last executing test programs: 2.591314083s ago: executing program 0 (id=7181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r2, 0x1) (async, rerun: 64) close(r2) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d000000050007000000000006000800000000000500170000000000050019000000000006000a000000000005001a00000000000500180000000000a53a7d51284847ebcdbf62feea4548c4602012437d10ef419740850d66be8cab8eed6704a5827592e7678f550b358cb60fdec9f135fd22ba0942af5dc2ee0a4a5ac3f8246a90000e6e014b858eafb1600f22fd54c71a660fe1858c44a174a51d9676d86f3a0677c93be62640b9eaaabe790945bd6f0346875f9b87799ca922bee93dccfb69368ce67e6de88268fe0f7fdfc3da335efc35e1e8e3aeb7da5ecdc2a14577ae0db41288844098ca702b5037c1cf71"], 0x4c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd28, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r6) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r9, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c000480040003000000000008000200020000000800010000000000"], 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="070000000000000287b183", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a4, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x183}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x832}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff3d}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000000000ff01000000000000000000000000000100000000140002000a00"/87], 0x60}}, 0x0) 2.169060431s ago: executing program 4 (id=7188): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4004000) (async) r4 = socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'vxcan1\x00', 0x3}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, 0x5, r5, 0x1e}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="1240a2ce53b4edaa079e7e737350bcedce29f42035edea57e2f8728368839d31cb1bd8243e17489ba34b7f229dbfac98548b82cc0a2e94a6051518b5c9dec659a97feb3160621d1d853f6a4d95f6dc5bdc2f870e5a462632445998c0665e0e09524d", 0x62}], 0x1, 0x0, 0x0, 0x4000840}, 0x40) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.912057691s ago: executing program 4 (id=7189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) (async) bpf$MAP_CREATE(0xb00000000000014, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e338e8a43bdf22022"], 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = getuid() (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x3c4, 0x40, 0x107, 0xfffffffa, 0x0, {0x9, 0x7c}, [@nested={0x283, 0x142, 0x0, 0x1, [@nested={0x17b, 0x125, 0x0, 0x1, [@nested={0xc9, 0x49, 0x0, 0x1, [@generic="904b7e31b6303890146938b425e30dc4145d22f94fb93ace0ac6551660810ca033fdcca80460114610f96372c45cd24d69540ce3c99f452f33169c909adc437ac07e744a9f931e6402c5e77a0ae5888f33ef3c91894cc7b74eb02a9c154aba2f3380b43c8d49235611e81b7f809f7d9e5d4a5c8ef7f57c8ce205", @typed={0x6, 0x13e, 0x0, 0x0, @str='\x80\n'}, @generic="1561ebbc20b721c60b79152da2720b790347e090a7cdeed8c59f923cbb8dbf56448cea0e59db89757c37c21eabb2fb91b10a7f5f17e13b27ab5baa593e84cb6d7e3d77"]}, @generic="0c330033b7619fb4253d0c3625c06b83b73053d1c51c08a75296dd7b1aab09555b7441aae3e72077ce5a0e1b8ad973d8858a5dd3bfe0fab6585b2bcce9596937e6acbdfa89be97d8c8966df6400ce246e0fda7be3a6d16c54a9aa57e52d3b6e485f070379cbd51cd35335e682700b180bd6369c9f85b", @generic="5eababe12ea001f1219e3c9791f7ccf7c860c944a72d3fa48b5315441db37ee3c4378c9c69a442942131e0501f49784a29e799bb9c"]}, @typed={0x8, 0xd8, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r4}, @generic="7d843bd18d3fed1feaaeb8fde31639a9b1619c2343cca97f21f32140ac6ccfebde45bff7bae2c90b05fcef4c3dfd9cd0ee8b6b544f72b0ec1a8a8c439d18fadc6ebe0329a2c827c912c9c67f50ac08b257790593df2f4438ad74cb7d471e71c056f4b33d6abfec7b35da4b134dbba726fa689f6e583cc4b36d2315cdabc5343b5a22615600814dc1408abdcbd3f027ce2ee65ae0b0b2b491bb0d3f2cde11fddf689d5425e159a2f4aa318021427323366b30764af9a929c0b1a3f4a5ff11cd11df8d49c50863716249ef4fd563bcf8e045461e7e9cdbe37eb13f51acda7e92938346cf45854f00149588943d9cfe026690a6da"]}, @generic="164169ea5ac49414d6eb844fa6f9dcb752a4e2b14e231ca6f42e04f935f608e67b0b86ee5c8ec11ad851628e45e208411019c019080d3513920c8463830ef70d29b87ad210748a383a92cdff758152000c6302d76d85b2b578fa1c0fff25223aa5cc311b3a8513cabb5c59d07777d62e756591055df56b2e3386f647574b28d320c7e8152f686da5472b6200", @nested={0x9e, 0x2, 0x0, 0x1, [@generic="3c9c5856cc2fb5d9e9f52bd516cf0d1fdd9ee9aafd2aa73a86927fcc8473afd5ff60c6c2d68156b843c361b3cf6f4ee415f8d06d67d8c21ffaaccc0eaaae0964d8a6510588098887a59bde2f124c8784d4360b6bdd5ded727a8cd27b6456469a3ce5817db04394e44e8392c3ba502895209f8235d9467f62ce651bb2d35d7ee64eaa5d55ef4e8047694af73acdeca8916d5e3fad00a056d3bf17"]}]}, 0x3c4}}, 0xc000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10010, r5, 0x0) (async) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x2000) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x5, 0x9, 0x5, 0x6, 0x7}, &(0x7f00000003c0)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400)={r10, 0x1}, 0x8) setsockopt$packet_int(r5, 0x107, 0x1c, &(0x7f0000000080)=0xfff, 0x4) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000b0000001f0000000800a0007609000008009f0005000000080026006c09"], 0x40}}, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000a00)=0x8, 0x4) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4008888) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="180000005e00250e000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="2cf3e76d0b000000779eab229a7fb3113af677541f56f691f164ab805fe27af6ffcb026717a86a6e0a43dfe650afb78fc94c77f3a8ca843fa0a661b1f697c2719cf428b4c39891e08e8dfb0700aac859226e2f995f4908d869ab9d3c52f859073f7fa617255bab8f59ae908fa48ff0eced41820af4c84d81ce89d8b406b89fb2372af494d0b9fafd851e51262e90f9a7f3749212d6b723b2c87899e9d277bfd8054855a49017a5"], 0x18}], 0x1}, 0x0) 1.725350372s ago: executing program 4 (id=7192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="fd7df6251a43"], 0xfdef) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtfilter={0x16c, 0x2c, 0xd27, 0x170bd2b, 0x65dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x5}, {0x13c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xf}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_ACT={0x128, 0x9, 0x0, 0x1, [@m_ctinfo={0x124, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0xfa}]}, {0xdf, 0x6, "7f771b602db5371890c3365ddae1eb1909c5d57f1407216666b858d221fd37000eefee085df44b84e11d48c87f996b02b24ba02c53c6241f45fa4359749c606e60abae514e29d78b0601d376df17abeb36cb0683a48a21df84865ea2a5741cb61dd058a83b712e7566afa7fc07ba603d5d660de244cc91507f4bb45cdadae25261ba5eeb890547c3473b8fae6973f27ec4b07836107d55108003c9328ef69b297d9044efc4cc4bd92b0b50fe9ddea41685fdb1e8f21aca1aad42a0985fc4650909cf3b9f5a1d3c8d80825e46f533462f6e5883e45873588c9308a9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(0x3) 1.642165006s ago: executing program 0 (id=7193): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0500ffdfffff0800450000330000000000019078ac1e0007000000000000007804070000000000000065fffd0b112eafab33f5f6f60007ac141422ac1414aab1564c"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0xff}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0xfffffffe, 0x25dfdbfe}, 0x18}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xf, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "263170b5cd05e6fc471e6a6d47c441262cc5a6bea4536de48f876bb3e18f2770592169ec48ed1eb2ab7f45d3d09f256c9cf523648002907bd759f9b49046b49bbf690528ee245a9984bfb6b549cbc0cc10c70b8822c02fdbdb97b1eac5040be1d4810de8d03036886825e1707f605ad694187e989b1028fe859e75495455b24efcb7edecd7ec594b754487807288227b9f8d4d50cefb31adfc2cbf174b21cbd848f97bb3938b8634f2d009f49a1b7c21c834007aba0ae45a160b137906d131353ff1c29b4a2e25bd592a32dd283d538bbaafcb2f39cfc886ee844e580c527b6e251428c7f49b0f8aa2787c9a664db867c35b5443e512f6cec18cfb353b47e0e040488f44d5e628feb3cc3f19d8ad4039e092abdc46e7013c6b84260c014c82f25f9a8bae6daf139eb3b415876f78a86746b45763ee3f9f805a92b2e2089630b1ecefc435a089df8e7062595f2278ed8d2f88e761281eef63081cedd34a3b6c9a70f3cf21e12822aa96b868829dcaea9bbc9741d06ca535984fc0795c6d5b1e6bd529d993b8e6f758ba1816d8a8dd8bb723d1e082832c23c122ed608d8f047957ec5158b253c9807649609a19042ac21bed5d6b06604cb4fe91160345fd8afdc2855e82be5165164fb58344d5df35b88b44ed301430604d842124bda146cf109c7d2a00443ea3cc8482c52bd81f20a11a1bce3a74a2ff26d1982717f1ee8d9e6c8c927b80901440041bc53e8ab6b832787d7c9ff002ba1671936365e75aa54fde03d25d8c55ecf2b7cf651542933085ca86da84b46a6559154486ac5f087b7b54f3f24fd2ff3c8f08b7bcb23aa06f73ca6257bec8b06e0f91131845a026c10414be9f3db4660f1b3682738a35978b62986017b273754f0db231026b4912c53b44bd268389bd8b58e017959349fc93c7ba61f88d5a964862cfb1b3cda61e5c784b2028f9cfa7ddc5a781d9a2a9594fd1891ff7da7b7382a55b0dfa4b5f1e0f0c979dfa463c3696d51c23728683a5586191da03f61dce79639cee2bcd982a9183b44231da08018aacc3c9a8a52f29684ab029ca7bcf406f51c8b042dc77faeaf8e9139682cd00283319a1a21cb20d6aae66a18c0c358b756f57102e3f455be7ed71694018e91e28786f9bc6418e25ad300a8dce02975c1e73e03b1ebd21950e9fabdeafa2785079f0fc8ec12013acc0e23faf473634e4f50a5095b3f2ed81814fb313f29b94afd96cc35d52311d4e66fbe5a66a7c849c674b86bba8808c821a7ec133ecc61f2389eec0664689dbc1ba2c81f9148972c95d0cb272c9779be02c44b4aa252e2ee375d6d2310a12ef1e0ce9a7d4088922ee9640cec46facece5c5ea427dee19bca3952c3c13767de82909abc92edecab3e16c2f24dd9dcef4dec3c336bab497ae04c6d11db505037575b649a68622b45d35244bceb129363434a3bf3602827dce99c0e59b294a5ce1a2bc06e5467e9de31ab426c42fa5e7193d0a2d33c5234a5e9ba2c425db54041e7a1472315f9a5449496cad9a945967875d3549ad348e12403b28a3f6a666f7dc423629ba7a18244477764b8923a6b30fa04a2d6ed22ac8c64924fa2616d43da8a5b3f9cc30b2e29e4fc64b0027c33a8bc39d45feb704f7d2708f1f1bebd0eb13bd08e4049cb7a130847d9e334613a591563d0e207448e689ae5866c36f2503180b53f7a70b68eede9df307e9eb77aa39b12320a84711bdf03109cdc2414fa44478475e4b5a2f628e0cb0475e3e7ebf8fad644d69efb268883e394c46b971e6ca87a67e242f480f2ef7679583d182ab21d2ee026acf80f25b3afacccda853d38f84052cdf2edcfdf0513e1cf39574aa7af1ae53a3e08dbad47aefd14a37b6288c719e9c0737bb4119d7fe3eb350a8ec2fb0fec9b4633aa256d3f52f76423a8891f0a7e67378af5d53af8cf1543883def1c73a1f3c51fde6246dab90ec2b3f59c07a4eb1cefbdf60533cb97c0a555519998f9325630d489b00c6c736e6c768515f38f3a7d3cdb99c54f0e46f5a3aa9f280225cb3c3b33e2ff2aa757a2df467265252397dbd68aa7dca7fb9a8fb77611385995a070a99a7fc9db80ab7653c1c94f9a0ad09c713c39559587d8f886bc2db265ef6099138204e8517fa71aea4c75a8149dae6467d792431e54aecbf0f300dc7f6cc5a28495d77f3a4cd39c78de472ca2ebc95d67258a2e0f27bc9903c5540b9546f47aacd4898a0857e7b2f69125dd4839d788181aa409c40a914afe805aa075035d557bcce6a45e0a81cf3b8541e62e6f9a54fd71797d87b1fc4e0a0786fbd34b0dee8f5f57ef71495271b9f946480adcd2066bbefe000d99470bf92125996cba78276f1463dfbf501de575e597394ad02c484fe6291e56d7362ca402ff0af9582a1dc61dffad77d94da15c1328634b64b172edcd782a769f5fe9dd3a777c69d80a84fe83071c6ef7ae0becfb509b938932738bc7c454b63030ade2877a85897e5abc0cb0a9606e877987b5856d5992f43fba549d950d302b62db8c14a59b0bf58fb5a8f6402d3894c0e5be41348181aee736590383b14e7abb7253e381d24ee4e64dde82f48d3e9bf3e0be0e099b800b3bba1d92fd6a451cddcb9ae29a20b39d1066834e9337ed58defcd20cfd032adce59049fcbfc62ac762bed756475f150e86374cfc973d2d247ec6c347308f4c2618f0dc5f3e5cf363088bd90490f552f017000f376c35af0aadfa776ba9eca3567afb932325f14fa34b42f004b88249276b727bea1b865db9deaa405c9c1e1567cf6198cbf33aa646fe81398a0234d6fd687682bc2fcf052f9e129dd2d68f1154e4ea32e4984ad806b843513e94e994c5df73580587c0c1399ead2477ad7e04c3eb8787a685f86eb58d2d3254bd7f7f5e206aee379cbfa497ce32120e79cacea3c1663050c2f818d324786bcf799e27322f80d0c8cd6f41e9e10f441d331bed1f71577a07e89a1507947aacdbc07f8af0944f3c228b5ee9ec27b808108aaebe61f1884e1581b19c9c14cfffe2e96c7fe07f6a36116bea130e63db9d1e82fa4ade6bfd6cc72a9654d9bd829c1752d5d640a0b5d555d936b4eb160f2cfee1d92f3a783f2ab33120404045ac7ad20c2ee000abe6b889d7840bd16276d831fae6e1e37c68e3f567934859f7e8a1d7486f6923565ec0f0bb6473f8b8a87a8fd20d11b903c42570bc2d584c2b8743c36c3339998c53fe96b457aae5ec3e38f877dfc9c11e2f597123eea7f75642a0138296c63ed1b1a58753fdc1bc56e9405ab808d420c11e286662034ef471ab7c997ae392c928cff9476d31ffb6df1173bc6b0d1769b5bb58952d839f7297d396bea2bc8a37db8e18236857218e9f5a000a255363baaae8ecd13fcb7a5cb7a3dcadbb96a44e17aa7e8e42ca565d81c31134746b1b5726d86db9d2ba54ce70c7cf2ee0c1df212c3a705154693248ca6b80a5b2d2d101face58c2c01e5382a6b0f1b71f95764f910b7dcdeb2e791f3d17a967d536fbc590f5d3785ff25b6e9039dd1f910fe5782ac9658b2284b7b720cb2fe2569485721422adff4daec78c8491bd1b7534fd38c9030b91b66b280636a2e2edb01f99a4851f77249803fae628dc42f17ab10735338a196507819876a196af3c31a80e95907a8d98c1fa34c03d9073429f9ef63ca753ca48256722ed171f8e43189c4887b35ba481823538b80a304008960fc2f6dd0db0d065eebd3e1fbc4b342cb78075cf5334ae2bd70cbebbc1aecd89a4b1941599207990d453488ed9a246788a3a75a447fb41865b9d8ad5ed928ac29bad4ad7f7a13b29149445cdc4e5024acdd15088a64268fb7960c6c3674741153dd3755126e0d411aa0a7b4abed17c65ddf767c7df110f8f77ba9def3d0a82c445177b3fd7074f6262f0cf4a2d585019dbee516587808021776e7539bce272b82cd53637e9887725f289ed9bb1909ef4a46f7567f3c64cb1f6ab6da2a174ff0c9010358b4da94ea893d55d5d011e3dd86c94839e278f80f84feb905f437df79b9acb64e4516b390d45f2fd68a810554fa147fa00dcc486758da35e645ae2ea865225c4dbb1e268e93d2b24e64328c7e86fc0e126267ee4bf0de60380cfdfddcaf2e6523764ea889bfd836397fc2c56c65dd572a24dff827cefd8d4f40b732d3a1b5353359d8f587376127c9c499a0d97e9f552f6208cceceb8972c19547387bec505acdea0c9bab01cf80020d3717ca488e87e6e3df810af9bf6c22f176c8d130a1c0f12466d53c9d5d54c50f0717efdefac3e53ad90e9f9c7217187195c3911f90d0a8be5e8e4f953b038e0ca529555992ecff480bc4895798530ae8d68a0246ae40070d5c1a16b2b15e8855c195a260865b13b6eb5f941040265973a20af4dcdd4cf4d03a2a215bff70c5b8f25c48c211cdf978240b8e7d4c2778f15c3858a4cda110d1c6e8ae19d83ea015748930a1ff6bae442d67a6cd41354012944a388ff95046b4f8b7676577487aa200c0175d99886dcb50dbc72c0bdc0f41b4ebbf5bc9a8cd67c9624f9afccfff4725e9bb9729306beda2f119dbc2e2cacec52300d6ae0d250b700e2bd7bf6b6d86498a03f3f4ad500134ef581ccdbb3d1cf90fb11562d0e078eb788f4f2e485abd15dd5175d7fc0570d87f3bf6750ab29f37b441aab2a7435f4d8ba0e9e0cff366c1b9706e34985a0ce4ed46e5a2a8390381b77d3391e7fe6e564ddf2aff4cfef7009de8e2bd2bbdf91e5412925b8f5258feeedaf4d73a59842be186c31c34c92ef8a3a7b2c1f4a46dd93c419843530c94e01ede1516744c9100976bb61b25e391fa4b829f9c24204c35910819d0b369b765655332a5582088d918f1e323170551f672d002d73332beac073c651e7d3cb1817a7ac313e7cd847ee0af275ce267914609e6d3db6ab59aaf30ba2ad0e214ad76cd4edef476eb89133084eb8e1147fd5a44a9fde4c06f8df9bcfe0938f8776b83263a315918249fa9beae3153073bffe265758f6d8cf4c07112468ddc7e8911efe97e06aa0a55de6560b69d1d3fce4c3f1132e1ffe10a4b2c3a77295ba1653b9e3da6c1c9028367a890ef1666a4b5701a4b000cbb77cbdef060469f96213d75c0d1cd8aa3ae5024ce5af26fe6219f5970eeccd4b8bc743292cb7df8db34a65ef289c237836ab202fc28d27d9bd260b2bd3678710216bd575689ef030a260eb91cfd9131dfa3327c674b44b97859082a4c07c5da8eb80e0be86e28310a7d8ba75beb4eae4ecc046ce9ce633cd6e3352f0ec93c8b910c60f2900c5efc4ed5d4c3c99faeb475eb3b7c825e4a926870f88936a76e4e4aa2bb19f1bafdc620ce24dc4792d3a34d2b75684560217651b39a782c9b83d3bac7e3747a71ebb90d6348efeba1c13f373af4bd22c0ad425cdcc5aefbaa80a83616f8f7cf7e3c7980e80d947040e7e1ee24ec7a5a58123795c927afc6a2319b6e1903b85601adbdd1a3c1ae80cc6162dc9cf0b65780b075e8f0de53521146a586a81e29a30a50677999c1d70eb1987f7bfb1cc2bd33b45ec8ce9b671863f8f7d0de7796f0420e7525d5d5e16a3b690959008414a535b3ee50091d0e5605e04f5d9d9d50d079dea049cab2071827fc9d14e73c3aed6e314566d4ab834b029e10a3f239dda92a66a690e378154eeddf53ffde9e608afbc37a223266cf0e4c3e4ad89538700d8a781b45d1285eef89da14a66a2b9531e29d21de251f1a4e1895aad67fe9216f81c63ff48e651cf2a65e97bb884b62552a98479b74f48ff9d1759ca9edd4a3eedceb7e2571893c7b4989741e229f0c27"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r12, &(0x7f0000000080), 0x0}, 0x20) setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000180)={r10, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) 1.33211796s ago: executing program 4 (id=7198): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x450, 0xffffffff, 0x0, 0x0, 0x2e8, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0x0, 'syz_tun\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x6, 0x0, 0x10}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x1, 0x0, 0x454a977aa543aead}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x8, [0x21, 0x3b, 0x9, 0x16, 0x16, 0x22, 0x2c, 0x2b, 0xa, 0x40, 0x3d, 0x3d, 0x30, 0x22, 0xf, 0xa], 0x2, 0x6, 0xc23}}}, {{@ip={@multicast2, @broadcast, 0xff000000, 0xffffff00, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x2f, 0x2, 0x4a}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x4, 0x0, 0x0, 0x3, 0x4], 0x2, 0x4}, {0x1, [0x1, 0x8, 0x2, 0x6, 0x1, 0x1], 0x3, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x4, 0x4, 0x0, 0x3], 0x4, 0x6}, {0x2, [0x0, 0x3, 0x2, 0x4, 0x4, 0x6], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 1.331542261s ago: executing program 2 (id=7199): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)="57e998ae133bb5450938e2804cbfdfd01b92b7eead74e61692bc75c064feb669dd79ae6702a73a1f3b28a315a79b4c792a14f596bfa3e157861e62b049a8db5d9d4f6a4ff82ee626dd59b09ae8ff6ae933ccb1d799243b40f69d161bcfc38e7cbf234e7bd2e8aabab70153aa4f6322de3c6dcf274e69040e5f9d55e9211299a46331494f7b846dc4646d9862144525256b38d66ebe3912040deb970391e591de85ba16651aed3738e82392380ce78c76f8b2a23875b7e95c58583e444dbf2b2937a93e5d20527d88c0abc3a920edb655fee5bab3df7cc9babecb7c50c50bdea44023397b73454831630f691c88079460b0837baf9f94a6f0e33a43fdc24b9bb604cc267fed50d002758d74d0ff12f7a61d84e762b432d37e4cbcbd065ecb739280cd029f4cd926", 0x4, 0xffffffffffffffff, 0x9c1d459ef242e2c4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="2c30a3d4d91b5c66ffc8929579a6d5d3cc0fca71a6bb88a1ba944b7427f35570a054254ae574413c7503c7a8351012be21ff8bbff561c4841c7e85d3d43ed8087fce94479b5ac71daced8b4eaae14823370ec798860edf5c77afabd129b559fc78d0aaaadb3d8a97fdabcdcf2f67b58bc0148b1a608a35140a6fbc8e9ea0ebf6169f2399fc527665c7", 0x89) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d220f15a2008423c3e96b4925d1074a0dd64208f745417", @ANYRES16, @ANYBLOB="01002bbd7000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900b00d00007300000018"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) (async) recvmmsg$unix(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000300), &(0x7f0000000280)=r8}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r8, r10, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 1.238815378s ago: executing program 3 (id=7201): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000430007c1a3b10c0000000000017c000004104280"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0xfffe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) preadv(r4, &(0x7f0000000100), 0xa, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 1.119780291s ago: executing program 1 (id=7202): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000100)='veth1_to_batadv\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6eb}, 0x1c) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 1.06883427s ago: executing program 4 (id=7203): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) write(r2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4) 1.054346929s ago: executing program 0 (id=7204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.004031881s ago: executing program 3 (id=7205): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0x646c, 0x4) (async) r2 = socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000002000000", @ANYRES32=0x1], 0x50) (async) r3 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (rerun: 32) socket(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES64=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000e8b1d3d1033f0018110000853f519918f1b5c94ddc76b08d490f389de77216ce249566ca24077744c9fbc8902518b5b53030924808d7dcce983f7677ddb30548b80e90ed36d1b348683dbd07484c4513ab66fd9ba05e189a784fb420666431304dc2076b989947801fee755493902bbe06c122c247cc6c1b52bd7cb462033b5f5531378c477f0e511e84416082d4e3fe", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e28, 0x7, @private0}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "441775cb17ac1009", "439ccc059ddf6618122426be4dc74729", "12cfaf0e", "cb653c5fb445953b"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) 884.696636ms ago: executing program 2 (id=7206): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd28, 0x9ed4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5eecc9744e34e3461c9736a621366b8e5ecf45d34331770071b970128ec101360849c6bdccb02abf93ebb5f56701fdafd6b013522681a645586e7805c0d465fb1cfa3c32e3dc9bd1c67ff1d9786e279ba7c286e2c4b8a9c48612e3798db3e76c313165c8849c6d921f1012359e431c919bd42734b972f25947123d6e4a1f22685d8e35b8e5dbfad1cf7a1fcefa5966aee02dd57da774e385abb160bcd0a54c27056ec817468678", @ANYRES16=r4, @ANYBLOB="0100fcfffffffedbdf25020202000900030073797a32000000000900010073797a31000000000900010073797a3200000000"], 0x38}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x24008080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) (async) sendto$packet(r11, &(0x7f00000002c0)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r10, 0x1, 0x5, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 867.401441ms ago: executing program 0 (id=7207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0xffff0001) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x46, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0x4004743b, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0xb3fa, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x158a0}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0xa8, 0x4a, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r8, 0x221f}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}, @IFAL_LABEL={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x8000800) 864.160245ms ago: executing program 1 (id=7208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000b80)=""/4084, 0xff4}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000000)=""/24, 0xf}, {&(0x7f00000001c0)=""/34}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000372c0011800a0001006d617463680000001c0002800800024000000000040003000a00010071756f7461000000140000001000010000000000000000000000000a1633551b1f627aa199757b"], 0xb0}}, 0x0) 715.886686ms ago: executing program 1 (id=7209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = accept$unix(r1, &(0x7f0000000240), &(0x7f0000000540)=0x6e) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@netrom, @null, @netrom, @remote, @null, @netrom, @rose, @netrom]}, &(0x7f00000001c0)=0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r9, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10, r5}, 0x18) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x0, 0x0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x11, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r11}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x2, 0x2, 0xa, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0xa, 0x5, 0x4, 0x68da, 0xfffffff9}, @alu={0x4, 0x1, 0xd, 0xb, 0x6, 0x20, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x35, '\x00', r3, @fallback=0x34, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x7, 0x3, 0x1}, 0x10, r14, 0xffffffffffffffff, 0x7, &(0x7f0000000940), &(0x7f0000000980)=[{0x2, 0x5, 0x8, 0x2}, {0x5, 0x3, 0x3, 0x3}, {0x5, 0x4, 0xe, 0xa}, {0x5, 0x2, 0xf, 0xb}, {0x2, 0x2, 0x7, 0x4}, {0x3, 0x3, 0xb}, {0x4, 0x5, 0x7, 0x5}], 0x10, 0x1ff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r15, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r16) sendmsg$NLBL_MGMT_C_LISTDEF(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r17], 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r10, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110bf0000000000009500"], 0x0, 0x5}, 0x94) 715.571878ms ago: executing program 3 (id=7210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x26, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9fe, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x876}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0xfca0, 0x0, 0x0, 0x41000, 0x28, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x8, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff]}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r4, r3, 0x25, 0x6, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x7, 0x2, {{0x1b, 0x4, 0x0, 0x38, 0x6c, 0x66, 0x0, 0x1c, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x3c, 0xcb, 0x3, 0x3, [{@remote, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x7}, {@loopback, 0xffff}, {@loopback, 0x6}, {@multicast1, 0x1}, {@multicast2, 0x9}, {@broadcast, 0x400}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @broadcast, @private=0xa010101, @multicast2, @loopback, @multicast1]}]}}}}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r5, 0x1, 0x6, @multicast}, 0x10) 669.704902ms ago: executing program 2 (id=7211): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="05090a7010db3fbb8cfa6f0035e7832141386bd9d7be5cd90c8fdd123809ae8b32db03e4f1373a42962b6f48bdad0b8255bde953e067d375a7a66637065c3578", 0x40) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 32) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x6c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="300000000000000084000000010000000200000008080000000000003fa70000d7000000070000007f0000008c1ba6899b4f22c1a2fa9387", @ANYRES32=r6], 0x30, 0x4002000}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast1, 0x40}}, 0x0, 0x8001, 0x900, 0x8, 0x4a, 0x5, 0x3}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={r6, 0x2, 0x9, 0x4, 0x0, 0x0, 0x2, 0x7, {r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x6, 0x2, 0x4, 0x7}}, &(0x7f00000004c0)=0xb0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r10, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x24, r11, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x20000080) 582.159767ms ago: executing program 1 (id=7212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/38, 0x26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r6, 0x4) 488.030848ms ago: executing program 3 (id=7213): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$isdn(0x22, 0x2, 0x2) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) close(r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r8, 0x215eb000) socket(0x14, 0x1, 0x2) (async) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) (async) splice(r5, 0x0, r7, 0x0, 0x3, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) setsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f0000000000)=0x34e, 0xffe8) (async) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 487.649398ms ago: executing program 0 (id=7214): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) write(r2, &(0x7f0000000100)="f1400a7c6bdfec40af81742d2a804e85505d9a3a75158150826d3ee33965b31d35504a2a95a1bee91d66e6b874144cd1341d6d01f2e624d3b09fd7cf3b0f0241a56e23498818c699d5771452d612", 0x4e) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 458.643603ms ago: executing program 2 (id=7215): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 331.175989ms ago: executing program 2 (id=7216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8010) 326.015376ms ago: executing program 1 (id=7217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x808) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010004b0428bd7000000000007a0000000252fdbcc99558af10e80dee7aa07cbafc3efdc3fe373f6ac765bd7b546af3d21a7de7d4d2cfcfa6f19bdf0ce1ad4760c86ca4a12fe9cdfdcdae582a3e4bcb5b606cd9", @ANYRES32=0x0, @ANYBLOB="00000000120000001c0012800b00010062726964676500000c000280080003001b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) 325.374944ms ago: executing program 3 (id=7218): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB="029000000080040008000a00", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) (async) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r7, &(0x7f0000000c80)={0x1d, r8}, 0x10) (async) r9 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @multicast}, &(0x7f0000000140)=0x80, 0x800) socket$isdn(0x22, 0x2, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100000007d0600"/20, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005001e000000000005001900000000001400350064766d72703100"/72], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 96.027702ms ago: executing program 0 (id=7219): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x2, @val=@tcx}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x31, '\x00', r1, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) ioctl$XFS_IOC_GETBMAPA(r5, 0xc020582c, &(0x7f0000000140)={0x2b, 0x85f6, 0x7fffffff, 0x3, 0x4}) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x4, 'syz0\x00', @default, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000000)=@default_ap_ssid, 0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r7, 0x0, 0x1) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r7, 0x40109441, &(0x7f0000000040)={0x6, 0x4, 0xfffffffc}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) 80.616395ms ago: executing program 4 (id=7220): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) close(r0) r1 = socket(0xa, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'bond_slave_0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x3, 0xfe, 0xe, 0x40, 0x6, 0x6, 0x4, 0x59, 0x4, [0x8, 0x3, 0x20ef, 0x8, 0x10000, 0x5, 0x9]}}) shutdown(r1, 0x1) poll(&(0x7f0000000040)=[{r1, 0x82}], 0x1, 0x7) 65.552897ms ago: executing program 3 (id=7221): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x505c, @loopback, 0x7}, 0x1c) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000080)={0xfffffffb, 0x400, 0x0, 0x54f2d33c, 0xfffffff8}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000f5840000007a000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.984065ms ago: executing program 1 (id=7222): r0 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r0, 0x80044944, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f00000008c0)={&(0x7f0000000800)=[{0x6, 0x2, 0xffffffffffffffff, 0x2, 0x3c}, {0x3, 0x8, 0x5, 0xe, 0xff}, {0x8000000000000001, 0x6, 0x0, 0x5d7100000000000, 0x3}, {0x8000, 0x6, 0xfffffffffffffff8, 0x5, 0x2}], 0x4, 0x28, 0xa, 0x8}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x7f, 0x9, 0x4, 0x49, 0xa, 0xc, 0x6, 0x1, 0x0}, &(0x7f0000000480)=0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)={@val={0x70}, @void, @eth={@local, @remote, @void, {@generic={0x4305}}}}, 0x12) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x7, 0xc}, {0x7, 0xffe0}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000fcdbdf250700000030000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="1400020064766d7270300000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="2d395ff2491daed19cb8b994be834d444769c01fb3f98d186dce53991870bc5db49db5fa12fc71c299ad15cbadc05cffbff2304f833dc6a314460817903f9795b626e1ba264d0397095d562f5594ead0f367c255db4c5be0ee5353d95c68010000005655cb9e9976fcc0bc4a9dddbf7e3f61cf85583118d67b8ce8835441ba577435b06f8a3267f607d742833784c97d17813486b7982c494fa2cf80c7deff91273d85ecb887d05ffea51fb3f8b674e34510e4b8c928b2bb52be395f4ea41e"], 0x44}, 0x1, 0x0, 0x0, 0x44804}, 0x40000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={r3, 0x9, 0x3, 0x65f, 0x3, 0x0, 0x8, 0x8, {r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x4, 0xf, 0x401}}, &(0x7f0000000600)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x2, 0x80805, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={r13}, &(0x7f0000000340)=0x8) 0s ago: executing program 2 (id=7223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34880, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x4f491d9a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xfdef) kernel console output (not intermixed with test programs): rewing up backlog [ 758.053626][T26624] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 758.397618][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 758.443803][T26643] netlink: 'syz.2.5480': attribute type 6 has an invalid length. [ 758.503513][T26643] IPv6: NLM_F_CREATE should be specified when creating new route [ 758.778595][T26663] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 758.858066][T26669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5484'. [ 759.441290][T26694] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5493'. [ 759.704995][T26706] syzkaller0: entered promiscuous mode [ 759.715073][T26706] syzkaller0: entered allmulticast mode [ 759.904067][T26729] netlink: 'syz.2.5503': attribute type 62 has an invalid length. [ 759.913497][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5503'. [ 759.918366][T26720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5501'. [ 762.355874][T16346] Bluetooth: hci3: command 0x0405 tx timeout [ 763.754281][T26760] netlink: 'syz.4.5511': attribute type 1 has an invalid length. [ 763.783071][T26760] netlink: 'syz.4.5511': attribute type 11 has an invalid length. [ 763.802181][T26760] __nla_validate_parse: 2 callbacks suppressed [ 763.802201][T26760] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5511'. [ 764.197782][T26785] netlink: 'syz.3.5517': attribute type 1 has an invalid length. [ 764.230441][T26785] netlink: 'syz.3.5517': attribute type 11 has an invalid length. [ 764.261564][T26792] openvswitch: netlink: Flow actions attr not present in new flow. [ 764.277179][T26785] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5517'. [ 764.309850][T26793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5517'. [ 764.450250][T26799] netlink: 'syz.1.5522': attribute type 11 has an invalid length. [ 764.494445][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5524'. [ 764.612481][T26806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5524'. [ 764.638167][T26812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5526'. [ 764.666241][T26815] netlink: 'syz.0.5525': attribute type 10 has an invalid length. [ 764.693366][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5525'. [ 764.748337][T26818] netlink: 'syz.2.5527': attribute type 15 has an invalid length. [ 764.828982][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5529'. [ 764.950364][T26826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5528'. [ 764.964227][T26824] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5530'. [ 765.232039][T26845] xt_TCPMSS: Only works on TCP SYN packets [ 765.369338][T26849] bond0: entered allmulticast mode [ 765.405787][T26849] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 765.440556][T26849] Cannot find add_set index 2 as target [ 765.742591][T26871] sit0: entered promiscuous mode [ 765.750562][T26871] sit0: left allmulticast mode [ 765.781486][T26871] netlink: 'syz.4.5543': attribute type 1 has an invalid length. [ 766.243983][T26900] netlink: 'syz.3.5550': attribute type 1 has an invalid length. [ 766.416233][T26905] 8021q: VLANs not supported on syzkaller0 [ 766.569927][T26917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.960733][T26935] kthread_run failed with err -4 [ 770.969265][T26939] tunl0: entered promiscuous mode [ 770.980088][T26939] __nla_validate_parse: 9 callbacks suppressed [ 770.980109][T26939] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5559'. [ 771.099852][T26957] IPVS: length: 239 != 24 [ 771.103292][T26958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5562'. [ 771.186675][T26962] pim6reg: entered allmulticast mode [ 771.202232][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5564'. [ 771.975303][T27014] netlink: 'syz.3.5576': attribute type 2 has an invalid length. [ 772.504942][T27045] netdevsim netdevsim0 : renamed from netdevsim0 [ 772.890595][T27079] netlink: 'syz.1.5591': attribute type 2 has an invalid length. [ 773.043424][T27090] netlink: 'syz.4.5592': attribute type 1 has an invalid length. [ 773.096021][T27090] 8021q: adding VLAN 0 to HW filter on device bond14 [ 773.108768][T27086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5592'. [ 775.647453][T27056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.656941][T27063] netlink: 'syz.3.5589': attribute type 1 has an invalid length. [ 775.665959][T27063] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5589'. [ 775.677038][T27063] NCSI netlink: No device for ifindex 0 [ 775.993306][T27126] syzkaller1: entered allmulticast mode [ 776.067946][T27131] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5603'. [ 776.104189][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5604'. [ 776.493695][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5609'. [ 776.528565][T27161] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5610'. [ 776.894048][T27180] Cannot find add_set index 2 as target [ 776.960064][T27179] syzkaller1: entered promiscuous mode [ 776.983267][T27179] syzkaller1: entered allmulticast mode [ 777.188767][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5619'. [ 777.251621][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5620'. [ 777.493589][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 777.664596][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5626'. [ 777.686823][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5626'. [ 777.793504][T27226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5627'. [ 777.859762][T27233] netlink: 'syz.3.5630': attribute type 25 has an invalid length. [ 778.191467][T20652] wlan1: Trigger new scan to find an IBSS to join [ 778.405214][T27256] xt_TCPMSS: Only works on TCP SYN packets [ 778.790227][T27279] xt_hashlimit: invalid rate [ 779.125464][T27293] syzkaller1: entered promiscuous mode [ 779.142444][T27293] syzkaller1: entered allmulticast mode [ 779.594402][T27321] tc_dump_action: action bad kind [ 779.837691][T27336] netlink: 'syz.2.5662': attribute type 30 has an invalid length. [ 780.191847][T27340] bond0: entered promiscuous mode [ 780.209579][T27340] bond_slave_0: entered promiscuous mode [ 780.243448][T27340] bond_slave_1: entered promiscuous mode [ 780.265390][T27340] bridge_slave_1: entered promiscuous mode [ 780.288585][T27340] bond0: entered allmulticast mode [ 780.298171][T27340] bond_slave_0: entered allmulticast mode [ 780.305050][T27340] bond_slave_1: entered allmulticast mode [ 780.312255][T27340] bridge_slave_1: entered allmulticast mode [ 780.513706][T27376] netlink: 'syz.3.5671': attribute type 2 has an invalid length. [ 780.532864][T27372] netlink: 'syz.0.5669': attribute type 16 has an invalid length. [ 780.753017][T27380] sit0: left promiscuous mode [ 780.759674][T27380] sit0: entered allmulticast mode [ 780.950735][T27396] x_tables: duplicate underflow at hook 1 [ 781.030583][T27400] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 781.045417][T27400] netlink: 'syz.0.5679': attribute type 18 has an invalid length. [ 781.070284][T27402] netlink: 'syz.1.5680': attribute type 1 has an invalid length. [ 781.121527][T20649] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 781.121603][T27400] __nla_validate_parse: 9 callbacks suppressed [ 781.121620][T27400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5679'. [ 781.146532][T20649] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.156529][T20646] wlan1: Trigger new scan to find an IBSS to join [ 781.160987][T27400] netlink: 'syz.0.5679': attribute type 18 has an invalid length. [ 781.187318][T27407] netlink: 'syz.4.5682': attribute type 1 has an invalid length. [ 781.202777][T20649] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.243811][T20649] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.470507][T27422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.487912][T27428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5687'. [ 781.618577][T27438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5689'. [ 781.693211][T27441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5690'. [ 781.938047][T27446] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 781.965060][T27446] bond7: (slave lo): Enslaving as an active interface with an up link [ 781.989054][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.023202][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.042562][T27452] netlink: 'syz.2.5694': attribute type 4 has an invalid length. [ 782.063657][T27462] netlink: 'syz.4.5695': attribute type 2 has an invalid length. [ 782.068233][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.110365][T27466] IPVS: sync thread started: state = BACKUP, mcast_ifn = pim6reg, syncid = 0, id = 0 [ 782.120670][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.162252][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.207568][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.286888][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.303941][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.356315][T27453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5692'. [ 782.370107][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.386486][T27453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5692'. [ 782.395405][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.427910][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.437912][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.458167][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.485068][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.568895][T27469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.579935][T27469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 782.608344][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.624948][T27446] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 782.642417][T27445] bond7: option mode: unable to set because the bond device has slaves [ 782.744984][T27469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.750065][T27479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5700'. [ 782.758088][T27469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 782.937487][T27469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.979843][T27469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 783.045834][T27482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5700'. [ 783.056237][T27482] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5700'. [ 783.187371][T27486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5700'. [ 783.192121][T27469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.216011][T27469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 783.588243][T20649] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 783.598690][T20649] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 783.737686][T20649] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.765860][T20649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.826718][T20649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.848819][T20649] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.864001][T27517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.935997][T20649] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 783.947712][T20649] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 784.023719][T20649] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 784.047840][T20649] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 784.056678][T27530] validate_nla: 2 callbacks suppressed [ 784.056697][T27530] netlink: 'syz.3.5714': attribute type 29 has an invalid length. [ 784.082247][T20649] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 784.090495][T20649] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 784.191853][T11258] wlan1: Trigger new scan to find an IBSS to join [ 784.578698][T27562] netlink: 'syz.1.5721': attribute type 51 has an invalid length. [ 784.854790][T27574] 8021q: VLANs not supported on syzkaller1 [ 784.881552][T27573] netlink: 'syz.4.5727': attribute type 7 has an invalid length. [ 784.974067][T27573] netlink: 'syz.4.5727': attribute type 7 has an invalid length. [ 784.997550][T11258] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.027224][T11258] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.052451][T11258] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.070145][T11258] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.264970][T11274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.331773][T27598] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 785.340333][T27591] lo speed is unknown, defaulting to 1000 [ 785.699814][T27613] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 790.591547][T16346] Bluetooth: hci3: command 0x0405 tx timeout [ 808.994347][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.587572][T27651] syzkaller1: entered promiscuous mode [ 853.609183][T27651] syzkaller1: entered allmulticast mode [ 853.648239][T27659] __nla_validate_parse: 10 callbacks suppressed [ 853.648262][T27659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5752'. [ 853.668612][T27659] net_ratelimit: 1 callbacks suppressed [ 853.668631][T27659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.946149][T27664] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 853.980373][T27664] bond8 (unregistering): Released all slaves [ 854.011812][T27672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.054378][T27674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5758'. [ 854.256996][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5761'. [ 854.378530][T27686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5763'. [ 855.372318][T27748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5782'. [ 855.403267][T27749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5782'. [ 855.473987][T27754] netlink: 'syz.4.5783': attribute type 83 has an invalid length. [ 855.652633][T27762] pim6reg1: entered promiscuous mode [ 855.658881][T27762] pim6reg1: entered allmulticast mode [ 855.700144][T27766] openvswitch: netlink: Key type 5638 is out of range max 32 [ 856.063991][T27781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 856.229696][T27797] bond7: (slave lo): Releasing backup interface [ 856.242270][T27797] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 856.254649][T27797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.338269][T27798] syzkaller1: entered promiscuous mode [ 856.351911][T27798] syzkaller1: entered allmulticast mode [ 856.613847][T27815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5805'. [ 856.626330][T27815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5805'. [ 856.677037][T27818] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5807'. [ 857.087065][T27833] netlink: 'syz.2.5811': attribute type 11 has an invalid length. [ 857.102087][T27833] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5811'. [ 857.121923][T11258] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 857.140400][T11258] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 857.151683][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 857.512006][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 857.600061][T27860] netlink: 'syz.1.5816': attribute type 8 has an invalid length. [ 857.873300][T16346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 857.895833][T16346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 857.914072][T16346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 857.924811][T16346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 857.933477][T16346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 857.952420][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 858.459027][T27865] lo speed is unknown, defaulting to 1000 [ 858.832262][T27903] netlink: 'syz.0.5827': attribute type 10 has an invalid length. [ 858.855369][T27906] IPVS: length: 239 != 24 [ 858.872325][T27904] netlink: 'syz.0.5827': attribute type 10 has an invalid length. [ 859.222789][T27924] netlink: 'syz.4.5831': attribute type 1 has an invalid length. [ 859.236846][T27925] batadv1: entered allmulticast mode [ 859.369555][T27934] __nla_validate_parse: 2 callbacks suppressed [ 859.369576][T27934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5831'. [ 859.488261][T27924] 8021q: adding VLAN 0 to HW filter on device bond15 [ 859.554367][T27924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5831'. [ 859.607239][T27937] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 859.622020][T27937] bond12 (unregistering): Released all slaves [ 859.853752][T27865] chnl_net:caif_netlink_parms(): no params data found [ 860.031531][T16346] Bluetooth: hci4: command tx timeout [ 860.170105][T27962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 860.277833][T27865] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.326674][T27865] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.347304][T27865] bridge_slave_0: entered allmulticast mode [ 860.366997][T27865] bridge_slave_0: entered promiscuous mode [ 860.468273][T27865] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.485445][T27865] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.505235][T27865] bridge_slave_1: entered allmulticast mode [ 860.516274][T27865] bridge_slave_1: entered promiscuous mode [ 860.644366][T27865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.660618][T27865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.846282][T27865] team0: Port device team_slave_0 added [ 860.867425][T27865] team0: Port device team_slave_1 added [ 860.911185][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 861.159298][T27865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.217355][T28029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5850'. [ 861.241980][T27865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.332985][T27865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.459090][T27865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.489470][T27865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.531341][T27865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.709455][T27865] hsr_slave_0: entered promiscuous mode [ 861.752891][T27865] hsr_slave_1: entered promiscuous mode [ 861.773126][T27865] debugfs: 'hsr0' already exists in 'hsr' [ 861.786029][T27865] Cannot create hsr debugfs directory [ 862.052617][T28067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5861'. [ 862.111321][T16346] Bluetooth: hci4: command tx timeout [ 862.215862][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5863'. [ 862.280639][T27865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.351847][T28079] veth0: entered promiscuous mode [ 862.374522][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5863'. [ 862.383720][T28079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.427816][T27865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.523019][T28078] veth0: left promiscuous mode [ 862.585411][T27865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.737172][T27865] bond0: (slave netdevsim0): Releasing backup interface [ 862.758393][T27865] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 862.761829][T28092] netlink: 'syz.0.5868': attribute type 1 has an invalid length. [ 862.772986][T27865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.777631][T28092] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5868'. [ 862.795974][T28092] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5868'. [ 862.805216][T28092] netlink: 'syz.0.5868': attribute type 1 has an invalid length. [ 862.814253][T28092] netlink: 618 bytes leftover after parsing attributes in process `syz.0.5868'. [ 863.144807][T28104] netlink: 'syz.4.5872': attribute type 19 has an invalid length. [ 863.231766][T28111] netlink: 'syz.4.5872': attribute type 1 has an invalid length. [ 863.419037][T27865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 863.446938][T27865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.456907][T27865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 863.473178][T28121] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 863.473324][T27865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.564084][T28121] 8021q: adding VLAN 0 to HW filter on device bond12 [ 863.576753][T27865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 863.595796][T27865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.625000][T27865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 863.647556][T27865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.775615][T28139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.863678][T27865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.904015][T27865] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.925124][T20654] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.932420][T20654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.982486][T20654] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.989744][T20654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.185161][T28157] netlink: 'syz.1.5885': attribute type 12 has an invalid length. [ 864.192215][T16346] Bluetooth: hci4: command tx timeout [ 864.338709][T28166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.460245][T27865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.494638][T28172] netlink: 'syz.0.5889': attribute type 1 has an invalid length. [ 864.629796][T28177] bond8: (slave gretap1): making interface the new active one [ 864.646636][T28181] xt_hashlimit: size too large, truncated to 1048576 [ 864.656953][T28177] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 864.717786][T28183] __nla_validate_parse: 8 callbacks suppressed [ 864.717809][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5892'. [ 864.788715][T28183] syzkaller0: entered promiscuous mode [ 864.795847][T28183] syzkaller0: entered allmulticast mode [ 864.980260][T28193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5893'. [ 866.272282][T16346] Bluetooth: hci4: command tx timeout [ 868.346671][T27865] veth0_vlan: entered promiscuous mode [ 868.450654][T27865] veth1_vlan: entered promiscuous mode [ 868.534495][T28203] xt_l2tp: v2 doesn't support IP mode [ 868.606738][T28210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5896'. [ 868.686295][T27865] veth0_macvtap: entered promiscuous mode [ 868.718350][T27865] veth1_macvtap: entered promiscuous mode [ 868.779477][T27865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.823217][T27865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.843788][T28220] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 868.845137][T11253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.896021][T11253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.912400][T11253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.934115][T28220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5901'. [ 868.966488][T11253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.054471][T28223] netlink: 'syz.4.5903': attribute type 1 has an invalid length. [ 869.084878][T28223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5903'. [ 869.151154][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 869.169713][T20655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.180483][T20655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.341168][T20654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.359205][T20654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.541236][T28242] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5909'. [ 869.573422][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5909'. [ 869.573479][T28242] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5909'. [ 869.613560][T28250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5911'. [ 869.623119][T28242] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5909'. [ 869.644334][T28250] erspan0: entered promiscuous mode [ 869.726259][T28255] netlink: 'syz.3.5912': attribute type 1 has an invalid length. [ 870.080237][T28264] bond16: option arp_all_targets: invalid value (18446744073709551613) [ 870.127668][T28282] __nla_validate_parse: 62 callbacks suppressed [ 870.127689][T28282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5918'. [ 870.147930][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 870.163354][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 870.174865][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 870.187249][T28264] bond16 (unregistering): Released all slaves [ 870.197416][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 870.214053][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 870.441592][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.507219][T28279] lo speed is unknown, defaulting to 1000 [ 870.914162][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 870.941434][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 870.952540][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.055106][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.112844][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.125665][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.144788][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.171236][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.191360][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5922'. [ 871.243154][T28279] chnl_net:caif_netlink_parms(): no params data found [ 871.353046][T28322] netlink: 'syz.0.5924': attribute type 1 has an invalid length. [ 871.362701][T28322] netlink: 'syz.0.5924': attribute type 2 has an invalid length. [ 871.370702][T28322] netlink: 'syz.0.5924': attribute type 1 has an invalid length. [ 871.379681][T28322] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 871.477864][T28279] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.485644][T28279] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.494842][T28279] bridge_slave_0: entered allmulticast mode [ 871.503479][T28279] bridge_slave_0: entered promiscuous mode [ 871.513568][T28279] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.522030][T28279] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.529571][T28279] bridge_slave_1: entered allmulticast mode [ 871.540829][T28279] bridge_slave_1: entered promiscuous mode [ 871.602713][T28279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.615726][T28279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.648093][T28279] team0: Port device team_slave_0 added [ 871.656257][T28279] team0: Port device team_slave_1 added [ 871.683730][T28279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.690790][T28279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.722143][T28279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.734817][T28279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.742295][T28279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.768429][T28279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.816049][T28279] hsr_slave_0: entered promiscuous mode [ 871.822583][T28279] hsr_slave_1: entered promiscuous mode [ 871.828796][T28279] debugfs: 'hsr0' already exists in 'hsr' [ 871.834645][T28279] Cannot create hsr debugfs directory [ 871.945442][T28279] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.957381][T28279] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.026434][T28279] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.036874][T28279] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.097740][T28279] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.109901][T28279] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.200250][T28279] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.212790][T28279] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.351383][T16346] Bluetooth: hci5: command tx timeout [ 872.857980][T28268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.924665][T28279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 872.974519][T28279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.005812][T28279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 873.029981][T28339] netlink: 'syz.3.5928': attribute type 26 has an invalid length. [ 873.066135][T28279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.092771][T28279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 873.120646][T28279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 873.139236][T28279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 873.164092][T28279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 873.265088][T28355] netlink: 'syz.0.5932': attribute type 1 has an invalid length. [ 873.437331][T28367] netlink: 'syz.4.5935': attribute type 21 has an invalid length. [ 873.702047][T28279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.772959][T28279] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.809625][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.817024][T20655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.909600][T20651] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.916899][T20651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.435012][T16346] Bluetooth: hci5: command tx timeout [ 874.469375][T28413] openvswitch: netlink: Key 6 has unexpected len 112 expected 2 [ 874.617025][T28424] xt_TPROXY: Can be used only with -p tcp or -p udp [ 874.739603][T28279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.760219][T28430] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.768237][T28430] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.787989][T28431] IPv6: NLM_F_CREATE should be specified when creating new route [ 874.975873][T28279] veth0_vlan: entered promiscuous mode [ 875.058249][T28279] veth1_vlan: entered promiscuous mode [ 875.067187][T28434] lo speed is unknown, defaulting to 1000 [ 875.188080][T28279] veth0_macvtap: entered promiscuous mode [ 875.265676][T28279] veth1_macvtap: entered promiscuous mode [ 875.347657][T28279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.398080][T28451] __nla_validate_parse: 74 callbacks suppressed [ 875.398102][T28451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5954'. [ 875.415953][T28279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.426830][T28451] openvswitch: netlink: Flow key attr not present in new flow. [ 875.436178][T20651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.733655][T20651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.756454][T28463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5959'. [ 875.759791][T20651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.781104][T20651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.127274][T20652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.167286][T20652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.252802][T28468] validate_nla: 2 callbacks suppressed [ 876.252825][T28468] netlink: 'syz.0.5960': attribute type 1 has an invalid length. [ 876.266943][T28468] netlink: 'syz.0.5960': attribute type 3 has an invalid length. [ 876.281186][T20655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.283147][T28468] netlink: 'syz.0.5960': attribute type 7 has an invalid length. [ 876.301707][T20655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.315954][T28468] netlink: 'syz.0.5960': attribute type 8 has an invalid length. [ 876.332764][T28468] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5960'. [ 876.354009][T28468] NCSI netlink: No device for ifindex 131092 [ 876.513149][T16346] Bluetooth: hci5: command tx timeout [ 876.622739][T28493] netlink: 'syz.0.5967': attribute type 2 has an invalid length. [ 876.653907][T28493] netlink: 'syz.0.5967': attribute type 2 has an invalid length. [ 876.774606][T28501] netlink: 'syz.2.5969': attribute type 9 has an invalid length. [ 876.793103][T28500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5970'. [ 876.873110][T28500] hsr_slave_0 (unregistering): left promiscuous mode [ 876.903726][T28511] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 877.013109][T28514] netlink: 'syz.4.5975': attribute type 10 has an invalid length. [ 877.032922][T28516] netlink: zone id is out of range [ 877.046478][T28516] netlink: zone id is out of range [ 877.053951][T28514] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.073763][T28516] netlink: zone id is out of range [ 877.079641][T28514] bridge_slave_1: left allmulticast mode [ 877.086903][T28516] netlink: zone id is out of range [ 877.093653][T28516] netlink: zone id is out of range [ 877.099743][T28514] bridge_slave_1: left promiscuous mode [ 877.105547][T28516] netlink: zone id is out of range [ 877.111826][T28514] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.119303][T28516] netlink: zone id is out of range [ 877.139748][T28514] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 877.162907][T28521] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5978'. [ 877.354701][T28527] ip6t_srh: unknown srh invflags 4000 [ 877.664311][T28547] wg1: entered promiscuous mode [ 877.682123][T28547] wg1: entered allmulticast mode [ 877.702311][T28550] xt_l2tp: v2 doesn't support IP mode [ 877.722812][T28550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5988'. [ 877.795046][T28547] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5987'. [ 877.814448][T28556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5991'. [ 877.833537][T28556] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5991'. [ 877.949269][T28556] veth3: entered promiscuous mode [ 878.212055][T28583] syzkaller0: entered promiscuous mode [ 878.236667][T28583] syzkaller0: entered allmulticast mode [ 878.592234][T16346] Bluetooth: hci5: command tx timeout [ 878.702415][T28616] netlink: 'syz.3.6005': attribute type 4 has an invalid length. [ 878.749322][T28615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6008'. [ 880.219595][T28637] net_ratelimit: 137 callbacks suppressed [ 880.219612][T28637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.236581][T28637] xt_hashlimit: size too large, truncated to 1048576 [ 881.104535][T28571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.984503][T28677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6028'. [ 882.107955][T28685] netlink: 'syz.4.6030': attribute type 1 has an invalid length. [ 882.137533][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6030'. [ 882.150481][T28685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6030'. [ 882.160645][T28685] netlink: 'syz.4.6030': attribute type 2 has an invalid length. [ 882.170162][T28685] netlink: 'syz.4.6030': attribute type 2 has an invalid length. [ 882.178777][T28685] netlink: 'syz.4.6030': attribute type 2 has an invalid length. [ 882.200110][T28688] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6031'. [ 882.278221][T28688] syzkaller1: entered promiscuous mode [ 882.310322][T28688] syzkaller1: entered allmulticast mode [ 882.380587][T28698] IPv6: NLM_F_CREATE should be specified when creating new route [ 882.682792][T28706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'. [ 882.719787][T28706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6037'. [ 882.737274][T28711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6038'. [ 882.740134][T28706] netlink: 'syz.4.6037': attribute type 14 has an invalid length. [ 882.769168][T28706] netlink: 'syz.4.6037': attribute type 13 has an invalid length. [ 882.775515][T28711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6038'. [ 882.817550][T28711] netlink: 'syz.2.6038': attribute type 3 has an invalid length. [ 882.894176][T28720] syzkaller0: entered promiscuous mode [ 882.906932][T28720] syzkaller0: entered allmulticast mode [ 883.035684][T28731] tipc: Enabling of bearer rejected, failed to enable media [ 883.070637][T28730] tipc: Enabling of bearer rejected, failed to enable media [ 883.237320][T28734] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6047'. [ 883.566535][T28757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.628567][T28761] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 883.789593][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6057'. [ 883.856997][T28772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.910452][T28772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.266486][T28794] netlink: 'syz.1.6063': attribute type 3 has an invalid length. [ 884.284284][T28800] netlink: 'syz.2.6065': attribute type 10 has an invalid length. [ 884.296639][T28800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.308325][T28800] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 884.358466][T28800] syzkaller0: entered promiscuous mode [ 884.377236][T28800] syzkaller0: entered allmulticast mode [ 884.392100][T28807] netlink: 'syz.3.6066': attribute type 11 has an invalid length. [ 884.511219][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 884.668417][T28817] bridge0: port 3(ipvlan2) entered blocking state [ 884.684536][T28817] bridge0: port 3(ipvlan2) entered disabled state [ 884.711235][T28817] ipvlan2: entered allmulticast mode [ 884.723825][T28817] bridge0: entered allmulticast mode [ 884.742075][T28817] ipvlan2: left allmulticast mode [ 884.759770][T28817] bridge0: left allmulticast mode [ 885.468750][T28873] block nbd0: reconnected socket [ 885.615090][T20655] tipc: Resetting bearer [ 885.830096][T20655] bond5 (unregistering): (slave ip6gretap0): Releasing active interface [ 886.005758][T20655] tipc: Disabling bearer [ 886.192244][T16346] block nbd0: Receive control failed (result -32) [ 886.408255][T20655] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 886.505548][T20655] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 886.567344][T20655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.578967][T20655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.593931][T20655] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 886.605350][T20655] bond0 (unregistering): Released all slaves [ 886.616780][T20655] bond1 (unregistering): Released all slaves [ 886.632032][T20655] bond2 (unregistering): Released all slaves [ 886.649904][T20655] bond3 (unregistering): Released all slaves [ 886.670795][T20655] bond4 (unregistering): Released all slaves [ 886.686419][T20655] bond5 (unregistering): Released all slaves [ 886.700660][T20655] bond6 (unregistering): Released all slaves [ 886.724940][T20655] bond7 (unregistering): Released all slaves [ 886.741974][T28880] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 886.761800][T28882] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 886.960314][T20655] : left promiscuous mode [ 887.038763][T28907] __nla_validate_parse: 9 callbacks suppressed [ 887.038783][T28907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6094'. [ 887.115840][T28911] x_tables: unsorted underflow at hook 3 [ 887.180302][T28909] validate_nla: 3 callbacks suppressed [ 887.180323][T28909] netlink: 'syz.2.6095': attribute type 11 has an invalid length. [ 887.241150][T20655] tipc: Left network mode [ 887.263424][T28917] netlink: 'syz.3.6099': attribute type 12 has an invalid length. [ 887.296636][T28915] ipvlan3: entered allmulticast mode [ 887.304051][T28915] batadv_slave_1: entered allmulticast mode [ 887.314647][T28915] batman_adv: batadv0: Adding interface: ipvlan3 [ 887.321508][T28915] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.367460][T28915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.396395][T28915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.418278][T28915] batman_adv: batadv0: Interface activated: ipvlan3 [ 888.173608][T20655] hsr0: left allmulticast mode [ 888.190013][T20655] veth1_vlan: left promiscuous mode [ 888.208348][T20655] veth0_vlan: left promiscuous mode [ 888.453523][T20655] pim6reg (unregistering): left allmulticast mode [ 888.543506][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6108'. [ 888.736439][T28961] xt_HMARK: spi-set and port-set can't be combined [ 888.776011][T20655] team0 (unregistering): Port device team_slave_1 removed [ 888.837498][T20655] team0 (unregistering): Port device team_slave_0 removed [ 889.023890][T28964] geneve2: entered promiscuous mode [ 889.069676][T28951] lo speed is unknown, defaulting to 1000 [ 889.275366][T28975] netlink: 'syz.3.6114': attribute type 61 has an invalid length. [ 889.296923][T28978] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.6111'. [ 889.319376][T28978] netlink: 'syz.4.6111': attribute type 2 has an invalid length. [ 889.539246][T20655] IPVS: stop unused estimator thread 0... [ 889.562783][T28988] xt_recent: Unsupported userspace flags (000000b1) [ 889.774880][T28998] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 889.998682][T29014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.035036][T29014] xt_bpf: check failed: parse error [ 890.170169][T29019] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6124'. [ 890.187325][T29020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.262169][T29024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.482371][T29034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6130'. [ 890.562241][T29039] bond13: entered promiscuous mode [ 890.571280][T29039] bond13: entered allmulticast mode [ 890.590626][T29031] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6128'. [ 890.607409][T29038] netlink: 'syz.3.6131': attribute type 83 has an invalid length. [ 890.649951][T29034] netlink: 'syz.2.6130': attribute type 2 has an invalid length. [ 890.662939][T29049] netlink: 'syz.0.6134': attribute type 2 has an invalid length. [ 890.677138][T29049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6134'. [ 890.683186][T29034] netlink: 'syz.2.6130': attribute type 1 has an invalid length. [ 890.825420][T29052] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6135'. [ 890.942828][T29058] netlink: 'syz.3.6136': attribute type 1 has an invalid length. [ 890.964522][T29063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.974653][T29064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.017622][T29058] bond3: entered promiscuous mode [ 891.029687][T29058] bond3: entered allmulticast mode [ 891.035591][T29058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 891.089010][T29069] macvlan2: entered promiscuous mode [ 891.094856][T29069] macvlan2: entered allmulticast mode [ 891.104592][T29069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 891.262117][T29074] tipc: New replicast peer: 255.255.255.255 [ 891.272345][T29074] tipc: Enabled bearer , priority 10 [ 891.280022][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6141'. [ 891.364113][T29076] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6141'. [ 891.711640][T29095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.808003][T29104] block nbd0: reconnected socket [ 891.819434][T29104] block nbd0: Unsupported socket: should be TCP or UNIX. [ 891.897558][T16346] block nbd0: Receive control failed (result -32) [ 892.032444][T29124] netlink: 'syz.0.6155': attribute type 16 has an invalid length. [ 892.080096][T29124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.090610][T29125] __nla_validate_parse: 2 callbacks suppressed [ 892.090629][T29125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6155'. [ 892.132330][T29124] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.144244][T29124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 892.162391][T12137] lo speed is unknown, defaulting to 1000 [ 892.184558][T12137] syz0: Port: 1 Link ACTIVE [ 892.345690][T29137] ip6gre1: entered promiscuous mode [ 892.356928][T29137] ip6gre1: entered allmulticast mode [ 892.377611][T29137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 892.391532][T23289] tipc: Node number set to 2886997057 [ 892.417995][T29146] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 892.459125][T29150] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6163'. [ 892.606585][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6165'. [ 892.662569][T29159] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6166'. [ 892.696900][T29159] netlink: Conntrack attr has 3 unknown bytes [ 892.735687][T29163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6168'. [ 893.013482][T29178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6173'. [ 893.070486][T29181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6174'. [ 893.164039][T29186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6175'. [ 893.178856][T29186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6175'. [ 893.251685][T29192] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6177'. [ 893.268354][T29193] bridge1: port 1(vlan3) entered blocking state [ 893.276133][T29193] bridge1: port 1(vlan3) entered disabled state [ 893.287321][T29194] x_tables: duplicate underflow at hook 1 [ 893.292685][T29193] vlan3: entered allmulticast mode [ 893.298129][T29194] sctp: [Deprecated]: syz.0.6176 (pid 29194) Use of int in max_burst socket option deprecated. [ 893.298129][T29194] Use struct sctp_assoc_value instead [ 893.298635][T29193] bridge1: entered allmulticast mode [ 893.327526][T29193] vlan3: left allmulticast mode [ 893.333224][T29193] bridge1: left allmulticast mode [ 893.379561][T29187] nbd: device at index 64 is going down [ 893.796225][T29205] team0: Port device team_slave_0 removed [ 893.995574][T29222] validate_nla: 1 callbacks suppressed [ 893.995595][T29222] netlink: 'syz.1.6183': attribute type 15 has an invalid length. [ 894.066998][T28947] udevd[28947]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 894.123034][T20651] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 894.141064][T29222] netlink: 'syz.1.6183': attribute type 15 has an invalid length. [ 894.152179][T20651] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 894.199447][T20651] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 894.239536][T20651] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 894.289420][T29206] lo speed is unknown, defaulting to 1000 [ 894.295966][T29222] syzkaller0: entered promiscuous mode [ 894.306824][T29222] syzkaller0: entered allmulticast mode [ 894.829614][T29252] syzkaller0: entered promiscuous mode [ 894.835852][T29252] syzkaller0: entered allmulticast mode [ 895.256816][T29282] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 895.456907][T29295] veth0: entered promiscuous mode [ 895.566180][T29298] veth0 (unregistering): left promiscuous mode [ 895.975989][T29321] gtp1: entered promiscuous mode [ 895.999940][T29321] gtp1: entered allmulticast mode [ 896.133619][T29336] netlink: 'syz.2.6210': attribute type 1 has an invalid length. [ 896.481908][T29336] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 896.741334][T29353] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 897.042082][T29359] netlink: 'syz.3.6220': attribute type 19 has an invalid length. [ 897.059247][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 897.075045][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 897.087235][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 897.100270][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 897.108442][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 897.596514][T29356] lo speed is unknown, defaulting to 1000 [ 898.065990][T29356] chnl_net:caif_netlink_parms(): no params data found [ 898.266649][T29356] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.274721][T29356] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.282535][T29356] bridge_slave_0: entered allmulticast mode [ 898.291201][T29356] bridge_slave_0: entered promiscuous mode [ 898.302779][T29356] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.310170][T29356] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.320284][T29356] bridge_slave_1: entered allmulticast mode [ 898.328976][T29356] bridge_slave_1: entered promiscuous mode [ 898.381080][T29356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.395221][T29356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.450383][T29356] team0: Port device team_slave_0 added [ 898.461834][T29356] team0: Port device team_slave_1 added [ 898.506529][T29356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.515989][T29356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.559392][T29356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.598053][T29356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.611291][T29356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.693044][T29356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.901595][T29399] __nla_validate_parse: 23 callbacks suppressed [ 898.901616][T29399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6228'. [ 898.946614][T29356] hsr_slave_0: entered promiscuous mode [ 898.952984][T29400] netlink: 'syz.3.6228': attribute type 21 has an invalid length. [ 898.964920][T29356] hsr_slave_1: entered promiscuous mode [ 898.984502][T29356] debugfs: 'hsr0' already exists in 'hsr' [ 898.992319][T29356] Cannot create hsr debugfs directory [ 898.997507][T29400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6228'. [ 899.097115][T29400] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6228'. [ 899.129488][T29403] openvswitch: netlink: IP tunnel TTL not specified. [ 899.151198][ T5823] Bluetooth: hci0: command tx timeout [ 900.791744][T29425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.983946][T29438] netlink: 728 bytes leftover after parsing attributes in process `syz.0.6237'. [ 901.045139][T29438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6237'. [ 901.214524][T29356] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.231564][ T5823] Bluetooth: hci0: command tx timeout [ 901.258555][T29356] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.275974][T29356] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.320479][T29456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6244'. [ 901.369436][T29356] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.385661][T29356] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.407041][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6244'. [ 901.427620][T29356] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.441824][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6244'. [ 901.508692][T29456] netlink: 'syz.2.6244': attribute type 1 has an invalid length. [ 901.516400][T29460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.531472][T29462] netlink: 'syz.3.6246': attribute type 10 has an invalid length. [ 901.535648][T29460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.594131][T29462] team0: Device ipvlan1 failed to register rx_handler [ 901.651965][T29356] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.686015][T29356] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.712326][T29356] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.767636][T12137] IPVS: starting estimator thread 0... [ 901.776494][T29469] tipc: Started in network mode [ 901.787705][T29469] tipc: Node identity ac14140f, cluster identity 4711 [ 901.799555][T29469] tipc: Enabled bearer , priority 10 [ 901.812028][T29356] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.831922][T29356] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 901.853793][T29356] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.881048][T29471] IPVS: using max 25 ests per chain, 60000 per kthread [ 901.937344][T29473] netlink: 'syz.2.6250': attribute type 4 has an invalid length. [ 902.377557][T29492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6253'. [ 902.418108][T29356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 902.457902][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.466398][T29356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 902.478601][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.487871][T29496] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6254'. [ 902.498861][T29356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 902.519731][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.549100][T29356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 902.563026][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 902.808742][T29520] netlink: 'syz.2.6257': attribute type 3 has an invalid length. [ 902.913099][T22916] tipc: Node number set to 2886997007 [ 902.996054][T29356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.065779][T29356] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.108313][T11272] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.115684][T11272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.145266][T29534] netlink: 'syz.0.6260': attribute type 2 has an invalid length. [ 903.247510][T11272] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.254997][T11272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.311071][ T5823] Bluetooth: hci0: command tx timeout [ 903.536760][T29546] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 903.566234][T29546] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 903.588349][T29546] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 903.893649][T29356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.207287][T29582] sit0: entered promiscuous mode [ 904.222296][T29582] netlink: 'syz.0.6275': attribute type 1 has an invalid length. [ 904.231360][T29582] __nla_validate_parse: 2 callbacks suppressed [ 904.231382][T29582] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6275'. [ 904.266820][T29578] bridge_slave_1: entered allmulticast mode [ 904.348012][T29587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6276'. [ 904.414296][T29356] veth0_vlan: entered promiscuous mode [ 904.427475][T29590] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6277'. [ 904.448369][T29356] veth1_vlan: entered promiscuous mode [ 904.456646][T29590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 904.556571][T29356] veth0_macvtap: entered promiscuous mode [ 904.588421][T29356] veth1_macvtap: entered promiscuous mode [ 904.675080][T29356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.752103][T29598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6280'. [ 904.757235][T29356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.963423][T20652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.973117][T20652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.002017][T20652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.025028][T20652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.257113][T11272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.281470][T11272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.391399][ T5823] Bluetooth: hci0: command tx timeout [ 905.521368][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.530427][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.540375][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.550776][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.561454][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.572394][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.583188][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.594827][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.604173][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.604482][T29628] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 905.614919][T29641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 905.658277][T23286] lo speed is unknown, defaulting to 1000 [ 905.670488][T20646] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.678951][T23286] syz0: Port: 1 Link DOWN [ 905.693981][T20646] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.729210][T20646] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.768444][T20652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.783945][T20646] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.811570][T20652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.924437][T20652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.943559][T29652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6295'. [ 905.960061][T20652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.553656][T29680] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6304'. [ 906.568212][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6304'. [ 906.598304][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6304'. [ 906.823776][T29694] netlink: 'syz.0.6307': attribute type 32 has an invalid length. [ 907.111735][T29668] bridge2: entered promiscuous mode [ 907.120240][T29668] bridge2: entered allmulticast mode [ 907.242464][T29704] netlink: 'syz.3.6312': attribute type 62 has an invalid length. [ 907.338813][T16346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 907.357374][T16346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 907.372769][T16346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 907.384182][T16346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 907.396932][T16346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.485933][T29705] lo speed is unknown, defaulting to 1000 [ 907.626352][T29712] netlink: 'syz.4.6313': attribute type 12 has an invalid length. [ 907.649430][T29712] netlink: 'syz.4.6313': attribute type 29 has an invalid length. [ 907.675889][T29712] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6313'. [ 907.916363][T29729] netlink: 'syz.3.6320': attribute type 1 has an invalid length. [ 908.657861][T29705] chnl_net:caif_netlink_parms(): no params data found [ 908.783847][T11253] bond0: (slave netdevsim0): Releasing backup interface [ 909.064015][T29705] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.097118][T29705] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.108138][T29705] bridge_slave_0: entered allmulticast mode [ 909.117059][T29705] bridge_slave_0: entered promiscuous mode [ 909.129105][T29705] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.147212][T29705] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.162453][T29705] bridge_slave_1: entered allmulticast mode [ 909.178988][T29705] bridge_slave_1: entered promiscuous mode [ 909.418571][T29705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.465751][T29705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.473868][ T5823] Bluetooth: hci1: command tx timeout [ 909.543360][T29705] team0: Port device team_slave_0 added [ 909.662715][T29705] team0: Port device team_slave_1 added [ 909.669382][T29819] __nla_validate_parse: 9 callbacks suppressed [ 909.669401][T29819] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6347'. [ 909.682450][T29822] netlink: 'syz.1.6346': attribute type 1 has an invalid length. [ 909.695293][T29822] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6346'. [ 909.833588][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 909.852754][T29705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.859766][T29705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.896396][T29705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.018052][T29705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.041275][T29705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.069774][T29837] netlink: 'syz.1.6352': attribute type 1 has an invalid length. [ 910.083253][T29705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.121623][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6349'. [ 910.266592][T11253] dvmrp0: left allmulticast mode [ 910.503560][T11253] bond1 (unregistering): (slave gretap1): Releasing active interface [ 910.573122][T11253] bridge0 (unregistering): left allmulticast mode [ 910.955811][T11253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.968673][T11253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.979648][T11253] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 910.989511][T11253] bond0 (unregistering): Released all slaves [ 911.001687][T11253] bond1 (unregistering): Released all slaves [ 911.018891][T11253] bond2 (unregistering): Released all slaves [ 911.033714][T11253] bond3 (unregistering): Released all slaves [ 911.049391][T11253] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 911.069716][T11253] bond4 (unregistering): Released all slaves [ 911.085868][T11253] bond5 (unregistering): Released all slaves [ 911.100747][T11253] bond6 (unregistering): Released all slaves [ 911.115631][T11253] bond7 (unregistering): Released all slaves [ 911.131956][T11253] bond8 (unregistering): Released all slaves [ 911.159123][T11253] bond9 (unregistering): (slave lo): Releasing backup interface [ 911.169225][T11253] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 911.183869][T11253] bond9 (unregistering): Released all slaves [ 911.198654][T11253] bond10 (unregistering): Released all slaves [ 911.213884][T11253] bond11 (unregistering): Released all slaves [ 911.230842][T11253] bond12 (unregistering): Released all slaves [ 911.255572][T11253] bond13 (unregistering): Released all slaves [ 911.270441][T11253] bond14 (unregistering): Released all slaves [ 911.572522][ T5823] Bluetooth: hci1: command tx timeout [ 911.719688][T11253] tipc: Left network mode [ 911.811042][T29705] hsr_slave_0: entered promiscuous mode [ 911.843281][T29705] hsr_slave_1: entered promiscuous mode [ 911.887098][T29705] debugfs: 'hsr0' already exists in 'hsr' [ 911.906122][T29705] Cannot create hsr debugfs directory [ 911.992680][T29880] gtp2: entered promiscuous mode [ 912.005202][T29880] gtp2: entered allmulticast mode [ 912.209577][T29890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6363'. [ 912.263955][T29893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6363'. [ 912.615033][T29908] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6366'. [ 912.796155][T29914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6367'. [ 912.876162][T29913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6368'. [ 912.890667][T29913] netlink: 'syz.3.6368': attribute type 1 has an invalid length. [ 912.915504][T29914] geneve2: entered promiscuous mode [ 913.114911][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 913.482613][T29949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6377'. [ 913.634191][ T5823] Bluetooth: hci1: command tx timeout [ 914.341808][T11253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.374908][T11253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.394463][T11253] batman_adv: batadv0: Removing interface: dummy0 [ 914.671665][T11253] team0 (unregistering): Port device team_slave_1 removed [ 914.757966][T11253] team0 (unregistering): Port device team_slave_0 removed [ 915.193935][T30000] __nla_validate_parse: 3 callbacks suppressed [ 915.193957][T30000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6390'. [ 915.503330][T11253] IPVS: stop unused estimator thread 0... [ 915.711223][ T5823] Bluetooth: hci1: command tx timeout [ 915.942303][T29996] delete_channel: no stack [ 916.499080][T30044] bpq0: left allmulticast mode [ 918.216907][T30013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.268999][T29705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 918.379003][T29705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.403473][T29705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 918.471371][T29705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.488778][T29705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 918.518908][T29705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.534693][T30060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6398'. [ 918.536144][T29705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 918.565389][T29705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.694285][T30075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6402'. [ 918.852992][T29705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.908544][T29705] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.945307][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.952751][T20652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.030539][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.037888][T11253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.137512][T29705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.285669][T30092] lo speed is unknown, defaulting to 1000 [ 919.522911][T30112] IPVS: Unknown mcast interface: vcan0 [ 919.537356][T30113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6408'. [ 919.582589][T30116] netlink: 'syz.4.6412': attribute type 30 has an invalid length. [ 919.602659][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6412'. [ 919.646146][T30116] netlink: 'syz.4.6412': attribute type 30 has an invalid length. [ 919.687279][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6412'. [ 919.715687][T29705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.869198][T29705] veth0_vlan: entered promiscuous mode [ 919.900076][T29705] veth1_vlan: entered promiscuous mode [ 919.901332][T30121] netlink: 'syz.1.6413': attribute type 1 has an invalid length. [ 919.916216][T30121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6413'. [ 919.976264][T29705] veth0_macvtap: entered promiscuous mode [ 920.019885][T29705] veth1_macvtap: entered promiscuous mode [ 920.320555][T30129] : entered promiscuous mode [ 920.405641][T29705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.483837][T29705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.541550][T20627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.562773][T20627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.583190][T20627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.608471][T20627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.960046][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.997965][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.087048][ T5922] net_ratelimit: 25 callbacks suppressed [ 921.087073][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.114948][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.124367][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.307085][ T5883] IPVS: starting estimator thread 0... [ 921.389118][T30197] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6431'. [ 921.402267][T30194] 0: reclassify loop, rule prio 0, protocol 700 [ 921.407392][T30186] IPVS: using max 27 ests per chain, 64800 per kthread [ 921.636576][T23289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.646233][T20646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.663333][T23288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.670183][T16346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.684230][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.702157][T16346] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.711826][T16346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.721980][T16346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.733865][T16346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 922.015605][T30200] lo speed is unknown, defaulting to 1000 [ 922.117630][T23289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.273201][T20627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.289419][T12137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.304168][T23283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.346418][T30210] syzkaller0: entered promiscuous mode [ 922.378186][T30210] syzkaller0: entered allmulticast mode [ 922.940038][T30243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6444'. [ 923.100536][T30249] vlan2: entered promiscuous mode [ 923.113686][T30249] bridge0: entered promiscuous mode [ 923.399484][T30264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6452'. [ 923.624782][T30251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6448'. [ 923.638871][T30200] chnl_net:caif_netlink_parms(): no params data found [ 923.751164][T30275] veth0: entered promiscuous mode [ 923.769529][T30275] veth0: left promiscuous mode [ 923.779443][ T48] bridge_slave_0: left allmulticast mode [ 923.789070][ T48] bridge_slave_0: left promiscuous mode [ 923.796338][T16346] Bluetooth: hci2: command tx timeout [ 923.817548][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.874687][T30278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6457'. [ 923.933586][T30279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6456'. [ 923.959795][ T48] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 924.372763][ T48] bond8 (unregistering): (slave gretap1): Releasing active interface [ 924.735681][ T48] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 924.745076][ T48] bridge3 (unregistering): left promiscuous mode [ 924.845264][ T48] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 924.854298][ T48] bridge5 (unregistering): left promiscuous mode [ 925.078469][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.089791][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.102065][ T48] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 925.112113][ T48] bond0 (unregistering): Released all slaves [ 925.123959][ T48] bond1 (unregistering): Released all slaves [ 925.138992][ T48] bond2 (unregistering): Released all slaves [ 925.159015][ T48] bond3 (unregistering): (slave veth5): Releasing active interface [ 925.171076][ T48] bond3 (unregistering): Released all slaves [ 925.190250][ T48] bond4 (unregistering): Released all slaves [ 925.208329][ T48] bond5 (unregistering): Released all slaves [ 925.228394][ T48] bond6 (unregistering): Released all slaves [ 925.258146][ T48] bond7 (unregistering): Released all slaves [ 925.274192][ T48] bond8 (unregistering): Released all slaves [ 925.290604][ T48] bond9 (unregistering): Released all slaves [ 925.578840][T30200] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.607606][T30200] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.631759][T30200] bridge_slave_0: entered allmulticast mode [ 925.653296][T30200] bridge_slave_0: entered promiscuous mode [ 925.681349][T30200] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.710263][T30200] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.733876][T30200] bridge_slave_1: entered allmulticast mode [ 925.769966][T30200] bridge_slave_1: entered promiscuous mode [ 925.793994][ T48] tipc: Disabling bearer [ 925.805435][ T48] tipc: Left network mode [ 925.884463][T16346] Bluetooth: hci2: command 0x041b tx timeout [ 926.247819][T30318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6465'. [ 926.536302][T30338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6468'. [ 926.599007][T30200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.665912][T30336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6467'. [ 926.672158][T30200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.872912][T30349] netlink: 'syz.2.6471': attribute type 2 has an invalid length. [ 927.005164][T30200] team0: Port device team_slave_0 added [ 927.136356][T30200] team0: Port device team_slave_1 added [ 927.278515][T30200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.301046][T30200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.335520][T30200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.365428][T30200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.376210][T30200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.418962][T30200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.448880][ T48] hsr_slave_0: left promiscuous mode [ 927.456715][ T48] hsr_slave_1: left promiscuous mode [ 927.464258][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.473953][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.483477][ T48] batman_adv: batadv0: Removing interface: ipvlan3 [ 927.595146][ T48] pim6reg (unregistering): left allmulticast mode [ 927.888807][ T48] team0 (unregistering): Port device 26±ÿ removed [ 927.904639][ T48] team0 (unregistering): Port device team_slave_0 removed [ 927.964483][T16346] Bluetooth: hci2: command 0x041b tx timeout [ 928.084726][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 928.305032][T30200] hsr_slave_0: entered promiscuous mode [ 928.315380][T30200] hsr_slave_1: entered promiscuous mode [ 928.342555][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6480'. [ 928.535433][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6483'. [ 928.609519][T30397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6483'. [ 928.720138][T30397] geneve2: entered promiscuous mode [ 928.883460][T30409] netlink: 'syz.2.6486': attribute type 4 has an invalid length. [ 928.957097][T30409] net_ratelimit: 6 callbacks suppressed [ 928.957120][T30409] openvswitch: netlink: IP tunnel dst address not specified [ 929.397679][T30432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6491'. [ 929.722400][T30452] ipt_rpfilter: unknown options [ 929.758064][T30452] netlink: 'syz.3.6495': attribute type 21 has an invalid length. [ 929.766827][T30432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.832588][T30440] macvlan2: entered promiscuous mode [ 929.844584][T30440] macvlan2: entered allmulticast mode [ 929.891790][T30441] bond1: (slave vti0): refused to change device type [ 929.976602][T30452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6495'. [ 930.034707][T16346] Bluetooth: hci2: command 0x041b tx timeout [ 930.341412][T30470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6497'. [ 930.453745][T30472] sit0: entered allmulticast mode [ 930.786792][T30490] netlink: 'syz.2.6502': attribute type 2 has an invalid length. [ 930.802775][T30480] syzkaller0: entered promiscuous mode [ 930.818087][T30480] syzkaller0: entered allmulticast mode [ 930.830204][T30490] netlink: 'syz.2.6502': attribute type 8 has an invalid length. [ 930.842548][T30490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6502'. [ 930.889377][T30493] tipc: Failed to remove unknown binding: 66,1,1/0:740394510/740394512 [ 931.360772][T30200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 931.396161][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.410059][T30200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 931.449427][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 931.550262][T30200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 931.619948][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 931.663707][T30200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 931.739105][T30200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.800607][T30541] block nbd4: not configured, cannot reconfigure [ 931.877708][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.112462][T16346] Bluetooth: hci2: command 0x041b tx timeout [ 932.175491][T30200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.237344][T30200] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.261923][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.269306][T20652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.316361][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.323803][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.665343][T30580] can: request_module (can-proto-3) failed. [ 932.851222][T30589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.125686][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.180399][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.219691][T30200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.240117][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.275071][T30605] syzkaller0: entered promiscuous mode [ 933.282620][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.293095][T30605] syzkaller0: entered allmulticast mode [ 933.318661][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.322614][T30607] openvswitch: netlink: Key type 90 is out of range max 32 [ 933.332649][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.354245][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.373684][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.397737][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 933.426687][T30602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6521'. [ 934.085525][T30200] veth0_vlan: entered promiscuous mode [ 934.145800][T30200] veth1_vlan: entered promiscuous mode [ 934.164646][T30626] syzkaller0: entered promiscuous mode [ 934.179554][T30626] syzkaller0: entered allmulticast mode [ 934.464124][T30200] veth0_macvtap: entered promiscuous mode [ 934.480723][T30653] nbd: must specify a device to reconfigure [ 934.552957][T30200] veth1_macvtap: entered promiscuous mode [ 934.639623][T30655] bond2: entered promiscuous mode [ 934.665089][T30655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 934.753454][T30200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.807250][T30200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.856756][T20652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.868980][T30675] netlink: 'syz.3.6538': attribute type 4 has an invalid length. [ 934.887018][T20652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.927004][T20652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.956853][T20652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.167519][T30679] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 935.180049][T30679] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 935.199143][T30679] gretap1: entered promiscuous mode [ 935.205213][T30679] gretap1: entered allmulticast mode [ 935.218816][T20654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.243418][T20654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.319719][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.330716][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.855329][T30709] netlink: 'syz.1.6551': attribute type 33 has an invalid length. [ 936.525528][T30742] netlink: 'syz.3.6561': attribute type 51 has an invalid length. [ 936.575664][T30745] Cannot find add_set index 0 as target [ 936.583310][T30745] netlink: 'syz.0.6562': attribute type 4 has an invalid length. [ 936.627051][T30745] .`: renamed from bond0 (while UP) [ 936.688623][T30753] netlink: 'syz.1.6565': attribute type 142 has an invalid length. [ 937.296759][T30786] sctp: [Deprecated]: syz.1.6575 (pid 30786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 937.296759][T30786] Use struct sctp_sack_info instead [ 937.316170][T30782] syzkaller1: entered promiscuous mode [ 937.333944][T30782] syzkaller1: entered allmulticast mode [ 937.707968][T30801] netlink: 'syz.2.6579': attribute type 1 has an invalid length. [ 937.745822][T30801] netlink: 'syz.2.6579': attribute type 1 has an invalid length. [ 938.072283][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.092915][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.129861][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.158421][T20652] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.444294][T30831] __nla_validate_parse: 40 callbacks suppressed [ 938.444319][T30831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6587'. [ 938.486501][T30834] ±ÿ: renamed from team_slave_1 (while UP) [ 938.505486][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6587'. [ 938.527719][T30831] hsr0: entered promiscuous mode [ 938.545593][T30831] macvlan2: entered allmulticast mode [ 938.553640][T30831] hsr0: entered allmulticast mode [ 938.564521][T30831] hsr_slave_0: entered allmulticast mode [ 938.582340][T30831] hsr_slave_1: entered allmulticast mode [ 938.594701][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6588'. [ 938.608077][T30843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6589'. [ 938.800455][T30840] team1: entered promiscuous mode [ 938.816049][T30840] team1: entered allmulticast mode [ 938.837022][T30849] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 938.857078][T30849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 939.370443][T30865] bond4: Removing last arp target with arp_interval on [ 940.062199][T30907] vlan3: entered allmulticast mode [ 940.071961][T30907] bond0: entered allmulticast mode [ 940.077437][T30907] bond_slave_0: entered allmulticast mode [ 940.084554][T30907] bond_slave_1: entered allmulticast mode [ 940.107545][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 940.441602][T30932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6613'. [ 940.452492][T30930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6614'. [ 940.602442][T30942] tipc: Enabling not permitted [ 940.614999][T30942] tipc: Enabling of bearer rejected, failed to enable media [ 940.735328][T30948] Bluetooth: MGMT ver 1.23 [ 940.829511][T30954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.229851][T30983] netlink: 'syz.4.6625': attribute type 7 has an invalid length. [ 941.600238][T30994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6626'. [ 941.640343][T30995] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 941.669087][T31001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6628'. [ 941.682015][T30994] xt_l2tp: invalid flags combination: 0 [ 941.847843][T31012] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 942.608459][T31053] x_tables: duplicate underflow at hook 1 [ 942.796697][T31060] netlink: 'syz.0.6648': attribute type 1 has an invalid length. [ 942.979022][T31069] "syz.4.6651" (31069) uses obsolete ecb(arc4) skcipher [ 943.152944][T20646] wlan1: Trigger new scan to find an IBSS to join [ 943.154839][T31087] netlink: 'syz.4.6655': attribute type 2 has an invalid length. [ 943.466959][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6660'. [ 943.760548][T31117] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6664'. [ 943.827640][T31116] syzkaller0: entered promiscuous mode [ 943.842468][T31116] syzkaller0: entered allmulticast mode [ 943.925010][T31122] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 944.018236][T31128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6669'. [ 944.143060][T31133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6671'. [ 944.273502][T31139] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 944.279811][T31140] netlink: 'syz.2.6673': attribute type 2 has an invalid length. [ 944.290375][T31139] syzkaller1: Refused to change device type [ 944.306311][T31140] netlink: 'syz.2.6673': attribute type 1 has an invalid length. [ 944.320623][T31140] netlink: 'syz.2.6673': attribute type 2 has an invalid length. [ 944.411308][T31140] vþ: entered promiscuous mode [ 944.456099][T31148] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 944.729942][T31162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6680'. [ 944.914015][T31171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6683'. [ 944.962772][T31174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6682'. [ 945.008639][T31176] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6684'. [ 945.522276][T31185] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.532224][T31185] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.738661][T31185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.757892][T31185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.179468][T20651] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.205605][T20651] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.220621][T20651] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.279412][T20651] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.686231][T31260] pim6reg: entered allmulticast mode [ 947.411861][T31296] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6703'. [ 947.434688][T31296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6703'. [ 947.739289][T31304] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 948.173655][T31323] syzkaller0: entered promiscuous mode [ 948.198298][T31323] syzkaller0: entered allmulticast mode [ 948.836767][T31346] __nla_validate_parse: 2 callbacks suppressed [ 948.836791][T31346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6711'. [ 949.204850][T31372] Bluetooth: MGMT ver 1.23 [ 949.592278][T31386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6721'. [ 949.619704][T31390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6721'. [ 949.637592][T31388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6721'. [ 949.668153][T31386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6721'. [ 949.790064][T31388] netlink: 'syz.4.6721': attribute type 1 has an invalid length. [ 950.470778][T31422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6730'. [ 950.758872][T31431] bond5: entered promiscuous mode [ 950.796229][T31431] bond5: entered allmulticast mode [ 950.827071][T31431] 8021q: adding VLAN 0 to HW filter on device bond5 [ 951.081754][T31451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6737'. [ 951.227862][T31455] nbd: must specify a device to reconfigure [ 951.278155][T31466] netlink: 'syz.4.6741': attribute type 3 has an invalid length. [ 951.317138][T31466] netlink: 'syz.4.6741': attribute type 1 has an invalid length. [ 951.347042][T31466] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6741'. [ 951.496262][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'. [ 951.542775][T31474] netlink: 'syz.1.6742': attribute type 30 has an invalid length. [ 951.595065][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'. [ 951.607405][T31478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 951.620396][T31481] netlink: 'syz.1.6742': attribute type 30 has an invalid length. [ 951.726721][T20655] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 951.772428][T20655] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 951.826582][T20655] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 951.862953][T20655] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 951.880626][T31485] netlink: 'syz.3.6746': attribute type 5 has an invalid length. [ 951.899631][T31491] syzkaller0: entered promiscuous mode [ 951.927177][T31491] syzkaller0: entered allmulticast mode [ 952.001874][T31485] geneve3: entered promiscuous mode [ 952.039267][T31485] geneve3: entered allmulticast mode [ 952.074703][T20627] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 952.113973][T20627] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 952.217454][T20627] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 952.238962][T20627] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 952.395951][T31512] netlink: 'syz.0.6753': attribute type 12 has an invalid length. [ 953.118625][T31543] syzkaller0: entered promiscuous mode [ 953.143961][T31543] syzkaller0: entered allmulticast mode [ 953.234765][T31543] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 953.253047][T31543] bond1 (unregistering): Released all slaves [ 953.855930][T31573] __nla_validate_parse: 6 callbacks suppressed [ 953.855952][T31573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6767'. [ 953.923007][T31576] bridge_slave_0: left allmulticast mode [ 953.939320][T31576] bridge_slave_0: left promiscuous mode [ 953.964813][T31581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 953.977102][T31576] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.059202][T31576] bridge_slave_1: left allmulticast mode [ 954.073494][T31576] bridge_slave_1: left promiscuous mode [ 954.087819][T31576] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.134322][T31576] .`: (slave bond_slave_0): Releasing backup interface [ 954.150438][T31576] .`: (slave bond_slave_1): Releasing backup interface [ 954.173424][T31576] team0: Port device team_slave_0 removed [ 954.189156][T31576] team0: Port device team_slave_1 removed [ 954.200073][T31576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.208411][T31576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.218617][T31576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.227333][T31576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.239331][T31576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 954.463443][T31594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6772'. [ 954.782653][T31610] netlink: 'syz.2.6776': attribute type 4 has an invalid length. [ 954.866568][T31614] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6779'. [ 954.905204][T31618] pim6reg: entered allmulticast mode [ 954.983956][T31609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 955.025108][T31609] bridge0: port 3(bond3) entered blocking state [ 955.073184][T31609] bridge0: port 3(bond3) entered disabled state [ 955.108351][T31609] bond3: entered allmulticast mode [ 955.158657][T31609] bond3: entered promiscuous mode [ 955.645321][T31635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6782'. [ 955.888360][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6785'. [ 955.916733][T31648] netlink: 'syz.1.6786': attribute type 11 has an invalid length. [ 955.926561][T31648] netlink: 'syz.1.6786': attribute type 11 has an invalid length. [ 955.959864][T31648] netlink: 'syz.1.6786': attribute type 11 has an invalid length. [ 955.979098][T31648] netlink: 'syz.1.6786': attribute type 11 has an invalid length. [ 956.009541][T31648] netlink: 'syz.1.6786': attribute type 11 has an invalid length. [ 956.050060][T31648] netlink: 'syz.1.6786': attribute type 11 has an invalid length. [ 956.073716][T31648] netlink: 'syz.1.6786': attribute type 6 has an invalid length. [ 956.092299][T31648] netlink: 'syz.1.6786': attribute type 23 has an invalid length. [ 956.102556][T31649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6783'. [ 956.424312][T31673] netlink: 'syz.0.6791': attribute type 9 has an invalid length. [ 956.448756][T31672] syzkaller0: entered promiscuous mode [ 956.462957][T31672] syzkaller0: entered allmulticast mode [ 956.479318][T31676] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6792'. [ 956.735281][T31685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6795'. [ 956.752864][T31683] pimreg3: entered allmulticast mode [ 956.789693][T31685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6795'. [ 956.885086][T31699] xt_TCPMSS: Only works on TCP SYN packets [ 956.969337][T23283] IPVS: starting estimator thread 0... [ 956.979239][T31703] tipc: Started in network mode [ 957.002429][T31703] tipc: Node identity ac14140f, cluster identity 4711 [ 957.018884][T31703] tipc: Enabled bearer , priority 10 [ 957.043105][T31710] netlink: 'syz.1.6801': attribute type 10 has an invalid length. [ 957.058431][T31708] netlink: 'syz.0.6800': attribute type 4 has an invalid length. [ 957.071549][T31706] IPVS: using max 31 ests per chain, 74400 per kthread [ 957.091919][T31707] netlink: 'syz.0.6800': attribute type 4 has an invalid length. [ 957.172171][T31715] netlink: 'syz.1.6803': attribute type 3 has an invalid length. [ 957.546799][T31733] netlink: 'syz.2.6810': attribute type 7 has an invalid length. [ 957.561424][T31733] netlink: 'syz.2.6810': attribute type 7 has an invalid length. [ 957.624880][T31733] netlink: 'syz.2.6810': attribute type 1 has an invalid length. [ 957.637828][T31734] syzkaller0: entered promiscuous mode [ 957.652679][T31733] NCSI netlink: No device for ifindex 0 [ 957.659170][T31734] syzkaller0: entered allmulticast mode [ 958.132151][T23283] tipc: Node number set to 2886997007 [ 958.203073][T31762] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 958.752793][T31785] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 959.021174][T31788] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 959.068696][T31788] syzkaller0: entered promiscuous mode [ 959.088023][T31788] syzkaller0: entered allmulticast mode [ 960.076991][T31852] __nla_validate_parse: 7 callbacks suppressed [ 960.077006][T31852] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6844'. [ 962.318770][T31809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 962.328063][T31824] validate_nla: 1 callbacks suppressed [ 962.328103][T31824] netlink: 'syz.3.6836': attribute type 2 has an invalid length. [ 962.346608][T31824] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6836'. [ 962.623445][T31875] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 962.672710][T31879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6850'. [ 962.896936][T31888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6854'. [ 962.946263][T31891] bond0: entered promiscuous mode [ 962.953975][T31889] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6853'. [ 962.991886][T31889] netlink: 'syz.3.6853': attribute type 1 has an invalid length. [ 963.013829][T31889] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6853'. [ 963.236995][T31909] netlink: 'syz.0.6860': attribute type 9 has an invalid length. [ 963.354630][T31916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6863'. [ 963.650077][T31936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6869'. [ 963.685489][T31936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 963.716879][T31939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6870'. [ 963.737884][T31939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.824243][T31946] sctp: [Deprecated]: syz.0.6872 (pid 31946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 963.824243][T31946] Use struct sctp_sack_info instead [ 963.960254][T31948] Bluetooth: MGMT ver 1.23 [ 964.036583][T31955] netlink: 'syz.1.6876': attribute type 2 has an invalid length. [ 964.183666][T31962] bond1: option lp_interval: invalid value (0) [ 964.190180][T31962] bond1: option lp_interval: allowed values 1 - 2147483647 [ 964.206582][T31962] bond1 (unregistering): Released all slaves [ 964.683064][T31986] netlink: 'syz.2.6886': attribute type 1 has an invalid length. [ 964.802357][T31986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.844651][T31987] bond1: (slave veth3): Enslaving as an active interface with a down link [ 964.866755][T31988] bond1: (slave veth0_to_bond): making interface the new active one [ 964.877109][T31988] veth0_to_bond: entered promiscuous mode [ 964.884364][T31988] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 964.987421][T31996] netlink: 'syz.1.6889': attribute type 23 has an invalid length. [ 965.273980][T32021] __nla_validate_parse: 7 callbacks suppressed [ 965.274006][T32021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6896'. [ 965.287429][T32024] openvswitch: netlink: Message has 4 unknown bytes. [ 965.345491][T32021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6896'. [ 965.387214][T32021] netlink: 'syz.0.6896': attribute type 5 has an invalid length. [ 965.527387][T32039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6899'. [ 965.678396][T32048] IPv6: NLM_F_CREATE should be specified when creating new route [ 965.864218][T32053] veth3: entered allmulticast mode [ 965.872246][T32055] veth1_to_bond: entered allmulticast mode [ 965.906736][T32066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6908'. [ 965.912120][T32055] veth1_to_bond: left allmulticast mode [ 965.925255][T32048] syzkaller0: entered promiscuous mode [ 965.931671][T32048] syzkaller0: entered allmulticast mode [ 966.061479][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6910'. [ 966.081616][T32075] netlink: 'syz.2.6910': attribute type 5 has an invalid length. [ 966.090141][T32075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6910'. [ 966.210022][T32079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6911'. [ 966.395888][T32083] netlink: 'syz.1.6913': attribute type 16 has an invalid length. [ 966.410830][T32088] : renamed from hsr0 (while UP) [ 966.419394][T32083] netlink: 'syz.1.6913': attribute type 17 has an invalid length. [ 966.564778][T32094] netlink: get zone limit has 4 unknown bytes [ 966.582980][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6917'. [ 966.593982][T32083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 966.661242][T32096] bond2: option xmit_hash_policy: invalid value (64) [ 966.682570][T32096] bond2 (unregistering): Released all slaves [ 966.815633][T32106] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6919'. [ 966.915101][T32106] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6919'. [ 967.350808][T32130] macvlan0: entered promiscuous mode [ 967.467759][T32140] xt_limit: Overflow, try lower: 604147548/4200216962 [ 967.831395][T32157] validate_nla: 1 callbacks suppressed [ 967.833001][T32157] netlink: 'syz.1.6938': attribute type 1 has an invalid length. [ 967.867060][T32158] netlink: 'syz.1.6938': attribute type 1 has an invalid length. [ 968.391269][T32191] netlink: 'syz.4.6950': attribute type 63 has an invalid length. [ 968.422189][T32194] netlink: 'syz.4.6950': attribute type 63 has an invalid length. [ 968.465475][T32196] netlink: 'syz.0.6951': attribute type 4 has an invalid length. [ 968.687118][T32196] bond1 (unregistering): Released all slaves [ 968.760072][T32213] IPVS: Scheduler module ip_vs_sip not found [ 968.768843][T32200] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 968.775141][T32220] netlink: 'syz.3.6958': attribute type 4 has an invalid length. [ 969.368582][T32241] bond2: entered promiscuous mode [ 970.455873][T32275] tls_set_device_offload_rx: netdev not found [ 970.472097][T32276] __nla_validate_parse: 8 callbacks suppressed [ 970.472118][T32276] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6974'. [ 970.494206][T32275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6973'. [ 970.510588][T32274] netlink: 'syz.4.6972': attribute type 21 has an invalid length. [ 970.548447][T32274] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6972'. [ 970.561738][T32274] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6972'. [ 970.628965][T32274] netlink: 'syz.4.6972': attribute type 21 has an invalid length. [ 970.673097][T32274] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6972'. [ 970.712787][T32274] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6972'. [ 970.743174][T32274] netlink: 'syz.4.6972': attribute type 21 has an invalid length. [ 970.774209][T32274] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6972'. [ 970.784146][T32282] syzkaller0: entered promiscuous mode [ 970.811852][T32282] syzkaller0: entered allmulticast mode [ 970.835943][T32274] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6972'. [ 970.864005][T32274] netlink: 'syz.4.6972': attribute type 21 has an invalid length. [ 970.899084][T32274] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6972'. [ 971.104089][T32274] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6972'. [ 971.188626][T32298] vcan1: entered promiscuous mode [ 971.201354][T32298] vcan1: entered allmulticast mode [ 971.313700][T32304] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 971.530720][T32306] : entered promiscuous mode [ 971.598027][T32315] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.629478][T32315] bridge_slave_1: left allmulticast mode [ 971.656811][T32315] bridge_slave_1: left promiscuous mode [ 971.686714][T32315] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.746857][T32315] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 972.817256][T32375] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 972.853484][T32375] bond5: (slave lo): Enslaving as an active interface with an up link [ 972.863125][T32375] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 973.535996][T20627] erspan0 (unregistering): left allmulticast mode [ 974.106150][T20627] bond0 (unregistering): Released all slaves [ 974.117555][T20627] bond1 (unregistering): Released all slaves [ 974.135165][T20627] bond2 (unregistering): Released all slaves [ 974.152165][T20627] bond3 (unregistering): Released all slaves [ 974.170740][T20627] bond4 (unregistering): Released all slaves [ 974.195575][T20627] bond5 (unregistering): Released all slaves [ 974.212902][T20627] bond6 (unregistering): (slave lo): Releasing backup interface [ 974.221360][T20627] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 974.238212][T20627] bond6 (unregistering): Released all slaves [ 974.254654][T20627] bond7 (unregistering): Released all slaves [ 974.552169][T20627] : left promiscuous mode [ 974.666903][T20627] tipc: Left network mode [ 975.145312][T20627] IPVS: stopping backup sync thread 27466 ... [ 975.704633][T32463] __nla_validate_parse: 70 callbacks suppressed [ 975.704659][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7027'. [ 975.709531][T32465] validate_nla: 35 callbacks suppressed [ 975.709550][T32465] netlink: 'syz.0.7028': attribute type 1 has an invalid length. [ 976.043971][T20651] veth0_to_bond: left promiscuous mode [ 976.134736][T20627] hsr_slave_0: left promiscuous mode [ 976.174212][T20627] hsr_slave_1: left promiscuous mode [ 976.193710][T20627] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 976.224814][T20627] batman_adv: batadv0: Removing interface: ipvlan2 [ 976.281119][T20627] veth1_macvtap: left promiscuous mode [ 976.293550][T32475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7031'. [ 976.309810][T20627] veth0_macvtap: left promiscuous mode [ 976.319238][T32441] infiniband syz2: set down [ 976.324579][T20627] veth1_vlan: left promiscuous mode [ 976.330031][T32441] infiniband syz2: added bond_slave_1 [ 976.646114][T32441] RDS/IB: syz2: added [ 976.666647][T32441] smc: adding ib device syz2 with port count 1 [ 976.685279][T32441] smc: ib device syz2 port 1 has no pnetid [ 976.697974][T20627] pim6reg (unregistering): left allmulticast mode [ 977.515398][T32507] netlink: 'syz.2.7038': attribute type 10 has an invalid length. [ 977.908322][T32512] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7040'. [ 977.949357][T32512] netlink: 'syz.2.7040': attribute type 1 has an invalid length. [ 977.979278][T32514] vlan4: entered allmulticast mode [ 978.005595][T32512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7040'. [ 978.094652][T20627] IPVS: stop unused estimator thread 0... [ 978.186213][T20651] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.225245][T20651] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.286409][T32523] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 978.296362][T32524] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 978.324287][T20651] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.388522][T32530] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7046'. [ 978.403713][T20651] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.437427][T32527] syzkaller0: entered promiscuous mode [ 978.464486][T32527] syzkaller0: entered allmulticast mode [ 978.609852][T32539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7048'. [ 979.166610][T32555] SET target dimension over the limit! [ 979.349701][T32561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7053'. [ 979.377535][T32561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7053'. [ 981.467610][T32535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.479302][T32550] nbd: couldn't find a device at index 1048580 [ 981.746229][T32600] xt_ecn: cannot match TCP bits for non-tcp packets [ 981.935993][T12137] IPVS: starting estimator thread 0... [ 982.014304][T32614] sctp: [Deprecated]: syz.2.7071 (pid 32614) Use of int in max_burst socket option. [ 982.014304][T32614] Use struct sctp_assoc_value instead [ 982.026535][T32619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7072'. [ 982.034608][T32614] netlink: 'syz.2.7071': attribute type 3 has an invalid length. [ 982.046046][T32608] IPVS: using max 29 ests per chain, 69600 per kthread [ 982.074585][T32614] netlink: 766 bytes leftover after parsing attributes in process `syz.2.7071'. [ 982.136068][T32628] netlink: 'syz.4.7069': attribute type 1 has an invalid length. [ 982.330794][T32637] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7075'. [ 982.559630][T32648] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20000 [ 982.812276][T32624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7073'. [ 982.837715][T32624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7073'. [ 982.857749][T32662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7083'. [ 983.094623][T32672] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7086'. [ 983.138018][T32672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7086'. [ 983.182651][T32674] bridge_slave_0: left allmulticast mode [ 983.200064][T32674] bridge_slave_0: left promiscuous mode [ 983.218242][T32680] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7089'. [ 983.220543][T32674] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.328313][T32674] bond0: (slave bridge_slave_1): Releasing backup interface [ 983.409085][T32674] bond1: (slave veth0_to_bond): Releasing active interface [ 983.506522][T32674] bond0: (slave bond_slave_0): Releasing backup interface [ 983.567265][T32674] bond0: (slave bond_slave_1): Releasing backup interface [ 983.614319][T32674] team0: Port device team_slave_0 removed [ 983.679641][T32674] team0: Port device team_slave_1 removed [ 983.697352][T32674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.741490][T32674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.764723][T32674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.773747][T32674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.794368][T32674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 983.796500][T32696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7091'. [ 983.974327][T32706] bridge0: port 3(ipvlan2) entered blocking state [ 983.991198][T32706] bridge0: port 3(ipvlan2) entered disabled state [ 984.008294][T32706] ipvlan2: entered allmulticast mode [ 984.022462][T32706] bridge0: entered allmulticast mode [ 984.036027][T32706] ipvlan2: left allmulticast mode [ 984.043598][T32706] bridge0: left allmulticast mode [ 984.628239][T32741] netlink: 'syz.1.7106': attribute type 4 has an invalid length. [ 984.693172][T32745] netlink: 'syz.1.7106': attribute type 4 has an invalid length. [ 985.049212][T32765] netlink: 'syz.0.7113': attribute type 1 has an invalid length. [ 985.151232][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 985.204878][T32765] bond1: entered promiscuous mode [ 985.219991][ T308] netlink: zone id is out of range [ 985.248420][T32765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.261228][ T308] netlink: del zone limit has 4 unknown bytes [ 985.317790][ T301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.346703][ T301] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 985.371602][ T301] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 985.410529][ T301] bond1: (slave ip6gre1): making interface the new active one [ 985.425510][ T301] ip6gre1: entered promiscuous mode [ 985.433662][ T301] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 985.468361][ T323] netlink: 'syz.2.7122': attribute type 12 has an invalid length. [ 985.949547][ T341] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 986.767366][ T392] h: entered promiscuous mode [ 987.228725][ T417] __nla_validate_parse: 46 callbacks suppressed [ 987.228749][ T417] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7154'. [ 987.405089][ T424] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7155'. [ 987.642055][ T428] syzkaller0: entered promiscuous mode [ 987.660074][ T428] syzkaller0: entered allmulticast mode [ 987.679575][ T428] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 987.706825][ T434] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7160'. [ 987.751462][ T433] sctp: [Deprecated]: syz.4.7160 (pid 433) Use of int in maxseg socket option. [ 987.751462][ T433] Use struct sctp_assoc_value instead [ 987.795031][ T428] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7158'. [ 987.967841][ T439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7162'. [ 987.981782][ T441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7163'. [ 987.995693][ T441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 988.228644][ T454] bond0: left promiscuous mode [ 988.258077][ T454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.270241][ T451] xt_l2tp: v2 doesn't support IP mode [ 988.344602][ T470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7167'. [ 988.372614][ T472] vcan0: tx address claim with dlc 1 [ 988.631303][ T487] xt_connbytes: Forcing CT accounting to be enabled [ 991.204015][ T453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 991.239180][ T478] netlink: 'syz.4.7168': attribute type 9 has an invalid length. [ 991.509104][ T508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7179'. [ 991.560360][ T511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7181'. [ 991.923699][ T532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 991.933352][ T532] xt_hashlimit: size too large, truncated to 1048576 [ 992.004114][ T535] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.7188'. [ 992.019398][ T535] netlink: Unknown conntrack attr (type=2304, max=9) [ 992.111533][ T543] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 992.302272][ T499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 992.336036][ T554] netlink: 'syz.2.7191': attribute type 39 has an invalid length. [ 992.463491][ T562] __nla_validate_parse: 1 callbacks suppressed [ 992.463515][ T562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7194'. [ 992.676002][ T575] sctp: [Deprecated]: syz.3.7196 (pid 575) Use of int in max_burst socket option deprecated. [ 992.676002][ T575] Use struct sctp_assoc_value instead [ 992.842743][ T582] x_tables: duplicate underflow at hook 2 [ 993.064761][ T594] netlink: 'syz.1.7202': attribute type 4 has an invalid length. [ 993.345420][ T613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7207'. [ 993.473214][T16346] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 993.764571][ T639] netlink: 'syz.3.7218': attribute type 1 has an invalid length. [ 993.823666][ T646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7217'. [ 993.844034][ T639] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 993.860620][ T646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7217'. [ 994.143135][ T654] [ 994.145635][ T654] ====================================================== [ 994.152683][ T654] WARNING: possible circular locking dependency detected [ 994.159740][ T654] syzkaller #0 Not tainted [ 994.164287][ T654] ------------------------------------------------------ [ 994.171802][ T654] syz.0.7219/654 is trying to acquire lock: [ 994.177733][ T654] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 994.187133][ T654] [ 994.187133][ T654] but task is already holding lock: [ 994.194793][ T654] ffff888035644a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 994.204175][ T654] [ 994.204175][ T654] which lock already depends on the new lock. [ 994.204175][ T654] [ 994.214602][ T654] [ 994.214602][ T654] the existing dependency chain (in reverse order) is: [ 994.224150][ T654] [ 994.224150][ T654] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 994.232418][ T654] _raw_spin_lock_bh+0x36/0x50 [ 994.237879][ T654] nr_rt_device_down+0x153/0x860 [ 994.243354][ T654] nr_device_event+0x137/0x150 [ 994.248916][ T654] notifier_call_chain+0x1ad/0x3d0 [ 994.254640][ T654] netif_close_many+0x2ae/0x420 [ 994.260066][ T654] netif_close+0x160/0x220 [ 994.265054][ T654] dev_close+0x10a/0x220 [ 994.269983][ T654] bpq_device_event+0x377/0x6a0 [ 994.275471][ T654] notifier_call_chain+0x1ad/0x3d0 [ 994.281135][ T654] __dev_notify_flags+0x16d/0x310 [ 994.286700][ T654] netif_change_flags+0xe8/0x1a0 [ 994.292260][ T654] dev_change_flags+0x130/0x260 [ 994.297695][ T654] dev_ioctl+0x7b4/0x1150 [ 994.302603][ T654] sock_do_ioctl+0x23e/0x320 [ 994.307893][ T654] sock_ioctl+0x5c6/0x7f0 [ 994.312958][ T654] __se_sys_ioctl+0xfc/0x170 [ 994.318163][ T654] do_syscall_64+0x15f/0xf80 [ 994.323337][ T654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.329846][ T654] [ 994.329846][ T654] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 994.337677][ T654] _raw_spin_lock_bh+0x36/0x50 [ 994.343147][ T654] nr_rt_device_down+0xbe/0x860 [ 994.348553][ T654] nr_device_event+0x137/0x150 [ 994.353872][ T654] notifier_call_chain+0x1ad/0x3d0 [ 994.359630][ T654] netif_close_many+0x2ae/0x420 [ 994.365040][ T654] netif_close+0x160/0x220 [ 994.370012][ T654] dev_close+0x10a/0x220 [ 994.374809][ T654] bpq_device_event+0x377/0x6a0 [ 994.380209][ T654] notifier_call_chain+0x1ad/0x3d0 [ 994.386046][ T654] __dev_notify_flags+0x16d/0x310 [ 994.391615][ T654] netif_change_flags+0xe8/0x1a0 [ 994.397103][ T654] dev_change_flags+0x130/0x260 [ 994.402505][ T654] dev_ioctl+0x7b4/0x1150 [ 994.407370][ T654] sock_do_ioctl+0x23e/0x320 [ 994.412490][ T654] sock_ioctl+0x5c6/0x7f0 [ 994.417430][ T654] __se_sys_ioctl+0xfc/0x170 [ 994.422551][ T654] do_syscall_64+0x15f/0xf80 [ 994.427759][ T654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.435022][ T654] [ 994.435022][ T654] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 994.443114][ T654] __lock_acquire+0x15a5/0x2cf0 [ 994.448584][ T654] lock_acquire+0x106/0x350 [ 994.453702][ T654] _raw_spin_lock_bh+0x36/0x50 [ 994.459028][ T654] nr_del_node+0x57d/0xbb0 [ 994.463979][ T654] nr_rt_ioctl+0xb34/0xf90 [ 994.468936][ T654] sock_do_ioctl+0x101/0x320 [ 994.474078][ T654] sock_ioctl+0x5c6/0x7f0 [ 994.478934][ T654] __se_sys_ioctl+0xfc/0x170 [ 994.484136][ T654] do_syscall_64+0x15f/0xf80 [ 994.489272][ T654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.495866][ T654] [ 994.495866][ T654] other info that might help us debug this: [ 994.495866][ T654] [ 994.506102][ T654] Chain exists of: [ 994.506102][ T654] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 994.506102][ T654] [ 994.520281][ T654] Possible unsafe locking scenario: [ 994.520281][ T654] [ 994.527819][ T654] CPU0 CPU1 [ 994.533198][ T654] ---- ---- [ 994.538648][ T654] lock(&nr_node->node_lock); [ 994.543607][ T654] lock(nr_node_list_lock); [ 994.550722][ T654] lock(&nr_node->node_lock); [ 994.558031][ T654] lock(nr_neigh_list_lock); [ 994.562808][ T654] [ 994.562808][ T654] *** DEADLOCK *** [ 994.562808][ T654] [ 994.570960][ T654] 2 locks held by syz.0.7219/654: [ 994.575984][ T654] #0: ffffffff8ff4be78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 994.585493][ T654] #1: ffff888035644a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 994.595268][ T654] [ 994.595268][ T654] stack backtrace: [ 994.601791][ T654] CPU: 0 UID: 0 PID: 654 Comm: syz.0.7219 Not tainted syzkaller #0 PREEMPT(full) [ 994.601813][ T654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 994.601824][ T654] Call Trace: [ 994.601832][ T654] [ 994.601840][ T654] dump_stack_lvl+0xe8/0x150 [ 994.601868][ T654] print_circular_bug+0x2e1/0x300 [ 994.601898][ T654] check_noncircular+0x12e/0x150 [ 994.601924][ T654] __lock_acquire+0x15a5/0x2cf0 [ 994.601955][ T654] ? nr_del_node+0x57d/0xbb0 [ 994.601977][ T654] lock_acquire+0x106/0x350 [ 994.601996][ T654] ? nr_del_node+0x57d/0xbb0 [ 994.602019][ T654] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 994.602036][ T654] ? nr_del_node+0x247/0xbb0 [ 994.602060][ T654] ? nr_del_node+0x57d/0xbb0 [ 994.602082][ T654] _raw_spin_lock_bh+0x36/0x50 [ 994.602100][ T654] ? nr_del_node+0x57d/0xbb0 [ 994.602122][ T654] nr_del_node+0x57d/0xbb0 [ 994.602146][ T654] nr_rt_ioctl+0xb34/0xf90 [ 994.602172][ T654] ? kasan_quarantine_put+0xbb/0x1f0 [ 994.602195][ T654] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 994.602224][ T654] ? apparmor_capable+0x126/0x170 [ 994.602306][ T654] ? capable+0x88/0xe0 [ 994.602329][ T654] ? nr_ioctl+0x1b1/0x3b0 [ 994.602348][ T654] sock_do_ioctl+0x101/0x320 [ 994.602368][ T654] ? __pfx_sock_do_ioctl+0x10/0x10 [ 994.602385][ T654] ? do_futex+0x395/0x420 [ 994.602413][ T654] sock_ioctl+0x5c6/0x7f0 [ 994.602431][ T654] ? __pfx_sock_ioctl+0x10/0x10 [ 994.602448][ T654] ? __fget_files+0x2a/0x420 [ 994.602468][ T654] ? __fget_files+0x3a0/0x420 [ 994.602488][ T654] ? __fget_files+0x2a/0x420 [ 994.602509][ T654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 994.602526][ T654] ? __pfx_sock_ioctl+0x10/0x10 [ 994.602543][ T654] __se_sys_ioctl+0xfc/0x170 [ 994.602558][ T654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.602575][ T654] do_syscall_64+0x15f/0xf80 [ 994.602596][ T654] ? trace_irq_disable+0x3b/0x140 [ 994.602613][ T654] ? clear_bhb_loop+0x40/0x90 [ 994.602632][ T654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.602649][ T654] RIP: 0033:0x7f66fcf9c819 [ 994.602666][ T654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.602681][ T654] RSP: 002b:00007f66fb1ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.602701][ T654] RAX: ffffffffffffffda RBX: 00007f66fd215fa0 RCX: 00007f66fcf9c819 [ 994.602714][ T654] RDX: 0000200000000200 RSI: 000000000000890c RDI: 000000000000000a [ 994.602725][ T654] RBP: 00007f66fd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 994.602736][ T654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.602747][ T654] R13: 00007f66fd216038 R14: 00007f66fd215fa0 R15: 00007ffe4356d7d8 [ 994.602765][ T654]