last executing test programs: 2.465673632s ago: executing program 2 (id=3313): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xffffff0a, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) 2.077831648s ago: executing program 2 (id=3316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) 1.963135201s ago: executing program 0 (id=3317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x40080, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) 1.95491537s ago: executing program 2 (id=3318): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) 1.67916768s ago: executing program 2 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300000000000000002a"], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ff2505d8eaea6f6b80636aa521e22c29a323ccb6828b667238254f0ee00d074ef0b3fe6d3941855503775e15519c451d14bfddad459533c7352af0f8a69cb6bbb9b2d6"], 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0e25b3ded133a7d1b7e314fd691db31921137d3df2af8126046b2c8ed80acd075ece9d9a2c77f96712f596e08f7b565a8d79c0932c69dd9e1926e394445ff87171a9c78d3eae9ed06a75ab18ae81b4efe3556274a09e1aecae49178c0b1e086c8bb570c19d1bbcf58d2fe709a58fc893", @ANYRES16=r7, @ANYBLOB="010829bd70000000000007000000050013000900000014000800"/42], 0x30}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r9, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x123202, 0x0) close(r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r4, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) 1.61619984s ago: executing program 0 (id=3321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x2ff, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @local}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x2, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x4, 0x52, 0x1, 0x3}]}}, @dest_unreach={0x4, 0xf, 0x0, 0x0, 0x20, 0x0, {0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x4, 0x0, @local, @loopback}}}}, 0x42) close(0xffffffffffffffff) 1.491510284s ago: executing program 1 (id=3322): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.427559494s ago: executing program 4 (id=3324): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r5, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r2, 0x10, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x98, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r2, r5, 0x11, 0x20, 0x0, @void, @void, @void, @value=r7, r6}, 0x20) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000008c0)={0x0, 0x1000, "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"}, &(0x7f0000001900)=0x1008) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async) socket$kcm(0x29, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) 1.283463144s ago: executing program 1 (id=3326): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="a0aaaaaaaabbaaaaaaaaaabb08060001080006"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x20000080, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.283148609s ago: executing program 2 (id=3327): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000240)=""/251, 0xfb}], 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r1, 0xfffff000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "322d73352ed5955d482ee5364c432384"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 1.216537793s ago: executing program 4 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x0, [0x10000, 0x101, 0xffffffffffffffff, 0xfffffffffffffffa, 0x2, 0x2], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)}, &(0x7f0000000100)=0x78) 1.179987685s ago: executing program 1 (id=3329): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000053d672823544b818c2e863dde08c5f05"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x5}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x4}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0xfffffff5, [{0x9, 0x2, 0x10}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f00000004c0)=""/72, 0x68, 0x48, 0x0, 0x510, 0x10000}, 0x28) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x1c}, 0x18) pipe(&(0x7f0000000640)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x1, 0x74bd2e, 0x25df9bfb, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r5, 0xc0205866, &(0x7f0000000a00)={&(0x7f0000000800)=0x9, 0xa, &(0x7f0000000840)=[{}, {}], &(0x7f00000009c0)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x80}, [@alu={0x7, 0x1, 0xd, 0x1, 0x1, 0x20, 0x1}, @call={0x85, 0x0, 0x0, 0x64}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x902}]}, &(0x7f0000000180)='GPL\x00', 0x69a6a2d2, 0x62, &(0x7f00000001c0)=""/98, 0x40f00, 0x26, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000580)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, r3, r4, r5], &(0x7f00000006c0)=[{0x2, 0x5, 0xb, 0x5}, {0x5, 0x5, 0x9, 0x9}, {0x2, 0x2, 0x3, 0x1}, {0x0, 0x3, 0x5, 0x9}, {0x5, 0x2, 0xc, 0x6}], 0x10, 0x8000}, 0x94) 1.135121651s ago: executing program 0 (id=3330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x767, 0x0, 0x7}, {0x3e, 0x2, 0x1, 0xf, 0x81, 0xfffffe01}, 0x7, 0x80000001, 0x482}}, @TCA_TBF_RTAB={0x404, 0x2, [0x2, 0xdd8a, 0x5, 0x1, 0x7e, 0x2, 0x7, 0x2, 0x92e, 0x4, 0x0, 0x197d, 0x7, 0x4, 0x3, 0x2, 0x80000001, 0x80000001, 0xfff, 0x9, 0xcf8a, 0x23b, 0x524, 0xffffffff, 0x5, 0x8000, 0xf, 0xc, 0x4, 0x2, 0xffffffff, 0x4d, 0x2, 0x9, 0x1, 0x3, 0x3, 0xfffffffa, 0x7, 0xfffffff7, 0x4, 0x5, 0x80000001, 0x400, 0x0, 0xe1c, 0x9, 0xffffffff, 0x6, 0x7, 0x0, 0x9, 0x2499, 0x6, 0x0, 0x2, 0x7, 0xdbb, 0x7e, 0x3, 0x616f, 0xb, 0x3, 0x1, 0xf, 0x7, 0x3ff, 0xe80, 0x50d1, 0x9, 0x4, 0x4, 0x9, 0x40, 0x0, 0xf, 0x5, 0x1, 0x1, 0xc, 0xcc4d, 0xf860, 0x1, 0x2, 0x3, 0x1, 0x2, 0x100, 0x7, 0x7, 0x0, 0x7, 0x9, 0x6, 0x4, 0x3, 0x8, 0x40, 0x8, 0x4, 0x5, 0x1, 0x4, 0x10, 0x4a1, 0xff7, 0x10001, 0x9, 0xfffffff1, 0x92, 0x44d5, 0x7, 0x3ff, 0x5, 0x81, 0xfc, 0x1000, 0x6, 0x4, 0x9, 0xfff, 0x17bd7921, 0x9, 0x80, 0x6, 0x1, 0xd03, 0xfffffffb, 0xa, 0x2, 0x9, 0x5, 0xe0d, 0x3, 0x3, 0xfffffff8, 0x8000, 0x7, 0x6, 0x3, 0x2, 0x1, 0x7fffffff, 0x3af, 0x9, 0x2, 0xfff, 0x7, 0x7, 0x88, 0x2, 0xffffffff, 0x9, 0x1, 0x81, 0x3, 0x6, 0x3, 0x1, 0x13, 0x10001, 0x44, 0x2, 0x0, 0x0, 0x0, 0x14be, 0xfffffffd, 0x3, 0x1000, 0x1, 0x800, 0x4, 0x8, 0x3, 0x1ff, 0x5, 0x2, 0x99, 0xffff, 0x3, 0x200, 0x539, 0xd27a, 0xbd2, 0x3, 0x7ff, 0x5ca8, 0x400000, 0xfff, 0x0, 0x2bc7, 0x2, 0xc5, 0x7fff, 0x2, 0x5, 0x7, 0xcc16, 0x7, 0x401, 0x1, 0x9, 0xe0b, 0x0, 0x4, 0x5, 0xa, 0xd5, 0x0, 0x92, 0x200, 0x3, 0x0, 0x7, 0x0, 0x9, 0x48000, 0x7f, 0x8, 0x2, 0x1, 0xd, 0x2d0a, 0x4, 0x2, 0x1, 0x4, 0x7, 0x5, 0x100, 0x1, 0x7ff, 0x10000, 0x14d400, 0x1, 0x1fa3, 0x4, 0x3, 0x2, 0x9, 0x66, 0x7, 0x7, 0x31, 0xffffffff, 0x8, 0xd1, 0x9, 0x7, 0xffffffff, 0x544c, 0x9, 0x9, 0x4, 0x6]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.131577894s ago: executing program 3 (id=3331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001c00010029bd7019fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007e010a000200aaaaaaaaaa1c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.042739615s ago: executing program 4 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, 0x0, 0x64000, 0x0, 0x9, 0x0, &(0x7f00000002c0)}, {[0xe, 0x5, 0x7ff, 0x3]}, 0xfffffff7, 0x3f, &(0x7f0000000300)=""/63}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="e009bc297d2688e0261e51095c9e380c5899e11a13bb51af7906f13b751f624f675cf5fed4f3a3a4979f6a", 0x2b}], 0x1}}], 0x1, 0x41) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x20000000000000, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 982.985318ms ago: executing program 3 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000002c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt(r2, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r1, r3}, 0xc) r4 = socket$inet6(0x10, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000003c0)=0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={r6, 0x6}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x847, 0x40, 0xfa, 0x8}, {0x8, 0x8b, 0x0, 0xfffffff7}, {0x6, 0x6, 0x1, 0x3}]}, 0x10) sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r8, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x332, 0x0, 0x2, 0x9a, 0x6, 0x101, 0x834e, 0x6, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x1f, 0x7, 0x24, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote, 0x40, 0x8000, 0x9, 0x6}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x118, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24040000}, 0x4840) sendmmsg$inet(r7, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000007"], 0x10}}], 0x2, 0x20004086) 835.268306ms ago: executing program 1 (id=3334): r0 = socket$rxrpc(0x21, 0x2, 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000a002430180004"], 0x2c}}, 0x0) 760.784897ms ago: executing program 3 (id=3335): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="869fdaa4e1aa0d4dfc60179d2bae47a6ff2111bb4c173c6875dcedca535f89e231b6d6bb1b1106b7cac31f06b29144a5020f4e35c8a93675246cbbd2c4b80df17912df4ebc94d16eecb365c4d17c9abe3f354196244d442462fec524a07fdb3f61368525c5e7bff9e6235f9765a4ea0a31e2818cefc891819c3038ac5136765882223ccd9e58956e9023c176edcb3bc692bc1157df22dbb53fcd05bb", 0x9c) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @random="d0178a7364ee"}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket$inet6(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000013000000"], 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x29, &(0x7f00000000c0)={0x0}, 0x8, 0x3000000000002}, 0x8c4) 746.004462ms ago: executing program 1 (id=3336): syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a0fcc73b5ef32a884b2033728e956f3f20d16734af14637c", "85eff9728117c4c62162a8a6a5340ad7eccbe4a1c68802028d6ef0a4df21f4a9"}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xa1, 0x1, 0x0, 0x1, [@generic="2c7c1454a9a72411127773771690d00facf9f93c8b02aa9c75f893ab868b53e9179102245545087857a12981bbb987b3fcfd46473efb0a2f4f5512ccdd9b90e9a7d2b68d64d844bcd2b6c24bc3f9bead7e56c1c12dcdb6cc4a9259bc004092020d66ee58fee5e4da167fa34516723287a4b74516fb8815b31ca9fcb9ccf489db54d2d8e9a73e4b1f172372f5a3ffd621b32c98e4efd88e3dcff11eb676"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 651.273247ms ago: executing program 4 (id=3337): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 638.697786ms ago: executing program 1 (id=3338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000340)={r7, 0x496}, &(0x7f00000004c0)=0x8) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 512.215906ms ago: executing program 0 (id=3339): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) r1 = socket(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x325e01, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0xe}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="7205deead8821e828e77edab0203aa5c21b2f0f767ad7605959cf4ba79d69b38fb9c342c8a77e52349a92d8aaae43a4b16ee9b872048f5284ed67a05e4de7c82e79a5633dc69c9f9592edf82e6009f799af2b2f86d5c03618de3dd6f43a33274f3de5e07926716ea8bb29ae088048a7be321b2bd80e8d7aa61b8ee604c9f80a0bdda2097da52017012ca2831efc099c33ad6c5b2d5f5f058a5fb220ae34398e8e136adaaf0bb167da43fbd6c963287fd483ee5436a5f171ca0109a8a67c7b30af98b253f0c8ae4bb473ffeda5aef9ecda3fbacd8", 0xd4}, {&(0x7f0000000680)="52d2d91de5e476d010e3fb4e0451c60347fc14e7990c5ba822338a7765b768c33494ca049108b3af063d35b26942dd1c58440672c55bba1277be4d6cbac3bc2657d38b6467b48716414b26ae51546042ca032d3033fc30fc54d25d9491f9", 0x5e}, {0x0}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x40400c0) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, &(0x7f00000001c0), 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3100000000080005400000000208000a40fffffffc0900020073797a31000000000800044000000001ba0000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008800) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 433.955479ms ago: executing program 4 (id=3340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)={0x164, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x53}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x3f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6544}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'caif0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x69}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000000000000000d1000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000300), &(0x7f0000000340)=0x14) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8854}, 0x20008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)={0x164, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x53}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x3f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'tunl0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6544}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'caif0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x69}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000000000000000d1000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r5, &(0x7f0000000300), &(0x7f0000000340)=0x14) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8854}, 0x20008040) (async) 342.662477ms ago: executing program 3 (id=3341): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0x83, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x44}, 0x1, 0x0, 0x0, 0x2c2ee7df973b1f32}, 0x4008094) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_channels={0x50}}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e24, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x23e4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x48014}, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000400), 0x4) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x20042, 0x0) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000440)=0xf4f7) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r7, 0x800, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 338.76005ms ago: executing program 0 (id=3342): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 155.130437ms ago: executing program 3 (id=3343): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0xc, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[], 0x28}], 0x1}, 0x4000088) 125.462813ms ago: executing program 0 (id=3344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) (async) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x2c8, 0x10, 0x401, 0xfffffffc, 0x1080, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_VF_PORTS={0x2a0, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b401c766dc9ca47f5b3065d6b9c9925f"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "108bd2d2573cea4cb997aad2b696afb5"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x10001}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4e1faec7728d460b294df35e9c2c28ce"}, @IFLA_PORT_VF={0x8, 0x1, 0x9cf}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0x108, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4a03865f84a074511c5ff50502055507"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "36e7c234f58067be5ad1092352cc05bc"}, @IFLA_PORT_PROFILE={0xe, 0x2, 'wireguard\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "09070e5be66c5dff8a7c21b326bdf8c9"}, @IFLA_PORT_PROFILE={0x7d, 0x2, '\x00\xd2O\x19\x9e\xf5\xf3\x82\xd2\xed\x93tv0\x14\x88\xado\x85\xffS\x82-\xb0\xa6\xa4Y\r@!Q\x9aQ]\xce\x872m\x97\xe2\x8b:\x04N\x1c\x14\x8d\xd9\x8b\x92:\x1c\xde\x95\xc5H\x11\x8e5K&\xe5\x86[aB\x8a%<\xfda\xfa\xd5\x7f\xf3\xa3\x92&(`ZZ\f\xbf\x15\xddX\xdb\xf0\x81)\xb0&\xc2\xe4^\x96\t\xa6\x19a\xcby\xd6\xed\x89F\xcbl\xbe\xd7\x9f\xc36o\xbeYu\xf1p\xc7'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0eeb40bd0e3ee1d5f43bd594bea642c7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bce931563969d409a1d91fea80a3100a"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "810258d4a8d9608cc7dc4af8618d54b8"}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '\'(,\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f4fb4d576b17a9c9be62b8eca94d3918"}, @IFLA_PORT_VF={0x8, 0x1, 0xf}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "74ab099873398dc0be8cc53c218659b1"}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_VF={0x8, 0x1, 0xc}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "225bc20d75910be191d6f514f03f030b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3e0c1b53192c3dd067f7c483b21e32b8"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1dafaee6ac9d9695f8c014955e638d4f"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xfffd}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5017488edb03b38ffa9ff36e4406227a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}]}]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 55.623728ms ago: executing program 2 (id=3345): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r4, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r3, @ANYBLOB="000825bd7043476598df4e51d51a00fedbdf250e0000", @ANYRES32=r5, @ANYBLOB="1e017f008c10cd04de7fe467d5e8f40a7d62fa86a1906512080211000001080211000001ffffffffffff000602020202020226770d06037a5fb9510c09ba52dd971d8eaff4c47c0a592711dd3e0005297e17d78f7c2380e2b55adefa3133da56aa07e7bf9f88a0610338d73b318ffbaacd7fec92e7038ec5487057431b58d487f9b028a8f037781323b3c49fa6399e3bb981983f8a5501840c8d5a9630a52b49b65cbfec77a226478915323c04010701002a010726680208afb7f7dfa15ea13d2614245d36be2d6d762538d890847fe18301423e4a27680d0bb5f8654e564111a966ab206cdbff517a52ff5f871645ea4433c1656460168895a51d958c29787106a9249dd8d6e9a80899cdac225bb96e0073df3e8682f26dada3645d7db40000af010f00060206007e159e00060802110000010600000007000000ff7f00006512ffffffffffff08021100000008021100000000b91913e64f5ecf80cf4d468c1d7f67225aca3ac5d0301fcd1ee299711c4b84b6ff13f1a3efdca4006f0e0ab7d140a8eaffb8229f38a38a7751b6ed2250fb81d4c244f56c0601a49ba82f46df59585b3d19a2fe619d79976c32f160628bdca4a0e78df5edc5f60d6e21725916d5c599ad61d21ea77dc9280b64af0732d446fe021a67b1e1e5ec5b8c0f7ca682ca947ee98b0063c354fcf5e59fbffd6536ed917a5d5385291caf083b5b92c89d6b64122aa93bbed05bd2b0d18b390301ad03010b37b90804e621311c89791bf10ad24f1ab0dc0d57eece3809702ee24e712cb0500dc092b8c2f3f675070013603c6b5c8150ac891a3fd42df8e76b5ead110e464c7d5d0991d465c3e67c5d30c312c29677a67900980117b13146cbf999e48bbf0e97aa19d479802530471e490522041af4ffb1cd439966bef27c0c20dcc0db9c9c56fb2facbc4662e6980119cc5a99157f5e5fdbcbda5ec805549c14b0fc9598ce89f5b6960315ad22086259899d723552d82a094b8022ceaa670bb700"], 0x2ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffde7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000640)="efb7a4c1c159227014b1564b595882052a92738eafbbb63f282fc380681f257226cdde7dd382dd8a9ea8f4c8afec032e297193c582cb318f3ab4eff238a303a7f9201cf2b6d3ed8c6dd483e2f771fc8cb9f79dd7863847ddfa3aba02429fe519992c21c55fbd5f0f6b5a3a523fb0897f4ef386be45efa2a49637256992cf1b7e49d073f3809c49613dbbee6685b88e4719b46017c23fd99c475e8168cbb1a112af5e24ada578301f7de191604b63c3607a53b76822b22575f3bf5d60ebeb56c143ffce23113fb45b01068383e3c5405910a80a7620223c04f045d550f242f1ab8663318f146d4454fdae1a4ef4653ce5d92f367bf8f6fe9dcb88ec6746024d9f999c957a2cfa188ff941650e9e568263e5ef278ad01df390eaed271ca4") setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @null, 0x7, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r8, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) 45.780925ms ago: executing program 4 (id=3346): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_virt_wifi\x00', {0x1}, 0x82}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x3a8, 0x3a8, 0xffffffff, 0x2c0, 0x228, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 0s ago: executing program 3 (id=3347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[]}, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x70}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff1b}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xbae}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xd4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xa}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x6f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x40}}]}, 0x90}}, 0x40010) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x4c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff0097}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r9 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r9}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="040028bd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r9, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r10, @ANYBLOB="08000100690011000200303030303a30303a31302e300000000008008a000000a30d5c26c12d86e9b42e780996d3c3982038f339351b3c61f2523c4babae144d41317eee7c6feea308", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0004000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4011}, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 252.990073][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 253.398226][T11549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.410472][T11591] netlink: 'syz.3.1555': attribute type 23 has an invalid length. [ 253.649384][ T7927] IPVS: starting estimator thread 0... [ 253.667912][T11643] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 253.807778][T11650] net_ratelimit: 48 callbacks suppressed [ 253.807797][T11650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.833775][T11641] IPVS: using max 34 ests per chain, 81600 per kthread [ 253.914233][T11652] netlink: 'syz.0.1564': attribute type 3 has an invalid length. [ 254.000695][T11657] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1566'. [ 254.140270][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 254.165651][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 254.265360][T11661] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 254.341109][T11681] tipc: Can't bind to reserved service type 1 [ 254.346317][T11661] bond6 (unregistering): Released all slaves [ 254.477390][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 254.487375][T11663] x9: renamed from bridge_slave_0 (while UP) [ 255.053475][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1579'. [ 255.166545][T11727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.207927][T11727] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 255.408288][T11736] syzkaller0: entered promiscuous mode [ 255.431047][T11736] syzkaller0: entered allmulticast mode [ 255.633414][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.639926][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.712849][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 255.786573][T11763] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.1592'. [ 255.860332][T11770] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1595'. [ 256.129425][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 256.279047][T11801] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.870657][T11841] netlink: 'syz.4.1610': attribute type 11 has an invalid length. [ 256.890425][T11841] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1610'. [ 257.080409][T11855] FAULT_INJECTION: forcing a failure. [ 257.080409][T11855] name failslab, interval 1, probability 0, space 0, times 0 [ 257.193397][T11855] CPU: 0 UID: 0 PID: 11855 Comm: syz.2.1615 Not tainted syzkaller #0 PREEMPT(full) [ 257.193421][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.193431][T11855] Call Trace: [ 257.193445][T11855] [ 257.193452][T11855] dump_stack_lvl+0xe8/0x150 [ 257.193483][T11855] should_fail_ex+0x412/0x560 [ 257.193515][T11855] should_failslab+0xa8/0x100 [ 257.193541][T11855] __kmalloc_cache_noprof+0x88/0x660 [ 257.193563][T11855] ? call_usermodehelper_setup+0x8e/0x270 [ 257.193592][T11855] call_usermodehelper_setup+0x8e/0x270 [ 257.193616][T11855] ? __pfx_free_modprobe_argv+0x10/0x10 [ 257.193638][T11855] __request_module+0x3ba/0x630 [ 257.193659][T11855] ? rtnl_link_ops_get+0x23/0x250 [ 257.193679][T11855] ? __pfx___request_module+0x10/0x10 [ 257.193707][T11855] ? rtnl_link_ops_get+0x23/0x250 [ 257.193723][T11855] ? rtnl_link_ops_get+0x23/0x250 [ 257.193743][T11855] ? rtnl_link_ops_get+0x215/0x250 [ 257.193763][T11855] rtnl_newlink+0x60a/0x1bb0 [ 257.193781][T11855] ? kasan_save_track+0x3e/0x80 [ 257.193800][T11855] ? kasan_save_free_info+0x46/0x50 [ 257.193815][T11855] ? __kasan_slab_free+0x5c/0x80 [ 257.193837][T11855] ? __netlink_deliver_tap+0x5ad/0x850 [ 257.193855][T11855] ? netlink_deliver_tap+0x19c/0x1b0 [ 257.193871][T11855] ? netlink_unicast+0x730/0x8e0 [ 257.193893][T11855] ? netlink_sendmsg+0x813/0xb40 [ 257.193912][T11855] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.193927][T11855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.193978][T11855] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.193998][T11855] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.194026][T11855] ? nlmon_xmit+0xb0/0x100 [ 257.194050][T11855] ? kmem_cache_free+0x182/0x650 [ 257.194081][T11855] ? __lock_acquire+0x6b5/0x2cf0 [ 257.194112][T11855] ? __dev_queue_xmit+0x2b6/0x3950 [ 257.194135][T11855] ? __local_bh_enable_ip+0xd0/0x130 [ 257.194160][T11855] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.194182][T11855] ? __dev_queue_xmit+0x2b6/0x3950 [ 257.194201][T11855] ? __local_bh_enable_ip+0xd0/0x130 [ 257.194223][T11855] ? __dev_queue_xmit+0x2b6/0x3950 [ 257.194250][T11855] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 257.194292][T11855] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.194308][T11855] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 257.194338][T11855] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 257.194363][T11855] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.194388][T11855] ? ref_tracker_free+0x693/0x840 [ 257.194408][T11855] ? __pfx_ref_tracker_free+0x10/0x10 [ 257.194434][T11855] netlink_rcv_skb+0x232/0x4b0 [ 257.194459][T11855] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.194485][T11855] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.194515][T11855] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.194533][T11855] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.194556][T11855] netlink_unicast+0x75c/0x8e0 [ 257.194591][T11855] netlink_sendmsg+0x813/0xb40 [ 257.194618][T11855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.194640][T11855] ? aa_sock_msg_perm+0xf1/0x1b0 [ 257.194661][T11855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.194685][T11855] ____sys_sendmsg+0x972/0x9f0 [ 257.194704][T11855] ? __might_fault+0xaf/0x130 [ 257.194730][T11855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.194758][T11855] ? import_iovec+0x73/0xa0 [ 257.194781][T11855] ___sys_sendmsg+0x2a5/0x360 [ 257.194799][T11855] ? __lock_acquire+0x6b5/0x2cf0 [ 257.194828][T11855] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.194880][T11855] ? __fget_files+0x2a/0x420 [ 257.194897][T11855] ? __fget_files+0x3a0/0x420 [ 257.194925][T11855] __x64_sys_sendmsg+0x1bd/0x2a0 [ 257.194946][T11855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.194974][T11855] ? __pfx_ksys_write+0x10/0x10 [ 257.195004][T11855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.195022][T11855] do_syscall_64+0x15f/0xf80 [ 257.195044][T11855] ? trace_irq_disable+0x3b/0x140 [ 257.195066][T11855] ? clear_bhb_loop+0x40/0x90 [ 257.195087][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.195105][T11855] RIP: 0033:0x7f96a999cdd9 [ 257.195122][T11855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.195137][T11855] RSP: 002b:00007f96aa896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.195156][T11855] RAX: ffffffffffffffda RBX: 00007f96a9c15fa0 RCX: 00007f96a999cdd9 [ 257.195169][T11855] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 257.195181][T11855] RBP: 00007f96aa896090 R08: 0000000000000000 R09: 0000000000000000 [ 257.195191][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.195201][T11855] R13: 00007f96a9c16038 R14: 00007f96a9c15fa0 R15: 00007ffc19836868 [ 257.195230][T11855] [ 257.197352][T11860] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 257.236285][T11866] bridge0: port 2(ipvlan3) entered blocking state [ 257.278922][T11860] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1616'. [ 257.330293][T11866] bridge0: port 2(ipvlan3) entered disabled state [ 257.689042][T11866] ipvlan3: entered allmulticast mode [ 257.694577][T11866] bridge0: entered allmulticast mode [ 257.722215][T11866] ipvlan3: left allmulticast mode [ 257.728093][T11866] bridge0: left allmulticast mode [ 257.994065][T11885] pim6reg1: entered promiscuous mode [ 258.007815][T11885] pim6reg1: entered allmulticast mode [ 258.334818][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 258.707322][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'. [ 258.740800][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 258.887150][T11942] x_tables: duplicate underflow at hook 1 [ 259.326854][T11959] netlink: 'syz.4.1635': attribute type 4 has an invalid length. [ 259.412806][T11957] lo speed is unknown, defaulting to 1000 [ 259.447226][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.487386][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.498345][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.645113][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.740827][T11981] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 259.846878][T11286] block nbd64: NBD_DISCONNECT [ 260.001059][T11981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.245712][T11194] udevd[11194]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.274340][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.290937][T12000] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 260.311144][T11194] udevd[11194]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.461366][T12000] block nbd1: server does not support multiple connections per device. [ 260.549342][T12000] block nbd1: shutting down sockets [ 261.730271][T12053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 261.754774][T12053] __nla_validate_parse: 4 callbacks suppressed [ 261.754794][T12053] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1655'. [ 262.300773][T12071] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 262.391983][T12071] bond6: entered promiscuous mode [ 262.400241][T12071] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.433707][T12080] atomic_op ffff8880566f3998 conn xmit_atomic 0000000000000000 [ 262.460564][T12071] bond6: (slave bridge6): making interface the new active one [ 262.473209][T12071] bridge6: entered promiscuous mode [ 262.482739][T12071] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 262.493277][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'. [ 262.512670][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'. [ 262.530615][T12074] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 262.619984][T12087] bond5: entered promiscuous mode [ 262.634561][T12087] bond5: entered allmulticast mode [ 262.650649][T12087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.766528][T12094] netlink: 'syz.3.1666': attribute type 39 has an invalid length. [ 262.793534][T12091] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.853333][T12091] bond7: (slave lo): Enslaving as an active interface with an up link [ 262.866103][T12097] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 262.887088][T12091] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 262.978996][T12094] hsr_slave_1 (unregistering): left promiscuous mode [ 263.046862][T12100] netlink: 'syz.4.1668': attribute type 39 has an invalid length. [ 263.106045][T12097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.126435][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 263.293267][T12098] vlan2: entered allmulticast mode [ 263.307654][T12098] bond6: entered allmulticast mode [ 263.384065][T12101] bond6: (slave geneve2): making interface the new active one [ 263.392606][T12101] geneve2: entered allmulticast mode [ 263.404710][T12101] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 263.442001][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 263.657934][T12125] syzkaller0: entered promiscuous mode [ 263.684705][T12125] 0: reclassify loop, rule prio 0, protocol 800 [ 263.950013][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.177754][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 264.205775][T12145] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1682'. [ 264.230208][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 264.234126][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 264.267942][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 264.661645][T12175] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 264.816114][T12180] netlink: 'syz.4.1691': attribute type 10 has an invalid length. [ 265.281991][T12187] A link change request failed with some changes committed already. Interface vxcan3 may have been left with an inconsistent configuration, please check. [ 265.923807][T12215] netlink: 'syz.2.1703': attribute type 10 has an invalid length. [ 265.985117][T12220] netlink: 'syz.4.1704': attribute type 21 has an invalid length. [ 266.231979][T12229] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 266.352549][T12229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.026317][T12255] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 267.026461][T12253] syzkaller0: entered promiscuous mode [ 267.055617][T12253] syzkaller0: entered allmulticast mode [ 267.065522][T12255] batadv0: left allmulticast mode [ 267.079954][T12255] batadv0: left promiscuous mode [ 267.086742][T12255] bridge0: port 1(batadv0) entered disabled state [ 267.122155][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.368382][T12270] lo speed is unknown, defaulting to 1000 [ 267.390624][T12270] lo speed is unknown, defaulting to 1000 [ 267.415099][T12270] lo speed is unknown, defaulting to 1000 [ 267.435813][T12270] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 267.480001][T12270] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 267.499342][T12275] __nla_validate_parse: 5 callbacks suppressed [ 267.499360][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'. [ 267.537139][T12270] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 267.582155][T12275] sch_tbf: burst 12 is lower than device bridge5 mtu (1514) ! [ 267.590911][T12162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.666976][T12270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 267.802716][T12270] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 267.943367][T12270] lo speed is unknown, defaulting to 1000 [ 267.974986][T12287] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1727'. [ 267.997366][T12270] lo speed is unknown, defaulting to 1000 [ 268.026191][T12270] lo speed is unknown, defaulting to 1000 [ 268.073114][T12270] lo speed is unknown, defaulting to 1000 [ 268.100528][T12270] lo speed is unknown, defaulting to 1000 [ 268.152433][T12297] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1730'. [ 268.180322][T12296] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1730'. [ 268.198496][T12296] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1730'. [ 268.366226][T12311] syz_tun: entered allmulticast mode [ 268.390710][T12312] syzkaller1: entered promiscuous mode [ 268.415662][T12312] syzkaller1: entered allmulticast mode [ 268.486036][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 268.573880][T12312] syzkaller1: left promiscuous mode [ 268.584245][T12312] syzkaller1: left allmulticast mode [ 268.840745][T12333] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 268.950727][T12333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.016821][T12335] bond7: (slave gretap2): making interface the new active one [ 269.046678][T12335] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 269.101244][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 270.227631][T12356] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 270.412570][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 270.564483][T12377] hsr_slave_1 (unregistering): left promiscuous mode [ 270.594356][T12378] netlink: 'syz.0.1752': attribute type 9 has an invalid length. [ 270.626757][T12383] tipc: Enabling of bearer rejected, failed to enable media [ 270.778607][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 270.815487][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 271.179007][T12416] netlink: 'syz.3.1762': attribute type 21 has an invalid length. [ 271.201100][T12416] netlink: 'syz.3.1762': attribute type 6 has an invalid length. [ 271.656691][T12442] xt_hashlimit: size too large, truncated to 1048576 [ 271.720859][T12445] tipc: Started in network mode [ 271.736234][T12445] tipc: Node identity aa3a7aad32a3, cluster identity 4711 [ 271.776129][T12445] tipc: Enabled bearer , priority 0 [ 272.065345][T12450] syzkaller0: entered promiscuous mode [ 272.098849][T12450] syzkaller0: entered allmulticast mode [ 272.127386][T12450] tipc: Resetting bearer [ 272.182961][T12445] tipc: Resetting bearer [ 272.213772][T12439] tipc: Resetting bearer [ 272.220495][T12454] sit0: entered promiscuous mode [ 272.513028][ T13] tipc: Resetting bearer [ 272.909926][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.940336][ T5916] tipc: Node number set to 2560195245 [ 273.089394][T12468] syz.4.1775 (12468) used greatest stack depth: 17152 bytes left [ 273.139969][T12502] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 273.286397][T12506] netlink: 'syz.1.1785': attribute type 10 has an invalid length. [ 273.935372][T12531] team0: Port device gretap3 added [ 274.083396][T12532] bridge0: port 1(batadv1) entered blocking state [ 274.121782][T12532] bridge0: port 1(batadv1) entered disabled state [ 274.140519][T12541] __nla_validate_parse: 4 callbacks suppressed [ 274.140537][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 274.142705][T12532] batadv1: entered allmulticast mode [ 274.168415][T12532] batadv1: entered promiscuous mode [ 274.364686][T12548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1799'. [ 274.520341][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 274.529931][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 274.683346][T12563] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 274.708850][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 274.807259][T12544] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1798'. [ 274.886492][T12575] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1807'. [ 275.031091][T12579] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1807'. [ 275.418776][T12598] netlink: 'syz.1.1815': attribute type 6 has an invalid length. [ 275.591688][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 275.718156][T12624] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1820'. [ 275.734138][T12623] syzkaller0: entered promiscuous mode [ 275.757413][T12623] syzkaller0: entered allmulticast mode [ 275.783794][T12628] netem: change failed [ 275.811742][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 275.838082][T12631] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 275.984767][T12637] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 276.081207][T12641] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 276.246840][T12654] xt_ecn: cannot match TCP bits for non-tcp packets [ 276.452747][T12666] vlan1: entered allmulticast mode [ 276.464131][T12666] bond0: entered allmulticast mode [ 276.480469][T12672] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1838'. [ 276.626426][T12672] bond0 (unregistering): Released all slaves [ 277.083315][T12713] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 277.097639][T12713] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 279.697434][T12684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.883242][T12746] __nla_validate_parse: 1 callbacks suppressed [ 279.883258][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 279.907526][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 279.954432][T12754] syz_tun: left allmulticast mode [ 279.977945][T12754] syz_tun: left promiscuous mode [ 279.993975][T12754] bridge0: port 1(syz_tun) entered disabled state [ 280.138834][T12767] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.374112][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1868'. [ 280.445009][T12784] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 280.456585][T12781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1869'. [ 280.468201][T12784] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1870'. [ 280.477833][T12777] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 280.563642][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 280.740989][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 280.928772][T12800] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 280.953086][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'. [ 281.030367][T12811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1876'. [ 281.226286][T12820] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1880'. [ 281.589069][T12841] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 281.641826][T12841] bond8: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 281.652649][T12841] bond8: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 281.666703][T12841] bond8: (slave ip6gre3): making interface the new active one [ 281.675307][T12841] bond8: (slave ip6gre3): Enslaving as an active interface with an up link [ 281.842224][T12854] netlink: 'syz.1.1889': attribute type 10 has an invalid length. [ 283.393663][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 284.137822][T12872] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 284.156144][T12872] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 284.176362][T12872] netlink: 'syz.3.1893': attribute type 8 has an invalid length. [ 284.486233][T12927] bond0: entered promiscuous mode [ 284.491648][T12927] bond0: entered allmulticast mode [ 284.497319][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.605959][T12936] syzkaller0: entered promiscuous mode [ 284.617214][T12936] syzkaller0: entered allmulticast mode [ 284.693477][T12938] lo speed is unknown, defaulting to 1000 [ 284.920437][T12952] __nla_validate_parse: 8 callbacks suppressed [ 284.920455][T12952] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1905'. [ 284.950540][T12952] bridge0: port 3(gretap0) entered disabled state [ 284.957312][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.964675][T12952] bridge0: port 1(1x9) entered disabled state [ 284.973017][T12956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1905'. [ 285.094437][T12962] netlink: 'syz.1.1907': attribute type 13 has an invalid length. [ 285.103127][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 285.159128][T12938] lo speed is unknown, defaulting to 1000 [ 285.196102][T12962] netlink: 'syz.1.1907': attribute type 13 has an invalid length. [ 285.213869][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 285.423018][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 285.473752][T12974] IPVS: Error connecting to the multicast addr [ 285.726443][T12987] netlink: 189100 bytes leftover after parsing attributes in process `syz.1.1916'. [ 285.807384][T12984] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 285.977154][T12995] xt_CT: No such helper "syz1" [ 286.176398][T13014] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1921'. [ 286.273165][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 286.391118][T13024] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 286.409094][T13024] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1924'. [ 286.457656][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 286.714571][T13050] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 286.732174][T13050] bond4: option packets_per_slave: allowed values 0 - 65535 [ 286.775099][T13050] bond4 (unregistering): Released all slaves [ 287.017129][T13063] ip6erspan1: entered allmulticast mode [ 287.304243][T13090] netlink: 'syz.0.1941': attribute type 21 has an invalid length. [ 287.326205][T13090] netlink: 'syz.0.1941': attribute type 5 has an invalid length. [ 287.362356][T13090] netlink: 'syz.0.1941': attribute type 6 has an invalid length. [ 288.333289][T13144] lo speed is unknown, defaulting to 1000 [ 288.764005][T13144] lo speed is unknown, defaulting to 1000 [ 288.906289][T13156] IPVS: set_ctl: invalid protocol: 44 172.20.20.29:20001 [ 288.916068][T13158] veth9: entered allmulticast mode [ 288.922984][T13154] syzkaller1: entered promiscuous mode [ 288.943193][T13154] syzkaller1: entered allmulticast mode [ 289.516675][T13190] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 289.584829][T13193] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 289.828022][T13193] 8021q: adding VLAN 0 to HW filter on device bond7 [ 290.189943][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.192197][T13226] __nla_validate_parse: 20 callbacks suppressed [ 290.192213][T13226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1981'. [ 290.215350][T13226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1981'. [ 290.397555][T13236] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 290.558905][T13236] bond8: entered promiscuous mode [ 290.571086][T13236] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.637065][T13236] netlink: 'syz.2.1985': attribute type 3 has an invalid length. [ 290.700404][T13255] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.707817][T13255] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 290.719547][T13255] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 290.732855][T13255] bond8: (slave ip6gre1): making interface the new active one [ 290.740604][T13255] ip6gre1: entered promiscuous mode [ 290.747401][T13255] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 290.868455][T13270] syzkaller1: entered promiscuous mode [ 290.875657][T13270] syzkaller1: entered allmulticast mode [ 290.991837][T13276] syzkaller0: entered promiscuous mode [ 291.010420][T13276] syzkaller0: entered allmulticast mode [ 291.036549][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1995'. [ 291.062259][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1995'. [ 291.093752][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1997'. [ 291.323659][T13288] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 291.555124][T13314] xt_CT: No such helper "snmp_trap" [ 291.562383][T13310] xt_CT: No such helper "snmp_trap" [ 292.053717][T13320] lo: left promiscuous mode [ 292.058787][T13320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.298882][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 294.032676][T13289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.218675][T13354] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2015'. [ 294.256659][T13359] netlink: 'syz.1.2016': attribute type 3 has an invalid length. [ 294.265451][T13359] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2016'. [ 294.303082][T13364] netlink: 'syz.2.2017': attribute type 1 has an invalid length. [ 294.623596][T13382] pim6reg: entered allmulticast mode [ 294.629234][T13384] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 294.652120][T13386] pim6reg: left allmulticast mode [ 294.674931][T13384] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2025'. [ 294.879156][T13396] syzkaller1: entered promiscuous mode [ 294.900696][T13396] syzkaller1: entered allmulticast mode [ 295.213256][T13418] netlink: 'syz.2.2036': attribute type 7 has an invalid length. [ 295.383554][T13427] xt_TCPMSS: Only works on TCP SYN packets [ 295.934113][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2041'. [ 295.989045][T13453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2042'. [ 296.052320][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 296.234693][T13473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.363850][T13484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.571441][T13476] tipc: Resetting bearer [ 296.588175][T13497] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.834292][T13502] netlink: 'syz.3.2053': attribute type 2 has an invalid length. [ 296.863686][T13502] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2053'. [ 297.101356][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 297.128638][T13525] syzkaller0: entered promiscuous mode [ 297.141854][T13525] syzkaller0: entered allmulticast mode [ 297.173068][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 297.540692][T13548] netlink: 'syz.2.2063': attribute type 3 has an invalid length. [ 297.613574][T13552] xt_hashlimit: invalid rate [ 297.767431][T13556] IPv6: Can't replace route, no match found [ 297.829566][T13556] IPv6: Can't replace route, no match found [ 297.858266][T13568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2065'. [ 297.907934][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2067'. [ 297.983614][T13559] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 298.028786][T13559] bond9: option packets_per_slave: allowed values 0 - 65535 [ 298.084220][T13559] bond9 (unregistering): Released all slaves [ 298.256109][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 298.442534][T13586] netlink: 'syz.2.2070': attribute type 11 has an invalid length. [ 298.955402][T13604] netlink: 'syz.3.2075': attribute type 4 has an invalid length. [ 299.002002][T13604] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 299.003165][T13606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.275370][T13612] pim6reg1: entered promiscuous mode [ 299.294782][T13617] netlink: 'syz.1.2081': attribute type 4 has an invalid length. [ 299.313981][T13612] pim6reg1: entered allmulticast mode [ 299.330684][T13617] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2081'. [ 299.569451][T13629] netlink: 'syz.0.2085': attribute type 11 has an invalid length. [ 299.851263][T13645] netlink: 'syz.4.2090': attribute type 3 has an invalid length. [ 300.424996][T13668] netlink: 'syz.1.2099': attribute type 39 has an invalid length. [ 300.533312][T13668] syz_tun (unregistering): left allmulticast mode [ 300.793983][T13680] netlink: 'syz.1.2103': attribute type 7 has an invalid length. [ 300.822609][T13681] syzkaller1: entered promiscuous mode [ 300.833272][T13681] syzkaller1: entered allmulticast mode [ 301.165198][T13695] __nla_validate_parse: 3 callbacks suppressed [ 301.165216][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 301.220272][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 301.412359][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 301.768862][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 301.938911][T13743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2121'. [ 301.980402][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2121'. [ 302.045420][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 302.176118][T13755] netlink: 'syz.1.2124': attribute type 2 has an invalid length. [ 302.199596][T13754] netlink: 'syz.4.2125': attribute type 4 has an invalid length. [ 302.217369][T13754] x_tables: unsorted entry at hook 3 [ 302.339305][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2128'. [ 302.363515][T13762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2128'. [ 302.399195][T13762] gretap1: entered promiscuous mode [ 302.414448][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'. [ 302.445782][T13762] gretap1: entered allmulticast mode [ 302.634124][T13790] netlink: 'syz.3.2136': attribute type 19 has an invalid length. [ 302.716159][T13785] xt_hl: Unknown TTL match mode: 255 [ 302.958827][T13804] xt_hashlimit: size too large, truncated to 1048576 [ 302.979355][T13802] syzkaller0: entered promiscuous mode [ 303.000093][T13802] syzkaller0: entered allmulticast mode [ 303.016890][T13802] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.689035][T13832] syzkaller0: entered promiscuous mode [ 303.701136][T13832] syzkaller0: entered allmulticast mode [ 303.879034][T13843] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 304.020912][T13853] xt_ecn: cannot match TCP bits for non-tcp packets [ 306.060408][T13877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.190759][T13882] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 306.249308][T13884] __nla_validate_parse: 3 callbacks suppressed [ 306.249327][T13884] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2162'. [ 306.268332][T13890] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2163'. [ 306.283031][T13888] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2163'. [ 306.295802][T13884] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2162'. [ 306.311350][T13884] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2162'. [ 306.417397][T13899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 306.467551][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2166'. [ 306.614118][T13905] netlink: 'syz.0.2169': attribute type 2 has an invalid length. [ 306.643727][T13905] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2169'. [ 306.665715][T13913] netlink: 'syz.0.2169': attribute type 21 has an invalid length. [ 306.721668][T13914] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 306.743443][T13914] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2170'. [ 306.763685][T13914] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2170'. [ 306.804644][T13914] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 307.105742][T13938] veth0: entered promiscuous mode [ 307.127879][T13908] veth0: left promiscuous mode [ 307.194171][T13944] bond0: entered promiscuous mode [ 307.200749][T13944] bond_slave_0: entered promiscuous mode [ 307.211127][T13944] bond_slave_1: entered promiscuous mode [ 307.226688][T13944] veth0_to_batadv: entered promiscuous mode [ 307.248086][T13944] hsr1: entered promiscuous mode [ 307.791984][T13977] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 307.917209][T13977] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.807039][T14011] netlink: 'syz.0.2195': attribute type 1 has an invalid length. [ 308.925076][T14011] bond5: entered promiscuous mode [ 308.946401][T14011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.959256][T14022] netlink: 'syz.0.2195': attribute type 21 has an invalid length. [ 308.973682][T14022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.980982][T14022] IPv6: NLM_F_CREATE should be set when creating new route [ 308.988447][T14022] IPv6: NLM_F_CREATE should be set when creating new route [ 308.995700][T14022] IPv6: NLM_F_CREATE should be set when creating new route [ 309.056706][T14011] bond5: (slave bridge5): making interface the new active one [ 309.064546][T14011] bridge5: entered promiscuous mode [ 309.071827][T14011] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 309.325568][T14029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.882208][T14054] x_tables: duplicate entry at hook 1 [ 309.888094][T14055] x_tables: duplicate entry at hook 1 [ 310.107420][T14068] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 310.149377][T14068] 8021q: adding VLAN 0 to HW filter on device bond9 [ 310.203373][T14068] bond9: (slave bridge2): making interface the new active one [ 310.221006][T14068] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 310.329064][T14076] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 310.455959][T13957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.029958][T14109] pimreg3: entered allmulticast mode [ 311.182958][T14103] syzkaller0: entered promiscuous mode [ 311.198975][T14103] syzkaller0: entered allmulticast mode [ 317.077753][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.469982][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.134777][T14133] netlink: 'syz.4.2230': attribute type 63 has an invalid length. [ 331.153754][T14131] __nla_validate_parse: 15 callbacks suppressed [ 331.153773][T14131] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2227'. [ 331.171593][T14133] netlink: 'syz.4.2230': attribute type 63 has an invalid length. [ 331.607629][T14159] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 331.638078][T14159] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 331.692988][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 331.710389][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 331.730583][T14166] netlink: 'syz.4.2240': attribute type 26 has an invalid length. [ 331.750949][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 331.773057][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 331.784087][T14166] netlink: 'syz.4.2240': attribute type 26 has an invalid length. [ 331.797456][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 332.036470][T14185] x_tables: duplicate underflow at hook 1 [ 332.143146][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2248'. [ 332.299943][T14197] bridge6: entered promiscuous mode [ 332.305364][T14197] bridge6: entered allmulticast mode [ 332.328473][T14198] sock: sock_set_timeout: `syz.3.2251' (pid 14198) tries to set negative timeout [ 332.447311][T14206] bridge0: port 1(gretap0) entered blocking state [ 332.478693][T14206] bridge0: port 1(gretap0) entered disabled state [ 332.491787][T14206] gretap0: entered allmulticast mode [ 332.500632][T14206] gretap0: entered promiscuous mode [ 332.651090][T14216] syzkaller0: entered promiscuous mode [ 332.664748][T14216] syzkaller0: entered allmulticast mode [ 332.793147][T14226] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2256'. [ 334.518523][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'. [ 334.849187][T14261] x_tables: duplicate underflow at hook 1 [ 334.881041][T14263] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 334.891078][T14265] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 334.953103][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 335.245361][T14196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.306956][T14272] netlink: 'syz.3.2270': attribute type 2 has an invalid length. [ 335.614884][T14291] xt_hl: Unknown Hop Limit match mode: 206 [ 336.117614][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.282934][T14315] __nla_validate_parse: 4 callbacks suppressed [ 336.282947][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'. [ 336.302439][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'. [ 336.311761][T14281] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 336.542955][T14327] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2291'. [ 336.656558][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2293'. [ 336.679428][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 336.903637][T14357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.936259][T14363] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2300'. [ 336.955525][T14362] syzkaller0: entered promiscuous mode [ 336.996961][T14362] syzkaller0: entered allmulticast mode [ 337.180945][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'. [ 337.209420][T14381] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2305'. [ 337.219530][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'. [ 337.272144][T14385] syzkaller1: entered promiscuous mode [ 337.286105][T14385] syzkaller1: entered allmulticast mode [ 337.553318][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 337.734366][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 338.798669][T14431] macvlan0: entered promiscuous mode [ 338.996328][T14437] netlink: 'syz.2.2322': attribute type 21 has an invalid length. [ 339.024234][T14440] xt_ecn: cannot match TCP bits for non-tcp packets [ 339.885619][T14487] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.904418][T14489] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 339.960884][T14479] syz_tun: left allmulticast mode [ 339.967920][T14483] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 340.004791][T14483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.092139][T14483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.106595][T14483] bond8: (slave vcan2): The slave device specified does not support setting the MAC address [ 340.121340][T14483] bond8: (slave vcan2): Error -95 calling set_mac_address [ 340.417777][T14518] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 340.454145][T14518] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 340.788176][T14537] tipc: Enabled bearer , priority 0 [ 340.975257][T14537] syzkaller0: entered promiscuous mode [ 340.981714][T14537] syzkaller0: entered allmulticast mode [ 340.988317][T14537] tipc: Resetting bearer [ 341.134634][ T137] tipc: Resetting bearer [ 341.161818][T14535] tipc: Resetting bearer [ 342.833890][T14535] tipc: Disabling bearer [ 342.851072][T14563] ip6tnl1: entered allmulticast mode [ 342.861549][ T5895] tipc: Node number set to 2558939249 [ 342.974669][T14571] xt_hashlimit: size too large, truncated to 1048576 [ 343.117616][T14594] xt_hashlimit: size too large, truncated to 1048576 [ 343.322735][T14599] lo speed is unknown, defaulting to 1000 [ 343.693648][T14618] ip6gretap2: entered promiscuous mode [ 343.706839][T14618] ip6gretap2: entered allmulticast mode [ 343.856522][T14630] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 343.860231][T14628] ip6gre4: entered allmulticast mode [ 343.864575][T14630] __nla_validate_parse: 17 callbacks suppressed [ 343.864589][T14630] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2376'. [ 343.881677][T14627] syzkaller0: entered promiscuous mode [ 343.887406][T14630] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2376'. [ 343.890993][T14627] syzkaller0: entered allmulticast mode [ 343.902911][T14630] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 343.909294][T14599] lo speed is unknown, defaulting to 1000 [ 343.916663][T14621] syzkaller0: left promiscuous mode [ 343.925013][T14621] syzkaller0: left allmulticast mode [ 343.931144][T14621] tipc: Resetting bearer [ 343.940083][T14630] netlink: 'syz.0.2376': attribute type 8 has an invalid length. [ 343.943207][T14627] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2375'. [ 343.949284][T14630] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2376'. [ 344.092605][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 344.132815][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 344.158740][T14637] delete_channel: no stack [ 344.345524][T14644] pimreg: entered allmulticast mode [ 344.793090][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2388'. [ 344.818003][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2388'. [ 344.958652][T14683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2392'. [ 345.027529][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'. [ 345.184157][T14697] syzkaller0: entered promiscuous mode [ 345.191335][T14697] syzkaller0: entered allmulticast mode [ 345.197473][T14697] tipc: Resetting bearer [ 345.319055][T14701] bond10: entered promiscuous mode [ 345.324370][T14701] bond10: entered allmulticast mode [ 345.330062][T14701] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.470222][T14707] macvlan2: entered allmulticast mode [ 345.475646][T14707] dummy0: entered allmulticast mode [ 345.481810][T14707] dummy0: entered promiscuous mode [ 345.675605][T14722] sit0: entered promiscuous mode [ 345.705033][T14722] netlink: 'syz.2.2401': attribute type 1 has an invalid length. [ 345.964396][T14733] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 346.411285][T14756] netlink: 'syz.0.2416': attribute type 1 has an invalid length. [ 346.437645][T14756] netlink: 'syz.0.2416': attribute type 7 has an invalid length. [ 346.463894][T14756] netlink: 'syz.0.2416': attribute type 8 has an invalid length. [ 346.642577][T14780] netlink: zone id is out of range [ 346.643676][T14779] netlink: zone id is out of range [ 346.664108][T14780] netlink: zone id is out of range [ 346.690093][T14779] netlink: zone id is out of range [ 346.731241][T14780] netlink: zone id is out of range [ 346.758066][T14779] netlink: zone id is out of range [ 346.775286][T14780] netlink: zone id is out of range [ 346.791775][T14779] netlink: zone id is out of range [ 346.806176][T14780] netlink: zone id is out of range [ 346.807535][T14779] netlink: zone id is out of range [ 347.308774][T14802] xt_CT: No such helper "syz1" [ 347.749045][T14837] netlink: 'syz.4.2439': attribute type 1 has an invalid length. [ 347.968331][T14837] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.006411][T14837] bond9: (slave bond10): making interface the new active one [ 348.026802][T14837] bond9: (slave bond10): Enslaving as an active interface with an up link [ 348.100918][T14857] bond9: (slave gretap4): Enslaving as a backup interface with an up link [ 348.145987][T14837] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.393902][T14875] : renamed from hsr0 (while UP) [ 348.875793][T14895] : entered promiscuous mode [ 349.798303][T14957] __nla_validate_parse: 21 callbacks suppressed [ 349.798321][T14957] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2470'. [ 349.834594][T14963] rdma_rxe: rxe_newlink: failed to add lo [ 349.849573][T14969] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2470'. [ 350.033962][T14975] netlink: 'syz.0.2474': attribute type 2 has an invalid length. [ 350.075288][T14975] nftables ruleset with unbound set [ 350.324100][T15008] netlink: 'syz.1.2476': attribute type 21 has an invalid length. [ 350.605675][T15014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2479'. [ 350.636421][T15015] Cannot find set identified by id 65534 to match [ 350.655615][T15016] Cannot find set identified by id 65534 to match [ 350.678128][T15015] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 350.698435][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 350.718100][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'. [ 350.771452][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'. [ 350.857465][T15020] syzkaller1: entered promiscuous mode [ 350.879995][T15020] syzkaller1: entered allmulticast mode [ 351.004270][T15039] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2486'. [ 351.014211][T15038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2487'. [ 351.035609][T15038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2487'. [ 351.059909][T15037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.084855][T15037] bond0: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 351.117368][T15037] bond0: (slave ip6tnl3): Setting fail_over_mac to active for active-backup mode [ 351.146094][T15037] bond0: (slave ip6tnl3): making interface the new active one [ 351.164325][T15037] ip6tnl3: entered promiscuous mode [ 351.171623][T15037] ip6tnl3: entered allmulticast mode [ 351.178643][T15037] bond0: (slave ip6tnl3): Enslaving as an active interface with an up link [ 351.234056][T15049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.314799][T15052] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 351.337767][T15052] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2491'. [ 351.480852][T15063] netlink: 'syz.2.2494': attribute type 30 has an invalid length. [ 351.507095][T15063] netlink: 'syz.2.2494': attribute type 30 has an invalid length. [ 352.184461][T15104] netlink: 'syz.0.2505': attribute type 16 has an invalid length. [ 352.193927][T15102] syzkaller1: entered promiscuous mode [ 352.200296][T15102] syzkaller1: entered allmulticast mode [ 352.230781][T15107] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 352.254772][T15107] syzkaller1: linktype set to 823 [ 352.553107][T15129] tipc: Enabled bearer , priority 0 [ 352.624014][T15130] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 352.694311][T15129] syzkaller0: entered promiscuous mode [ 352.701592][T15129] syzkaller0: entered allmulticast mode [ 352.712487][T15129] tipc: Resetting bearer [ 352.938385][T15148] netlink: 'syz.4.2518': attribute type 11 has an invalid length. [ 352.948735][T15148] netlink: 'syz.4.2518': attribute type 4 has an invalid length. [ 353.689273][T15174] xt_hashlimit: size too large, truncated to 1048576 [ 355.156345][T15164] veth0: entered promiscuous mode [ 355.172403][T15165] veth0: left promiscuous mode [ 355.259061][ T13] tipc: Resetting bearer [ 355.266851][T15200] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 355.274748][T15200] __nla_validate_parse: 12 callbacks suppressed [ 355.274764][T15200] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2527'. [ 355.274896][T15124] tipc: Resetting bearer [ 355.281978][T15200] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 355.281998][T15200] netlink: 'syz.2.2527': attribute type 8 has an invalid length. [ 355.282013][T15200] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2527'. [ 355.282027][T15200] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2527'. [ 357.071502][T15124] tipc: Disabling bearer [ 357.080577][ T5895] tipc: Node number set to 3758096385 [ 357.235015][T15207] netlink: 'syz.0.2530': attribute type 1 has an invalid length. [ 357.425747][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'. [ 357.435921][T15228] netlink: 'syz.0.2530': attribute type 3 has an invalid length. [ 357.451719][T15216] bond6: (slave bridge7): Enslaving as a backup interface with an up link [ 357.462430][T15228] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2530'. [ 357.511851][T15235] netlink: 235 bytes leftover after parsing attributes in process `syz.2.2537'. [ 357.527733][T15207] veth3: entered promiscuous mode [ 357.537496][T15207] veth3: entered allmulticast mode [ 357.548111][T15207] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 357.795287][T15253] netlink: 'syz.4.2539': attribute type 18 has an invalid length. [ 357.812051][T15257] netlink: 'syz.4.2539': attribute type 18 has an invalid length. [ 357.853593][T15253] netlink: 'syz.4.2539': attribute type 18 has an invalid length. [ 357.885153][T15257] netlink: 'syz.4.2539': attribute type 18 has an invalid length. [ 378.512830][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.802747][T15298] ip6gre2: entered promiscuous mode [ 378.877599][T15298] ip6gre2: entered allmulticast mode [ 379.184690][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 379.416663][T15344] netlink: 'syz.1.2566': attribute type 11 has an invalid length. [ 379.522605][T15354] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 379.549461][T15354] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2568'. [ 379.564358][T15348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2565'. [ 379.576936][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 379.726473][T15364] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 379.735253][T15364] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2571'. [ 379.746323][T15364] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 379.754578][T15364] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2571'. [ 379.772390][T15358] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 379.801443][T15358] bond7 (unregistering): Released all slaves [ 380.109264][T15379] netlink: 'syz.4.2576': attribute type 10 has an invalid length. [ 380.124646][T15377] netlink: 'syz.1.2575': attribute type 1 has an invalid length. [ 380.134684][T15379] team0: Device vxcan1 failed to enter team mode [ 380.152959][T15379] team0: Device vxcan1 failed to enter team mode [ 380.190163][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2575'. [ 380.545039][T15400] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2580'. [ 380.626265][T15404] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2582'. [ 380.894248][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 381.399074][T15451] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 381.434363][T15456] syzkaller0: entered promiscuous mode [ 381.444847][T15455] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 381.446866][T15456] syzkaller0: entered allmulticast mode [ 381.457120][T15455] netlink: 'syz.4.2596': attribute type 11 has an invalid length. [ 381.498738][T15461] net_ratelimit: 17 callbacks suppressed [ 381.498759][T15461] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 381.568811][T15451] tipc: Enabled bearer , priority 0 [ 381.647873][T15449] tipc: Resetting bearer [ 381.758301][T15449] tipc: Disabling bearer [ 382.081972][T15485] bond9: Unable to set up delay as MII monitoring is disabled [ 382.091812][T15485] bond9 (unregistering): Released all slaves [ 382.428846][T15525] 8021q: VLANs not supported on ip6_vti0 [ 382.712759][T15536] ipvlan4: entered allmulticast mode [ 382.734879][T15536] batman_adv: batadv0: Adding interface: ipvlan4 [ 382.747889][T15536] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.786439][T15545] xt_TCPMSS: Only works on TCP SYN packets [ 382.793137][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.804414][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.815408][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 382.825750][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.847011][T15548] xt_TCPMSS: Only works on TCP SYN packets [ 382.854700][T15536] batman_adv: batadv0: Interface activated: ipvlan4 [ 383.406597][T15572] ip6erspan0: entered promiscuous mode [ 383.479206][T15577] netlink: 'syz.2.2629': attribute type 1 has an invalid length. [ 383.542727][T15577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 383.584994][T15582] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 383.596532][T15580] veth1_vlan: entered allmulticast mode [ 383.645082][T15577] 8021q: adding VLAN 0 to HW filter on device bond10 [ 383.654003][T15577] bond9: (slave bond10): Enslaving as an active interface with a down link [ 383.707993][T15580] syzkaller0: entered promiscuous mode [ 383.714192][T15580] syzkaller0: entered allmulticast mode [ 383.860069][T15594] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 385.545762][T15591] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 385.549022][T15594] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 385.770751][T15614] __nla_validate_parse: 20 callbacks suppressed [ 385.770779][T15614] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2640'. [ 385.918700][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 386.027862][T15614] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.048417][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 387.110108][T15689] bond11: option packets_per_slave: invalid value (18446744073709551615) [ 387.173416][T15689] bond11: option packets_per_slave: allowed values 0 - 65535 [ 387.217082][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 387.235816][T15689] bond11 (unregistering): Released all slaves [ 387.251377][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 387.268069][T15702] netlink: 'syz.3.2660': attribute type 10 has an invalid length. [ 387.286514][T15687] bond0: left promiscuous mode [ 387.291829][T15687] ip6tnl3: left promiscuous mode [ 387.297077][T15687] bond0: left allmulticast mode [ 387.306063][T15687] ip6tnl3: left allmulticast mode [ 387.675641][T15726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'. [ 387.838940][T15735] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 388.036691][T15747] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2675'. [ 388.047051][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 388.106560][T15750] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2677'. [ 388.357636][T15759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2678'. [ 389.888708][T15696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.164012][T15769] netlink: 'syz.1.2680': attribute type 30 has an invalid length. [ 390.213071][T15769] syzkaller0: entered promiscuous mode [ 390.228486][T15769] syzkaller0: entered allmulticast mode [ 390.785469][T15811] __nla_validate_parse: 6 callbacks suppressed [ 390.785483][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2694'. [ 391.203999][T15812] syzkaller0: entered promiscuous mode [ 391.209957][T15812] syzkaller0: entered allmulticast mode [ 391.434374][T15818] nft_compat: unsupported protocol 0 [ 391.970212][T15848] vlan3: entered allmulticast mode [ 391.992043][T15848] bond0: entered allmulticast mode [ 392.022807][T15855] openvswitch: netlink: Duplicate key (type 2). [ 392.054891][T15854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2708'. [ 392.201791][T15854] bond11 (unregistering): Released all slaves [ 392.219247][T15865] tipc: Enabled bearer , priority 10 [ 392.226924][T15866] netlink: 'syz.0.2709': attribute type 1 has an invalid length. [ 392.240071][T15872] xt_ecn: cannot match TCP bits for non-tcp packets [ 392.268683][T15866] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2709'. [ 392.533300][T15885] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2717'. [ 392.566090][T15885] openvswitch: netlink: Missing key (keys=40, expected=100) [ 392.989278][T15904] team0: Caught tx_queue_len zero misconfig [ 393.088964][T15908] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2725'. [ 393.127412][T15913] netlink: 'syz.4.2726': attribute type 1 has an invalid length. [ 393.147741][T15913] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2726'. [ 393.182429][T15914] tipc: Enabled bearer , priority 10 [ 393.189186][T15912] tipc: Enabling of bearer rejected, already enabled [ 393.515444][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 393.657292][T15938] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2734'. [ 393.745815][T14581] nci: nci_rsp_packet: unknown rsp opcode 0x124 [ 393.770954][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2736'. [ 393.870224][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.261782][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 394.271239][T15964] netlink: 'syz.4.2740': attribute type 30 has an invalid length. [ 395.869907][ T5855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 395.870067][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 396.604505][T15934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.614244][T15943] __nla_validate_parse: 3 callbacks suppressed [ 396.614264][T15943] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2734'. [ 396.838750][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 396.859549][T15985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2747'. [ 396.861012][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2746'. [ 396.889481][T15988] pim6reg: entered allmulticast mode [ 396.899295][T15985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2747'. [ 396.947308][T15986] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2746'. [ 397.088267][T15998] netlink: 'syz.3.2749': attribute type 1 has an invalid length. [ 397.123896][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2749'. [ 397.164817][T15998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.182699][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2749'. [ 397.350194][T16015] netlink: 'syz.0.2752': attribute type 13 has an invalid length. [ 397.393858][T16015] netlink: 'syz.0.2752': attribute type 2 has an invalid length. [ 397.451398][T16012] syzkaller0: entered promiscuous mode [ 397.465839][T16012] syzkaller0: entered allmulticast mode [ 397.656551][T16027] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 397.856736][T16041] syzkaller0: entered promiscuous mode [ 397.880090][T16041] syzkaller0: entered allmulticast mode [ 397.955505][T16047] : renamed from hsr0 (while UP) [ 398.098176][T16051] bond8: entered allmulticast mode [ 398.102819][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 398.112391][T16051] ip6gre1: entered allmulticast mode [ 398.143987][T16059] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2765'. [ 398.568050][T16084] netlink: 'syz.4.2772': attribute type 1 has an invalid length. [ 398.596132][T16085] netlink: 'syz.4.2772': attribute type 1 has an invalid length. [ 398.693068][T16084] bond11: entered promiscuous mode [ 398.706742][T16084] 8021q: adding VLAN 0 to HW filter on device bond11 [ 398.736119][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 399.044319][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.058882][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.068891][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.079404][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.088647][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.225207][T16117] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 399.263968][T16112] lo speed is unknown, defaulting to 1000 [ 399.536430][T16112] lo speed is unknown, defaulting to 1000 [ 399.538712][T16128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.610010][T16131] netlink: 'syz.3.2780': attribute type 17 has an invalid length. [ 399.637776][T16131] ip6gretap0: entered promiscuous mode [ 399.644738][T16131] ip6gretap0: left promiscuous mode [ 399.754807][T16112] chnl_net:caif_netlink_parms(): no params data found [ 399.853156][T16112] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.860432][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.867639][T16112] bridge_slave_0: entered allmulticast mode [ 399.875469][T16112] bridge_slave_0: entered promiscuous mode [ 399.883342][T16112] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.890640][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.897853][T16112] bridge_slave_1: entered allmulticast mode [ 399.905253][T16112] bridge_slave_1: entered promiscuous mode [ 399.930551][T16112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.942158][T16112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.971360][T16112] team0: Port device team_slave_0 added [ 399.978872][T16112] team0: Port device team_slave_1 added [ 400.001957][T16112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.009041][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.035468][T16112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.052136][T16112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.059142][T16112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.086190][T16112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.127135][T16112] hsr_slave_0: entered promiscuous mode [ 400.133587][T16112] hsr_slave_1: entered promiscuous mode [ 400.264833][T16112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.276628][T16112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.385434][T16112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.396373][T16112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.476477][T16112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.487023][T16112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.571377][T16112] bond0: (slave netdevsim0): Releasing backup interface [ 400.583421][T16112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.594746][T16112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.149850][ T5855] Bluetooth: hci5: command tx timeout [ 401.546080][T16082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.581683][T16112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.630226][T16112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.638319][T16112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.661728][T16112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.739381][T16112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.763410][T16112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.781456][T16112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.806714][T16112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.855033][T16153] ip6_vti0: entered promiscuous mode [ 402.162568][T16176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.170871][T16112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.247122][T16112] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.291786][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.298971][T14582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.363984][T14582] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.371211][T14582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.780390][T16198] __nla_validate_parse: 9 callbacks suppressed [ 402.780406][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2795'. [ 402.802693][T16201] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 402.961239][T16212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2797'. [ 403.045886][T16210] netlink: 'syz.4.2797': attribute type 7 has an invalid length. [ 403.056161][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 403.073453][T16215] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2798'. [ 403.089373][T16210] netlink: 'syz.4.2797': attribute type 7 has an invalid length. [ 403.135348][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 403.165497][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.208055][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 403.238938][ T5855] Bluetooth: hci5: command tx timeout [ 403.258089][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2800'. [ 403.293748][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'. [ 403.337848][T16112] veth0_vlan: entered promiscuous mode [ 403.362571][T16112] veth1_vlan: entered promiscuous mode [ 403.374545][T16230] ipt_ECN: cannot use operation on non-tcp rule [ 403.381038][T16231] ipt_ECN: cannot use operation on non-tcp rule [ 403.408522][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2802'. [ 403.433686][T16112] veth0_macvtap: entered promiscuous mode [ 403.455449][T16112] veth1_macvtap: entered promiscuous mode [ 403.480610][T16112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.497682][T16112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.525578][T14581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.562172][T14581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.596745][T14581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.611246][T14581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.802229][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2806'. [ 403.898984][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.927142][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.065098][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.086291][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.391060][T16280] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 404.498997][T16280] bond1 (unregistering): Released all slaves [ 404.504009][T16284] sctp: [Deprecated]: syz.4.2816 (pid 16284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.504009][T16284] Use struct sctp_sack_info instead [ 404.627269][T16284] sctp: [Deprecated]: syz.4.2816 (pid 16284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.627269][T16284] Use struct sctp_sack_info instead [ 405.201716][T16311] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 405.201716][T16311] Please contact the netfilter-devel mailing list or update your nftables rules. [ 405.320885][ T5855] Bluetooth: hci5: command tx timeout [ 405.463366][T16315] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.471061][T16315] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.532845][T16315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.550368][T16315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.665271][T14579] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.710111][T14579] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.735531][T14579] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.778553][T14579] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.907057][ T7924] IPVS: starting estimator thread 0... [ 406.019859][T16338] IPVS: using max 29 ests per chain, 69600 per kthread [ 406.331234][T16362] netlink: 'syz.3.2835': attribute type 1 has an invalid length. [ 406.445266][T16373] : renamed from team_slave_1 [ 406.523369][T16379] netlink: 'syz.3.2840': attribute type 1 has an invalid length. [ 406.900600][T16401] xt_hashlimit: size too large, truncated to 1048576 [ 407.313077][ T994] page_pool_release_retry() stalled pool shutdown: id 63, 1 inflight 60 sec [ 407.389847][ T5855] Bluetooth: hci5: command tx timeout [ 407.439349][T16428] netlink: 'syz.3.2859': attribute type 14 has an invalid length. [ 407.473186][T16428] netlink: 'syz.3.2859': attribute type 14 has an invalid length. [ 408.034712][T16475] sctp: [Deprecated]: syz.0.2871 (pid 16475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.034712][T16475] Use struct sctp_sack_info instead [ 408.102585][T16469] syzkaller0: entered promiscuous mode [ 408.338715][T16490] pim6reg: entered allmulticast mode [ 408.416969][T16496] pim6reg: left allmulticast mode [ 408.494959][T16503] netlink: 'syz.1.2877': attribute type 1 has an invalid length. [ 408.516937][T16503] netlink: 'syz.1.2877': attribute type 2 has an invalid length. [ 408.902522][T16512] syzkaller0: entered promiscuous mode [ 408.923743][T16512] syzkaller0: entered allmulticast mode [ 409.159260][T16548] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 410.893229][T16548] bond10: entered promiscuous mode [ 410.903311][T16548] 8021q: adding VLAN 0 to HW filter on device bond10 [ 411.141398][T16563] __nla_validate_parse: 16 callbacks suppressed [ 411.141419][T16563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2894'. [ 411.168096][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 411.195729][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2897'. [ 411.239756][T16566] team1: entered promiscuous mode [ 411.257424][T16566] team1: entered allmulticast mode [ 411.562716][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2905'. [ 411.600847][T16600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2905'. [ 411.644461][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 411.750141][T16613] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 411.798137][T16625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2910'. [ 411.857152][T16628] netlink: 'syz.1.2911': attribute type 21 has an invalid length. [ 411.892578][T16628] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.021202][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.034683][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.044463][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.080809][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.092319][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.314071][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'. [ 412.416764][T16637] tipc: Started in network mode [ 412.435951][T16637] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 412.458724][T16637] tipc: Enabled bearer , priority 24 [ 412.575363][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 412.591100][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 412.675473][T16657] xt_hashlimit: size too large, truncated to 1048576 [ 412.785223][T16632] lo speed is unknown, defaulting to 1000 [ 412.834754][T16658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 412.865787][T16658] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 412.887171][T16658] gretap2: entered promiscuous mode [ 412.924004][T16658] gretap2: entered allmulticast mode [ 412.949394][T16662] netlink: 'syz.1.2918': attribute type 2 has an invalid length. [ 413.337475][T16632] lo speed is unknown, defaulting to 1000 [ 413.587951][ T5895] tipc: Node number set to 10005162 [ 413.673885][T16632] chnl_net:caif_netlink_parms(): no params data found [ 413.842929][T16632] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.850569][T16632] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.858002][T16632] bridge_slave_0: entered allmulticast mode [ 413.869895][T16632] bridge_slave_0: entered promiscuous mode [ 413.878776][T16632] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.891166][T16632] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.898497][T16632] bridge_slave_1: entered allmulticast mode [ 413.908456][T16632] bridge_slave_1: entered promiscuous mode [ 413.983670][T16632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.015185][T16632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.100622][T16632] team0: Port device team_slave_0 added [ 414.119411][T16632] team0: Port device team_slave_1 added [ 414.180211][T16632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.199494][ T5855] Bluetooth: hci4: command tx timeout [ 414.208795][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.251045][T16632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.276697][T16632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.283842][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.314630][T16632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.408018][T16632] hsr_slave_0: entered promiscuous mode [ 414.418177][T16632] hsr_slave_1: entered promiscuous mode [ 414.426622][T16632] debugfs: 'hsr0' already exists in 'hsr' [ 414.439976][T16632] Cannot create hsr debugfs directory [ 414.602942][T16632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.614852][T16632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.694967][T16632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.705443][T16632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.782246][T16632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.793990][T16632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.862403][T16632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.873468][T16632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.515737][T16651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.543711][T16632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 415.602872][T16632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.674923][T16632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.703422][T16632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.747420][T16632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 415.787822][T16632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.826041][T16632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.882174][T16632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.927964][T16707] tipc: Enabling of bearer rejected, failed to enable media [ 415.970823][T16714] netlink: 'syz.1.2927': attribute type 29 has an invalid length. [ 416.147308][T16632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.185046][T16632] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.229096][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.236339][T14579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.270041][ T5855] Bluetooth: hci4: command tx timeout [ 416.282318][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.289495][T14579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.694188][T16750] __nla_validate_parse: 8 callbacks suppressed [ 416.694210][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 416.711492][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2937'. [ 416.722766][T16709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 416.739069][T16709] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 416.877492][T16632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.894420][T16755] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2939'. [ 416.944057][T16755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.048295][T16632] veth0_vlan: entered promiscuous mode [ 417.056057][T16769] netlink: 'syz.4.2943': attribute type 9 has an invalid length. [ 417.063695][T16632] veth1_vlan: entered promiscuous mode [ 417.069171][T16757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.188865][T16632] veth0_macvtap: entered promiscuous mode [ 417.235388][T16632] veth1_macvtap: entered promiscuous mode [ 417.306373][T16632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.328200][T16632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.383942][T14581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.428451][T14581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.456507][T14581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.466595][T14581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.474808][T16785] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2948'. [ 417.637637][T14581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.667896][T14581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.820474][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.838849][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.853027][T16789] netlink: 'syz.3.2950': attribute type 1 has an invalid length. [ 418.189235][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.212611][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.221542][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.231487][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.240359][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.305126][T16808] lo speed is unknown, defaulting to 1000 [ 418.355616][ T5855] Bluetooth: hci4: command tx timeout [ 418.580042][T16808] lo speed is unknown, defaulting to 1000 [ 418.743079][T14579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.774241][T16808] chnl_net:caif_netlink_parms(): no params data found [ 418.847263][T14579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.901871][T14579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.930772][T16808] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.937964][T16808] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.947406][T16808] bridge_slave_0: entered allmulticast mode [ 418.955482][T16808] bridge_slave_0: entered promiscuous mode [ 418.966356][T16808] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.974221][T16808] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.982050][T16808] bridge_slave_1: entered allmulticast mode [ 418.989392][T16808] bridge_slave_1: entered promiscuous mode [ 419.021192][T14579] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.049391][T16808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.063631][T16808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.103647][T16808] team0: Port device team_slave_0 added [ 419.113804][T16808] team0: Port device team_slave_1 added [ 419.146388][T16808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.153410][T16808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.181296][T16808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.196353][T16808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.204132][T16808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.230723][T16808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.328350][T16808] hsr_slave_0: entered promiscuous mode [ 419.334804][T16808] hsr_slave_1: entered promiscuous mode [ 419.341496][T16808] debugfs: 'hsr0' already exists in 'hsr' [ 419.347243][T16808] Cannot create hsr debugfs directory [ 419.589833][T14579] bond0 (unregistering): (slave ip6tnl3): Releasing backup interface [ 419.684422][T14579] bond1 (unregistering): (slave gretap1): Releasing active interface [ 419.712249][T14579] bond7 (unregistering): (slave gretap2): Releasing active interface [ 419.777065][T14579] bond4 (unregistering): (slave geneve2): Releasing active interface [ 419.973049][T14579] bond1 (unregistering): (slave bridge4): Releasing active interface [ 420.053447][T14579] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 420.061708][T14579] bridge6 (unregistering): left promiscuous mode [ 420.153659][T14579] bond1 (unregistering): Released all slaves [ 420.166814][T14579] bond2 (unregistering): Released all slaves [ 420.183181][T14579] bond3 (unregistering): Released all slaves [ 420.204786][T14579] bond4 (unregistering): Released all slaves [ 420.219093][T14579] bond5 (unregistering): Released all slaves [ 420.235487][T14579] bond6 (unregistering): Released all slaves [ 420.264998][T14579] bond7 (unregistering): Released all slaves [ 420.269951][ T5855] Bluetooth: hci0: command tx timeout [ 420.284178][T14579] bond0 (unregistering): Released all slaves [ 420.299111][T14579] bond8 (unregistering): Released all slaves [ 420.314989][T14579] bond9 (unregistering): Released all slaves [ 420.328291][T14579] bond10 (unregistering): Released all slaves [ 420.348651][T14579] bond11 (unregistering): Released all slaves [ 420.429822][ T5855] Bluetooth: hci4: command tx timeout [ 420.529263][T14579] : left promiscuous mode [ 420.720228][T14579] tipc: Left network mode [ 420.945057][T16797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.383061][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 421.749096][T16848] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2960'. [ 421.853960][ T30] audit: type=1107 audit(1777186560.125:2): pid=16849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً9 ŇFUA٠0׉O7Ɗltݕ/' [ 421.914548][T16850] bridge0: Caught tx_queue_len zero misconfig [ 422.221203][T16808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.250996][T16808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.267480][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'. [ 422.297770][T16876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2966'. [ 422.336040][T16808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.351562][ T5855] Bluetooth: hci0: command tx timeout [ 422.377995][T16808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.433441][T16808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.464457][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2967'. [ 422.475646][T16808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.484052][T16880] syzkaller1: entered promiscuous mode [ 422.491149][T16880] syzkaller1: entered allmulticast mode [ 422.506703][T16887] block nbd1: Unsupported socket: should be TCP or UNIX. [ 422.506952][T16889] IPVS: set_ctl: invalid protocol: 60 172.30.0.5:20003 [ 422.542207][T16808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.555585][T16808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.566833][T16884] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 422.581145][T16884] netlink: 'syz.0.2969': attribute type 1 has an invalid length. [ 422.584217][T16880] netlink: 'syz.1.2967': attribute type 4 has an invalid length. [ 422.754241][T16757] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 422.853695][T16897] syzkaller0: entered promiscuous mode [ 422.861084][T16897] syzkaller0: entered allmulticast mode [ 423.079368][T16906] netlink: 'syz.2.2974': attribute type 10 has an invalid length. [ 423.093615][T14579] dummy0: left allmulticast mode [ 423.123391][T14579] veth0_macvtap: left promiscuous mode [ 423.143639][T14579] veth1_vlan: left promiscuous mode [ 423.161643][T14579] veth0_vlan: left promiscuous mode [ 423.264469][T16916] netlink: 'syz.0.2973': attribute type 1 has an invalid length. [ 423.293092][T16916] netlink: 476 bytes leftover after parsing attributes in process `syz.0.2973'. [ 423.318334][T16916] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2973'. [ 423.530612][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 423.570916][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2976'. [ 423.813033][T16906] bridge_slave_1: left allmulticast mode [ 423.827546][T16906] bridge_slave_1: left promiscuous mode [ 423.843317][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.850388][ T13] smbdirect: ib_dev[syz0] removed [ 423.862606][T16906] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 423.881588][ T5903] lo speed is unknown, defaulting to 1000 [ 423.922756][ T5903] infiniband syz0: ib_query_port failed (-19) [ 424.068066][T16808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.073043][T16935] netlink: 'syz.4.2980': attribute type 16 has an invalid length. [ 424.084970][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 424.113935][T16940] netlink: 'syz.1.2977': attribute type 1 has an invalid length. [ 424.125680][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'. [ 424.164059][T16940] 8021q: adding VLAN 0 to HW filter on device bond11 [ 424.316177][T16932] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 424.367803][T16940] bond11: entered promiscuous mode [ 424.387399][T16940] bond11: entered allmulticast mode [ 424.393970][T16955] Cannot find add_set index 2 as target [ 424.403165][T16808] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.432065][ T5855] Bluetooth: hci0: command tx timeout [ 424.434515][T16957] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 424.482661][T14581] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.489849][T14581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.536566][T14579] IPVS: stop unused estimator thread 0... [ 424.556785][T14581] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.562867][T16957] xt_NFQUEUE: number of total queues is 0 [ 424.563960][T14581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.632335][T16967] veth1_vlan: Caught tx_queue_len zero misconfig [ 424.654339][T16969] netlink: 'syz.4.2988': attribute type 1 has an invalid length. [ 424.927905][T16808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.003847][T16808] veth0_vlan: entered promiscuous mode [ 425.025342][T16808] veth1_vlan: entered promiscuous mode [ 425.078202][T16808] veth0_macvtap: entered promiscuous mode [ 425.088502][T16808] veth1_macvtap: entered promiscuous mode [ 425.107545][T16808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.124964][T16808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.138186][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.148520][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.161988][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.171425][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.294045][T14579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.302315][T14579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.333744][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.344255][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.500842][T16987] netlink: 'syz.3.2952': attribute type 10 has an invalid length. [ 425.520120][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.531671][T16987] bridge_slave_1: left allmulticast mode [ 425.537763][T16987] bridge_slave_1: left promiscuous mode [ 425.545011][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.562770][T16987] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 425.647934][T16997] netlink: 'syz.0.2995': attribute type 1 has an invalid length. [ 425.752248][T17001] netlink: 'syz.1.2996': attribute type 10 has an invalid length. [ 425.879560][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.251063][T17025] syzkaller1: entered promiscuous mode [ 426.275468][T17025] syzkaller1: entered allmulticast mode [ 426.509938][ T5855] Bluetooth: hci0: command tx timeout [ 426.934637][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.956761][T17065] __nla_validate_parse: 7 callbacks suppressed [ 426.956778][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3013'. [ 427.046651][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 427.115923][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'. [ 427.117903][T17068] syzkaller0: entered promiscuous mode [ 427.189027][T17068] syzkaller0: entered allmulticast mode [ 427.534512][T17092] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3021'. [ 427.676406][T17101] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3024'. [ 427.699553][T17101] validate_nla: 2 callbacks suppressed [ 427.699572][T17101] netlink: 'syz.4.3024': attribute type 3 has an invalid length. [ 427.752499][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 427.812914][T17110] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 427.975320][T17116] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3031'. [ 428.015672][T17122] netlink: 'syz.0.3029': attribute type 1 has an invalid length. [ 428.104977][T17130] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3033'. [ 428.233901][T17140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'. [ 428.354947][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 428.506752][T17163] sctp: [Deprecated]: syz.0.3040 (pid 17163) Use of int in maxseg socket option. [ 428.506752][T17163] Use struct sctp_assoc_value instead [ 428.598835][T17170] netlink: 'syz.2.3043': attribute type 25 has an invalid length. [ 428.623551][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.632718][T17170] netlink: 'syz.2.3043': attribute type 25 has an invalid length. [ 428.642540][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.679096][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.738737][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.849192][T17179] netlink: 'syz.4.3046': attribute type 2 has an invalid length. [ 428.873984][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c17fc00: rx timeout, send abort [ 428.924468][T17179] netlink: 'syz.4.3046': attribute type 2 has an invalid length. [ 428.933481][T17182] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 429.095708][T17190] netlink: 'syz.1.3047': attribute type 3 has an invalid length. [ 429.382301][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c17fc00: abort rx timeout. Force session deactivation [ 429.421645][T17215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.528526][T17220] netlink: 'syz.2.3056': attribute type 3 has an invalid length. [ 429.561116][T17220] netlink: 'syz.2.3056': attribute type 12 has an invalid length. [ 430.321740][T17270] bond1: entered promiscuous mode [ 430.328489][T17270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.380896][T17271] bridge1: entered promiscuous mode [ 430.387052][T17271] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 430.431095][ T137] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 430.602654][ T137] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 430.911931][T17295] x_tables: duplicate underflow at hook 1 [ 431.364114][T17319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.738185][T17336] delete_channel: no stack [ 431.967445][T17351] __nla_validate_parse: 38 callbacks suppressed [ 431.967465][T17351] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3094'. [ 431.987189][T17353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3095'. [ 432.014727][T17354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3095'. [ 432.049233][T17353] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3095'. [ 432.078243][T17354] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3095'. [ 432.651735][T17401] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3105'. [ 432.652884][T17402] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3102'. [ 432.728905][T17402] validate_nla: 6 callbacks suppressed [ 432.728920][T17402] netlink: 'syz.4.3102': attribute type 2 has an invalid length. [ 432.858080][T17403] bond12: option lp_interval: invalid value (0) [ 432.872267][T17403] bond12: option lp_interval: allowed values 1 - 2147483647 [ 432.929951][T17420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.953165][T17403] bond12 (unregistering): Released all slaves [ 433.105098][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'. [ 433.319100][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 433.495243][T17437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.518865][T17452] xt_hashlimit: size too large, truncated to 1048576 [ 433.681742][T17462] netlink: 'syz.1.3119': attribute type 1 has an invalid length. [ 433.694518][T17462] C: renamed from lo [ 433.724466][T17462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 433.802664][T17473] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 433.840333][T17473] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3121'. [ 433.851057][T17473] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 433.859297][T17472] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 433.883573][T17472] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 434.342536][T17501] IPVS: length: 24 != 73752 [ 434.392753][T17503] syzkaller0: entered promiscuous mode [ 434.407472][T17503] syzkaller0: entered allmulticast mode [ 434.437082][T17509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 434.650968][T17522] netlink: 'syz.3.3131': attribute type 11 has an invalid length. [ 434.834807][T17535] netlink: zone id is out of range [ 434.860066][T17535] netlink: zone id is out of range [ 434.876151][T17535] netlink: zone id is out of range [ 434.893633][T17535] netlink: zone id is out of range [ 434.905640][T17535] netlink: zone id is out of range [ 434.942955][T17541] xt_hashlimit: size too large, truncated to 1048576 [ 435.308943][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.324629][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.334607][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.461120][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.484382][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.574706][T17561] lo speed is unknown, defaulting to 1000 [ 435.681640][T17571] net_ratelimit: 55 callbacks suppressed [ 435.681662][T17571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.739467][T17571] bridge1: entered promiscuous mode [ 435.745090][T17571] bridge1: entered allmulticast mode [ 435.756794][T17571] team0: Port device bridge1 added [ 435.775885][T17571] bridge0: port 3(team0) entered blocking state [ 435.791743][T17571] bridge0: port 3(team0) entered disabled state [ 435.802185][T17571] team0: entered allmulticast mode [ 435.815620][T17571] team_slave_0: entered allmulticast mode [ 435.821722][T17571] team_slave_1: entered allmulticast mode [ 435.835195][T17577] Bluetooth: MGMT ver 1.23 [ 435.841074][T17571] team0: entered promiscuous mode [ 435.846266][T17571] team_slave_0: entered promiscuous mode [ 435.855922][T17571] team_slave_1: entered promiscuous mode [ 435.871027][T17571] bridge0: port 3(team0) entered blocking state [ 435.877427][T17571] bridge0: port 3(team0) entered forwarding state [ 436.160965][T17561] chnl_net:caif_netlink_parms(): no params data found [ 436.256429][T17596] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 436.289989][T17561] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.297525][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.305524][T17561] bridge_slave_0: entered allmulticast mode [ 436.313996][T17561] bridge_slave_0: entered promiscuous mode [ 436.323367][T17561] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.331017][T17561] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.338743][T17561] bridge_slave_1: entered allmulticast mode [ 436.348453][T17561] bridge_slave_1: entered promiscuous mode [ 436.401148][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.413530][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.448307][T17561] team0: Port device team_slave_0 added [ 436.456759][T17561] team0: Port device team_slave_1 added [ 436.489432][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.496833][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.523564][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.536022][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.543492][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.570601][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.637532][T17605] veth3: entered promiscuous mode [ 436.642909][T17605] veth3: entered allmulticast mode [ 436.665408][T17561] hsr_slave_0: entered promiscuous mode [ 436.671875][T17561] hsr_slave_1: entered promiscuous mode [ 436.678135][T17561] debugfs: 'hsr0' already exists in 'hsr' [ 436.684225][T17561] Cannot create hsr debugfs directory [ 436.717899][T17605] veth5: entered promiscuous mode [ 436.723140][T17605] veth5: entered allmulticast mode [ 436.894036][T17561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.905635][T17561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.996217][T17561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.006651][T17561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.091904][T17561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.103558][T17561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.179252][T17561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.191124][T17561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.550159][ T5855] Bluetooth: hci3: command tx timeout [ 437.923286][T17542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.971146][T17561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.067869][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.086650][T17561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.111203][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.126867][T17561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.154119][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.209722][T17561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.245166][T17626] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 438.257055][T17561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.518100][T17561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.567044][T17561] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.605448][T14581] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.612716][T14581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.672080][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 438.692332][T14581] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.699506][T14581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.794914][T17657] __nla_validate_parse: 45 callbacks suppressed [ 438.794942][T17657] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3164'. [ 438.883382][T17669] openvswitch: netlink: IP tunnel dst address not specified [ 438.921735][T17561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.096147][T17677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3171'. [ 439.097739][T17681] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 439.171597][T17682] bond12 (unregistering): Released all slaves [ 439.303258][T17692] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 439.469284][T17692] bond1: entered promiscuous mode [ 439.475970][T17692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.547630][T17692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.580531][T17692] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 439.602098][T17692] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 439.625289][T17692] bond1: (slave ip6gre1): making interface the new active one [ 439.635595][ T5855] Bluetooth: hci3: command tx timeout [ 439.650132][T17692] ip6gre1: entered promiscuous mode [ 439.658542][T17692] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 439.755382][T17561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.775598][T17715] netlink: 'syz.2.3179': attribute type 6 has an invalid length. [ 439.921515][T17561] veth0_vlan: entered promiscuous mode [ 439.954360][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968866][T17724] netlink: 'syz.0.3183': attribute type 10 has an invalid length. [ 439.992671][T17561] veth1_vlan: entered promiscuous mode [ 440.016618][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.033986][T17724] bridge_slave_1: left allmulticast mode [ 440.041501][T17724] bridge_slave_1: left promiscuous mode [ 440.058454][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.084724][T17724] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 440.123135][T17729] macvtap1: entered promiscuous mode [ 440.148365][T17729] macvtap1: entered allmulticast mode [ 440.192982][T17729] veth1_vlan: entered allmulticast mode [ 440.255812][T17731] macvtap2: entered promiscuous mode [ 440.263117][T17731] macvtap2: entered allmulticast mode [ 440.375303][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 440.465853][T17561] veth0_macvtap: entered promiscuous mode [ 440.477555][T17561] veth1_macvtap: entered promiscuous mode [ 440.530203][T17561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.584336][T17561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.663836][T14579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.702591][T14579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.728388][T14579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.747222][T14579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.986723][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.015848][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.071162][T14579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.098995][T14579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.196348][T17785] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3201'. [ 441.547020][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 441.711160][ T5855] Bluetooth: hci3: command tx timeout [ 442.365672][T17784] : left allmulticast mode [ 442.376897][T17784] hsr_slave_0: left allmulticast mode [ 442.485172][T17784] veth1_vlan: left allmulticast mode [ 442.512307][T17798] ip6tnl1: entered allmulticast mode [ 442.557943][T17804] bond2: (slave bond_slave_1): Device is not our slave [ 442.571875][T17804] bond2: option active_slave: invalid value (bond_slave_1) [ 442.586824][T17804] bond2 (unregistering): Released all slaves [ 442.667642][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3210'. [ 442.718707][T17814] team0: Device vlan2 is already an upper device of the team interface [ 442.770023][T14581] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.790827][T14581] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.827762][T14581] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.851120][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.860595][T14581] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.874879][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.885815][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.895007][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.902800][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.944769][T14581] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.982458][T14581] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.005012][T14581] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.039590][T14581] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.040471][T17828] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 443.296139][T17825] lo speed is unknown, defaulting to 1000 [ 443.482534][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3217'. [ 443.790813][ T5855] Bluetooth: hci3: command tx timeout [ 444.043683][T17866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 444.639544][T17899] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 444.653570][T17825] chnl_net:caif_netlink_parms(): no params data found [ 444.951191][T17921] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3239'. [ 444.971097][T17825] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.978529][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 444.990553][ T5855] Bluetooth: hci1: command tx timeout [ 444.992250][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.015721][T17825] bridge_slave_0: entered allmulticast mode [ 445.034862][T17825] bridge_slave_0: entered promiscuous mode [ 445.119112][T17918] C: renamed from lo (while UP) [ 445.128231][T17918] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 445.144299][T17825] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.152336][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.161635][T17825] bridge_slave_1: entered allmulticast mode [ 445.168704][T17825] bridge_slave_1: entered promiscuous mode [ 445.223188][T17825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.243090][T17825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.262279][T17931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.347843][T17825] team0: Port device team_slave_0 added [ 445.430788][T17825] team0: Port device team_slave_1 added [ 445.512439][T17825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.519423][T17825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.554519][T17825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.929585][T17964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 446.046411][T17825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.053885][T17825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.089761][T17825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.258914][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 446.297247][T17974] netlink: 'syz.2.3250': attribute type 5 has an invalid length. [ 446.335905][T17825] hsr_slave_0: entered promiscuous mode [ 446.339991][T17974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3250'. [ 446.365530][T17825] hsr_slave_1: entered promiscuous mode [ 446.373415][T17825] debugfs: 'hsr0' already exists in 'hsr' [ 446.379184][T17825] Cannot create hsr debugfs directory [ 446.771642][T17987] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3254'. [ 446.865968][T17982] IPVS: Unknown mcast interface: syzkaller1 [ 446.899479][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3255'. [ 447.070717][ T5855] Bluetooth: hci1: command tx timeout [ 447.485427][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'. [ 447.532075][T18016] bond2 (unregistering): Released all slaves [ 447.722006][T18026] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3266'. [ 448.217107][T17825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.233255][T17825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.352707][T17825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.378565][T17825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.389566][T17825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.414819][T17825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.434469][T17825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.470564][T17825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.601607][T18057] netlink: 'syz.1.3273': attribute type 26 has an invalid length. [ 448.632408][T18057] netlink: 'syz.1.3273': attribute type 26 has an invalid length. [ 448.825146][T17825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.849283][T17825] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.871910][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.879125][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.948841][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.956051][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.151004][ T5855] Bluetooth: hci1: command tx timeout [ 449.288966][T18086] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 449.361344][T18085] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 449.415346][T18097] netlink: 'syz.2.3283': attribute type 10 has an invalid length. [ 449.425833][T18096] __nla_validate_parse: 5 callbacks suppressed [ 449.425850][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'. [ 449.453669][T18097] team0: Device vxcan1 is of different type [ 449.568853][T18103] tipc: Enabling of bearer rejected, failed to enable media [ 449.598353][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'. [ 449.611606][T18103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3285'. [ 449.613791][T18109] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.700606][T17825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.226825][T18152] IPVS: length: 334 != 24 [ 450.607272][T17825] veth0_vlan: entered promiscuous mode [ 450.684167][T17825] veth1_vlan: entered promiscuous mode [ 450.884269][T17825] veth0_macvtap: entered promiscuous mode [ 450.925410][T17825] veth1_macvtap: entered promiscuous mode [ 450.965304][T18184] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 451.116765][T18184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.137102][T17825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.230243][ T5855] Bluetooth: hci1: command tx timeout [ 451.242227][T18186] bond1: (slave veth3): Enslaving as an active interface with a down link [ 451.283131][T18189] bond1: (slave veth0_to_bond): making interface the new active one [ 451.295586][T18189] veth0_to_bond: entered promiscuous mode [ 451.302261][T18189] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 451.361740][T18189] bond1: (slave veth5): Enslaving as an active interface with a down link [ 451.372284][T18189] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 451.381649][T18189] netlink: 'syz.1.3308': attribute type 2 has an invalid length. [ 451.440850][T17825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.487797][T14587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.516336][T14587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.535796][T14587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.579305][T14587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.875963][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.917504][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.092900][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.155121][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.227064][T18231] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 452.252645][T18231] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.327378][T18233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.705105][T18255] netlink: 'syz.2.3327': attribute type 10 has an invalid length. [ 452.747097][T18255] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 452.841652][T18266] xt_l2tp: invalid flags combination: 8 [ 452.864423][T18265] syzkaller0: entered promiscuous mode [ 452.886327][T18265] syzkaller0: entered allmulticast mode [ 452.963683][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 453.098484][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 453.219895][T18285] netlink: 'syz.1.3336': attribute type 1 has an invalid length. [ 453.297237][T18287] syzkaller0: entered promiscuous mode [ 453.306373][T18287] syzkaller0: entered allmulticast mode [ 453.352393][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3337'. [ 453.541442][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 453.555929][T18302] netlink: 'syz.0.3342': attribute type 30 has an invalid length. [ 453.571811][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 453.583783][T18300] netlink: 'syz.4.3340': attribute type 1 has an invalid length. [ 453.600161][T18300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3340'. [ 453.614945][T18304] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 453.615863][T18302] netlink: 'syz.0.3342': attribute type 30 has an invalid length. [ 453.634463][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 453.706531][ T7924] IPVS: starting estimator thread 0... [ 453.829828][T18311] IPVS: using max 30 ests per chain, 72000 per kthread [ 453.964452][T18324] [ 453.966824][T18324] ====================================================== [ 453.973840][T18324] WARNING: possible circular locking dependency detected [ 453.980875][T18324] syzkaller #0 Not tainted [ 453.985287][T18324] ------------------------------------------------------ [ 453.992304][T18324] syz.2.3345/18324 is trying to acquire lock: [ 453.998368][T18324] ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 454.007876][T18324] [ 454.007876][T18324] but task is already holding lock: [ 454.015241][T18324] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 454.024840][T18324] [ 454.024840][T18324] which lock already depends on the new lock. [ 454.024840][T18324] [ 454.035232][T18324] [ 454.035232][T18324] the existing dependency chain (in reverse order) is: [ 454.044237][T18324] [ 454.044237][T18324] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 454.052137][T18324] _raw_spin_lock_bh+0x36/0x50 [ 454.057419][T18324] nr_rt_ioctl+0x40c/0xf90 [ 454.062344][T18324] sock_do_ioctl+0x101/0x320 [ 454.067448][T18324] sock_ioctl+0x5c6/0x7f0 [ 454.072294][T18324] __se_sys_ioctl+0xfc/0x170 [ 454.077414][T18324] do_syscall_64+0x15f/0xf80 [ 454.082534][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.088941][T18324] [ 454.088941][T18324] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 454.096928][T18324] _raw_spin_lock_bh+0x36/0x50 [ 454.102207][T18324] nr_rt_ioctl+0x215/0xf90 [ 454.107134][T18324] sock_do_ioctl+0x101/0x320 [ 454.112237][T18324] sock_ioctl+0x5c6/0x7f0 [ 454.117081][T18324] __se_sys_ioctl+0xfc/0x170 [ 454.122185][T18324] do_syscall_64+0x15f/0xf80 [ 454.127294][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.133700][T18324] [ 454.133700][T18324] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 454.141514][T18324] __lock_acquire+0x15a5/0x2cf0 [ 454.146885][T18324] lock_acquire+0x106/0x350 [ 454.151903][T18324] _raw_spin_lock_bh+0x36/0x50 [ 454.157177][T18324] nr_rt_device_down+0xbe/0x860 [ 454.162538][T18324] nr_device_event+0x137/0x150 [ 454.167817][T18324] notifier_call_chain+0x1ad/0x3d0 [ 454.173441][T18324] __dev_notify_flags+0x16d/0x310 [ 454.178972][T18324] netif_change_flags+0xe8/0x1a0 [ 454.184421][T18324] dev_change_flags+0x130/0x270 [ 454.189792][T18324] dev_ioctl+0x7b4/0x1150 [ 454.194645][T18324] sock_do_ioctl+0x23e/0x320 [ 454.199750][T18324] sock_ioctl+0x5c6/0x7f0 [ 454.204595][T18324] __se_sys_ioctl+0xfc/0x170 [ 454.209698][T18324] do_syscall_64+0x15f/0xf80 [ 454.214808][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.221211][T18324] [ 454.221211][T18324] other info that might help us debug this: [ 454.221211][T18324] [ 454.231422][T18324] Chain exists of: [ 454.231422][T18324] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 454.231422][T18324] [ 454.245236][T18324] Possible unsafe locking scenario: [ 454.245236][T18324] [ 454.252671][T18324] CPU0 CPU1 [ 454.258021][T18324] ---- ---- [ 454.263369][T18324] lock(nr_neigh_list_lock); [ 454.268033][T18324] lock(&nr_node->node_lock); [ 454.275306][T18324] lock(nr_neigh_list_lock); [ 454.282502][T18324] lock(nr_node_list_lock); [ 454.287085][T18324] [ 454.287085][T18324] *** DEADLOCK *** [ 454.287085][T18324] [ 454.295216][T18324] 2 locks held by syz.2.3345/18324: [ 454.300399][T18324] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 454.309196][T18324] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 454.319195][T18324] [ 454.319195][T18324] stack backtrace: [ 454.325081][T18324] CPU: 0 UID: 0 PID: 18324 Comm: syz.2.3345 Not tainted syzkaller #0 PREEMPT(full) [ 454.325101][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.325121][T18324] Call Trace: [ 454.325129][T18324] [ 454.325136][T18324] dump_stack_lvl+0xe8/0x150 [ 454.325164][T18324] print_circular_bug+0x2e1/0x300 [ 454.325184][T18324] check_noncircular+0x12e/0x150 [ 454.325204][T18324] __lock_acquire+0x15a5/0x2cf0 [ 454.325231][T18324] ? __lock_acquire+0x6b5/0x2cf0 [ 454.325255][T18324] ? dsa_user_netdevice_event+0x495/0x2850 [ 454.325274][T18324] ? packet_notifier+0x121/0xf70 [ 454.325295][T18324] ? nr_rt_device_down+0xbe/0x860 [ 454.325309][T18324] lock_acquire+0x106/0x350 [ 454.325331][T18324] ? nr_rt_device_down+0xbe/0x860 [ 454.325346][T18324] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 454.325368][T18324] ? nr_rt_device_down+0xbe/0x860 [ 454.325381][T18324] _raw_spin_lock_bh+0x36/0x50 [ 454.325401][T18324] ? nr_rt_device_down+0xbe/0x860 [ 454.325414][T18324] nr_rt_device_down+0xbe/0x860 [ 454.325428][T18324] ? nr_device_event+0x12f/0x150 [ 454.325455][T18324] nr_device_event+0x137/0x150 [ 454.325477][T18324] notifier_call_chain+0x1ad/0x3d0 [ 454.325498][T18324] __dev_notify_flags+0x16d/0x310 [ 454.325515][T18324] ? __pfx___dev_notify_flags+0x10/0x10 [ 454.325530][T18324] ? __dev_change_flags+0x5a0/0x7e0 [ 454.325547][T18324] ? __pfx___dev_change_flags+0x10/0x10 [ 454.325563][T18324] ? full_name_hash+0x92/0xe0 [ 454.325584][T18324] netif_change_flags+0xe8/0x1a0 [ 454.325602][T18324] dev_change_flags+0x130/0x270 [ 454.325618][T18324] dev_ioctl+0x7b4/0x1150 [ 454.325642][T18324] sock_do_ioctl+0x23e/0x320 [ 454.325664][T18324] ? __pfx_sock_do_ioctl+0x10/0x10 [ 454.325683][T18324] ? do_futex+0x333/0x420 [ 454.325703][T18324] sock_ioctl+0x5c6/0x7f0 [ 454.325724][T18324] ? __pfx_sock_ioctl+0x10/0x10 [ 454.325742][T18324] ? __fget_files+0x2a/0x420 [ 454.325758][T18324] ? __fget_files+0x3a0/0x420 [ 454.325772][T18324] ? __fget_files+0x2a/0x420 [ 454.325788][T18324] ? bpf_lsm_file_ioctl+0x9/0x20 [ 454.325809][T18324] ? __pfx_sock_ioctl+0x10/0x10 [ 454.325828][T18324] __se_sys_ioctl+0xfc/0x170 [ 454.325849][T18324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.325866][T18324] do_syscall_64+0x15f/0xf80 [ 454.325887][T18324] ? trace_irq_disable+0x3b/0x140 [ 454.325907][T18324] ? clear_bhb_loop+0x40/0x90 [ 454.325925][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.325940][T18324] RIP: 0033:0x7fd66a19cdd9 [ 454.325956][T18324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.325971][T18324] RSP: 002b:00007fd66b015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.325988][T18324] RAX: ffffffffffffffda RBX: 00007fd66a415fa0 RCX: 00007fd66a19cdd9 [ 454.326000][T18324] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000b [ 454.326010][T18324] RBP: 00007fd66a232d69 R08: 0000000000000000 R09: 0000000000000000 [ 454.326021][T18324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.326030][T18324] R13: 00007fd66a416038 R14: 00007fd66a415fa0 R15: 00007ffda29b24c8 [ 454.326048][T18324] [ 454.653676][T18327] bridge_slave_0: left allmulticast mode [ 454.659388][T18327] bridge_slave_0: left promiscuous mode [ 454.665139][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.676377][T18327] bond0: (slave bridge_slave_1): Releasing backup interface [ 454.697404][T18327] bond0: (slave bond_slave_0): Releasing backup interface [ 454.716339][T18327] bond0: (slave bond_slave_1): Releasing backup interface [ 454.729500][T18327] team0: Port device team_slave_0 removed [ 454.749449][T18327] team0: Port device team_slave_1 removed [ 454.758674][T18327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.767091][T18327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.775986][T18327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.783622][T18327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.792785][T18327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.010394][ T6039] veth0_to_bond: left promiscuous mode