetooth: hci1: command tx timeout [ 539.594680][T17058] IPv6: Can't replace route, no match found [ 539.604940][T17058] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3009'. [ 539.790148][ T8801] bond0: (slave netdevsim0): Releasing backup interface [ 539.824948][T17067] openvswitch: netlink: Multiple metadata blocks provided [ 540.036753][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3014'. [ 540.052940][T17081] netlink: 'syz.2.3015': attribute type 17 has an invalid length. [ 540.064946][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 540.120852][T17082] sch_fq: defrate 0 ignored. [ 540.143159][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.150859][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.158246][T17004] bridge_slave_0: entered allmulticast mode [ 540.167435][T17004] bridge_slave_0: entered promiscuous mode [ 540.189788][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.200699][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.209369][T17004] bridge_slave_1: entered allmulticast mode [ 540.217842][T17004] bridge_slave_1: entered promiscuous mode [ 540.375634][T17004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.595465][ T5148] Bluetooth: hci4: command tx timeout [ 540.607172][T17100] netlink: 'syz.3.3018': attribute type 33 has an invalid length. [ 540.630407][ T8801] bond8 (unregistering): (slave xfrm1): Releasing backup interface [ 540.872932][T17108] __nla_validate_parse: 5 callbacks suppressed [ 540.872952][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3022'. [ 540.993523][ T8801] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 541.324626][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 541.357570][ T8801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.368107][ T8801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.381297][ T8801] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 541.395056][ T8801] bond0 (unregistering): Released all slaves [ 541.522547][ T8801] bond1 (unregistering): Released all slaves [ 541.635079][ T8801] bond2 (unregistering): Released all slaves [ 541.754727][ T8801] bond3 (unregistering): (slave veth5): Releasing active interface [ 541.764266][ T8801] bond3 (unregistering): Released all slaves [ 541.780111][ T8801] bond4 (unregistering): Released all slaves [ 541.898924][ T8801] bond5 (unregistering): Released all slaves [ 542.012154][ T8801] bond6 (unregistering): Released all slaves [ 542.027434][ T8801] bond7 (unregistering): Released all slaves [ 542.047766][ T8801] bond8 (unregistering): Released all slaves [ 542.064809][ T8801] bond9 (unregistering): Released all slaves [ 542.086161][ T8801] bond10 (unregistering): Released all slaves [ 542.111272][ T8801] bond11 (unregistering): Released all slaves [ 542.143584][T17004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.321207][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 542.332022][T17116] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 542.439534][ T8801] 9: left promiscuous mode [ 542.544733][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3027'. [ 542.581977][T17004] team0: Port device team_slave_0 added [ 542.624157][T17124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.634737][T17004] team0: Port device team_slave_1 added [ 542.686123][ T5148] Bluetooth: hci4: command tx timeout [ 542.695562][ T8801] tipc: Disabling bearer [ 542.705548][ T8801] tipc: Disabling bearer [ 542.738387][ T8801] tipc: Left network mode [ 542.917433][T17004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.926847][T17148] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 542.945783][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.973899][T17148] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 542.984139][T17148] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.3031'. [ 543.000753][T17004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.041020][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3032'. [ 543.156156][T17152] netlink: 'syz.5.3032': attribute type 4 has an invalid length. [ 543.182494][T17004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.199518][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.297740][T17004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.840151][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3037'. [ 544.124900][T17004] hsr_slave_0: entered promiscuous mode [ 544.141902][T17196] IPVS: set_ctl: invalid protocol: 11 0.0.0.0:20003 [ 544.146493][T17004] hsr_slave_1: entered promiscuous mode [ 544.170814][T17004] debugfs: 'hsr0' already exists in 'hsr' [ 544.176612][T17004] Cannot create hsr debugfs directory [ 544.217728][T17198] netlink: 'syz.5.3041': attribute type 1 has an invalid length. [ 544.386041][ T8801] hsr_slave_0: left promiscuous mode [ 544.393299][ T8801] hsr_slave_1: left promiscuous mode [ 544.399803][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.505723][ T8801] pim6reg (unregistering): left allmulticast mode [ 544.750709][ T5148] Bluetooth: hci4: command tx timeout [ 545.184944][T17204] bond6: (slave gretap1): making interface the new active one [ 545.194029][T17204] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 545.363083][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 545.434962][T17216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.446798][T17216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 3328 - 0 [ 545.457610][T10197] IPVS: starting estimator thread 0... [ 545.457638][T17216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.531739][T17223] rdma_op ffff88803a6a89f0 conn xmit_rdma 0000000000000000 [ 545.569021][T17224] IPVS: using max 28 ests per chain, 67200 per kthread [ 545.641619][T17216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.652560][T17216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 3328 - 0 [ 545.663960][T17216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.760396][T17234] syzkaller1: entered promiscuous mode [ 545.770458][T17234] syzkaller1: entered allmulticast mode [ 545.890297][T17216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.900812][T17216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 3328 - 0 [ 545.912646][T17216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.047270][T17216] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.069302][T17216] netdevsim netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 3328 - 0 [ 546.095003][T17216] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.153797][ T8801] IPVS: stop unused estimator thread 0... [ 546.314861][ T8801] ------------[ cut here ]------------ [ 546.320660][ T8801] WARNING: fs/proc/proc_sysctl.c:1558 at retire_sysctl_set+0x48/0x60, CPU#1: kworker/u8:23/8801 [ 546.331400][ T8801] Modules linked in: [ 546.335709][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 546.345587][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.356033][ T8801] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 546.361145][ T8801] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 546.366782][ T8801] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 40 d7 c4 ff 48 83 3b 00 75 0c e8 f5 7a 5e ff 5b e9 3f 74 fb 08 cc e8 e9 7a 5e ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 546.386856][ T8801] RSP: 0018:ffffc90019e5f890 EFLAGS: 00010293 [ 546.393393][ T8801] RAX: ffffffff82633767 RBX: ffff888077a68388 RCX: ffff88802a3c5b80 [ 546.403183][ T8801] RDX: 0000000000000000 RSI: ffffffff8d979363 RDI: ffff888077a68328 [ 546.411653][ T8801] RBP: ffffc90019e5f970 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 546.420035][ T8801] R10: dffffc0000000000 R11: ffffffff8b182e80 R12: ffffffff8f6219c0 [ 546.428059][ T8801] R13: 1ffff920033cbf38 R14: ffffffff8f6219a0 R15: ffff888077a680a8 [ 546.436275][ T8801] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 546.445441][ T8801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.452145][ T8801] CR2: 000000110c2ec5f8 CR3: 00000000573b6000 CR4: 00000000003526f0 [ 546.460429][ T8801] Call Trace: [ 546.463758][ T8801] [ 546.466736][ T8801] ops_undo_list+0x49a/0x990 [ 546.467027][T17255] netlink: 'syz.0.3058': attribute type 4 has an invalid length. [ 546.472217][ T8801] ? __pfx_ops_undo_list+0x10/0x10 [ 546.484382][ T8801] ? do_raw_spin_unlock+0x122/0x240 [ 546.489818][ T8801] cleanup_net+0x4d8/0x7a0 [ 546.494295][ T8801] ? __pfx_cleanup_net+0x10/0x10 [ 546.499418][ T8801] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.504688][ T8801] ? process_scheduled_works+0x9ef/0x1770 [ 546.510697][ T8801] ? process_scheduled_works+0x9ef/0x1770 [ 546.516477][ T8801] process_scheduled_works+0xad1/0x1770 [ 546.522478][ T8801] ? __pfx_process_scheduled_works+0x10/0x10 [ 546.528595][ T8801] worker_thread+0x8a0/0xda0 [ 546.533259][ T8801] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 546.539726][ T8801] ? __kthread_parkme+0x7b/0x200 [ 546.544734][ T8801] kthread+0x711/0x8a0 [ 546.549012][ T8801] ? __pfx_worker_thread+0x10/0x10 [ 546.554266][ T8801] ? __pfx_kthread+0x10/0x10 [ 546.558993][ T8801] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.564487][ T8801] ? lockdep_hardirqs_on+0x98/0x140 [ 546.570113][ T8801] ? __pfx_kthread+0x10/0x10 [ 546.574769][ T8801] ret_from_fork+0x599/0xb30 [ 546.579623][ T8801] ? __pfx_ret_from_fork+0x10/0x10 [ 546.584813][ T8801] ? __switch_to_asm+0x39/0x70 [ 546.589751][ T8801] ? __switch_to_asm+0x33/0x70 [ 546.594585][ T8801] ? __pfx_kthread+0x10/0x10 [ 546.599308][ T8801] ret_from_fork_asm+0x1a/0x30 [ 546.604158][ T8801] [ 546.607222][ T8801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 546.614546][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 546.624143][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.634249][ T8801] Workqueue: netns cleanup_net [ 546.639076][ T8801] Call Trace: [ 546.642500][ T8801] [ 546.645486][ T8801] dump_stack_lvl+0x99/0x250 [ 546.650133][ T8801] ? __asan_memcpy+0x40/0x70 [ 546.654768][ T8801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.660035][ T8801] ? __pfx__printk+0x10/0x10 [ 546.664698][ T8801] vpanic+0x237/0x6d0 [ 546.668733][ T8801] ? __pfx_vpanic+0x10/0x10 [ 546.673310][ T8801] ? is_bpf_text_address+0x292/0x2b0 [ 546.678649][ T8801] ? is_bpf_text_address+0x26/0x2b0 [ 546.683920][ T8801] panic+0xb9/0xc0 [ 546.687731][ T8801] ? __pfx_panic+0x10/0x10 [ 546.692221][ T8801] ? ret_from_fork_asm+0x1a/0x30 [ 546.697225][ T8801] __warn+0x317/0x4b0 [ 546.701293][ T8801] ? retire_sysctl_set+0x48/0x60 [ 546.706297][ T8801] ? retire_sysctl_set+0x48/0x60 [ 546.711286][ T8801] __report_bug+0x288/0x500 [ 546.715987][ T8801] ? ret_from_fork_asm+0x1a/0x30 [ 546.720979][ T8801] ? retire_sysctl_set+0x48/0x60 [ 546.725975][ T8801] ? __pfx___report_bug+0x10/0x10 [ 546.731069][ T8801] ? retire_sysctl_set+0x48/0x60 [ 546.736059][ T8801] report_bug+0x16a/0x220 [ 546.740454][ T8801] ? retire_sysctl_set+0x48/0x60 [ 546.745440][ T8801] ? retire_sysctl_set+0x4a/0x60 [ 546.750433][ T8801] handle_bug+0x98/0x200 [ 546.754738][ T8801] exc_invalid_op+0x1a/0x50 [ 546.759303][ T8801] asm_exc_invalid_op+0x1a/0x20 [ 546.764207][ T8801] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 546.769813][ T8801] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 40 d7 c4 ff 48 83 3b 00 75 0c e8 f5 7a 5e ff 5b e9 3f 74 fb 08 cc e8 e9 7a 5e ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 546.789572][ T8801] RSP: 0018:ffffc90019e5f890 EFLAGS: 00010293 [ 546.795692][ T8801] RAX: ffffffff82633767 RBX: ffff888077a68388 RCX: ffff88802a3c5b80 [ 546.803729][ T8801] RDX: 0000000000000000 RSI: ffffffff8d979363 RDI: ffff888077a68328 [ 546.811759][ T8801] RBP: ffffc90019e5f970 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 546.819798][ T8801] R10: dffffc0000000000 R11: ffffffff8b182e80 R12: ffffffff8f6219c0 [ 546.827816][ T8801] R13: 1ffff920033cbf38 R14: ffffffff8f6219a0 R15: ffff888077a680a8 [ 546.835849][ T8801] ? __pfx_sysctl_net_exit+0x10/0x10 [ 546.841210][ T8801] ? retire_sysctl_set+0x47/0x60 [ 546.846219][ T8801] ops_undo_list+0x49a/0x990 [ 546.850873][ T8801] ? __pfx_ops_undo_list+0x10/0x10 [ 546.856040][ T8801] ? do_raw_spin_unlock+0x122/0x240 [ 546.861310][ T8801] cleanup_net+0x4d8/0x7a0 [ 546.865794][ T8801] ? __pfx_cleanup_net+0x10/0x10 [ 546.870828][ T8801] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.876098][ T8801] ? process_scheduled_works+0x9ef/0x1770 [ 546.881867][ T8801] ? process_scheduled_works+0x9ef/0x1770 [ 546.887818][ T8801] process_scheduled_works+0xad1/0x1770 [ 546.893455][ T8801] ? __pfx_process_scheduled_works+0x10/0x10 [ 546.899509][ T8801] worker_thread+0x8a0/0xda0 [ 546.904153][ T8801] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 546.910551][ T8801] ? __kthread_parkme+0x7b/0x200 [ 546.915555][ T8801] kthread+0x711/0x8a0 [ 546.919685][ T8801] ? __pfx_worker_thread+0x10/0x10 [ 546.924855][ T8801] ? __pfx_kthread+0x10/0x10 [ 546.929504][ T8801] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.934774][ T8801] ? lockdep_hardirqs_on+0x98/0x140 [ 546.940052][ T8801] ? __pfx_kthread+0x10/0x10 [ 546.944730][ T8801] ret_from_fork+0x599/0xb30 [ 546.949387][ T8801] ? __pfx_ret_from_fork+0x10/0x10 [ 546.954565][ T8801] ? __switch_to_asm+0x39/0x70 [ 546.959423][ T8801] ? __switch_to_asm+0x33/0x70 [ 546.964242][ T8801] ? __pfx_kthread+0x10/0x10 [ 546.968897][ T8801] ret_from_fork_asm+0x1a/0x30 [ 546.973912][ T8801] [ 546.977579][ T8801] Kernel Offset: disabled [ 546.981927][ T8801] Rebooting in 86400 seconds..