last executing test programs: 6.696236815s ago: executing program 1 (id=2882): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x4) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xa1c6eaa155740720) (async, rerun: 32) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x8) (async, rerun: 32) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000240)={'raw\x00', 0x2, [{}, {}]}, 0x48) (async) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) (rerun: 64) 6.516914448s ago: executing program 1 (id=2885): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_gfeatures}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000100)={r7, 0x7}, 0x8) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x1}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="93800000688200002c0012800b000100697036746e6c00001c00028014000200ff0200000000000000000000000000010400130008000a00", @ANYRES32=r9, @ANYBLOB="8c59be5f1396a65300000000cc7fb5b97dfada40ca094dbb29150cceeb17b3ca60bca7709843833ad398932e9132020a18d228bca1ca11f188353bda4c2f90bd01b897e96d18f91365cfe403ad3efce24011ef1142ed17e8ce7b53e74fb98f0c3171f8e1de75f4ce8e38048b299567737f24075f5a746b49e7abe2ff2697d77344cc9c371a0b632ac25e62c45b2bc8ddcc60a63808efe5aa98d56dd85ec4f4bfa6ef225d854fb688310c6e5a299df81050f11a30fa7a8f47e90d8a8ae224f11284b0deb0d033b68dc2b5f1d7801f0a92087953c66b51168e810f5de94f2b846834ee4a09b9b84d29301cf33c7160408918b8cb4c4bae1ec73ba6c85a"], 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x8, 0x3, 0x3) shutdown(r10, 0x1) 5.985943373s ago: executing program 4 (id=2892): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000800)={@mcast1, 0x0, 0x0, 0xff, 0x2, 0x3, 0x6d5}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 4.900122156s ago: executing program 1 (id=2897): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1f, 0x1, 0x0, 0xfffffff8, 0x40, r0, 0x99c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, r1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x600}, 0x38) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000", @ANYRESOCT=r5, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r6}, 0x18) (async) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r7, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r9, 0x7}, 0x80, 0x0}}], 0x1, 0x80) (async) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.893054025s ago: executing program 1 (id=2899): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000300"], 0x88}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x40, @mcast2, 0xc}, 0x1c, &(0x7f00000000c0)}}], 0x2, 0xc8040) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x6) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 4.325711568s ago: executing program 4 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c000900090000060015000200000014001680100008800c0003"], 0x38}, 0x1, 0x0, 0x0, 0x20048010}, 0x2000a080) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x4afeb158ac7bb4b3, 0x5, 0x2, 0x4, 0x0, r3, 0x4}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0xc, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000380)=0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000100), 0x4) 4.11403238s ago: executing program 4 (id=2913): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1001, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x49, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 3.97880351s ago: executing program 4 (id=2917): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000080)="cf71df10eed4aa6b7699c9540edd74ae80db9d4c94940d5ef2", 0x19}, {&(0x7f0000000300)="8c454608e7a08df1be2b6a2b66", 0xd}], 0x2) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r4, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000010000000000000000000000274db3f6deb55029c0c96b64"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x10, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x3a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r10, &(0x7f0000000200)=""/96, 0x60) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r12, &(0x7f0000000700)="f574c3", 0x3) splice(r12, &(0x7f0000000040), r11, 0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x9d7, 0x3ff, 0xffff, 0x45, r8, 0x7, '\x00', r9, r7, 0x4, 0x5, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) 3.036882325s ago: executing program 4 (id=2931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) 2.910739104s ago: executing program 3 (id=2932): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x20, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) 2.785726902s ago: executing program 3 (id=2933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000050000007301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a430fe0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @nested={0x4, 0x2}]}, 0x2c}}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "e10ecaee6e55a5"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048071}, 0x4008000) 2.78029252s ago: executing program 4 (id=2934): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x354, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0xfffffffe, 0x2, 0x40000002, 0x0, 0x4d, 0x5, 0x81}, 0x9c) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 2.397627766s ago: executing program 0 (id=2936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x8, 0x2, 0x40, @dev={0xfe, 0x80, '\x00', 0x27}, @private1, 0x1, 0x7, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', r1, 0x80, 0x20, 0x8, 0x5, {{0x36, 0x4, 0x1, 0x18, 0xd8, 0x66, 0x0, 0xff, 0x2f, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x13, 0xff, [@local, @broadcast, @broadcast, @broadcast]}, @end, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x5, 0xc, "d7bc4f211d1da3fbed4f"}, {0x5, 0xf, "6fc5464a12f54db43773624055"}, {0x6, 0x7, "b548c98724"}, {0x2, 0xb, "87e3b127fcf4db73d3"}, {0x2, 0x11, "70b287651a31723198682012768214"}]}, @end, @cipso={0x86, 0x54, 0x1, [{0x0, 0xf, "b75bc0cf5fdc13964ff8cb313c"}, {0x7, 0x6, "c8bfeec6"}, {0x1, 0x6, "dd68cfb5"}, {0x5, 0x3, '('}, {0x2, 0x12, "ea964a8a29f3e8a08d0c6e98409c4712"}, {0x7, 0x10, "e5a322a09f1626be41ff7d58319c"}, {0x7, 0x8, "8ddb9e38df42"}, {0x0, 0x6, "fef29346"}]}, @timestamp_addr={0x44, 0x14, 0x13, 0x1, 0x1, [{@loopback, 0x4}, {@multicast2, 0x9}]}]}}}}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x100, '\x00', r2, r4, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x3, 0x4, 0x6, 0x200, 0x5}, @generic={0xfa, 0x0, 0x7, 0x6, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x5, 0x9, 0x0, &(0x7f00000005c0)="c0ff07000000000000", 0x0, 0x80d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x9}, 0x50) 2.302305075s ago: executing program 3 (id=2937): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000100100000e"], 0x28}, 0x20004000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435009c0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002"], 0x0) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000000000000100100000e"], 0x28}, 0x20004000) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) socket$kcm(0x29, 0x2, 0x0) (async) syz_emit_ethernet(0xd2, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a8435009c0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002"], 0x0) (async) 2.254786452s ago: executing program 0 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000004c0), &(0x7f0000000400)=r1}, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 1.921192818s ago: executing program 1 (id=2940): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000680)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xc, 0x0, 0x0, @broadcast=0x1000000, {0xe, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0xb, 0xe5, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @timestamp={0x44, 0x18, 0x7, 0x0, 0x0, [0x7, 0x1, 0xb, 0x7fffffff, 0x3ff]}]}}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x188, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd7, 0xa8, @random="5a489c84f26c879ae669b1741127d7fec77e742095ad0216eded96795afa21cacb34ad9258a8498fa247731bdaa98386be1415f0fa9b2ab5be391fc33be42be1cc66212b49ee4f06c8937e45742302c43ba8819a50ec51f426000cc50c7980e9bd72e562dfde489b73f560c1ddc6e17ea11afbf5df8d35e2bd5e3fd0afc94a62d2c343b9bb875c7047bfaf92caf2e1dd3e889c46528598bdd935ab4ee3bdd647c9f79bdf22af03ef873a61b529041167353a6c474caa8c78ee08bce9853072b02ca4872732d95f5ed08c7dae1b57f099c9fe20"}, @DEVLINK_ATTR_PORT_INDEX={0xffffffffffffff5b, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x18, 0xa8, @random="5c9b27a596860b1b9831684209f75592e633226c"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000480)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x0, @private}}) 1.848219646s ago: executing program 3 (id=2941): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) unshare(0x2c020400) (async) unshare(0x22020600) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) clock_gettime(0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) 1.796944712s ago: executing program 0 (id=2942): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4}, 0x50) close(0x4) unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x9, 0x0, 0x0, 0x9, 0x8, 0xff}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004) 1.74656928s ago: executing program 2 (id=2943): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000010400000000000000c60001002700000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000003200000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.536148523s ago: executing program 2 (id=2944): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000200)=0xf, 0x4) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x4048910, r5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x470, 0xffffffff, 0xf8, 0x238, 0xf8, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'ip6erspan0\x00', 'vlan1\x00', {0xff}, {}, 0x8, 0x4, 0x3, 0x4a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0x7f6, 0x6, 0x1, [0x3, 0x4, 0x5, 0x4, 0x2, 0x0, 0x0, 0x1, 0x1, 0x7, 0x4, 0x4, 0xfffa, 0x9, 0x8000, 0x7], 0xf}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x9, 0xfffb}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0xff, 0xff, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xff, 0xffffffff], 'geneve0\x00', 'veth1\x00', {}, {0x101}, 0x1, 0xfb, 0x4, 0x60}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x2f, 0x5, 0x7, 0x81, 0x7f, 0x18e5, 0x122}}, @common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x7f, 0x72, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xff000000, 0x0, 0xffffffff], 0x4e23, 0x4e24, 0x4e23, 0x4e23, 0x10001, 0x7fff, 0x40, 0x2, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, 0x2, 0xff, 0xff}, 0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ac1e00010000000000000000080012000008000000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002"], 0x80}}, 0x0) close(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x7f, 0x4) r8 = socket(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$l2tp(r8, &(0x7f00000000c0)=""/206, 0xce, 0x2000, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 1.095034748s ago: executing program 2 (id=2945): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "96557817d5d82eebae93b4f5000000000000007977e4be5a304b4d417254dd369ba9a9b0"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x68}}, 0x48c0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x0, 0x0, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4001}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES16=r7, @ANYRES64=r3], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="a6e5cf706c54a50151bc0069c9f87a876082a3f8000000000000", @ANYRES16=r8], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4880) 898.507254ms ago: executing program 1 (id=2946): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x800d, @remote, 0x645c}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYRES64=r4, @ANYRES8=r1], 0x78) 744.701488ms ago: executing program 2 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000611044000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x7138b1073fba948a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="7ff19ff47a0011d2001b00000000000a0000040014000000ee00000000000000e9ef97"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 717.061867ms ago: executing program 0 (id=2948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f00000008c0)={0x44, r3, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000400000000000000000000000850000004f000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x23, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESDEC=r5, @ANYRES64=r4, @ANYRES16=r3], 0x48) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) sendmsg$inet6(r7, &(0x7f0000000d80)={&(0x7f0000000b80)={0xa, 0x4e20, 0x401, @mcast1}, 0x1c, 0x0}, 0xc001) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020e08091200060000007000fddbdf2502001000000004d4000004d400b89574d511d64d7878780b000000010001000002000005000000000000000806000000000400b56b6e00df73000006006c00080f00000400000000000000f5880000000000000000000000000001fc02000000000804d4000004d400000016020001000000cc"], 0x90}}, 0x4000000) 393.280965ms ago: executing program 2 (id=2949): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) socket(0x2c, 0x5, 0x4) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40040, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffc}, 0x1c) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0xa2ec9000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r0, 0xffffb000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r8}, 0x14) (async) syz_emit_ethernet(0x36, &(0x7f0000001c00)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, 'J+\v', 0x0, 0x1d, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 391.954943ms ago: executing program 0 (id=2950): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getnetconf={0x2c, 0x52, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000011) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x349e60ad, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x8, 0xe, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x90, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x4, 0x6, 0xfffffff5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x3, 0x4, 0xb, 0x6}, {0x2, 0x2, 0x1, 0x4}], 0x10, 0x80000000}, 0x94) ioctl(r0, 0xfffffffd, &(0x7f00000006c0)="6470177696659d9a4e") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xc0120010}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@ipv4_getaddr={0x50, 0x16, 0x20, 0x70bd28, 0x25dfdbfb, {0x2, 0x18, 0xb, 0xfd, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2e69}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x10) close(r5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001080)=[@sack_perm], 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x74c07cee}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000001380)={{0x33, @local, 0x4e24, 0x0, 'sh\x00', 0x18, 0x3ff, 0x7d}, {@multicast1, 0x4e22, 0x1, 0x2, 0x5, 0xffff63f8}}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={&(0x7f0000001400), 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@getqdisc={0x28, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x10, 0xc}, {0x10, 0x10}, {0xfff2, 0x2}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80c0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000001500)) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x802, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001580)={'veth0_virt_wifi\x00', 0x1000}) sendmsg$nl_route(r0, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@ipv6_newroute={0x34, 0x18, 0x9, 0x70bd27, 0x25dfdbff, {0xa, 0x14, 0x14, 0x8, 0xff, 0x3, 0xff, 0x0, 0x1000}, [@RTA_PREF={0x5, 0x14, 0xfa}, @RTA_OIF={0x8, 0x4, r8}, @RTA_IIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48841}, 0x4004) 293.447787ms ago: executing program 3 (id=2951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) (async) close(0x3) (async) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={r2}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) recvmmsg(r7, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003180)=""/163, 0xa3}, {&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/90, 0x5a}, {&(0x7f0000004480)=""/31, 0x1f}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/77, 0x4d}], 0x7}, 0x7}], 0x2, 0x2, 0x0) (async) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x400000}, @TCA_RATE={0x6, 0x5, {0x6, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 218.776644ms ago: executing program 2 (id=2952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0x5) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000400), 0xfffffffffffffe18, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0xc004000) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x23, 0x10d, 0x0, 0x0, @binary="b669019fd02c090947811045b832755b33b13b0845719e4c0d952783000000"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES8=0x0, @ANYRES32, @ANYRESOCT=r6], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) 5.988256ms ago: executing program 0 (id=2953): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, r2, 0x881056f66a146f61, 0xfffffffd, 0x25dfdbff, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) unshare(0x22020600) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) socket$netlink(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, r2, 0x881056f66a146f61, 0xfffffffd, 0x25dfdbff, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) (async) unshare(0x22020600) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) 0s ago: executing program 3 (id=2954): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x400, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendto$inet6(r1, &(0x7f0000000080)="258d4eaf87baf6e85ec123f629c966a813405672c0799af5375fd40b86833126a17fcde15e", 0x25, 0x80, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, 0x1c) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000c00), &(0x7f0000002000)=0xfffffffffffffef2) kernel console output (not intermixed with test programs): 4 has an invalid length. [ 166.288023][ T9723] netlink: 'syz.2.974': attribute type 12 has an invalid length. [ 166.298160][ T9723] netlink: 'syz.2.974': attribute type 12 has an invalid length. [ 166.319574][ T9716] netlink: 'syz.4.972': attribute type 4 has an invalid length. [ 167.621807][ T9743] sctp: [Deprecated]: syz.2.978 (pid 9743) Use of int in max_burst socket option. [ 167.621807][ T9743] Use struct sctp_assoc_value instead [ 167.761635][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 167.826928][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 167.848173][ T9755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.983'. [ 167.997735][ T9764] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 168.151500][ T9764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 168.185260][ T9774] bond8: (slave gretap1): making interface the new active one [ 168.199459][ T9774] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 168.208975][ T9775] netlink: 404 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.219124][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.228421][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.237772][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 168.244321][ T9775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.350955][ T9784] netlink: 'syz.0.990': attribute type 3 has an invalid length. [ 168.533507][ T9797] netlink: 224 bytes leftover after parsing attributes in process `syz.1.994'. [ 168.565787][ T9791] syzkaller1: entered promiscuous mode [ 168.578857][ T9791] syzkaller1: entered allmulticast mode [ 169.198013][ T9844] batman_adv: batadv0: Adding interface: wlan0 [ 169.205221][ T9842] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 169.226155][ T9842] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1006'. [ 169.259438][ T9844] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.326517][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 169.377588][ T9844] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 169.454115][ T9851] syzkaller0: entered promiscuous mode [ 169.459836][ T9851] syzkaller0: entered allmulticast mode [ 170.010085][ T9886] xt_TCPMSS: Only works on TCP SYN packets [ 170.075031][ T9872] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1012'. [ 170.080255][ T9891] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1015'. [ 170.301588][ T9902] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1020'. [ 170.568838][ T9903] syzkaller1: entered promiscuous mode [ 170.574424][ T9903] syzkaller1: entered allmulticast mode [ 170.845089][ T9933] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 170.873104][ T9939] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 170.912674][ T9933] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1026'. [ 170.985470][ T9933] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1026'. [ 171.007587][ T9942] bond3: (slave geneve4): making interface the new active one [ 171.016817][ T9942] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 171.017930][ T9939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1028'. [ 171.046372][ T6815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 171.072379][ T6815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 171.116788][ T6815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 171.132338][ T6815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 171.147869][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'. [ 171.149887][ T9951] nbd: must specify an index to disconnect [ 171.358711][ T9962] tipc: Enabled bearer , priority 0 [ 171.379593][ T9962] tipc: Resetting bearer [ 171.410169][ T9958] tipc: Disabling bearer [ 171.603278][ T9978] netlink: 'syz.1.1036': attribute type 2 has an invalid length. [ 172.185763][ T9995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.260694][ T9995] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.274233][ T9995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.334261][T10010] bridge_slave_1 (unregistering): left allmulticast mode [ 172.346916][T10010] bridge_slave_1 (unregistering): left promiscuous mode [ 172.359527][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.388150][T10017] syzkaller0: entered promiscuous mode [ 172.393749][T10017] syzkaller0: entered allmulticast mode [ 172.494192][T10028] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 172.530392][T10028] bond2: entered promiscuous mode [ 172.535475][T10028] bond2: entered allmulticast mode [ 172.552889][T10028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.570462][T10030] erspan1: entered allmulticast mode [ 172.578967][T10030] bond2: (slave erspan1): making interface the new active one [ 172.588103][T10030] erspan1: entered promiscuous mode [ 172.599475][T10030] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 173.128433][T10065] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.159922][T10069] Cannot find del_set index 2 as target [ 173.430910][T10084] hsr0: entered promiscuous mode [ 173.440881][T10084] hsr0: left promiscuous mode [ 173.721994][T10100] __nla_validate_parse: 4 callbacks suppressed [ 173.722030][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 173.761658][T10102] syzkaller0: Caught tx_queue_len zero misconfig [ 173.980819][T10115] erspan0: entered promiscuous mode [ 173.986514][T10115] vlan2: entered promiscuous mode [ 175.626300][T10033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.970560][T10142] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 176.085802][T10142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1079'. [ 176.171756][T10156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.376590][T10156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.387541][T10156] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.402006][T10156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.519552][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 176.540818][T10161] syzkaller0: entered promiscuous mode [ 176.548764][T10161] syzkaller0: entered allmulticast mode [ 176.575619][T10176] macvtap0: entered promiscuous mode [ 176.581308][T10176] bond0: entered promiscuous mode [ 176.586938][T10176] bond_slave_0: entered promiscuous mode [ 176.592719][T10176] bond_slave_1: entered promiscuous mode [ 176.598855][T10176] macvtap0: entered allmulticast mode [ 176.604235][T10176] bond0: entered allmulticast mode [ 176.609791][T10176] bond_slave_0: entered allmulticast mode [ 176.615528][T10176] bond_slave_1: entered allmulticast mode [ 176.623039][T10176] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 176.686792][T10178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1091'. [ 177.999851][T10179] bond0: left allmulticast mode [ 178.004752][T10179] bond_slave_0: left allmulticast mode [ 178.010732][T10179] bond_slave_1: left allmulticast mode [ 178.017490][T10179] bond0: left promiscuous mode [ 178.022285][T10179] bond_slave_0: left promiscuous mode [ 178.032706][T10179] bond_slave_1: left promiscuous mode [ 178.128575][T10195] pim6reg1: entered promiscuous mode [ 178.136511][T10195] pim6reg1: entered allmulticast mode [ 178.206411][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.484663][T10212] bond4: entered promiscuous mode [ 178.599455][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 178.608376][T10228] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 178.618490][T10230] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 178.683639][T10237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1103'. [ 178.688914][T10235] syzkaller0: entered promiscuous mode [ 178.700332][T10235] syzkaller0: entered allmulticast mode [ 178.719901][T10237] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 178.765213][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'. [ 179.075373][T10256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1112'. [ 179.101043][T10256] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1112'. [ 179.207139][T10259] only policy match revision 0 supported [ 179.207159][T10259] unable to load match [ 179.304950][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 179.315798][T10263] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 179.342437][T10263] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.550007][T10281] syzkaller0: entered promiscuous mode [ 179.555703][T10281] syzkaller0: entered allmulticast mode [ 179.704972][T10295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1123'. [ 179.873628][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'. [ 179.941629][T10297] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1124'. [ 180.020764][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 180.031446][T10297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.194832][T10316] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 180.227950][T10316] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 180.247029][T10311] netlink: 'syz.2.1128': attribute type 15 has an invalid length. [ 180.257038][T10316] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1129'. [ 180.308056][T10322] netlink: 588 bytes leftover after parsing attributes in process `syz.0.1129'. [ 180.558304][T10328] syzkaller0: entered promiscuous mode [ 180.563906][T10328] syzkaller0: entered allmulticast mode [ 181.199375][T10363] tipc: Failed to remove unknown binding: 66,0,0/2611679338:488569286/488569287 [ 181.229644][T10363] tipc: Failed to remove unknown binding: 66,0,0/2611679338:488569286/488569287 [ 181.603450][T10386] tipc: Enabled bearer , priority 0 [ 181.655800][T10395] syzkaller0: entered promiscuous mode [ 181.692272][T10395] syzkaller0: entered allmulticast mode [ 181.757616][T10386] tipc: Resetting bearer [ 181.852692][T10392] syzkaller0: entered promiscuous mode [ 181.875290][T10392] syzkaller0: entered allmulticast mode [ 181.917072][T10383] tipc: Resetting bearer [ 181.942086][T10383] tipc: Disabling bearer [ 181.956457][T10407] sctp: [Deprecated]: syz.0.1152 (pid 10407) Use of int in maxseg socket option. [ 181.956457][T10407] Use struct sctp_assoc_value instead [ 182.732279][T10438] SET target dimension over the limit! [ 183.884376][T10458] __nla_validate_parse: 3 callbacks suppressed [ 183.884394][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 184.215816][T10456] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.682385][T10495] syzkaller0: entered promiscuous mode [ 184.691628][T10495] syzkaller0: entered allmulticast mode [ 184.716613][T10497] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1177'. [ 184.748137][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 184.758769][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 184.875563][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 184.920065][T10506] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1178'. [ 184.948003][T10506] geneve4: entered promiscuous mode [ 184.963990][ T1080] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.988297][T10513] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1181'. [ 185.006332][ T1080] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.027618][ T1080] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.043156][ T1080] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 185.061029][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1183'. [ 185.070440][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1183'. [ 185.120121][T10520] bond2: option lp_interval: invalid value (0) [ 185.130185][T10526] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 185.138122][T10520] bond2: option lp_interval: allowed values 1 - 2147483647 [ 185.145633][T10526] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1184'. [ 185.155002][T10526] NCSI netlink: No device for ifindex 0 [ 185.161875][T10520] bond2 (unregistering): Released all slaves [ 185.184602][T10515] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.201937][T10526] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003 [ 185.625008][T10549] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 185.662947][T10549] bond2: entered promiscuous mode [ 185.668852][T10549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.694184][T10533] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.725394][T10549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.749874][T10549] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 185.812580][T10549] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 185.835217][T10549] bond2: (slave vcan0): making interface the new active one [ 185.843519][T10549] vcan0: entered promiscuous mode [ 185.851610][T10549] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 185.931786][T10556] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 186.015448][T10562] xt_hashlimit: size too large, truncated to 1048576 [ 186.106711][T10568] xt_hashlimit: size too large, truncated to 1048576 [ 187.225436][T10610] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 187.339608][T10611] syzkaller0: entered promiscuous mode [ 187.345130][T10611] syzkaller0: entered allmulticast mode [ 187.527886][T10625] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 187.741089][T10625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.809538][T10641] vlan2: entered allmulticast mode [ 187.839365][T10641] bridge0: port 2(vlan2) entered blocking state [ 187.862371][T10641] bridge0: port 2(vlan2) entered disabled state [ 187.881871][T10641] vlan2: entered promiscuous mode [ 188.643186][T10679] syzkaller0: entered promiscuous mode [ 188.658023][T10679] syzkaller0: entered allmulticast mode [ 188.671442][T10682] netlink: 'syz.4.1222': attribute type 11 has an invalid length. [ 189.040826][T10697] __nla_validate_parse: 6 callbacks suppressed [ 189.040843][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1228'. [ 189.089551][T10699] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 189.491708][T10711] tipc: Enabled bearer , priority 0 [ 189.517014][T10711] syzkaller0: entered promiscuous mode [ 189.527259][T10711] syzkaller0: entered allmulticast mode [ 189.728390][T10701] xt_hashlimit: max too large, truncated to 1048576 [ 189.789413][T10724] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.812741][T10731] geneve5: entered promiscuous mode [ 189.839172][T10711] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 189.903376][T10727] syzkaller0: entered promiscuous mode [ 189.911371][T10727] syzkaller0: entered allmulticast mode [ 189.924707][T10710] tipc: Resetting bearer [ 189.941234][T10710] tipc: Disabling bearer [ 190.007740][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 191.200433][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 191.204944][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 191.209245][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 191.517417][T10744] ªªªªª»: renamed from veth0_to_bond [ 191.797847][T10774] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1246'. [ 191.844959][T10787] bond0: Caught tx_queue_len zero misconfig [ 192.270805][T10805] xt_hashlimit: max too large, truncated to 1048576 [ 192.391440][T10812] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 192.458436][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 192.663272][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 192.705075][T10820] macvlan4: entered promiscuous mode [ 192.710849][T10820] macvlan4: entered allmulticast mode [ 192.719597][T10820] bond5: entered promiscuous mode [ 192.733121][T10820] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 192.749932][T10820] bond5: left promiscuous mode [ 192.773297][ T1334] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.782346][ T1334] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.798021][ T1334] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.816347][ T1334] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 192.930225][T10834] netlink: 'syz.0.1259': attribute type 13 has an invalid length. [ 192.976664][T10838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1261'. [ 192.980400][T10834] netlink: 'syz.0.1259': attribute type 13 has an invalid length. [ 193.013867][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.064518][T10838] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.088409][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.103519][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.114762][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.134321][T10838] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.174505][T10845] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1263'. [ 193.230503][T10838] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.333002][T10838] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.643411][ T6815] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.711132][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.773007][ T6815] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.802811][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.936766][T10861] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 193.974960][T10861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.987448][T10861] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 194.011924][T10861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 194.027747][T10864] ip6tnl0: Caught tx_queue_len zero misconfig [ 194.209362][T10869] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 194.230444][T10869] netlink: 'syz.1.1270': attribute type 2 has an invalid length. [ 194.250842][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266119][T10869] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 194.286918][T10869] netlink: 'syz.1.1270': attribute type 3 has an invalid length. [ 194.321242][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 194.741760][T10886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.753674][T10889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.088331][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 195.344859][T10917] syzkaller0: entered promiscuous mode [ 195.354008][T10917] syzkaller0: entered allmulticast mode [ 195.603553][T10925] tipc: Enabled bearer , priority 0 [ 195.611232][T10925] syzkaller0: entered promiscuous mode [ 195.616899][T10925] syzkaller0: entered allmulticast mode [ 195.649977][T10924] tipc: Resetting bearer [ 195.700585][T10924] tipc: Disabling bearer [ 195.749094][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 195.785287][T10930] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.004100][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 196.104758][T10944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.200397][T10946] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 196.314380][T10951] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1291'. [ 196.344871][T10951] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1291'. [ 196.372697][T10952] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1291'. [ 196.396400][T10952] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1291'. [ 196.555652][T10958] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 196.592570][T10957] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 196.825482][T10962] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.856745][T10962] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 196.904030][T10977] ip6gretap2: entered allmulticast mode [ 197.032106][T10962] bond4: (slave gretap1): making interface the new active one [ 197.079272][T10962] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 197.107441][T10975] macvlan2: entered promiscuous mode [ 197.113227][T10975] macvlan2: entered allmulticast mode [ 197.114537][T10990] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1302'. [ 197.128694][T10990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1302'. [ 197.129491][T10975] bond4: entered promiscuous mode [ 197.146057][T10975] gretap1: entered promiscuous mode [ 197.154451][T10975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.155366][T10993] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 197.169062][T10975] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 197.186243][T10996] can: request_module (can-proto-5) failed. [ 197.192927][T10975] bond4: left promiscuous mode [ 197.208029][T10975] gretap1: left promiscuous mode [ 197.428116][T11009] validate_nla: 3 callbacks suppressed [ 197.428135][T11009] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 199.324985][T11009] tipc: Enabling of bearer rejected, failed to enable media [ 199.345487][T11024] __nla_validate_parse: 3 callbacks suppressed [ 199.345504][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 199.589701][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 199.711393][T11046] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1318'. [ 199.737162][T11046] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 200.063985][T11068] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 200.177114][T11072] xt_limit: Overflow, try lower: 268435456/134217728 [ 200.187334][T11072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'. [ 200.607756][T11068] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 201.385993][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 201.410030][T11094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1328'. [ 201.609244][T11103] netlink: 'syz.4.1331': attribute type 10 has an invalid length. [ 201.617478][T11103] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1331'. [ 201.715011][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 201.748260][T11113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'. [ 201.824608][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 202.390504][T11143] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 202.426817][T11143] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 202.516912][T11146] sctp: [Deprecated]: syz.0.1345 (pid 11146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.516912][T11146] Use struct sctp_sack_info instead [ 202.872562][T11166] tipc: Enabled bearer , priority 0 [ 202.918731][T11170] macvtap1: entered promiscuous mode [ 202.926886][T11170] gretap0: entered promiscuous mode [ 202.941660][T11170] macvtap1: entered allmulticast mode [ 202.949521][T11170] gretap0: entered allmulticast mode [ 202.957696][T11166] syzkaller0: entered promiscuous mode [ 202.963196][T11166] syzkaller0: entered allmulticast mode [ 202.997950][T11174] gretap0: left allmulticast mode [ 203.012356][T11174] gretap0: left promiscuous mode [ 203.050874][T11166] tipc: Resetting bearer [ 203.074013][T11180] Bluetooth: MGMT ver 1.23 [ 203.091246][T11165] tipc: Resetting bearer [ 203.188958][T11165] tipc: Disabling bearer [ 204.384195][T11262] __nla_validate_parse: 9 callbacks suppressed [ 204.384214][T11262] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1380'. [ 205.412216][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'. [ 205.710764][T11320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.908877][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 205.963576][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 206.537886][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.581380][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.857800][T11313] tipc: Resetting bearer [ 207.030231][T11326] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 207.070785][T11326] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 207.081725][T11326] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 207.096892][T11331] hsr_slave_0: left promiscuous mode [ 207.103185][T11331] hsr_slave_1: left promiscuous mode [ 207.121764][ T6129] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.229663][T11345] 8021q: adding VLAN 0 to HW filter on device bond9 [ 207.238391][T11353] netlink: 'syz.2.1403': attribute type 13 has an invalid length. [ 207.254890][ T6129] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.265528][T11355] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 207.265915][ T6129] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.290235][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 207.322806][ T6129] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.600794][T11368] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 207.673742][T11368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.712178][T11377] bond5: (slave veth5): Enslaving as an active interface with a down link [ 207.752260][T11368] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 207.759826][T11368] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 207.807313][T11379] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.891542][T11379] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.954819][T11379] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.048306][T11379] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.200794][ T68] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.245238][ T68] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.286384][ T68] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.367137][ T6815] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.438815][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 208.567582][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1420'. [ 208.618678][T11414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1420'. [ 208.632641][T11422] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1422'. [ 208.877050][T11435] netlink: 'syz.0.1427': attribute type 2 has an invalid length. [ 208.897427][T11435] !: entered promiscuous mode [ 208.930882][T11435] netlink: 'syz.0.1427': attribute type 2 has an invalid length. [ 209.118776][T11451] team0: entered promiscuous mode [ 209.131223][T11451] team_slave_0: entered promiscuous mode [ 209.138708][T11451] team_slave_1: entered promiscuous mode [ 209.347189][T11449] team0: left promiscuous mode [ 209.356331][T11449] team_slave_0: left promiscuous mode [ 209.376492][T11449] team_slave_1: left promiscuous mode [ 209.548773][T11464] tipc: Enabling of bearer rejected, failed to enable media [ 209.686677][T11467] tipc: Enabling of bearer rejected, already enabled [ 209.997669][T11481] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 210.005502][T11481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 210.071075][T11481] batadv0: entered allmulticast mode [ 210.079779][T11481] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 210.215090][T11493] netlink: 'syz.3.1443': attribute type 5 has an invalid length. [ 210.245098][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 210.276226][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 210.322834][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 210.346123][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1442'. [ 210.380036][T11497] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 210.438870][T11497] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.472980][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 210.485043][T11501] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1444'. [ 210.949329][T11529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1451'. [ 211.073890][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 211.146168][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 211.335749][ T5814] udevd[5814]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.390608][T11549] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.507413][T11555] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.584602][T11560] tipc: Can't bind to reserved service type 1 [ 211.615495][T11560] netlink: 'syz.2.1462': attribute type 39 has an invalid length. [ 211.669573][T11565] netlink: 'syz.2.1462': attribute type 5 has an invalid length. [ 211.710103][T11565] vlan3: entered allmulticast mode [ 211.715273][T11565] bridge_slave_0: entered allmulticast mode [ 211.828072][T11572] netlink: 'syz.0.1465': attribute type 39 has an invalid length. [ 212.004271][T11577] syzkaller0: entered promiscuous mode [ 212.010585][T11577] syzkaller0: entered allmulticast mode [ 212.131516][ T6233] IPVS: starting estimator thread 0... [ 212.235982][T11583] IPVS: using max 41 ests per chain, 98400 per kthread [ 212.757685][T11607] validate_nla: 1 callbacks suppressed [ 212.757703][T11607] netlink: 'syz.2.1476': attribute type 6 has an invalid length. [ 212.981974][T11621] vlan3: entered allmulticast mode [ 213.016425][T11621] veth0_to_bond: entered allmulticast mode [ 213.110315][T11627] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 213.157963][T11630] geneve5: entered promiscuous mode [ 213.163396][T11630] geneve5: entered allmulticast mode [ 213.300784][T11633] SET target dimension over the limit! [ 213.356752][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 213.456600][T11643] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 213.742373][T11659] raw_sendmsg: syz.4.1492 forgot to set AF_INET. Fix it! [ 213.764218][T11654] syzkaller0: entered promiscuous mode [ 213.776339][T11654] syzkaller0: entered allmulticast mode [ 213.813010][T11654] netlink: 'syz.2.1491': attribute type 21 has an invalid length. [ 213.852766][T11654] netlink: 'syz.2.1491': attribute type 4 has an invalid length. [ 213.876914][T11654] netlink: 'syz.2.1491': attribute type 5 has an invalid length. [ 214.632713][T11691] pim6reg1: entered allmulticast mode [ 214.654936][T11709] netlink: 'syz.3.1506': attribute type 5 has an invalid length. [ 214.815392][T11709] geneve3: entered promiscuous mode [ 214.823458][T11709] geneve3: entered allmulticast mode [ 214.830592][ T6129] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 214.844643][ T6129] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 214.864815][ T6129] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 214.876950][ T6129] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 214.885417][T11712] mac80211_hwsim hwsim2 dvmrp1: entered allmulticast mode [ 215.028165][T11720] __nla_validate_parse: 18 callbacks suppressed [ 215.028185][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 215.065398][T11722] team_slave_1: Caught tx_queue_len zero misconfig [ 215.104642][T11717] netlink: 'syz.3.1509': attribute type 2 has an invalid length. [ 215.113133][T11717] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.1509'. [ 215.156225][T11717] bond8 (unregistering): Released all slaves [ 215.409126][T11733] netlink: 17216 bytes leftover after parsing attributes in process `syz.3.1514'. [ 215.587416][T11740] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 215.595185][T11740] netlink: 'syz.2.1517': attribute type 2 has an invalid length. [ 215.608673][T11738] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 215.636895][T11740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.647165][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 215.665217][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 215.668053][T11742] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 215.845343][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 215.939060][T11757] syzkaller0: entered promiscuous mode [ 215.956414][T11757] syzkaller0: entered allmulticast mode [ 215.981526][T11762] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 216.073189][T11757] tipc: Cannot configure node identity twice [ 216.240628][T11762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.260008][T11762] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 216.407110][T11770] ip6tnl0: Caught tx_queue_len zero misconfig [ 216.454340][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 216.569760][T11752] IPVS: length: 132 != 8 [ 216.606856][T11785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1531'. [ 216.633168][T11786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.680426][T11749] pimreg: entered allmulticast mode [ 216.707049][T11749] pimreg: left allmulticast mode [ 216.728865][T11786] delete_channel: no stack [ 216.740020][T11786] delete_channel: no stack [ 216.746523][T11786] delete_channel: no stack [ 216.751291][T11786] delete_channel: no stack [ 216.756110][T11786] delete_channel: no stack [ 216.760706][T11786] delete_channel: no stack [ 216.765493][T11786] delete_channel: no stack [ 216.771491][T11786] delete_channel: no stack [ 216.776468][T11786] delete_channel: no stack [ 216.776545][T11795] tipc: Enabled bearer , priority 0 [ 216.781134][T11786] delete_channel: no stack [ 216.790391][T11795] syzkaller0: entered promiscuous mode [ 216.793050][T11786] delete_channel: no stack [ 216.797679][T11795] syzkaller0: entered allmulticast mode [ 216.801615][T11795] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 216.803295][T11786] delete_channel: no stack [ 216.821453][T11786] delete_channel: no stack [ 216.843296][T11795] tipc: Resetting bearer [ 216.850964][T11794] tipc: Resetting bearer [ 216.851840][T11786] delete_channel: no stack [ 216.896275][T11786] delete_channel: no stack [ 216.901007][T11786] delete_channel: no stack [ 216.906376][T11786] delete_channel: no stack [ 216.910985][T11786] delete_channel: no stack [ 216.915569][T11786] delete_channel: no stack [ 216.921080][T11794] tipc: Disabling bearer [ 216.927806][T11786] delete_channel: no stack [ 216.932511][T11786] delete_channel: no stack [ 216.940171][T11786] delete_channel: no stack [ 216.958549][T11786] delete_channel: no stack [ 216.963758][T11786] delete_channel: no stack [ 216.977292][T11786] delete_channel: no stack [ 216.981995][T11786] delete_channel: no stack [ 216.986994][T11786] delete_channel: no stack [ 216.991571][T11786] delete_channel: no stack [ 216.996503][T11786] delete_channel: no stack [ 217.001216][T11786] delete_channel: no stack [ 217.005806][T11786] delete_channel: no stack [ 217.013118][T11786] delete_channel: no stack [ 217.018246][T11786] delete_channel: no stack [ 217.125326][T11806] veth0: entered promiscuous mode [ 217.142320][T11806] veth0: entered allmulticast mode [ 217.165253][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 217.205172][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 217.690537][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.700516][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.856818][T11852] syzkaller0: entered promiscuous mode [ 217.867869][T11852] syzkaller0: entered allmulticast mode [ 218.450516][T11891] syzkaller0: entered promiscuous mode [ 218.476478][T11891] syzkaller0: entered allmulticast mode [ 218.926899][T11921] tipc: Enabling of bearer rejected, already enabled [ 219.320027][ T6129] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.331748][T11944] validate_nla: 4 callbacks suppressed [ 219.331766][T11944] netlink: 'syz.3.1573': attribute type 8 has an invalid length. [ 219.353213][ T6129] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.425344][T11944] bond0: entered promiscuous mode [ 219.498991][T11944] bond_slave_0: entered promiscuous mode [ 219.527273][T11944] bond_slave_1: entered promiscuous mode [ 219.591714][T11944] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 219.670808][T11944] macvlan0: entered promiscuous mode [ 219.732694][T11944] gretap0: entered promiscuous mode [ 219.789733][T11944] debugfs: 'hsr0' already exists in 'hsr' [ 219.809392][T11944] Cannot create hsr debugfs directory [ 219.821870][T11944] hsr0: entered promiscuous mode [ 219.827644][T11936] tipc: Enabling of bearer rejected, already enabled [ 219.836666][ T6129] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.848802][ T6129] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.916566][T11989] syzkaller0: entered promiscuous mode [ 219.945145][T11989] syzkaller0: entered allmulticast mode [ 220.002215][T11995] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.024550][T11995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.964357][T12022] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 221.053648][T12024] __nla_validate_parse: 7 callbacks suppressed [ 221.053669][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 221.091231][T12022] bond8: (slave gretap3): making interface the new active one [ 221.099546][T12022] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 221.108752][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 221.127424][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 221.171176][T12025] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.180205][T12025] bond8: (slave bond9): Enslaving as a backup interface with an up link [ 221.195910][T12024] dummy0: entered promiscuous mode [ 221.202132][T12024] macvtap1: entered promiscuous mode [ 221.209070][T12024] team0: entered promiscuous mode [ 221.215333][T12024] team_slave_0: entered promiscuous mode [ 221.223457][T12024] team_slave_1: entered promiscuous mode [ 221.236681][T12024] macvtap1: entered allmulticast mode [ 221.242242][T12024] team0: entered allmulticast mode [ 221.265357][T12024] team_slave_0: entered allmulticast mode [ 221.271618][T12024] team_slave_1: entered allmulticast mode [ 221.291033][T12024] dummy0: entered allmulticast mode [ 221.317096][T12024] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 221.331056][T12029] team0: left allmulticast mode [ 221.337796][T12029] team_slave_0: left allmulticast mode [ 221.343279][T12029] team_slave_1: left allmulticast mode [ 221.349772][T12029] dummy0: left allmulticast mode [ 221.354728][T12029] team0: left promiscuous mode [ 221.360110][T12029] team_slave_0: left promiscuous mode [ 221.365803][T12029] team_slave_1: left promiscuous mode [ 221.373152][T12029] dummy0: left promiscuous mode [ 221.387051][T12022] vlan3: entered promiscuous mode [ 221.392126][T12022] bond8: entered promiscuous mode [ 221.397672][T12022] gretap3: entered promiscuous mode [ 221.411083][T12043] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 221.419358][T12043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1590'. [ 221.437743][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1590'. [ 221.630071][T12054] netlink: 'syz.4.1595': attribute type 3 has an invalid length. [ 221.644360][T12057] Bluetooth: MGMT ver 1.23 [ 221.646608][T12054] netlink: 'syz.4.1595': attribute type 3 has an invalid length. [ 221.657660][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1595'. [ 222.081316][T12081] tipc: Enabling of bearer rejected, already enabled [ 222.360266][T12094] geneve2: entered promiscuous mode [ 222.387189][T12094] geneve2: entered allmulticast mode [ 222.505425][T12111] tipc: Resetting bearer [ 222.577259][T12114] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1610'. [ 222.926400][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 223.061235][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 223.072355][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1616'. [ 223.165523][T12147] syzkaller0: entered promiscuous mode [ 223.173241][T12147] syzkaller0: entered allmulticast mode [ 223.280796][T12149] syzkaller0: entered promiscuous mode [ 223.286741][T12149] syzkaller0: entered allmulticast mode [ 224.060477][T12190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.323100][T12199] ip6_vti0: Caught tx_queue_len zero misconfig [ 224.409513][T12212] netlink: 'syz.1.1635': attribute type 13 has an invalid length. [ 224.446753][T11982] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 224.452423][T12201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.010701][T12262] netlink: 'syz.4.1643': attribute type 4 has an invalid length. [ 225.332748][T12274] IPVS: Scheduler module ip_vs_ not found [ 227.541367][T12220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.742361][T12285] __nla_validate_parse: 12 callbacks suppressed [ 227.742381][T12285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1648'. [ 227.977068][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'. [ 228.034531][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'. [ 228.449557][T12323] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 228.455532][T12323] syzkaller1: linktype set to 778 [ 228.548082][T12327] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 228.564041][T12323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.580210][T12324] bond6: (slave macvlan4): Error -22 calling dev_set_mtu [ 228.827028][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 229.287162][T12354] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1667'. [ 229.368450][T12355] netlink: 'syz.1.1668': attribute type 2 has an invalid length. [ 229.403856][T12355] netlink: 'syz.1.1668': attribute type 1 has an invalid length. [ 229.473619][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 229.934254][T12384] batadv0: mtu less than device minimum [ 229.974113][T12386] x_tables: duplicate entry at hook 2 [ 230.000156][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 230.155420][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 230.186172][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 230.193789][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 230.196417][T12392] netlink: 'syz.0.1676': attribute type 11 has an invalid length. [ 230.281477][T12396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.764656][T12403] geneve3: left promiscuous mode [ 230.770163][T12403] geneve3: left allmulticast mode [ 230.782784][T12403] hsr0: left promiscuous mode [ 230.803583][T12403] vlan3: left promiscuous mode [ 230.812505][T12403] bond8: left promiscuous mode [ 230.817494][T12403] gretap3: left promiscuous mode [ 230.829568][T12399] bond0: left promiscuous mode [ 230.836227][T12399] bond_slave_0: left promiscuous mode [ 230.846901][T12399] bond_slave_1: left promiscuous mode [ 230.853769][T12399] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 230.865195][T12399] macvlan0: left promiscuous mode [ 230.873217][T12399] gretap0: left promiscuous mode [ 230.898454][T11978] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.916309][T11973] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.945915][T11973] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 230.964228][T11973] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 231.216736][T12426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.301106][T12427] ip_vti0: entered promiscuous mode [ 232.408989][T12461] syzkaller0: entered promiscuous mode [ 232.415565][T12461] syzkaller0: entered allmulticast mode [ 232.577464][T12478] block nbd1: not configured, cannot reconfigure [ 233.081967][T12492] __nla_validate_parse: 10 callbacks suppressed [ 233.081987][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 233.312824][T12498] lo speed is unknown, defaulting to 1000 [ 233.324687][T12498] lo speed is unknown, defaulting to 1000 [ 233.331883][T12498] lo speed is unknown, defaulting to 1000 [ 233.569745][T12504] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1705'. [ 233.570455][T12498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.638844][T12498] lo speed is unknown, defaulting to 1000 [ 233.661925][T12498] lo speed is unknown, defaulting to 1000 [ 233.711359][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 233.767596][T12506] bond6 (unregistering): Released all slaves [ 233.856412][T12498] lo speed is unknown, defaulting to 1000 [ 233.871157][T12498] lo speed is unknown, defaulting to 1000 [ 233.873981][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 233.910406][T12498] lo speed is unknown, defaulting to 1000 [ 234.021100][T12519] syzkaller0: entered promiscuous mode [ 234.027101][T12519] syzkaller0: entered allmulticast mode [ 234.120021][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1714'. [ 234.292479][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 234.479487][T12534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.155688][T12566] syzkaller0: entered promiscuous mode [ 235.165924][T12566] syzkaller0: entered allmulticast mode [ 235.405715][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'. [ 235.418844][T12581] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 235.478027][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 235.488705][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 235.498028][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 235.605123][T12581] bond6: (slave bridge6): making interface the new active one [ 235.632900][T12581] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 235.741871][T12598] ip6gre3: entered promiscuous mode [ 236.856274][T12629] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 237.027305][T12640] bond7: entered promiscuous mode [ 237.791521][T12669] netlink: 'syz.0.1752': attribute type 8 has an invalid length. [ 237.961249][T12677] tipc: Enabling of bearer rejected, failed to enable media [ 238.391942][T12709] lo speed is unknown, defaulting to 1000 [ 238.423273][T12703] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 238.521259][T12716] bond0: entered promiscuous mode [ 238.527194][T12716] bond_slave_0: entered promiscuous mode [ 238.538395][T12716] bond_slave_1: entered promiscuous mode [ 238.544440][T12716] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 238.554603][T12716] batadv0: entered promiscuous mode [ 238.561301][T12716] debugfs: 'hsr0' already exists in 'hsr' [ 238.567515][T12716] Cannot create hsr debugfs directory [ 238.573155][T12716] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 238.584376][T12716] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 238.606349][T12716] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 238.827222][T12732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 239.017938][T12739] openvswitch: netlink: Flow key attr not present in new flow. [ 239.091724][T12745] lo speed is unknown, defaulting to 1000 [ 239.568645][T12749] lo speed is unknown, defaulting to 1000 [ 239.867304][T12772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.895436][T12772] __nla_validate_parse: 3 callbacks suppressed [ 239.895454][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 239.911555][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 239.921337][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 240.031214][T12773] bond0: Caught tx_queue_len zero misconfig [ 240.049070][T12769] x_tables: duplicate underflow at hook 1 [ 240.340382][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 240.350175][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 240.551982][T12824] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 240.567728][T12824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.584307][T12810] lo speed is unknown, defaulting to 1000 [ 240.719486][T12830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.958034][T12845] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.064487][T12857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1807'. [ 241.219165][T12871] openvswitch: netlink: Key 17 has unexpected len 216 expected 4 [ 241.240069][T12872] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1808'. [ 241.250576][T12865] ip6tnl0: Caught tx_queue_len zero misconfig [ 241.268375][T12865] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 241.307942][T12875] tipc: Enabled bearer , priority 0 [ 241.321645][T12863] syzkaller0: entered promiscuous mode [ 241.329286][T12863] syzkaller0: entered allmulticast mode [ 241.421681][T12863] netlink: 'syz.3.1808': attribute type 13 has an invalid length. [ 241.446878][T12863] netlink: 'syz.3.1808': attribute type 12 has an invalid length. [ 241.468609][T12872] tipc: Resetting bearer [ 241.559205][T12872] tipc: Disabling bearer [ 241.642619][T12881] lo speed is unknown, defaulting to 1000 [ 241.657495][T12896] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1814'. [ 241.676819][T12863] lo speed is unknown, defaulting to 1000 [ 242.201585][T12927] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 242.235637][T12924] tipc: Resetting bearer [ 242.257362][T12924] tipc: Resetting bearer [ 242.292215][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.299398][T12927] team0: Device bond0 failed to register rx_handler [ 242.324550][ T5884] lo speed is unknown, defaulting to 1000 [ 242.760761][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 242.772390][T12958] netlink: 'syz.4.1832': attribute type 2 has an invalid length. [ 242.780757][T12958] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 242.853193][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 242.946427][T12969] siw: device registration error -23 [ 243.266986][T12982] lo speed is unknown, defaulting to 1000 [ 243.385719][T12995] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 243.452868][T12995] bond8: entered promiscuous mode [ 243.459973][T12995] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.241392][T13043] netlink: 'syz.1.1856': attribute type 10 has an invalid length. [ 244.255126][ T6129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.280547][ T6129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.296685][T13043] netlink: 'syz.1.1856': attribute type 10 has an invalid length. [ 244.346546][T13043] team0: Port device dummy0 removed [ 244.358076][T13043] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.372533][T13048] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 244.382407][ T6129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.413118][T13048] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 244.428310][ T6129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.457509][T13058] netlink: 'syz.0.1859': attribute type 5 has an invalid length. [ 244.689046][T13064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.002698][T13087] __nla_validate_parse: 5 callbacks suppressed [ 245.002716][T13087] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1866'. [ 245.137499][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 245.146562][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 245.219423][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 245.264258][T13100] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1868'. [ 245.416747][T13105] xt_hashlimit: size too large, truncated to 1048576 [ 245.601801][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 245.744656][T13115] bridge_slave_0 (unregistering): left allmulticast mode [ 245.762245][T13115] bridge_slave_0 (unregistering): left promiscuous mode [ 245.793302][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.919129][T13119] lo speed is unknown, defaulting to 1000 [ 245.941803][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 245.991790][T13124] lo speed is unknown, defaulting to 1000 [ 246.094213][T13137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.098496][T13135] macsec1: entered promiscuous mode [ 246.108426][T13135] macsec1: entered allmulticast mode [ 246.183942][T13137] tipc: Resetting bearer [ 246.256734][T13138] lo speed is unknown, defaulting to 1000 [ 246.499913][T13159] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1879'. [ 247.431543][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'. [ 248.797751][T13122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.135781][T13187] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 249.146334][T13187] bridge0: entered allmulticast mode [ 249.163025][T13192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1890'. [ 249.238063][T13196] lo: Caught tx_queue_len zero misconfig [ 249.277359][T13199] chnl_net:caif_netlink_parms(): no params data found [ 249.526255][T13213] xt_TCPMSS: Only works on TCP SYN packets [ 249.569123][T13213] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 249.623911][T13218] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 249.644166][T13218] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 249.988805][T13240] syzkaller0: entered promiscuous mode [ 250.001141][T13246] xt_hashlimit: size too large, truncated to 1048576 [ 250.003113][T13240] syzkaller0: entered allmulticast mode [ 251.476546][T13252] netlink: 'syz.0.1908': attribute type 3 has an invalid length. [ 251.484886][T13252] __nla_validate_parse: 5 callbacks suppressed [ 251.484897][T13252] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1908'. [ 251.783200][T13277] bridge0: port 3(macvlan4) entered blocking state [ 251.806430][T13277] bridge0: port 3(macvlan4) entered disabled state [ 251.815225][T13277] macvlan4: entered allmulticast mode [ 251.821606][T13277] bridge0: entered allmulticast mode [ 251.866894][T13277] macvlan4: left allmulticast mode [ 251.876975][T13277] bridge0: left allmulticast mode [ 252.003166][T13296] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 252.051151][T13296] bond0: (slave dummy0): Releasing backup interface [ 252.065169][T13296] dummy0: left promiscuous mode [ 252.076593][T13296] team0: Port device dummy0 added [ 252.116228][T13304] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 252.168613][T13304] team0: Port device dummy0 removed [ 252.169424][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 252.183712][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 252.205290][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 252.216505][T13304] dummy0: entered promiscuous mode [ 252.222113][T13304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 252.309650][T13318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.385571][T13315] syzkaller0: entered promiscuous mode [ 252.391477][T13315] syzkaller0: entered allmulticast mode [ 252.532072][T13331] xt_hashlimit: size too large, truncated to 1048576 [ 252.605492][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1928'. [ 252.860833][T13340] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 254.046946][T13340] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 254.281852][T13366] netlink: 'syz.3.1935': attribute type 8 has an invalid length. [ 254.288111][T13362] syzkaller0: entered promiscuous mode [ 254.305792][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1935'. [ 254.308065][T13362] syzkaller0: entered allmulticast mode [ 254.448788][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1937'. [ 254.473828][T13370] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1937'. [ 254.751555][T13391] tunl0: Caught tx_queue_len zero misconfig [ 254.776149][T13391] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1942'. [ 254.803244][T13395] syzkaller0: entered promiscuous mode [ 254.819529][T13395] syzkaller0: entered allmulticast mode [ 254.851989][T13398] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 254.912648][T13397] syzkaller0: entered promiscuous mode [ 254.918275][T13397] syzkaller0: entered allmulticast mode [ 255.679909][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.313019][T13409] syzkaller0: entered promiscuous mode [ 256.318669][T13409] syzkaller0: entered allmulticast mode [ 256.347267][T13413] vlan2: entered promiscuous mode [ 256.352565][T13413] bridge0: entered promiscuous mode [ 256.593036][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 256.623674][T13422] vlan0: entered promiscuous mode [ 256.633928][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'. [ 256.636562][T13422] bridge0: entered promiscuous mode [ 256.789682][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 256.822648][T13445] vlan5: entered allmulticast mode [ 256.827956][T13445] team0: entered allmulticast mode [ 256.833185][T13445] team_slave_0: entered allmulticast mode [ 256.841432][T13445] team_slave_1: entered allmulticast mode [ 256.847408][T13445] geneve0: entered allmulticast mode [ 256.916931][T13456] vlan3: entered promiscuous mode [ 256.936240][T13461] netlink: 'syz.3.1962': attribute type 12 has an invalid length. [ 257.064897][T13453] syzkaller0: entered promiscuous mode [ 257.101034][T13453] syzkaller0: entered allmulticast mode [ 257.310743][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 257.340471][T13488] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20000 [ 257.350056][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'. [ 258.532399][T13483] veth0: entered promiscuous mode [ 258.537837][T13483] veth0: left promiscuous mode [ 258.554836][T13488] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 258.564407][T13488] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 258.574160][T13488] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 258.768178][T13501] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 258.796394][T13501] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 258.824105][T13501] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1971'. [ 259.112036][T13516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1977'. [ 259.129428][T13518] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1976'. [ 259.293332][T13527] netlink: 'syz.4.1981': attribute type 2 has an invalid length. [ 259.313142][T13527] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 259.384259][T13525] syzkaller0: entered promiscuous mode [ 259.391387][T13525] syzkaller0: entered allmulticast mode [ 259.402164][T13527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.891475][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1987'. [ 260.950001][T13555] dvmrp1: entered allmulticast mode [ 260.955404][T13556] dvmrp1: left allmulticast mode [ 261.042284][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1989'. [ 261.129007][T13561] lo speed is unknown, defaulting to 1000 [ 261.143691][T11971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.157813][T11971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.477474][T13589] openvswitch: netlink: Duplicate or invalid key (type 0). [ 261.484732][T13589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.598379][T13593] __nla_validate_parse: 3 callbacks suppressed [ 261.598401][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 261.626787][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 261.656623][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 261.671596][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 261.687077][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 262.281291][T13632] bridge0: entered allmulticast mode [ 262.436064][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 262.472105][T13631] bond0: entered promiscuous mode [ 262.477487][T13631] : entered promiscuous mode [ 262.496234][T13631] bond_slave_1: entered promiscuous mode [ 262.511490][T13631] batadv0: entered promiscuous mode [ 262.511678][T13652] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2012'. [ 262.529744][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 262.533840][T13631] debugfs: 'hsr1' already exists in 'hsr' [ 262.550051][T13631] Cannot create hsr debugfs directory [ 262.555716][T13631] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 262.566975][T13631] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 262.579944][T13631] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 262.587757][T13631] bond0: left promiscuous mode [ 262.592708][T13631] : left promiscuous mode [ 262.597933][T13631] bond_slave_1: left promiscuous mode [ 262.606232][T13631] batadv0: left promiscuous mode [ 262.628430][T13649] hsr0: entered promiscuous mode [ 262.652473][T13653] bond0: left promiscuous mode [ 262.664794][T13653] bond_slave_0: left promiscuous mode [ 262.692721][T13653] bond_slave_1: left promiscuous mode [ 262.709363][T13653] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 262.717642][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2012'. [ 262.751352][T13653] batadv0: left promiscuous mode [ 262.762083][T13656] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2012'. [ 262.782831][T13653] hsr0 (unregistering): left promiscuous mode [ 262.826006][T13661] xfrm1: entered allmulticast mode [ 263.438053][T13697] geneve3: entered promiscuous mode [ 263.704304][T13707] lo speed is unknown, defaulting to 1000 [ 263.766433][T13727] netlink: 'syz.4.2029': attribute type 39 has an invalid length. [ 263.831310][T13729] openvswitch: netlink: Key type 134 is out of range max 32 [ 264.268329][T13751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.287262][T13748] syzkaller1: entered promiscuous mode [ 264.340929][T13748] syzkaller1: entered allmulticast mode [ 264.393196][T13759] Cannot find add_set index 2 as target [ 264.565991][T13771] veth0: entered promiscuous mode [ 264.643828][T13764] veth0 (unregistering): left promiscuous mode [ 264.738744][T13773] bridge_slave_0: Caught tx_queue_len zero misconfig [ 264.842684][T13781] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 264.951537][T13784] lo speed is unknown, defaulting to 1000 [ 264.962588][T13781] openvswitch: netlink: Flow key attr not present in new flow. [ 265.000263][T13786] netlink: 'syz.1.2045': attribute type 2 has an invalid length. [ 265.226868][T13799] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 265.258269][T13800] netlink: 'syz.0.2048': attribute type 12 has an invalid length. [ 265.305029][T13805] æÿîÿ: entered promiscuous mode [ 265.512378][T13811] bond8: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 265.538874][T13811] bond8 (unregistering): Released all slaves [ 265.606977][T13817] netlink: 'syz.0.2054': attribute type 3 has an invalid length. [ 265.714005][T13821] 8021q: adding VLAN 0 to HW filter on device bond10 [ 266.342855][T13847] lo speed is unknown, defaulting to 1000 [ 266.788713][T13862] syzkaller1: entered promiscuous mode [ 266.794527][T13862] syzkaller1: entered allmulticast mode [ 267.051826][T13864] lo speed is unknown, defaulting to 1000 [ 267.287545][T13869] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 267.783158][T13884] syzkaller0: entered promiscuous mode [ 267.791344][T13884] syzkaller0: entered allmulticast mode [ 267.799698][T13884] 0: reclassify loop, rule prio 0, protocol 700 [ 268.475744][T13828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.485378][T13834] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 268.511012][T13834] __nla_validate_parse: 17 callbacks suppressed [ 268.511033][T13834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2056'. [ 268.637328][T13888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2070'. [ 268.804629][T13895] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2073'. [ 268.948552][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2075'. [ 268.972250][T13906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2075'. [ 269.249010][T13913] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2077'. [ 269.303519][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 269.364288][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 269.480173][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 269.925387][T13929] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2079'. [ 270.896745][T13895] lo speed is unknown, defaulting to 1000 [ 270.907810][T13913] 0ªX¹¦À: renamed from caif0 [ 270.914299][T13913] 0ªX¹¦À: entered allmulticast mode [ 270.920047][T13913] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 270.966468][T13926] netlink: 'syz.2.2079': attribute type 29 has an invalid length. [ 271.516856][T13965] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 271.579512][T13965] bond11: Unable to set down delay as MII monitoring is disabled [ 271.596049][T13972] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 271.653226][T13965] bond11 (unregistering): Released all slaves [ 271.765176][T13979] lo speed is unknown, defaulting to 1000 [ 271.860698][T13974] netlink: set zone limit has 4 unknown bytes [ 271.899130][T13984] syzkaller0: entered promiscuous mode [ 271.904780][T13984] syzkaller0: entered allmulticast mode [ 272.317957][T13995] lo speed is unknown, defaulting to 1000 [ 272.589921][T14021] netlink: 'syz.1.2105': attribute type 10 has an invalid length. [ 272.630171][T14028] netlink: 'syz.3.2108': attribute type 1 has an invalid length. [ 272.836473][T14037] vxcan1: entered promiscuous mode [ 272.882990][T14045] syzkaller0: entered promiscuous mode [ 272.899709][T14045] syzkaller0: entered allmulticast mode [ 272.922930][T14042] lo speed is unknown, defaulting to 1000 [ 273.001543][T14050] sctp: [Deprecated]: syz.0.2112 (pid 14050) Use of int in max_burst socket option deprecated. [ 273.001543][T14050] Use struct sctp_assoc_value instead [ 273.047834][T14048] nbd0: detected capacity change from 0 to 127 [ 273.119321][ T5826] block nbd0: Receive control failed (result -104) [ 273.717706][T14088] __nla_validate_parse: 14 callbacks suppressed [ 273.717725][T14088] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2123'. [ 273.746108][T14090] dvmrp31: entered allmulticast mode [ 273.765342][T14088] bond0: (slave dummy0): Releasing backup interface [ 273.803043][T14092] lo speed is unknown, defaulting to 1000 [ 273.981320][T14105] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2129'. [ 274.060567][T14105] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2129'. [ 274.728204][T14136] lo speed is unknown, defaulting to 1000 [ 274.973260][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'. [ 275.523985][T14156] lo speed is unknown, defaulting to 1000 [ 275.590745][T14157] lo speed is unknown, defaulting to 1000 [ 275.624375][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2144'. [ 275.888303][T14155] pim6reg1: entered promiscuous mode [ 275.893654][T14155] pim6reg1: entered allmulticast mode [ 275.938998][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2152'. [ 275.988983][T14187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2153'. [ 276.041745][T14193] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 276.068916][T14193] bond9: entered promiscuous mode [ 276.074355][T14193] bond9: entered allmulticast mode [ 276.080484][T14193] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.131931][T14193] erspan1: entered allmulticast mode [ 276.169391][T14193] bond9: (slave erspan1): making interface the new active one [ 276.180034][T14193] erspan1: entered promiscuous mode [ 276.187034][T14193] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 276.214089][T14198] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2155'. [ 276.223647][T14197] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2155'. [ 276.304305][T14204] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 276.316551][T14204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 276.335027][T14200] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 276.694255][T14218] pim6reg1: entered promiscuous mode [ 276.702640][T14218] pim6reg1: entered allmulticast mode [ 276.769546][T14228] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 276.829510][T14228] 8021q: adding VLAN 0 to HW filter on device bond11 [ 276.957695][T14228] bond11: (slave geneve4): making interface the new active one [ 276.967401][T14228] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 277.109584][T14243] tipc: Enabled bearer , priority 0 [ 277.152133][T14243] syzkaller0: entered promiscuous mode [ 277.164378][T14243] syzkaller0: entered allmulticast mode [ 277.209551][T14254] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 277.231214][T14254] bond8 (unregistering): Released all slaves [ 277.280170][T14247] tipc: Resetting bearer [ 277.336560][T14247] tipc: Disabling bearer [ 277.381540][T14243] lo speed is unknown, defaulting to 1000 [ 277.624832][T14276] netlink: 'syz.4.2171': attribute type 8 has an invalid length. [ 277.935250][T14291] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 277.943417][T14291] netlink: 'syz.0.2178': attribute type 3 has an invalid length. [ 277.952573][T14283] syzkaller0: entered promiscuous mode [ 277.953227][T14291] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 277.964154][T14283] syzkaller0: entered allmulticast mode [ 277.968816][T14291] NCSI netlink: No device for ifindex 0 [ 277.996974][T14297] netlink: 'syz.1.2177': attribute type 8 has an invalid length. [ 278.022940][T14291] openvswitch: netlink: Message has -1 unknown bytes. [ 278.071464][T14297] bond0: entered promiscuous mode [ 278.078334][T14297] bond_slave_0: entered promiscuous mode [ 278.084197][T14297] bond_slave_1: entered promiscuous mode [ 278.092324][T14297] gretap0: entered promiscuous mode [ 278.100275][T14297] bond0: left promiscuous mode [ 278.105208][T14297] bond_slave_0: left promiscuous mode [ 278.111687][T14297] bond_slave_1: left promiscuous mode [ 278.120157][T14297] gretap0: left promiscuous mode [ 278.342084][T14310] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 278.527018][T14330] nbd: device at index 3 is going down [ 278.595026][T14322] syzkaller0: entered promiscuous mode [ 278.600716][T14322] syzkaller0: entered allmulticast mode [ 278.729510][ T5827] udevd[5827]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 278.771306][T14351] syzkaller0: entered promiscuous mode [ 278.785962][T14351] syzkaller0: entered allmulticast mode [ 279.367538][T14387] lo speed is unknown, defaulting to 1000 [ 279.374530][T14395] netlink: 'syz.3.2204': attribute type 13 has an invalid length. [ 279.425767][T14399] ip6erspan0: entered promiscuous mode [ 279.610083][T14406] syzkaller0: entered promiscuous mode [ 279.615608][T14406] syzkaller0: entered allmulticast mode [ 279.847870][T14420] __nla_validate_parse: 10 callbacks suppressed [ 279.847890][T14420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2212'. [ 280.078190][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 280.129973][T14443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2217'. [ 280.160163][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 280.233950][T14451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2222'. [ 280.371322][T14451] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 280.389466][T14451] bond11 (unregistering): Released all slaves [ 280.434028][T14456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.677486][ T25] block nbd0: Possible stuck request ffff888025d80000: control (read@1024,1024B). Runtime 30 seconds [ 303.689503][ T25] block nbd0: Possible stuck request ffff888025d80200: control (read@2048,1024B). Runtime 30 seconds [ 303.700535][ T25] block nbd0: Possible stuck request ffff888025d80400: control (read@3072,1024B). Runtime 30 seconds [ 303.712606][ T25] block nbd0: Possible stuck request ffff888025d78000: control (read@0,1024B). Runtime 30 seconds [ 317.118303][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.656058][ T5187] udevd[5187]: worker [5814] /devices/virtual/block/nbd0 is taking a long time [ 333.756340][ T25] block nbd0: Possible stuck request ffff888025d80000: control (read@1024,1024B). Runtime 60 seconds [ 333.767463][ T25] block nbd0: Possible stuck request ffff888025d80200: control (read@2048,1024B). Runtime 60 seconds [ 333.778775][ T25] block nbd0: Possible stuck request ffff888025d80400: control (read@3072,1024B). Runtime 60 seconds [ 333.789929][ T25] block nbd0: Possible stuck request ffff888025d78000: control (read@0,1024B). Runtime 60 seconds [ 363.836128][ T25] block nbd0: Possible stuck request ffff888025d80000: control (read@1024,1024B). Runtime 90 seconds [ 363.847351][ T25] block nbd0: Possible stuck request ffff888025d80200: control (read@2048,1024B). Runtime 90 seconds [ 363.858437][ T25] block nbd0: Possible stuck request ffff888025d80400: control (read@3072,1024B). Runtime 90 seconds [ 363.869475][ T25] block nbd0: Possible stuck request ffff888025d78000: control (read@0,1024B). Runtime 90 seconds [ 378.559229][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.926475][ T25] block nbd0: Possible stuck request ffff888025d80000: control (read@1024,1024B). Runtime 120 seconds [ 393.937650][ T25] block nbd0: Possible stuck request ffff888025d80200: control (read@2048,1024B). Runtime 120 seconds [ 393.949940][ T25] block nbd0: Possible stuck request ffff888025d80400: control (read@3072,1024B). Runtime 120 seconds [ 393.961229][ T25] block nbd0: Possible stuck request ffff888025d78000: control (read@0,1024B). Runtime 120 seconds [ 410.690223][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'. [ 410.802196][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2226'. [ 410.856075][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 410.954015][T14500] tipc: Enabling of bearer rejected, already enabled [ 411.036101][T14507] validate_nla: 1 callbacks suppressed [ 411.036117][T14507] netlink: 'syz.4.2232': attribute type 1 has an invalid length. [ 411.068431][T14502] tipc: Resetting bearer [ 411.350447][T14526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.369341][T14526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.382243][T14526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.392360][T14526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.528060][T14536] netlink: 'syz.1.2241': attribute type 2 has an invalid length. [ 411.543304][T14536] netlink: 'syz.1.2241': attribute type 9 has an invalid length. [ 411.558876][T14536] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2241'. [ 411.602688][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'. [ 411.628525][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2241'. [ 411.660667][T14544] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan2 [ 411.703493][T14544] erspan2: entered allmulticast mode [ 411.946632][T14561] tipc: Enabled bearer , priority 0 [ 411.987632][T14561] syzkaller0: entered promiscuous mode [ 411.993152][T14561] syzkaller0: entered allmulticast mode [ 412.248002][T14586] tipc: Resetting bearer [ 412.373353][T14560] tipc: Resetting bearer [ 412.414763][T14560] tipc: Disabling bearer [ 412.519269][T14593] tipc: Enabling of bearer rejected, already enabled [ 412.619559][T14607] tunl0: Caught tx_queue_len zero misconfig [ 412.654683][T14607] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2257'. [ 412.713722][ T30] audit: type=1800 audit(1770757838.260:2): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2252" name="memory.events" dev="tmpfs" ino=2256 res=0 errno=0 [ 412.820026][T14612] sctp: [Deprecated]: syz.3.2257 (pid 14612) Use of int in max_burst socket option deprecated. [ 412.820026][T14612] Use struct sctp_assoc_value instead [ 412.863057][T14618] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 412.878690][T14612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.027207][T14627] ip6gretap0: entered promiscuous mode [ 413.043433][T14627] macsec2: entered promiscuous mode [ 413.075840][T14627] ip6gretap0: left promiscuous mode [ 413.103786][ T30] audit: type=1804 audit(1770757838.630:3): pid=14628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2262" name="memory.events" dev="tmpfs" ino=2404 res=1 errno=0 [ 413.197515][ T30] audit: type=1800 audit(1770757838.630:4): pid=14628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2262" name="memory.events" dev="tmpfs" ino=2404 res=0 errno=0 [ 413.219767][T14634] netlink: 'syz.0.2263': attribute type 2 has an invalid length. [ 413.261605][T14634] : entered promiscuous mode [ 413.348789][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 413.400311][T14647] netlink: 'syz.4.2267': attribute type 32 has an invalid length. [ 413.407271][T14646] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 413.426694][T14646] sctp: [Deprecated]: syz.0.2268 (pid 14646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.426694][T14646] Use struct sctp_sack_info instead [ 413.802510][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2275'. [ 413.804644][T14665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.832360][ T6233] lo speed is unknown, defaulting to 1000 [ 413.855339][ T6233] syz2: Port: 1 Link DOWN [ 413.947148][T14678] syzkaller0: entered promiscuous mode [ 413.953351][T14678] syzkaller0: entered allmulticast mode [ 414.144999][T14694] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2280'. [ 414.195629][T14693] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 414.680200][T14733] ip6t_srh: unknown srh invflags BA61 [ 414.747857][T14735] netlink: 'syz.1.2293': attribute type 12 has an invalid length. [ 414.787325][ T6233] syzkaller0: tun_net_xmit 76 [ 414.801304][T14729] syzkaller0: create flow: hash 1375537548 index 1 [ 414.818772][ T6233] syzkaller0: tun_net_xmit 76 [ 414.974604][T14737] syzkaller0: delete flow: hash 1375537548 index 1 [ 416.601198][T14795] nftables ruleset with unbound chain [ 416.696947][T14802] syzkaller1: entered promiscuous mode [ 416.702542][T14802] syzkaller1: entered allmulticast mode [ 417.037849][T14829] __nla_validate_parse: 7 callbacks suppressed [ 417.037868][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'. [ 417.054486][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'. [ 417.189049][T14837] syzkaller0: entered promiscuous mode [ 417.194704][T14837] syzkaller0: entered allmulticast mode [ 417.216181][T14837] 8021q: VLANs not supported on syzkaller0 [ 417.222894][T14837] syzkaller0: left promiscuous mode [ 417.234594][T14837] syzkaller0: left allmulticast mode [ 417.410916][T14848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2321'. [ 417.701139][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 417.717774][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 417.727222][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2326'. [ 418.187812][T14891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.321140][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2335'. [ 418.506389][T14896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2336'. [ 418.584868][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 418.669197][T14902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.794897][T14910] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2340'. [ 419.141900][T14923] netlink: 'syz.1.2344': attribute type 1 has an invalid length. [ 419.700057][T14952] netlink: 'syz.0.2351': attribute type 2 has an invalid length. [ 419.807885][T14957] netlink: 'syz.1.2352': attribute type 101 has an invalid length. [ 419.831291][T14957] netlink: 'syz.1.2352': attribute type 7 has an invalid length. [ 420.239184][T14987] netlink: 'syz.4.2358': attribute type 9 has an invalid length. [ 420.298503][T14992] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 420.384694][T14997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.478883][T15000] openvswitch: netlink: Missing key (keys=40, expected=80) [ 420.742790][T15018] netlink: 'syz.0.2365': attribute type 10 has an invalid length. [ 420.778661][T15018] veth1_macvtap: left promiscuous mode [ 420.801902][T15018] team0: Device veth1_macvtap failed to register rx_handler [ 420.927814][T15025] geneve5: entered promiscuous mode [ 421.250046][T15042] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 421.559916][T15058] lo speed is unknown, defaulting to 1000 [ 421.893334][T15080] ip6tnl5: entered promiscuous mode [ 421.929386][T15080] ip6tnl5: entered allmulticast mode [ 421.940261][T15085] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 422.090030][T15095] __nla_validate_parse: 12 callbacks suppressed [ 422.090050][T15095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2380'. [ 422.413247][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 422.503753][T15115] hsr_slave_1 (unregistering): left promiscuous mode [ 422.572087][T15118] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 422.584638][T15118] bond10 (unregistering): Released all slaves [ 422.638297][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2384'. [ 422.966754][T15131] syzkaller0: entered promiscuous mode [ 422.972267][T15131] syzkaller0: entered allmulticast mode [ 423.996038][ T25] block nbd0: Possible stuck request ffff888025d80000: control (read@1024,1024B). Runtime 150 seconds [ 424.007184][ T25] block nbd0: Possible stuck request ffff888025d80200: control (read@2048,1024B). Runtime 150 seconds [ 424.018311][ T25] block nbd0: Possible stuck request ffff888025d80400: control (read@3072,1024B). Runtime 150 seconds [ 424.029329][ T25] block nbd0: Possible stuck request ffff888025d78000: control (read@0,1024B). Runtime 150 seconds [ 424.336143][T15050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.613838][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 424.664380][T15141] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 424.683182][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 424.692280][T15142] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 424.716143][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 424.812901][T15142] netlink: 'syz.2.2388': attribute type 11 has an invalid length. [ 424.939681][T15162] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 424.998401][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 425.028170][T15162] bond10: entered promiscuous mode [ 425.043968][T15162] 8021q: adding VLAN 0 to HW filter on device bond10 [ 425.165537][T15163] lo: entered promiscuous mode [ 425.171676][T15163] lo: entered allmulticast mode [ 425.180775][T15162] netlink: 'syz.1.2395': attribute type 46 has an invalid length. [ 425.328992][T15185] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 425.430364][T15185] bond8: Unable to set down delay as MII monitoring is disabled [ 425.434431][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 425.460180][T15185] bond8 (unregistering): Released all slaves [ 425.589498][T15209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.824285][T15205] lo speed is unknown, defaulting to 1000 [ 425.837849][T15208] netlink: set zone limit has 4 unknown bytes [ 425.957719][T15229] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 425.982609][T15227] lo speed is unknown, defaulting to 1000 [ 425.997163][T15231] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 426.107877][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2408'. [ 426.183705][T15235] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 426.209066][T15235] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 426.260772][T15229] bond11: (slave bridge8): Enslaving as an active interface with a down link [ 426.568139][T15257] IPVS: Unknown mcast interface: veth0_to_bond [ 426.625675][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 426.725792][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 426.741773][T15264] netlink: 'syz.3.2414': attribute type 10 has an invalid length. [ 427.160035][T15279] __nla_validate_parse: 1 callbacks suppressed [ 427.160056][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 427.300428][T15279] lo speed is unknown, defaulting to 1000 [ 427.774271][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 427.841625][T15317] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.2430'. [ 428.110218][T15328] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 428.319801][T15334] netlink: zone id is out of range [ 428.325030][T15334] netlink: zone id is out of range [ 428.330248][T15334] netlink: zone id is out of range [ 428.335369][T15334] netlink: zone id is out of range [ 428.340768][T15334] netlink: zone id is out of range [ 428.347636][T15334] netlink: zone id is out of range [ 428.380926][T15341] netlink: 'syz.0.2434': attribute type 1 has an invalid length. [ 428.390838][T15334] netlink: zone id is out of range [ 428.477876][T15349] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2438'. [ 428.488764][T15341] 8021q: adding VLAN 0 to HW filter on device bond8 [ 428.544420][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2441'. [ 428.631195][T15360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2441'. [ 428.674740][T15356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 428.802767][T15372] lo speed is unknown, defaulting to 1000 [ 429.277162][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2453'. [ 429.292990][T15402] bond12 (unregistering): Released all slaves [ 429.715836][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'. [ 429.754811][T15440] netlink: 'syz.1.2461': attribute type 13 has an invalid length. [ 430.093611][T15444] erspan0: left promiscuous mode [ 430.109345][T15444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.117612][T15444] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.136056][ T6129] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.147720][ T6129] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.157107][ T6129] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.166363][ T6129] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.175239][ T6129] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.184430][ T6129] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.210449][ T6129] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.235947][ T6129] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.260139][ T6129] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.280495][ T6129] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.303196][ T6129] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.317013][ T6129] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.445370][T15465] bond12: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 430.497090][T15465] bond12 (unregistering): Released all slaves [ 430.672425][T15473] vlan4: entered allmulticast mode [ 430.701207][T15473] team0: entered allmulticast mode [ 430.720698][T15473] team_slave_0: entered allmulticast mode [ 430.737489][T15473] team_slave_1: entered allmulticast mode [ 430.776039][T15474] lo speed is unknown, defaulting to 1000 [ 431.810355][T15550] vlan5: entered allmulticast mode [ 432.616195][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'. [ 432.664924][T15596] lo speed is unknown, defaulting to 1000 [ 433.043638][T15616] lo speed is unknown, defaulting to 1000 [ 433.501125][T15652] netlink: 'syz.2.2507': attribute type 1 has an invalid length. [ 433.587587][T15656] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2508'. [ 433.622440][T15661] netlink: 'syz.3.2509': attribute type 2 has an invalid length. [ 433.671759][T15652] 8021q: adding VLAN 0 to HW filter on device bond9 [ 433.711678][T15659] bond9: (slave geneve5): making interface the new active one [ 433.720311][T15659] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 433.739052][T15661] !: entered promiscuous mode [ 433.746718][T15512] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.765409][T15512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.831537][T15512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.848841][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2510'. [ 433.878236][T15512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.992107][T15685] net_ratelimit: 40 callbacks suppressed [ 433.992126][T15685] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.011848][T15687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.019469][T15687] IPv6: NLM_F_CREATE should be set when creating new route [ 434.026768][T15687] IPv6: NLM_F_CREATE should be set when creating new route [ 434.182648][T15696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2518'. [ 434.182736][T15699] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2519'. [ 434.346830][T15704] syzkaller0: entered promiscuous mode [ 434.352965][T15704] syzkaller0: entered allmulticast mode [ 436.146770][ T5944] IPVS: starting estimator thread 0... [ 436.235921][T15747] IPVS: using max 32 ests per chain, 76800 per kthread [ 436.288379][T15759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2532'. [ 436.303664][T15755] lo speed is unknown, defaulting to 1000 [ 436.329617][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2533'. [ 436.367075][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 436.372313][T15761] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2536'. [ 436.530241][T15772] netlink: 'syz.0.2538': attribute type 1 has an invalid length. [ 436.555411][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 436.623303][T15772] 8021q: adding VLAN 0 to HW filter on device bond9 [ 436.635240][T15774] bond9 (unregistering): Released all slaves [ 437.195072][ T5826] block nbd1: Receive control failed (result -32) [ 437.277020][T15820] delete_channel: no stack [ 437.531234][T15834] bridge_slave_0: entered promiscuous mode [ 437.537457][T15834] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 437.709180][T15848] __nla_validate_parse: 2 callbacks suppressed [ 437.709201][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'. [ 437.726532][T15846] netlink: 'syz.2.2556': attribute type 4 has an invalid length. [ 437.739170][T15851] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2558'. [ 437.780893][T15851] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 437.798913][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2561'. [ 437.832242][T15848] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 437.850133][T15848] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 437.864142][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 437.884990][T15855] syzkaller0: entered promiscuous mode [ 437.890851][T15855] syzkaller0: entered allmulticast mode [ 437.912811][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 437.922420][T15862] vlan4: entered promiscuous mode [ 437.927697][T15862] erspan0: entered promiscuous mode [ 438.083603][T15866] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 438.101977][T15866] bond9 (unregistering): Released all slaves [ 438.291850][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2564'. [ 438.302165][T15866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 438.319611][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2564'. [ 438.337379][T15866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 438.527511][T15896] netlink: 'syz.1.2567': attribute type 29 has an invalid length. [ 438.585924][T15900] netlink: 'syz.1.2567': attribute type 29 has an invalid length. [ 439.003023][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 439.145309][T15937] bridge9: port 1(veth3) entered blocking state [ 439.181413][T15937] bridge9: port 1(veth3) entered disabled state [ 439.196340][T15937] veth3: entered allmulticast mode [ 439.203964][T15937] veth3: entered promiscuous mode [ 439.212342][T15933] bridge9: port 2(veth0_to_bond) entered blocking state [ 439.218682][T15956] Unsupported ieee802154 address type: 0 [ 439.221945][T15933] bridge9: port 2(veth0_to_bond) entered disabled state [ 439.263873][T15933] veth0_to_bond: entered allmulticast mode [ 439.282283][T15933] veth0_to_bond: entered promiscuous mode [ 439.593110][T15975] sctp: [Deprecated]: syz.4.2586 (pid 15975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.593110][T15975] Use struct sctp_sack_info instead [ 439.650570][T15976] sctp: [Deprecated]: syz.4.2586 (pid 15976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.650570][T15976] Use struct sctp_sack_info instead [ 439.678343][T15981] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 439.999581][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.011218][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.263150][T16023] lo speed is unknown, defaulting to 1000 [ 440.458179][T16034] netlink: 'syz.4.2606': attribute type 1 has an invalid length. [ 440.555359][T16043] lo speed is unknown, defaulting to 1000 [ 440.700665][T16059] tipc: Cannot configure node identity twice [ 440.907710][T16077] netlink: 'syz.4.2618': attribute type 1 has an invalid length. [ 440.914470][T16067] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 441.152556][T16090] x_tables: unsorted underflow at hook 3 [ 441.438256][T16107] tipc: Enabled bearer , priority 0 [ 441.471966][T16107] syzkaller0: entered promiscuous mode [ 441.487279][T16107] syzkaller0: entered allmulticast mode [ 441.516894][T16107] tipc: Resetting bearer [ 441.542196][T16106] tipc: Resetting bearer [ 441.576567][T16106] tipc: Disabling bearer [ 441.789397][T16124] netlink: 'syz.0.2629': attribute type 20 has an invalid length. [ 441.829229][T16127] batadv_slave_0: entered promiscuous mode [ 441.840045][T16126] batadv_slave_0: left promiscuous mode [ 442.064710][T16137] netlink: 'syz.2.2634': attribute type 13 has an invalid length. [ 442.137915][T16137] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.148748][T16137] syzkaller0: entered promiscuous mode [ 442.154299][T16137] syzkaller0: entered allmulticast mode [ 442.190761][T16137] tipc: Enabled bearer , priority 0 [ 442.202269][T16135] tipc: Resetting bearer [ 442.210441][T16135] tipc: Disabling bearer [ 442.583304][ T30] audit: type=1800 audit(1770757868.130:5): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2645" name="memory.events" dev="tmpfs" ino=2822 res=0 errno=0 [ 442.653155][ T30] audit: type=1804 audit(1770757868.130:6): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2645" name="memory.events" dev="tmpfs" ino=2822 res=1 errno=0 [ 442.939230][T16191] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 442.941239][T16197] lo speed is unknown, defaulting to 1000 [ 442.968345][T16165] __nla_validate_parse: 18 callbacks suppressed [ 442.968364][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2638'. [ 443.233041][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 443.243982][T16215] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2656'. [ 443.259286][T16212] bond10 (unregistering): Released all slaves [ 443.478758][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2661'. [ 443.497659][T16221] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 443.561387][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'. [ 443.638181][T16236] bridge5: entered promiscuous mode [ 443.643668][T16236] bridge5: entered allmulticast mode [ 443.644626][T16239] netlink: 'syz.0.2666': attribute type 3 has an invalid length. [ 443.653352][T16236] team0: Port device bridge5 added [ 443.742180][T16234] syzkaller0: entered promiscuous mode [ 443.755583][T16234] syzkaller0: entered allmulticast mode [ 443.848467][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2669'. [ 445.438425][T15530] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.453959][T16282] sctp: [Deprecated]: syz.1.2679 (pid 16282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.453959][T16282] Use struct sctp_sack_info instead [ 445.470620][T15530] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.482323][T15530] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.505608][T15530] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.612798][T16288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.700564][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2683'. [ 445.726006][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2683'. [ 445.833050][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 445.842579][T16313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2691'. [ 445.876813][T16321] sctp: [Deprecated]: syz.2.2694 (pid 16321) Use of int in max_burst socket option deprecated. [ 445.876813][T16321] Use struct sctp_assoc_value instead [ 445.896161][T16322] lo speed is unknown, defaulting to 1000 [ 446.114731][T16333] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.285226][T16395] netlink: 'syz.3.2718': attribute type 3 has an invalid length. [ 447.847258][T16425] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 447.868359][T16425] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 447.897551][T16425] bond0: (slave hsr0): Error -95 calling set_mac_address [ 447.917854][T16430] lo: Caught tx_queue_len zero misconfig [ 447.981575][T16427] lo speed is unknown, defaulting to 1000 [ 448.227683][T16444] __nla_validate_parse: 4 callbacks suppressed [ 448.227703][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 448.353465][T16446] geneve4: entered promiscuous mode [ 448.374312][T15512] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.395928][T15512] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.404184][T15512] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.424364][T15512] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.432291][T16434] IPVS: length: 132 != 8 [ 448.434094][T16448] netlink: 'syz.1.2735': attribute type 49 has an invalid length. [ 448.448736][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 448.462755][T16446] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.469711][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'. [ 448.502818][T16453] hsr_slave_1 (unregistering): left promiscuous mode [ 448.537881][T16446] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.632053][T16446] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.774835][T16464] siw: device registration error -23 [ 448.794636][T16446] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.830266][T16470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2741'. [ 449.005622][T15523] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.090622][T16483] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 449.104295][T15523] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.170026][T15523] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.179650][T16483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2746'. [ 449.188940][T15523] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.335527][T16494] netlink: 'syz.2.2752': attribute type 58 has an invalid length. [ 449.363193][T16494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2752'. [ 449.438856][T16505] sctp: [Deprecated]: syz.1.2755 (pid 16505) Use of int in maxseg socket option. [ 449.438856][T16505] Use struct sctp_assoc_value instead [ 449.662681][T16517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2759'. [ 449.672041][T16521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2759'. [ 449.782616][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2760'. [ 449.847745][T16522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2760'. [ 450.008946][T16531] lo speed is unknown, defaulting to 1000 [ 451.167861][T16589] netlink: 'syz.4.2773': attribute type 18 has an invalid length. [ 451.331662][T16599] gretap0: entered promiscuous mode [ 451.352062][T16599] gretap0: left promiscuous mode [ 451.368074][T16601] lo: left promiscuous mode [ 451.372623][T16601] lo: left allmulticast mode [ 451.389226][T16601] mac80211_hwsim hwsim2 dvmrp1: left allmulticast mode [ 451.400191][T16601] macvtap0: left promiscuous mode [ 451.405306][T16601] macvtap0: left allmulticast mode [ 451.412189][T16601] bond4: left promiscuous mode [ 451.419143][T16601] macvtap1: left promiscuous mode [ 451.424337][T16601] macvtap1: left allmulticast mode [ 451.434787][T16601] vlan3: left allmulticast mode [ 451.435860][T16610] xt_bpf: check failed: parse error [ 451.439872][T16601] veth0_to_bond: left allmulticast mode [ 451.466122][T16601] geneve5: left promiscuous mode [ 451.480320][T16601] geneve5: left allmulticast mode [ 451.606716][T16623] siw: device registration error -23 [ 451.650867][T16624] bridge0: left allmulticast mode [ 451.680836][T16624] vlan4: left promiscuous mode [ 451.686275][T16624] erspan0: left promiscuous mode [ 451.702328][T16624] bridge5: left promiscuous mode [ 451.710874][T16624] geneve4: left promiscuous mode [ 451.737026][T15526] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.817061][T15526] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.838253][T15526] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.864577][T15526] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.101144][T16662] netlink: 'syz.1.2796': attribute type 13 has an invalid length. [ 452.238679][T16678] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 452.315580][T16681] sit0: Master is either lo or non-ether device [ 452.410998][T16682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 452.420264][T16682] bond10: (slave bond11): making interface the new active one [ 452.453608][T16682] bond10: (slave bond11): Enslaving as an active interface with an up link [ 452.527948][T16689] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 452.569835][T16678] 8021q: adding VLAN 0 to HW filter on device bond10 [ 452.639986][T16699] pim6reg1: entered allmulticast mode [ 452.828942][T16717] pimreg: tun_chr_ioctl cmd 1074812117 [ 452.857333][T16717] veth4: entered allmulticast mode [ 452.868707][T16721] netlink: 'syz.3.2810': attribute type 3 has an invalid length. [ 452.884517][T16721] netlink: 'syz.3.2810': attribute type 1 has an invalid length. [ 453.073077][T16726] netlink: 'syz.4.2809': attribute type 29 has an invalid length. [ 453.306880][T16737] __nla_validate_parse: 22 callbacks suppressed [ 453.306901][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 453.331034][T16735] team0: Device veth5 is up. Set it down before adding it as a team port [ 453.340061][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2813'. [ 453.370124][T16734] team0: Device veth5 is up. Set it down before adding it as a team port [ 453.402970][T16739] syzkaller0: entered promiscuous mode [ 453.408684][T16739] syzkaller0: entered allmulticast mode [ 453.488067][T16741] syzkaller0: entered promiscuous mode [ 453.494295][T16741] syzkaller0: entered allmulticast mode [ 453.533680][T16741] tipc: Enabled bearer , priority 0 [ 453.554896][T16741] tipc: Resetting bearer [ 453.566893][T16746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2817'. [ 453.574872][T16741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.592596][T16740] tipc: Resetting bearer [ 453.593290][T16746] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2817'. [ 453.615046][T16746] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2817'. [ 453.635215][T16740] tipc: Disabling bearer [ 453.844783][T16757] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 453.855999][T16757] netlink: 'syz.1.2820': attribute type 4 has an invalid length. [ 453.863905][T16757] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2820'. [ 453.907378][T16764] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 453.923318][T16763] ip6gre4: entered promiscuous mode [ 453.928763][T16764] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2820'. [ 453.938064][T16763] ip6gre4: entered allmulticast mode [ 453.948039][T15528] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 453.948187][T16763] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 453.966414][T15528] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 453.975958][ T6233] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 454.003166][T16767] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2822'. [ 454.078128][ T25] block nbd0: Possible stuck request ffff888025d80000: control (read@1024,1024B). Runtime 180 seconds [ 454.089583][ T25] block nbd0: Possible stuck request ffff888025d80200: control (read@2048,1024B). Runtime 180 seconds [ 454.101226][ T25] block nbd0: Possible stuck request ffff888025d80400: control (read@3072,1024B). Runtime 180 seconds [ 454.113046][ T25] block nbd0: Possible stuck request ffff888025d78000: control (read@0,1024B). Runtime 180 seconds [ 454.367961][T16784] tipc: Enabling of bearer rejected, already enabled [ 454.412443][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 454.430307][T16786] tipc: Enabled bearer , priority 0 [ 454.448035][T16786] syzkaller0: entered promiscuous mode [ 454.455903][T16786] syzkaller0: entered allmulticast mode [ 454.465952][ T5884] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 454.478749][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 454.594255][T16790] tipc: Resetting bearer [ 454.740325][T16785] tipc: Resetting bearer [ 454.762954][T16785] tipc: Disabling bearer [ 454.913261][T16804] validate_nla: 1 callbacks suppressed [ 454.913280][T16804] netlink: 'syz.3.2833': attribute type 1 has an invalid length. [ 455.036105][ T5884] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 455.499572][T16834] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 455.540270][T16838] netlink: 'syz.1.2843': attribute type 10 has an invalid length. [ 455.563873][T16838] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 455.617099][T16838] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 455.667674][T16838] team0: Failed to send options change via netlink (err -105) [ 455.675356][T16838] team0: Port device netdevsim0 added [ 455.767361][T16840] tipc: Enabled bearer , priority 0 [ 455.798566][T16840] syzkaller0: entered promiscuous mode [ 455.804086][T16840] syzkaller0: entered allmulticast mode [ 455.847470][T15528] wlan0: Trigger new scan to find an IBSS to join [ 455.889012][T16840] tipc: Resetting bearer [ 455.905023][T16839] tipc: Resetting bearer [ 455.966236][T16839] tipc: Disabling bearer [ 456.082517][T16849] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 456.109306][T16855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.238444][ T5187] udevd[5187]: worker [5814] /devices/virtual/block/nbd0 timeout; kill it [ 456.277479][ T5187] udevd[5187]: seq 21291 '/devices/virtual/block/nbd0' killed [ 456.679285][T16884] syzkaller0: entered promiscuous mode [ 456.684961][T16884] syzkaller0: entered allmulticast mode [ 458.240885][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 458.798205][T15526] wlan0: Trigger new scan to find an IBSS to join [ 458.973912][T16908] lo speed is unknown, defaulting to 1000 [ 459.081839][T16922] __nla_validate_parse: 4 callbacks suppressed [ 459.081857][T16922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2868'. [ 459.087477][T16918] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2867'. [ 459.318113][T16927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.327636][T16927] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.337648][T16927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.426152][T16937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2874'. [ 459.715318][T16950] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2876'. [ 459.737623][T16950] IPv6: sit3: Disabled Multicast RS [ 459.754178][T16950] sit3: entered allmulticast mode [ 459.776213][T16951] batadv_slave_1: entered promiscuous mode [ 460.050307][T16931] pim6reg1: entered allmulticast mode [ 460.200482][T16975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2883'. [ 460.316969][T15528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.337216][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 460.415244][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 460.479656][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 460.527980][T16948] batadv_slave_1: left promiscuous mode [ 460.679723][T16986] lo speed is unknown, defaulting to 1000 [ 460.934377][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 461.030054][T17016] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2894'. [ 461.656331][T15533] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 461.687331][T15533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.836506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.846461][T15523] wlan0: Trigger new scan to find an IBSS to join [ 461.883644][T17051] netlink: 'syz.3.2900': attribute type 1 has an invalid length. [ 461.918437][T17054] netlink: 'syz.0.2901': attribute type 13 has an invalid length. [ 462.120559][T17061] netlink: 'syz.2.2903': attribute type 31 has an invalid length. [ 462.344728][T17070] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 462.529652][T17083] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.797841][T15523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.859145][T17107] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 462.906688][T17107] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 462.975252][T17109] tipc: Enabled bearer , priority 0 [ 462.990199][T17107] sctp: [Deprecated]: syz.4.2917 (pid 17107) Use of int in max_burst socket option. [ 462.990199][T17107] Use struct sctp_assoc_value instead [ 463.055555][T17109] tipc: Disabling bearer [ 463.150281][T17128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.173779][T17128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.203460][T17132] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 463.758952][T17157] bond0: (slave 30): Releasing backup interface [ 463.788116][T17157] bond0: (slave bond_slave_1): Releasing backup interface [ 463.815145][T17157] team0: Port device team_slave_0 removed [ 463.842278][T17157] team0: Port device team_slave_1 removed [ 463.859845][T17157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.087174][T17174] syzkaller0: entered promiscuous mode [ 464.119780][T17174] syzkaller0: entered allmulticast mode [ 464.497056][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.511161][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.520361][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.533725][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.559002][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.763833][T17186] lo speed is unknown, defaulting to 1000 [ 464.956062][ C0] net_ratelimit: 15 callbacks suppressed [ 464.956081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.016266][T15523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.253462][T17218] lo speed is unknown, defaulting to 1000 [ 465.300272][T17226] xt_hashlimit: size too large, truncated to 1048576 [ 465.326639][T17226] xt_hashlimit: max too large, truncated to 1048576 [ 465.363450][T17186] chnl_net:caif_netlink_parms(): no params data found [ 465.761058][T17241] netlink: 'syz.2.2945': attribute type 23 has an invalid length. [ 465.896834][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.903993][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.936333][T17186] bridge_slave_0: entered allmulticast mode [ 465.988981][T17186] bridge_slave_0: entered promiscuous mode [ 466.008543][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.036244][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.043966][T17186] bridge_slave_1: entered allmulticast mode [ 466.069465][T17186] bridge_slave_1: entered promiscuous mode [ 466.139934][T17253] __nla_validate_parse: 16 callbacks suppressed [ 466.139956][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2947'. [ 466.169555][T17256] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2948'. [ 466.174278][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.216285][T15528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.256020][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.354510][T17186] team0: Port device team_slave_0 added [ 466.388968][T17186] team0: Port device team_slave_1 added [ 466.469837][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.495841][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.545984][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.578161][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.585611][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.612957][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.636539][ T5831] Bluetooth: hci5: command tx timeout [ 466.749074][T15526] [ 466.751439][T15526] ============================================ [ 466.757578][T15526] WARNING: possible recursive locking detected [ 466.763725][T15526] syzkaller #0 Not tainted [ 466.768125][T15526] -------------------------------------------- [ 466.774442][T15526] kworker/u8:44/15526 is trying to acquire lock: [ 466.780755][T15526] ffff88802765b158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 466.790714][T15526] [ 466.790714][T15526] but task is already holding lock: [ 466.798151][T15526] ffff88807eb02d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 466.807972][T15526] [ 466.807972][T15526] other info that might help us debug this: [ 466.816013][T15526] Possible unsafe locking scenario: [ 466.816013][T15526] [ 466.823439][T15526] CPU0 [ 466.826701][T15526] ---- [ 466.829967][T15526] lock(&qdisc_xmit_lock_key#4); [ 466.834979][T15526] lock(&qdisc_xmit_lock_key#4); [ 466.839990][T15526] [ 466.839990][T15526] *** DEADLOCK *** [ 466.839990][T15526] [ 466.848117][T15526] May be due to missing lock nesting notation [ 466.848117][T15526] [ 466.856414][T15526] 11 locks held by kworker/u8:44/15526: [ 466.861944][T15526] #0: ffff88807fae4948 ((wq_completion)bond2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 466.872986][T15526] #1: ffffc90003047bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 466.885843][T15526] #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 466.895400][T15526] #3: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 466.905387][T15526] #4: ffff888052e99228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 466.918073][T15526] #5: ffff88807eb02d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 466.928322][T15526] #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 466.937184][T15526] #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 466.946916][T15526] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 466.955808][T15526] #9: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 466.965721][T15526] #10: ffff888078672228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 466.978431][T15526] [ 466.978431][T15526] stack backtrace: [ 466.984315][T15526] CPU: 0 UID: 0 PID: 15526 Comm: kworker/u8:44 Not tainted syzkaller #0 PREEMPT(full) [ 466.984331][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 466.984341][T15526] Workqueue: bond2 bond_alb_monitor [ 466.984365][T15526] Call Trace: [ 466.984373][T15526] [ 466.984380][T15526] dump_stack_lvl+0xe8/0x150 [ 466.984398][T15526] print_deadlock_bug+0x279/0x290 [ 466.984412][T15526] __lock_acquire+0x253f/0x2cf0 [ 466.984432][T15526] ? skb_network_protocol+0x23d/0x3f0 [ 466.984450][T15526] ? netif_skb_features+0x9bc/0xe40 [ 466.984469][T15526] ? sch_direct_xmit+0x15f/0x4c0 [ 466.984481][T15526] lock_acquire+0x106/0x330 [ 466.984497][T15526] ? sch_direct_xmit+0x15f/0x4c0 [ 466.984514][T15526] _raw_spin_lock+0x2e/0x40 [ 466.984529][T15526] ? sch_direct_xmit+0x15f/0x4c0 [ 466.984541][T15526] sch_direct_xmit+0x15f/0x4c0 [ 466.984556][T15526] ? __pfx_sch_direct_xmit+0x10/0x10 [ 466.984568][T15526] ? kasan_save_track+0x4f/0x80 [ 466.984580][T15526] ? kmem_cache_alloc_node_noprof+0x410/0x6f0 [ 466.984598][T15526] ? __alloc_skb+0x27d/0x7d0 [ 466.984615][T15526] __dev_queue_xmit+0x1538/0x3850 [ 466.984637][T15526] ? __dev_queue_xmit+0x274/0x3850 [ 466.984655][T15526] ? arpt_do_table+0x261/0x1ec0 [ 466.984672][T15526] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.984692][T15526] ? __pfx_arpt_do_table+0x10/0x10 [ 466.984713][T15526] ? NF_HOOK+0xa2/0x3c0 [ 466.984730][T15526] NF_HOOK+0x33a/0x3c0 [ 466.984747][T15526] ? __pfx_arp_xmit_finish+0x10/0x10 [ 466.984763][T15526] ? NF_HOOK+0xa2/0x3c0 [ 466.984778][T15526] ? __pfx_NF_HOOK+0x10/0x10 [ 466.984793][T15526] ? lock_acquire+0x106/0x330 [ 466.984814][T15526] ? __pfx_arp_xmit_finish+0x10/0x10 [ 466.984831][T15526] ? inet_addr_type_dev_table+0x25/0x190 [ 466.984850][T15526] arp_xmit+0x16c/0x270 [ 466.984866][T15526] ? arp_xmit+0x23/0x270 [ 466.984882][T15526] arp_solicit+0xbe0/0xe40 [ 466.984901][T15526] ? arp_solicit+0x119/0xe40 [ 466.984918][T15526] ? __pfx_arp_solicit+0x10/0x10 [ 466.984936][T15526] ? __neigh_event_send+0xe9d/0x14a0 [ 466.984951][T15526] ? __pfx_arp_solicit+0x10/0x10 [ 466.984967][T15526] __neigh_event_send+0xf05/0x14a0 [ 466.984985][T15526] neigh_resolve_output+0x198/0x750 [ 466.985001][T15526] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 466.985021][T15526] ? ip_finish_output2+0x3c2/0x1070 [ 466.985036][T15526] ip_finish_output2+0xca9/0x1070 [ 466.985053][T15526] ? ip_skb_dst_mtu+0x109/0xa50 [ 466.985070][T15526] ? ip_finish_output+0x33a/0x3f0 [ 466.985087][T15526] ip_output+0x29f/0x450 [ 466.985102][T15526] ? ip_output+0x5b/0x450 [ 466.985117][T15526] iptunnel_xmit+0x59f/0xa00 [ 466.985134][T15526] ip_tunnel_xmit+0x193a/0x1f20 [ 466.985158][T15526] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 466.985176][T15526] ? __pfx_gre_build_header+0x10/0x10 [ 466.985193][T15526] ? kmem_cache_free+0x195/0x610 [ 466.985205][T15526] ? pskb_expand_head+0x4bb/0x1320 [ 466.985224][T15526] __gre_xmit+0x19e/0x240 [ 466.985239][T15526] ? __pfx___gre_xmit+0x10/0x10 [ 466.985257][T15526] erspan_xmit+0xa81/0x1670 [ 466.985272][T15526] ? __lock_acquire+0x6b5/0x2cf0 [ 466.985293][T15526] ? __pfx_erspan_xmit+0x10/0x10 [ 466.985312][T15526] dev_hard_start_xmit+0x2cd/0x7f0 [ 466.985334][T15526] sch_direct_xmit+0x251/0x4c0 [ 466.985349][T15526] ? __pfx_sch_direct_xmit+0x10/0x10 [ 466.985360][T15526] ? alb_send_lp_vid+0x122/0x550 [ 466.985376][T15526] ? process_scheduled_works+0x9f0/0x17a0 [ 466.985392][T15526] ? worker_thread+0xda6/0x1360 [ 466.985412][T15526] __dev_queue_xmit+0x1538/0x3850 [ 466.985432][T15526] ? __dev_queue_xmit+0x274/0x3850 [ 466.985453][T15526] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.985472][T15526] ? rcu_is_watching+0x15/0xb0 [ 466.985485][T15526] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 466.985501][T15526] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 466.985524][T15526] ? alb_send_lp_vid+0x14e/0x550 [ 466.985541][T15526] alb_send_lp_vid+0x348/0x550 [ 466.985559][T15526] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 466.985580][T15526] alb_send_learning_packets+0x12c/0x300 [ 466.985597][T15526] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 466.985613][T15526] ? bond_alb_monitor+0xf8/0x17e0 [ 466.985630][T15526] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 466.985647][T15526] bond_alb_monitor+0x3d5/0x17e0 [ 466.985664][T15526] ? bond_alb_monitor+0xf8/0x17e0 [ 466.985680][T15526] ? __pfx_bond_alb_monitor+0x10/0x10 [ 466.985696][T15526] ? process_scheduled_works+0xa0f/0x17a0 [ 466.985713][T15526] ? process_scheduled_works+0xa0f/0x17a0 [ 466.985745][T15526] process_scheduled_works+0xaec/0x17a0 [ 466.985775][T15526] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.985792][T15526] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.985807][T15526] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.985824][T15526] ? schedule+0x90/0x360 [ 466.985841][T15526] worker_thread+0xda6/0x1360 [ 466.985867][T15526] kthread+0x726/0x8b0 [ 466.985882][T15526] ? __pfx_worker_thread+0x10/0x10 [ 466.985899][T15526] ? __pfx_kthread+0x10/0x10 [ 466.985913][T15526] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.985927][T15526] ? __pfx_kthread+0x10/0x10 [ 466.985940][T15526] ret_from_fork+0x51b/0xa40 [ 466.985954][T15526] ? __pfx_ret_from_fork+0x10/0x10 [ 466.985971][T15526] ? __switch_to+0xc82/0x1410 [ 466.985989][T15526] ? __pfx_kthread+0x10/0x10 [ 466.986002][T15526] ret_from_fork_asm+0x1a/0x30 [ 466.986025][T15526] [ 467.492204][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.962847][T15526] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.971728][T15526] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.175961][T15526] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.184345][T15526] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.212293][T15526] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.221033][T15526] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.260480][T15526] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.271460][T15526] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.701621][T15530] veth0_to_bond: left allmulticast mode [ 468.729983][T15530] veth0_to_bond: left promiscuous mode [ 468.735674][T15530] bridge9: port 2(veth0_to_bond) entered disabled state [ 468.757229][T15530] veth3: left allmulticast mode [ 468.762108][T15530] veth3: left promiscuous mode [ 468.786371][T15530] bridge9: port 1(veth3) entered disabled state [ 468.996560][T15530] bond2 (unregistering): (slave erspan1): Releasing active interface [ 469.004671][T15530] erspan1 (unregistering): left promiscuous mode [ 469.059879][T15530] bond10 (unregistering): (slave gretap2): Releasing backup interface [ 469.098277][T15530] bond9 (unregistering): (slave geneve5): Releasing active interface [ 469.619537][T15530] bond0 (unregistering): left promiscuous mode [ 469.626406][T15530] dummy0: left promiscuous mode [ 469.632423][T15530] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 469.641555][T15530] bond0 (unregistering): Released all slaves [ 469.650597][T15530] bond1 (unregistering): Released all slaves [ 469.662486][T15530] bond2 (unregistering): Released all slaves [ 469.673488][T15530] bond3 (unregistering): Released all slaves [ 469.685104][T15530] bond4 (unregistering): Released all slaves [ 469.699752][T15530] bond5 (unregistering): Released all slaves [ 469.718317][T15530] bond6 (unregistering): Released all slaves [ 469.735837][T15530] bond7 (unregistering): Released all slaves [ 469.745275][T15530] bond8 (unregistering): Released all slaves [ 469.759089][T15530] bond9 (unregistering): Released all slaves [ 469.773874][T15530] bond10 (unregistering): (slave bond11): Releasing backup interface [ 469.783330][T15530] bond10 (unregistering): Released all slaves [ 469.796503][T15530] bond11 (unregistering): Released all slaves [ 469.894765][T15530] hmac(sha224): left promiscuous mode [ 469.967302][T15530] tipc: Left network mode [ 469.982262][T15530] IPVS: stopping backup sync thread 6290 ... [ 470.176619][T15530] batman_adv: batadv0: Removing interface: wlan0 [ 470.286511][T15530] hsr_slave_0: left promiscuous mode [ 470.784536][T15530] IPVS: stop unused estimator thread 0... [ 470.895285][T15530] bridge_slave_1: left allmulticast mode [ 470.906120][T15530] bridge_slave_1: left promiscuous mode [ 470.911828][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.933502][T15530] bridge_slave_0: left allmulticast mode [ 470.943156][T15530] bridge_slave_0: left promiscuous mode [ 470.949193][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.037273][T15530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.051873][T15530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.063259][T15530] bond0 (unregistering): Released all slaves [ 471.167878][T15530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.179039][T15530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.200147][T15530] team0 (unregistering): Port device team_slave_1 removed [ 471.212344][T15530] team0 (unregistering): Port device team_slave_0 removed