last executing test programs: 8.382414029s ago: executing program 1 (id=9849): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r1, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000240)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 5.183551211s ago: executing program 1 (id=9852): syz_emit_ethernet(0x2ac, &(0x7f00000002c0)={@local, @random="d8b98cc8e184", @void, {@ipv6={0x86dd, @gre_packet={0xe, 0x6, "1d1bc6", 0x276, 0x2f, 0x0, @mcast1, @remote, {[@fragment={0x56, 0x0, 0x5, 0x0, 0x0, 0x5, 0x64}, @fragment={0x84, 0x0, 0x9, 0x0, 0x0, 0x16, 0x64}, @hopopts={0x2c}, @hopopts={0x3a, 0x9, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @pad1, @calipso={0x7, 0x8, {0x1, 0x0, 0x41, 0x8}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x6}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x67, 0x1, [0x8], "e818d1796f1dd1f3a7336a5019313c970540977d95275a86eadfa193c6a9b906392db610794f87d3fb2dc4a01c4b2b7215970d3fa9a698d241338ca73a7879f1f2ab036c8ad4a4b1666a29dda498e8f98cb959d63810838ab6c2700ef505ddf5cf6b0485aa4f16"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x4, 0x1, 0x4], "166c0cce2cb67bbd734df143a2dbcd0dd24190b9cff36a0360224ef5ea8e14a1c329b31fedfd24c1d967f64c7d51e14ba4d90c609143dc5b759b2a0d03bb7e8ff3ceef013bc7d622233cd9476d14c675d7a94ff5d971b4cbd3bcf6bf17d4f4bfe52b59234fc0ef24c0c749d8808a890a58616ba48495ef053663fad1923dacf9b8d762bcf860293872641a155ff706003627d03bb2323d0493ffc8779c7b36641e106dbacf029ad3fb0d286f1dad25c5026b404802b9cf5708bc46b459457b1e25aa32be60635ea3af193affa1d86272f18f0df1e1a2cc6d5154"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "c3000c78df99976eaad1182625c72fee9c6d1999c90ebbcb36911383cf2be1f7a340fe84920b8a27946ee0400b525d6ea6449b911078d00388c4be26b65fc54230032cb7424c39f39906b053be0502404d2b96181184adb23d0ffe8518f0108406493b8588"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x2, 0x0, 0x2, 0x7, 0x42}, 0x1, {0xec338cf}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x8, 0x3, 0x0, 0x0, 0x1, 0x20}, 0x2, {0xf6, 0x9, 0x1, 0x9, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0xd, "d4714e32e0cbce83763d50934bdac75b0fc71c44"}}}}}}}, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r2, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x33, 0x4) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) 3.334674808s ago: executing program 1 (id=9856): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 3.310702649s ago: executing program 3 (id=9857): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)}, 0x32120) 3.1993254s ago: executing program 0 (id=9860): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async, rerun: 32) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (rerun: 32) recvmmsg(r1, &(0x7f0000006500)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030028bd7000fcdb788b90b9a56ca9f768d58e50708b6200020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.149018227s ago: executing program 1 (id=9861): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 3.143048825s ago: executing program 0 (id=9862): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) 3.142671684s ago: executing program 3 (id=9863): r0 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.136226114s ago: executing program 2 (id=9864): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="183000000400000000000000000000001c1590"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async, rerun: 64) r1 = socket(0x6, 0x803, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000003180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2cf70000", @ANYRES16=r4, @ANYBLOB="010027bd700000000000010000000400078008000100000000000c000200ff7f000000000000"], 0x2c}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', r2, 0x7, 0x7800, 0x2, 0x2, {{0x1e, 0x4, 0x3, 0x13, 0xfe1a, 0x68, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x32}, {[@cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x5, 0xa, "260edc031e564303"}, {0x5, 0x8, "47b05e2b4d3f"}, {0x6, 0x11, "2acf2b72d5b7c90a733fec774c5b8a"}, {0x0, 0x2}, {0x7, 0x6, "8554b9ea"}, {0x0, 0xd, "5b850b657a990bdac88d62"}, {0x5, 0xd, "6549cfbe9815063be04d27"}]}, @timestamp={0x44, 0x18, 0xbc, 0x0, 0x7, [0x4, 0x5ac98184, 0x6, 0x7f, 0x1]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x41014110}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@gettfilter={0x2c, 0x2e, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {0x5, 0xfff2}, {0x3, 0xfff1}}, [{0x8, 0xb, 0xc8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008000}, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x3, &(0x7f0000000080)={@initdev, @dev, @private}, &(0x7f00000000c0)=0xc) (async, rerun: 32) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r11) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.009491003s ago: executing program 0 (id=9866): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 2.941180998s ago: executing program 3 (id=9867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB="1ab5c7460489057d2e9dd509da410f969c5d09d3a89df52abb79676a21a5a8d3aae810a9229e61bdae02a51d047191453733e0711182726b4703cd0c4ad1a36615f29b5738be819093aa75c5741a0eef", @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="65944e2d421b55f1f77f48ff6e28d952b6990b48148704aec93a5cc1e9f9dafcbfbb5d02bcf60e28cb0325cc914d82ed45c42950cf6cb255bd33a639a646ec4da9c3b58f692f54564d9f8fee4b1d5b20905ec18987c28251b8c4c36c0356382de3dcb3b09fbed32f6fb72e0659c046ffd5b9ad880b7f41ca375c04e2c17b8f4493ddcda063359223ca2cd3fae72e95404beed591a5bbdca757344c8c433394bc540b59d98e107f1291d3e2215d18a9ea594678ac724a57aa"], 0x2c}}, 0x880) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x3, 0xc}, 0x2) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1}, 0x33) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0xffffff86, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 2.78891278s ago: executing program 2 (id=9869): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xfffffff7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000c200000000400000f5ffffff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r5], 0x78}}, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x18, 0x7c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@end]}}, {0x4e24, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "94451c2cf9374dca9886ba642872cf58097b8d5512baa55c3734cebe017e0df9", "7549d0a718740648fabb2b8426d1ef10", {"8cb03a80fe16a59f1fcb720520549243", "eda1d4c351d11485aa96d24473a997c5"}}}}}, 0x8a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r8, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000000306010300000000000001010000000000000100070000000900020073797a32000000000900020073797a31000000000b00020073797a310000000005000100070000000900020073797a32000000000900020073797a3a0000000205000100070000007bf6"], 0x68}, 0x1, 0x0, 0x0, 0x60008014}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r13, &(0x7f0000002380), 0x12) ioctl$sock_bt_hci(r12, 0x400448e4, &(0x7f0000000000)) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@gettaction={0xd4, 0x32, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.746199315s ago: executing program 4 (id=9870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.676732619s ago: executing program 0 (id=9871): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) (async) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000e5987f0b8cd73b930000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) 2.563869215s ago: executing program 4 (id=9872): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vlan0\x00', 0x0}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r3], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4050, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.558749619s ago: executing program 0 (id=9873): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x11, 0x28, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="b8f113ddba3c542f9a347f8b2064526627009ac717fdad7c20c14f3032e6a94a804c4b42d5087ff0ba0847f16324b0b1c1a67c34798387eba1ab2476c99bf82b1370aa654622b357507852acded2c754662ae8b2af647aa7f832649357517b4541bb87b2ee94119353f0f1d8007884d444da296d2b339d258b36ba53d74ba491013d213a4cea24ec3423ea02344ff4251981a57b72ee328656e5af730ce6d648e75146cf81c4355d66b5a4106857be89724667", 0xb3}, {&(0x7f0000000180)="1c25d19183233b1e994d290043bcff8c1273cb5228544e676bb669c25ade3e07c1d605be6fa5e1f75c130e5b3b99061e2a96f8eadd59033b89016a50ca971d39db2b94a00996c073251442376a9f1ba989acc07558dfb81a4a25d409f8385065ed50d7a1a6efb5f5c0b888014b523ac0f246818fc02a7921d10439c5d070cc7b368cf8d874da997ff5d9f15db8a759a83abab29fcf7dc74d681b8b72fd7059237853c03e423af55d48b417a6ec0da4d468ba956c5f052960390db8be9d8c03bf91a4", 0xc2}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) sendto$inet(r3, &(0x7f0000000000)="838e27dce11478e1d03c8092dc9216d2bd89a847f3d55cdb92024d90d0286ed3f5ed9ccc73f1ffc12e76d67a086877267e560653117fe17b02b0a2a5f98fddc891ef5e6d80ab40240d86b542a4270794bf4742c1479c3a34be8b0e55dcf1489df183164a0c326ae0a48f0ccde695b32fc5c1e3878c42", 0x76, 0xc1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) 2.484832214s ago: executing program 4 (id=9874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.474884885s ago: executing program 0 (id=9875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xb, 0x6576, 0xba, 0x1, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080c1}, 0x40000880) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) unshare(0x48000000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.395924129s ago: executing program 2 (id=9876): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) close(0x4) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan0\x00', @broadcast}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028014000700fe8000000000000000000000000000bb080001000100000004001a80140014007465616d300000000000000000000000080004"], 0x78}}, 0x0) 2.363058948s ago: executing program 4 (id=9877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {0x0}], 0x2}, 0x40000000) recvmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/244, 0xf4}], 0x1, &(0x7f0000000080)}, 0x10102) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.106437959s ago: executing program 2 (id=9878): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @float={0x7, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x61]}}, &(0x7f0000000080)=""/30, 0x36, 0x1e, 0x0, 0x6}, 0x28) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x8000) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000001840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f00000002c0)={0x1508, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x401}, 0xe1, 0x0, 0x1ff, 0xf, 0xc, 'syz0\x00', "b6276ceed24d7bc997ee750a80f8f4e7dedcdadc4a06cd86f2da9dbcca9753f9", "6712149f1434d293df57554afaf2765c3efc9a83e99d225e96965f05401e9a36", [{0x9e, 0xfff5, {0x1, 0x7f}}, {0xb91c, 0xc, {0x2, 0xb}}, {0x3, 0x8a7d, {0x1, 0x8}}, {0x7fff, 0x5, {0x1, 0x6}}, {0x2, 0x5, {0x3, 0x401}}, {0x6, 0x80, {0x1, 0x6}}, {0x1ff, 0x1ff, {0x3, 0x4}}, {0x6, 0x7, {0x1, 0xe1a}}, {0x101, 0xf, {0x0, 0x7f}}, {0xffff, 0x0, {0x3, 0x268}}, {0x9, 0xd4e, {0x0, 0x1ff}}, {0x6, 0x6, {0x2, 0x6}}, {0x3, 0x9, {0x0, 0x5}}, {0xd, 0x100, {0x2, 0xd}}, {0x9, 0x3, {0x3, 0x9}}, {0x0, 0x8000, {0x3, 0x4d2}}, {0x5, 0x8, {0x3, 0x1f3}}, {0xda, 0x2, {0x1, 0x1ff}}, {0x4755, 0x5, {0x0, 0x9}}, {0x5, 0x1000, {0x2, 0x1}}, {0x0, 0x8, {0x3, 0x9}}, {0x1000, 0x3, {0x3}}, {0x9, 0x6, {0x3}}, {0x4, 0xcf1, {0x0, 0x7f}}, {0x7fff, 0x7, {0x1, 0x3ff}}, {0x25d, 0xe, {0x1, 0x8}}, {0x6, 0xe, {0x3, 0x9}}, {0x5, 0x269, {0x0, 0x10001}}, {0x6, 0x7f, {0x2, 0xa6c4}}, {0x8efa, 0x412, {0x2, 0x7}}, {0x2, 0x9, {0x2, 0x7fff}}, {0xf527, 0x0, {0x2, 0xe000000}}, {0xfffb, 0xffa2, {0x0, 0x6}}, {0x7, 0x0, {0x3, 0xb}}, {0x2, 0xc, {0x3, 0x1}}, {0xaed, 0x10, {0x1, 0x6}}, {0x4, 0x1ff, {0x0, 0x4bc7}}, {0x1, 0x1, {0x2, 0x4}}, {0x1, 0x0, {0x3, 0x3169}}, {0xfa6c, 0x6, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0xd555}, 0x7, 0x7, 0x2, 0x9, 0xb, 'syz0\x00', "d236bdb475cc84d73d5549b05aaa6ea86b0b0fe0795d05608167f904beb56179", "24a383b236884632ae08ca656173aad98c400285210b422cc6181bea4154fef5", [{0x4, 0xe24, {0x0, 0x6}}, {0x5, 0x4, {0x0, 0x5}}, {0x100, 0x2, {0x3, 0x1}}, {0x3, 0x2df2, {0x1, 0x8}}, {0x3ff, 0x3, {0x0, 0x9}}, {0x7f, 0x200, {0x3}}, {0x101, 0x1, {0x2, 0x55a9}}, {0xf0, 0xef1, {0x3, 0x2}}, {0x8001, 0x74, {0x2, 0x8}}, {0x3, 0x8, {0x1, 0x2}}, {0x3ff, 0x8, {0x0, 0x6}}, {0x47, 0xc, {0x1, 0x7}}, {0x9, 0x8001, {0x1, 0x1}}, {0x8, 0x5, {0x1, 0x2}}, {0x9, 0x80, {0x3, 0xb804}}, {0xff81, 0x7, {0x2, 0x2}}, {0x8, 0x8001, {0x3, 0x7}}, {0x0, 0x3, {0x2, 0xfffffffd}}, {0x5, 0x7, {0x0, 0x3}}, {0xfffd, 0x5, {0x3, 0xe}}, {0x1000, 0xffff, {0x0, 0x1}}, {0x9, 0x0, {0x1, 0x3}}, {0x3ff, 0x988, {0x3, 0x8000}}, {0x3, 0x4, {0x1, 0x9}}, {0x5, 0x8, {0x0, 0x5}}, {0x4, 0x7, {0x2, 0x30a4}}, {0x8e, 0x1, {0x3, 0x101}}, {0x800, 0x7f, {0x3, 0x9}}, {0x32, 0x2, {0x2, 0x4}}, {0x401, 0x4, {0x0, 0xedb2}}, {0xfff6, 0x39, {0x1, 0x3}}, {0x3, 0xfffc, {0x0, 0x3}}, {0x1, 0x5, {0x1, 0x6d8}}, {0x9, 0x3, {0x3, 0x5f1}}, {0x594e, 0x401, {0x3, 0x5}}, {0x7, 0xf801, {0x3, 0xffffffff}}, {0x7f, 0x8, {0x2, 0x2b8}}, {0xfff9, 0x7, {0x1, 0xb}}, {0x5fb, 0x61f, {0x3, 0x2}}, {0x6, 0x4, {0x2}}]}}}, {{0x254, 0x1, {{0x2}, 0xb, 0x5, 0xaf, 0x4000, 0x24, 'syz0\x00', "aca36f3985383b09d0bcb7ee808f2027fec93e372b3a8800f1c31a5cba451e69", "663b975839007e405ad1a9bb51bc287184d4112f784c1021ae5a751e1075a5a9", [{0x9, 0x0, {0x1, 0x5}}, {0x5, 0x6, {0x3, 0x8}}, {0x1, 0x7ff, {0x3}}, {0x8001, 0x3, {0x0, 0x400}}, {0x8ca, 0xfffc, {0x3, 0x7}}, {0x6, 0x0, {0x1, 0x4}}, {0x5, 0x8, {0x2, 0xbfbe}}, {0x11c, 0x1b40, {0x1, 0x7ff}}, {0x9, 0x0, {0x3, 0xc879}}, {0x5, 0x1, {0x3, 0x4}}, {0x677f, 0x4, {0x0, 0x4}}, {0x9e9f, 0x4, {0x2, 0xe}}, {0x8, 0xf2e, {0x0, 0xb}}, {0x9, 0x7fff, {0x1}}, {0x3, 0xfff7, {0x3, 0x8}}, {0x8c4, 0x7, {0x0, 0x7}}, {0x1000, 0xb, {0x2, 0x4}}, {0x0, 0x9, {0x2, 0x4}}, {0x5, 0x1, {0x2, 0x5}}, {0x5, 0x10, {0x1, 0x80000000}}, {0x8001, 0xb5, {0x3, 0x99c}}, {0x1, 0x0, {0x2, 0x6}}, {0x4, 0x8e8, {0x3, 0xfffffff7}}, {0x8a0, 0x1, {0x2, 0xa}}, {0xe2e4, 0x100, {0x2, 0x3}}, {0x8, 0x1, {0x0, 0x9}}, {0xfffa, 0x3, {0x2, 0x3}}, {0x81, 0x2, {0x1, 0x5}}, {0x10, 0xff80, {0x3, 0x5}}, {0x1000, 0x1, {0x3, 0x8}}, {0xff, 0x1, {0x0, 0xfffff217}}, {0x5, 0x8, {0x2, 0x45}}, {0x8, 0x9, {0x2, 0x6}}, {0x1, 0x6, {0x2, 0xa05}}, {0x7, 0x81, {0x1, 0x4}}, {0x2, 0x81, {0x1, 0x3}}, {0x0, 0x414, {0x2, 0xc}}, {0x5, 0x8001, {0x2, 0x5}}, {0x2, 0x30, {0x2, 0x7f}}, {0xff, 0x1, {0x1, 0x400}}]}}}, {{0x254, 0x1, {{0x2e38a29b148f986f, 0x80000000}, 0x8, 0x0, 0x3, 0x5, 0x17, 'syz1\x00', "9b7807f488bf3fae66df39d58a4a90a0ebcfbea8194430c9f3341a352557f2cc", "f8e2f19bad8c49d8212f59c046143c93b8840efc0d52c8caad5875aa35ecf06e", [{0x2692, 0x6, {0x2}}, {0x3, 0x8, {0x3}}, {0x1, 0x3, {0x2, 0x3}}, {0x3, 0x3, {0x2, 0x7ff}}, {0x5, 0x7, {0x2, 0x6}}, {0x1, 0x4, {0x3, 0x5481}}, {0x8, 0x7, {0x2, 0x3}}, {0x8, 0x1, {0x0, 0x3}}, {0x8ad6, 0x9, {0x3, 0x400}}, {0x7, 0x6, {0x2, 0xd5}}, {0xc5de, 0x90, {0x1, 0x84}}, {0x9, 0x1000, {0x1, 0x81}}, {0x6, 0x401, {0x2, 0x8}}, {0x1197, 0x57ba, {0x3, 0x269}}, {0x2e4e, 0x7, {0x0, 0x1}}, {0x2, 0x5, {0x1, 0x6}}, {0x400, 0x0, {0x1, 0x80000000}}, {0xf, 0xff, {0x3, 0xfffffff8}}, {0xffff, 0x1ff, {0x3, 0x5}}, {0xfffe, 0x500, {0x1, 0x4}}, {0x2, 0x7, {0x3, 0x9}}, {0x4, 0x2, {0x3, 0x400}}, {0x5, 0xfff7, {0x2, 0x4}}, {0xbb9, 0x2, {0x2, 0x8}}, {0x8001, 0x3ff, {0x1, 0x7}}, {0x9, 0x5, {0x0, 0x6}}, {0xf000, 0x1, {0x1, 0x1ff}}, {0x5, 0x3, {0x2, 0x8}}, {0xe, 0x6, {0x3, 0x1}}, {0x7ff, 0x3, {0x1, 0xbb}}, {0x1, 0x2, {0x1, 0x6}}, {0x8, 0x101, {0x1, 0x9}}, {0x2f, 0x300, {0x0, 0x9}}, {0x7ff, 0x4, {0x3, 0x6}}, {0xa18e, 0x1, {0x0, 0xf82}}, {0x1, 0xdf2, {0x1, 0x9}}, {0x8, 0xfffb, {0x2, 0x3}}, {0x8, 0x4, {0x2, 0xffffffff}}, {0x7eaf, 0xd, {0x3, 0x3d}}, {0xfff, 0x280, {0x1, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x0, 0x43, 0x2, 0x7, 0x10, 'syz0\x00', "ce647a67caa704e1efd52b462ca40ff4c644633756b6699b954e3c96167a30bf", "772e629d330f1ba76f0982e08ff9a5e8a662352a44ca213f446624188d119313", [{0x7, 0x0, {0x0, 0x4}}, {0x6, 0xe, {0x3, 0x901}}, {0x5, 0xb637, {0x1}}, {0x7fff, 0xffff, {0x3, 0x3}}, {0x5, 0x7f, {0x2, 0xb2}}, {0x7f, 0x0, {0x1, 0x1}}, {0x3, 0x200, {0x0, 0x8001}}, {0x8, 0xd384}, {0xdefc, 0x4, {0xffd4d330e2c16668, 0x1}}, {0x4, 0x8, {0x1, 0x6cc}}, {0x2, 0x1, {0x1, 0x7}}, {0x81, 0x3, {0x1, 0x10}}, {0x486, 0x3, {0x3, 0x6}}, {0x1, 0x7, {0x3, 0xfffffffd}}, {0x1, 0x2, {0x1, 0x4e5}}, {0x9, 0x6c, {0x1, 0x80000001}}, {0x9, 0xc8}, {0x100, 0xf, {0x0, 0x7}}, {0x200, 0x8001, {0x1, 0xfffffff8}}, {0x4, 0x5, {0x0, 0xe0}}, {0x6, 0x9, {0x1, 0x3}}, {0x0, 0x5, {0x0, 0x4c}}, {0x800, 0x10, {0x0, 0xfffffff1}}, {0x2, 0x8, {0x3, 0xff}}, {0x1ead, 0x5, {0x0, 0x9}}, {0x0, 0x40, {0x1, 0x7}}, {0x7, 0x81, {0x2, 0xf}}, {0x7, 0x7, {0x0, 0x9}}, {0x101, 0x2, {0x3, 0x3ff}}, {0x80, 0x0, {0x0, 0x711d}}, {0x200, 0xe, {0x1, 0x7}}, {0x0, 0x6c, {0x3, 0x9}}, {0x3, 0x86, {0x0, 0x66}}, {0x0, 0x8001, {0x1, 0x80000001}}, {0xcafb, 0x0, {0x3, 0xc}}, {0x5, 0x8, {0x1, 0x6}}, {0xffff, 0x6, {0x3, 0x8}}, {0x6, 0x8, {0x0, 0x7fffffff}}, {0x2, 0x3, {0x1, 0x3}}, {0x6, 0x9, {0x1, 0xa}}]}}}, {{0x254, 0x1, {{0x3}, 0x2, 0x4, 0x2c, 0x1, 0x21, 'syz0\x00', "bb2022b3c257ea3d3ca5ea8e4738d6454817ba9506bf99a6291c6d54f31a8a24", "a9a80f8b7513fdc1f7c02bdf425708f7297a8627f1dcd198852739dcad53eed1", [{0xd4, 0x2, {0x3, 0xb}}, {0x2, 0x4, {0x2, 0xb}}, {0x3, 0xdc8, {0x3, 0xd}}, {0x9, 0x2, {0x3, 0xe8}}, {0x79b, 0xfff1, {0x1, 0x5d28}}, {0x1, 0x3c4a, {0x0, 0x2}}, {0x9, 0x0, {0x1, 0x9}}, {0x7, 0x8, {0x2, 0x7000000}}, {0x8, 0x3, {0x3, 0x1}}, {0x7, 0x8000, {0x3, 0x2800}}, {0x1, 0x7, {0x0, 0x1}}, {0x1, 0x7, {0x0, 0x3}}, {0x3, 0x44cb, {0x1, 0x8000}}, {0x0, 0x2, {0x1, 0x2e02c3f5}}, {0x6, 0x2, {0x0, 0x3}}, {0x7aad, 0x6, {0x3, 0x1}}, {0x8, 0x2, {0x3}}, {0x9, 0xfff8, {0x1, 0x3}}, {0x4, 0x200, {0x1, 0x40}}, {0x8000, 0x4, {0x2, 0x1}}, {0xffff, 0x8, {0x3, 0x6}}, {0x0, 0x8, {0x0, 0xffff}}, {0x5, 0x9dc, {0x2, 0x9}}, {0x2, 0x617, {0x0, 0x21a}}, {0xdb4, 0x8, {0x3, 0x851a}}, {0x9, 0xfff, {0x2, 0x4}}, {0xfffe, 0x8, {0x2, 0x5}}, {0x2, 0x7ff, {0x1, 0x5b}}, {0x4, 0x1}, {0x1, 0x400, {0x3, 0x2}}, {0x401, 0x3, {0x3, 0x1}}, {0x1, 0x8001, {0x0, 0x7}}, {0x4, 0x6d1, {0x1, 0x6}}, {0x3, 0x8, {0x2, 0x8000}}, {0x80, 0x3ff, {0x1, 0x8}}, {0x8, 0x5, {0x2}}, {0x6, 0x5, {0x3, 0xf}}, {0xe, 0x19ed, {0x2, 0x2ecd}}, {0x3, 0x7, {0x2, 0x25e}}, {0x2, 0xc, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0xffffd8ed}, 0x2, 0x50, 0x5, 0x7fff, 0x19, 'syz0\x00', "0314479d95a422b8d3bec746544ea3ccb2591db7006d301bef35d70b1158e0fe", "2580851b8ad3a211e845f8d03d578f935f84817d2fe0359b18a6a882988cf9ab", [{0x1, 0x4, {0x2, 0x2}}, {0x9, 0xf, {0x1, 0xa}}, {0x2, 0x8, {0x1, 0x4173}}, {0x3, 0x8001, {0x3, 0x6}}, {0x1, 0x2, {0x1, 0xc}}, {0x7, 0xfb6a, {0x2, 0x6}}, {0x1, 0x5, {0x1, 0x3}}, {0xe81d, 0x2, {0x2, 0xfffff644}}, {0x4, 0xd, {0x2, 0x82c}}, {0x2, 0x667, {0x0, 0xf0000000}}, {0x2, 0x1ff, {0x0, 0x10001}}, {0xfffe, 0x2, {0x0, 0x9563}}, {0x4242, 0x2, {0x3, 0xffffffff}}, {0x1, 0x9, {0x3, 0x53}}, {0x7ff, 0x40, {0x1, 0x6}}, {0x82f, 0xfeff, {0x1, 0x1}}, {0x7f, 0x124, {0x3, 0xb05}}, {0x100, 0x7, {0x0, 0xe}}, {0x1, 0x72, {0x1, 0x6}}, {0x5, 0x1, {0x1, 0x10000}}, {0x2, 0x8000, {0x3, 0x293}}, {0x7, 0x5, {0x0, 0xffffff2c}}, {0xce74, 0x101, {0x3, 0x6}}, {0x81, 0x9, {0x3, 0xe}}, {0x2, 0xe, {0x3, 0x8}}, {0x0, 0x4, {0x3, 0x2}}, {0x8, 0xffff, {0x0, 0x80}}, {0x6, 0x6, {0x1, 0x3}}, {0x39, 0x0, {0x2, 0xe}}, {0x4, 0xd987, {0x3, 0x9}}, {0x7, 0x0, {0x2, 0x3}}, {0x8, 0x3, {0x1, 0x4}}, {0x7ff, 0x80, {0x0, 0x1000}}, {0xfc, 0x2, {0x3, 0x9}}, {0x9, 0x520, {0x1, 0x8}}, {0x3, 0xa, {0x0, 0x4}}, {0x36, 0x9, {0x3, 0x2}}, {0x3, 0xe, {0x2, 0x4}}, {0x4, 0x800, {0x0, 0x8}}, {0x1, 0x6, {0x2, 0xc}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0xe, 0xf3, 0x1, 0x5, 0x15, 'syz1\x00', "cf75bcba7a604992d2ff86f916f42d8de2ca52f3b558864ecf4b25fa7efda550", "1829fa81a967dad91aaeec5ef242067a92c8c0296e7d82c258af2ae7e65da1ba", [{0x3, 0x5, {0x2, 0x6}}, {0x800, 0xfffc, {0x3, 0xaa4}}, {0x9, 0x3, {0x0, 0x3}}, {0x7, 0xbb4b, {0x3, 0x5}}, {0xff, 0xe, {0x1, 0x1ff00}}, {0x8, 0x6, {0x0, 0x7}}, {0x2, 0x80, {0x3, 0x200}}, {0x0, 0x6, {0x0, 0x6}}, {0x4, 0x4, {0x3, 0x8}}, {0xeb5, 0x0, {0x1, 0x2}}, {0x3, 0x5, {0x3, 0x8}}, {0x30, 0x3, {0x1, 0xe}}, {0x2, 0x7, {0x0, 0x4}}, {0x3000, 0x101, {0x2, 0x10001}}, {0xf0, 0x4, {0x3, 0x10000}}, {0x1, 0x9, {0x0, 0x7ff}}, {0x1ff, 0x184, {0x3, 0x8}}, {0x2, 0x8, {0x2, 0x6}}, {0x9, 0x7, {0x3, 0xfff}}, {0x6, 0xfe7, {0x0, 0x2}}, {0x7, 0x9, {0x1, 0x6}}, {0x2, 0x1, {0x3, 0xeffe}}, {0x1000, 0xd7, {0x1, 0x5}}, {0x703f, 0x7, {0x0, 0x2}}, {0x1, 0x5, {0x0, 0x8}}, {0x845, 0x8, {0x3, 0x150}}, {0xff, 0xbe, {0x2, 0x6}}, {0x7, 0x0, {0x3, 0x1}}, {0x3, 0x3, {0x0, 0x401}}, {0x2, 0x4, {0x0, 0x1}}, {0x7, 0xdf, {0x2, 0x200}}, {0x2, 0x5, {0x2, 0x800}}, {0x8, 0x8, {0x3, 0x80000001}}, {0x1, 0x1, {0x2, 0x1}}, {0x30d, 0x2b1, {0x3, 0x8}}, {0x7f, 0x8, {0x2, 0x695}}, {0x5, 0x5, {0x2, 0x5}}, {0x3, 0x2, {0x1, 0x7}}, {0x9d, 0x9, {0x2, 0x10000}}, {0x1000, 0x1ff, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0x10950ec7819c53bb, 0x5e6f}, 0x9, 0x4, 0x54d5, 0x3, 0x1a, 'syz1\x00', "1dabd449b61f340575a462a836d40d3bb36d108b6fbb0970131051a05cd5c397", "78ff69bd2c49c1685a0ca9e53ad520930c3412a069682968df5760df52975ba2", [{0x2, 0xdf, {0x3, 0x1ff}}, {0x0, 0xb31, {0x3, 0x4}}, {0x0, 0x7, {0x1, 0xec}}, {0x5, 0x0, {0x1, 0x6}}, {0x2c, 0x6, {0x0, 0xfb1}}, {0x3ff, 0x7f, {0x2, 0x7df}}, {0xb, 0xf8b3, {0x1, 0x4}}, {0x2, 0x1, {0x1, 0x9}}, {0x8001, 0x5, {0x1, 0xfff}}, {0x75, 0x7, {0x1, 0x452}}, {0x7616, 0x4, {0x2, 0x2}}, {0x5, 0x4, {0x3, 0x9}}, {0x7, 0x6, {0x3, 0xe3}}, {0x1c67, 0x6, {0x0, 0xf31}}, {0x2, 0x9, {0x0, 0xd}}, {0x7, 0x401, {0x2, 0x2}}, {0x101, 0x8, {0x0, 0xff2}}, {0x4, 0xde98, {0x1, 0x3}}, {0x8, 0x3db, {0x1, 0x7}}, {0x3, 0x5c, {0x4, 0x4}}, {0x0, 0x1, {0x0, 0x2}}, {0x6, 0x1, {0x3, 0x800}}, {0x4, 0x7, {0x2, 0xffffffff}}, {0x8, 0x3, {0x1, 0x9}}, {0x9, 0x95c8, {0x3, 0x8000}}, {0x4, 0xe, {0x3, 0x2}}, {0x3, 0xfff, {0x0, 0xb}}, {0x7, 0x2, {0x3, 0x9}}, {0x5, 0x1, {0x2, 0x55b5}}, {0x0, 0x9be, {0x3, 0x1}}, {0x7f, 0x0, {0x0, 0x4}}, {0x4, 0x4, {0x0, 0x8}}, {0x1, 0x100, {0x3, 0x2000000}}, {0x3, 0x1, {0x0, 0x1ff}}, {0x1, 0x5, {0x3, 0xfffffff7}}, {0x5, 0x1, {0x0, 0x7f}}, {0x1, 0xf, {0x0, 0x4}}, {0x3, 0xf405, {0x0, 0x5}}, {0x7, 0x6cb, {0x2, 0x7}}, {0x1, 0xd, {0x2, 0x3}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x400c0}, 0x240000c0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000018c0), r2) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000001900)={@rand_addr, 0x0}, &(0x7f0000001940)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a00)={r2, 0x58, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001b80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xe4, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xa622, 0xa, 0x8, 0x7}, {0x7, 0x3, 0x2, 0x40}, {0x8, 0x26, 0x3, 0xfffffbff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x40c4) close(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r7 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000001bc0)=r7) socketpair(0x2c, 0x2, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r11, 0x10f, 0x82, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0x6e, 0xd, 0x1, 0x0, "b0c11828f5c3dff3159b0b250e68194de203eb9e6366ec2b64b9f94294b3a1f0e573559d05f103cabc8d832661dc6490ff6881d7abb9aacaa94ff6b0a7a13b3541ab97790909c8946bbedaef01a54f0381aa4958a4a4d0f052d31dbbc5e554070b3d8eed80d334ed9a79"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x499}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe0000}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14}}, 0x13c}, 0x1, 0x0, 0x0, 0x804}, 0x10) recvmsg(r11, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000002000)=""/25, 0x19}, {&(0x7f0000002040)=""/133, 0x85}, {&(0x7f0000002100)=""/214, 0xd6}, {&(0x7f0000002200)=""/26, 0x1a}, {&(0x7f0000002240)=""/127, 0x7f}, {&(0x7f00000022c0)=""/6, 0x6}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/55, 0x37}, {&(0x7f0000003340)=""/18, 0x12}], 0xa}, 0x40010002) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000034c0)={0x0, 0x0}, &(0x7f0000003500)=0xc) r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003d00)={0x0, r0}, 0x8) r14 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003d40)={0x0, r9}, 0x8) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003d80)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xfffffff2, '\x00', r5, r2, 0x4, 0x1, 0x1}, 0x50) r16 = getuid() r17 = getgid() ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000003e00)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003e40)={0x0, 0x0, 0x0}, &(0x7f0000003e80)=0xc) sendmsg$netlink(r2, &(0x7f0000003f80)={&(0x7f0000003480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000003cc0)=[{&(0x7f0000003540)={0x20, 0x33, 0x800, 0x70bd28, 0x25dfdbfd, "", [@nested={0x10, 0xd2, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x6f}]}]}, 0x20}, {&(0x7f0000003580)={0x3d4, 0x33, 0x2, 0x70bd29, 0x25dfdbfd, "", [@generic="bbbb93ebe9388902725c958a961d0ae90fa5a2cc2844a06c721bba02b6fa52c47489671dcbbcecc7edcb23934c535216bd1c1cabd977d36389620f7d3e4bb8c9223da51cc3f2e2e2de32cbc7c6d9e24b9250ff672af5ed1be9a930d72cdfa8801651dd698aaae8777b886e718a5e2ccaba739e726c63cdf960d81f307d45252960ef8d74b30b181d0398146ddb21b35f906d06f89aba19cfb4410bb0bc1a54e88b1acf8b709135b87e9a8d356c6436ff79d00171a2c39ef3a3e25ca184acaf95838308502a2a0c4048f5461251fb1c4824db34be8144614fc1c86ddf4f358c61cc077f9149eb54401e559da39b152b9a5614a706cf343576", @typed={0x12, 0x13b, 0x0, 0x0, @str='bpf_hash_func\x00'}, @nested={0x18, 0xc4, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x9, 0xbf, 0x0, 0x0, @str='team\x00'}]}, @nested={0x16c, 0x141, 0x0, 0x1, [@generic="c1d49801f632cf390636ca9a05f3ea2111b8df2269a87aeb7bff1be10791e858fe21f795fb34c2bab2dde87c93e0f7f81631b7447f15d2e5f0286b74e622fe689aaee27972430c0484dc653258a94a1eb0f769fda5b99c98827e845487a5d21f8871a644dc256ceb9984", @generic="8b4c91e56cc88aacb49c548b3d074e97b072f3c6dc5803b98bcfaa9f2fb6dedfe6dc08287847bd04f1879a86b20813618257018568a861bfd150ca54c532e08c6871c65ca21d92a9d9e5d7af09872cac45975abecaefc3971475832dda96f10ffc5c1469faea844af1e01522a2ba5da7730db4be68b3d09343bb066c6090cb4f8f8dd290e26ef3d35a90fdf2afec59a3248baf8917ecc36302a6f769244339af061962fb075c23300b443e32c1f25d85ef2c7323831474ac00c685d48aa5beae30d589c5703db1", @generic="147e2667509a5f9ce4c004fcdad7cc6924fbae44881fc099d1cc2411f2f7b08ec4cda71a0b4e1c9b2d008f2a34c56c", @nested={0x4, 0x81}, @nested={0x4, 0x128}]}, @generic="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", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x10, 0xd1, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x4}]}, @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x3d4}, {&(0x7f0000003980)={0xdc, 0x3c, 0x8, 0x70bd28, 0x25dfdbfe, "", [@nested={0x99, 0x55, 0x0, 0x1, [@generic="1d424fe19d6ff4231e3672ae665ade7273293cd7ace2f0f2ffadcd0d9918f478ce60d6842f41e1e67b461fc51f756fdaf7cd188b1572ac07623bc80380b512547a4c3207d564a0e0cc042f783bbc12bb777c0fc66c4ddc3d0a12b749d02ad7882bb46e7a0ab31357b002090db2ea786b32279bcf38c7bfc2497916c5e95da3498c40266203", @nested={0x4, 0x7a}, @nested={0x4, 0x5d}, @typed={0x8, 0x120, 0x0, 0x0, @u32=0xfffff800}]}, @typed={0x12, 0x5b, 0x0, 0x0, @str='bpf_hash_func\x00'}, @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x59, 0x0, 0x0, @pid=r7}]}, 0xdc}, {&(0x7f0000003a80)={0x214, 0x3c, 0x200, 0x70bd29, 0x25dfdbfc, "", [@nested={0x1d4, 0x141, 0x0, 0x1, [@nested={0x4, 0x58}, @typed={0x12, 0xb, 0x0, 0x0, @str='bpf_hash_func\x00'}, @typed={0x8, 0xa7, 0x0, 0x0, @fd=r1}, @typed={0x4, 0xea}, @nested={0x4, 0xbc}, @generic="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", @generic="380a8f28dc24089ea5148fcbc43e54ec291a733f77c9d2d49d4c63b0bd2d72e880fc6d835f1308a45855d1da91f65f93fdc6c7e731bac8412142b9dd7e62bd923216b22477e490da96f52644a2ff6b58d23f4a4fb8c037d3f0d80c6e4fd22b5531af7c96d6d5b4f7a7883c54fed5445d72b2a7e7a76abb290b7e67768f5bd56de48878041a839a49c212f8a91e3b244d1b5262e034ec98071970673267abe742", @typed={0x8, 0xe3, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0xf8}]}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x9}, @typed={0x9, 0xd0, 0x0, 0x0, @str='syz0\x00'}, @typed={0x4, 0x11d}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@mcast2}]}, 0x214}], 0x4, &(0x7f0000003ec0)=[@rights={{0x2c, 0x1, 0x1, [r13, r1, r14, r1, r2, r15, r10]}}, @cred={{0x1c, 0x1, 0x2, {r7, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r7, r18, r19}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}], 0xa8, 0x2000c0d2}, 0x4004800) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000003fc0)=0xffff) 2.011826104s ago: executing program 3 (id=9879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa0}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x1, {0x1}, 0xff}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.979947229s ago: executing program 1 (id=9880): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x1, 0x3, 0x3, 0x7, 0xd, 0xc}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)="153cc6b39f9ab8c442aa5a7616b609381b8cea9e67ae4a830f98823389b3503cf461c49d37e3480a74905f0942", 0x2d, 0x4004001, &(0x7f0000000080)={0xa, 0x4e24, 0x6d, @mcast2, 0xffff0001}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9c}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4) recvfrom(r1, &(0x7f00000001c0)=""/31, 0x1f, 0x10000, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @link_local, 'wlan1\x00'}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r4, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000380)={'bridge0\x00', 0x711f}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0)=0x2, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r10, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff907d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1c000}, 0x20005007) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r12, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x24}}, 0x4004) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000900)={'veth1_to_team\x00', {0x2, 0x1, @loopback}}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000980)={'team_slave_1\x00', @random="fa278770ee1d"}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r14, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r15, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x30}}, 0x20048090) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 1.845228834s ago: executing program 3 (id=9881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000ceb180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4080000) 1.139656794s ago: executing program 2 (id=9882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r1) 139.514967ms ago: executing program 4 (id=9883): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket(0x25, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x400000a3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 85.958373ms ago: executing program 3 (id=9884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x810, r1, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000800)=[{0x0, 0x0, {0x0, 0xf0, 0x2}, {}, 0x1}, {0x0, 0x1, {0x0, 0xf0, 0x1}, {0x0, 0xf0}, 0xff, 0xff}], 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000030000000900010073797a300000000014000000020a0103000000000000000004000004140000eb090a0104000000000000000001000000140000001000018000000000000000000000000a"], 0x70}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000440)={r7}, &(0x7f00000001c0)=0x8) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r10, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2ac, 0x15, 0x800, 0x70bd26, 0x25dfdbff, {0x2c, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "2cd091243c453724d697cf2e678cb5ece009cabc4cbbaf26c6017aeb685985afd8f9c9eedaf793c775192ac35fe80b17175154bec9e7703122b6e9af14103ba49395cc0d10e6d08d0270ef4025a690fa4858e80e9539b6b459fd995231c0f97a59e845a30bc6a0cd50a002bbebdcdb67f6898fe4015f36080b46558591c4e871468f6f441420939f40e0d677fdc2d8c5c91df5b144107a7cbbc6139711fd41bc00521a6a835f2c094cee92ba2ba52d778156682cc198b2fc3455be09ecb78bd7645526aa1591"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "c7ebfa5e11b7b641b0ff412747db37cbe55aed7e9cbedfed5d738188b64a11d0af8e7f1bcc59640ba37b9474ec1657c50df9c44bfabbbdc3719289a20d9cc6e1a0111178fccddcc7c5474f6be514dd4fe0aa727d39506911b593a2482d23db3d2c7416057912ed931a302ddfdf109d5e9c76c773c9c6e943d91e7ca1da14e6178acde0b406af823031468033346f2776d6a5c90b21f91c532c95db9ccdb12c297d3c1762ccbe4927103e88de6b651098034b98957500584b8f57a73a80eba83df02ad81c84cd89130102c10d970bb938f7"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "3c1f0349c0b9cbbba968fc0f413b9b93f6022869acb7850aaebbd9acc69c98e1b4ecf86dc4ddd708e8f46115e89f58148725b4e7361c3a803079150ae08a525c76b62a3ca91b8b70912c886b859537446b89b505e4146153d0f26bfa50e2a4882a8c191da5fb9a43f9cb000d09c1cb3989a5021cfbcc084fd2c45ead8bcdd686041c132a7c1c025334d2cd27c1f4d8185b0cbefd6840cc92da253fcad3f2ae22b06d2ec4325c1bb97e8dafce83a332d7b40593e23a3dcbcc0a309d940d8497d3bf75686a57cb049e8f038b91a914ecb5690edbbba29e479c948302ecf05b96ac241ea405fdf8962970800e63afe6"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e23, @remote}}, 0xb, 0x0, 0x1ff, 0xffffffff, 0x20, 0x8, 0x7}, 0x9c) 31.320732ms ago: executing program 1 (id=9885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000000)={0x7, 'bond_slave_1\x00', {0x81}, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x400, 0x0, 0x3, {0x0, 0x0, 0x0, r4, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x21}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000002380)=0x18) 30.377382ms ago: executing program 2 (id=9886): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x1, @bcast, @bpq0, 0x8, 'syz0\x00', @bcast, 0x7, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0400"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@deltclass={0x3c, 0x29, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xffe0}, {0xd, 0xd}, {0xf, 0xb}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_prio={0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000008c0)="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") write$cgroup_subtree(r4, &(0x7f0000003100)=ANY=[], 0x10448) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$mptcp(0xfffffffffffffffd, r14) sendmsg$NFNL_MSG_CTHELPER_DEL(r14, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="b818371af4f3d9cd28e660b33f4139000000020903000000000000000000020000000c00048008000140000000090900010073797a300000000008000340000000070c0004800800014000007fff0800034000000006440002000c000280050001003a00000006000340000200000c000280050001003a0000000c000280050001003a0014000c000280050001002f00000006000340000100000900010073797a300000000008000340000000081900010073b62c75ca317715cc52f28481ea719f29476aad31459d4d370fb17ad0922e271e7d78f0f58cbb5feb15e83387d1ea33ad6e3fdccee0144aec7a82c3"], 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000000000000002000008001e00000000000c00090000000000", @ANYRES32=0x0, @ANYBLOB="f849918051e9dbcc3454b312f2c56b57ec2b3b839c22de2723cbbcabb09e6a6c284a44f215a13d2c01f72636f027a3f01be93802e55e3f9bbd59e54ef872b5e15c48ef3c472e66613dec8ba5598bea0858d4b2ce32bf7e4ce64f5c865f8cb142deecad2e930add252dda9ce2db59894c2abfc99d3475296b"], 0x30}}, 0x0) setsockopt$bt_hci_HCI_FILTER(r14, 0x0, 0x2, &(0x7f0000000300)={0x6, [0x1, 0xc], 0x65cf}, 0x10) 0s ago: executing program 4 (id=9887): syz_emit_ethernet(0x42e, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x3f8, 0x3a, 0xff, @remote, @mcast2, {[@srh={0xc, 0xc, 0x4, 0x6, 0x10, 0x48, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x41}]}, @dstopts={0x0, 0xd, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x7fff, [0x8, 0x9, 0x627]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x1ff, [0x7ff, 0xa, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x8]}}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): unknown, defaulting to 1000 [ 712.088682][ T3045] erspan0: entered promiscuous mode [ 712.113650][ T3045] erspan0: entered allmulticast mode [ 712.132791][ T3043] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8177'. [ 712.154785][ T3043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.168860][ T3043] bond_slave_0: left allmulticast mode [ 712.189770][ T3043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.199605][ T3043] bond_slave_1: left allmulticast mode [ 712.212005][ T3043] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 712.223595][ T3043] bridge0: left allmulticast mode [ 712.232469][ T3043] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 712.244839][ T3043] bridge_slave_1: left allmulticast mode [ 712.254581][ T3043] bond0 (unregistering): Released all slaves [ 712.287870][ T3049] netlink: 'syz.1.8177': attribute type 12 has an invalid length. [ 712.306544][T16771] syz1: Port: 1 Link DOWN [ 712.736255][ T3091] veth1_to_bond: entered allmulticast mode [ 712.833597][ T3091] veth1_to_bond: left allmulticast mode [ 712.984257][ T3101] wg1 speed is unknown, defaulting to 1000 [ 713.046176][ T3110] netlink: 'syz.2.8193': attribute type 1 has an invalid length. [ 713.469115][ T3135] xt_addrtype: ipv6 does not support BROADCAST matching [ 713.584887][ T3141] gtp0: entered promiscuous mode [ 713.593763][ T3144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8203'. [ 713.594307][ T3141] gtp0: entered allmulticast mode [ 713.611129][ T3145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8204'. [ 713.621199][ T3145] openvswitch: netlink: Key type 1564 is out of range max 32 [ 713.639209][ T3144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8203'. [ 713.731586][ T3147] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 713.776677][ T3147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.261699][ T3186] netlink: 'syz.1.8215': attribute type 12 has an invalid length. [ 714.271550][ T3188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 715.042653][ T3229] syzkaller0: entered promiscuous mode [ 715.048538][ T3229] syzkaller0: entered allmulticast mode [ 715.740414][ T3274] macvtap1: entered promiscuous mode [ 715.746116][ T3274] macvtap1: entered allmulticast mode [ 715.752213][ T3274] veth1_vlan: entered allmulticast mode [ 715.848789][ T3277] openvswitch: netlink: IP tunnel dst address not specified [ 716.263193][ T3315] netlink: 'syz.2.8252': attribute type 4 has an invalid length. [ 716.490685][ T3331] __nla_validate_parse: 7 callbacks suppressed [ 716.490718][ T3331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8257'. [ 716.529207][ T3336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8258'. [ 716.548463][ T3331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8257'. [ 716.692681][ T3331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8257'. [ 716.978431][ T3370] team0: left promiscuous mode [ 717.020827][ T3370] team0: left allmulticast mode [ 717.036605][ T3370] team_slave_0: left allmulticast mode [ 717.056700][ T3370] : left allmulticast mode [ 717.070103][ T3370] team_slave_0: left promiscuous mode [ 717.076003][ T3370] : left promiscuous mode [ 717.097251][ T3370] bridge0: port 2(team0) entered disabled state [ 717.118375][ T3370] bridge_slave_0: left promiscuous mode [ 717.124322][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.136382][ T3370] bond0: (slave bridge_slave_1): Releasing backup interface [ 717.148838][ T3370] bridge_slave_1: left promiscuous mode [ 717.162304][ T3390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8270'. [ 717.176016][ T3370] bond0: (slave bond_slave_0): Releasing backup interface [ 717.184101][ T3370] bond_slave_0: left promiscuous mode [ 717.199985][ T3370] bond0: (slave bond_slave_1): Releasing backup interface [ 717.210510][ T3370] bond_slave_1: left promiscuous mode [ 717.228838][ T3370] team0: Port device team_slave_0 removed [ 717.253987][ T3370] team0: Port device 26 removed [ 717.270049][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.277880][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.292913][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.305277][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.315751][ T3370] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 717.343659][ T3377] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.360346][ T3377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 717.381695][ T3377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 717.405355][ T3377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 717.463950][ T3386] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 717.539140][ T3377] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.579309][ T3377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 717.626807][ T3377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 717.665988][ T3377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 717.747913][ T3421] erspan0: left allmulticast mode [ 717.790944][ T3377] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.827797][ T3377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 717.890881][ T3377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 717.919382][ T3377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 718.005661][ T3377] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.026546][ T3377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 718.058439][ T3377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 718.096319][ T3447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.122986][ T3377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 718.259650][T29685] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.268216][T29685] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 718.276494][T29685] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 718.292537][T29685] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 718.317324][ T3459] tc_dump_action: action bad kind [ 718.325662][T29685] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.339559][T29685] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 718.347062][ T3463] netlink: 'syz.3.8286': attribute type 2 has an invalid length. [ 718.348821][T29685] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 718.364200][T29685] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 718.385619][T29684] bond0: (slave bond_slave_0): interface is now down [ 718.385958][ T3461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.393914][T29684] bond0: (slave bond_slave_1): interface is now down [ 718.407548][T29685] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.416185][T29685] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 718.429883][T29685] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 718.440111][T29684] bond0: (slave bridge_slave_1): interface is now down [ 718.449718][T29685] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 718.466974][T29685] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.475178][T29685] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 718.484320][T29685] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 718.493791][T29685] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 718.514641][ T3466] ipt_REJECT: TCP_RESET invalid for non-tcp [ 718.661631][ T3476] syzkaller0: entered promiscuous mode [ 718.668347][ T3476] syzkaller0: entered allmulticast mode [ 718.739528][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8293'. [ 719.028139][ T3491] netlink: 'syz.2.8297': attribute type 142 has an invalid length. [ 719.036774][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8297'. [ 719.540527][ T3532] netlink: 'syz.4.8309': attribute type 11 has an invalid length. [ 719.579943][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8309'. [ 719.592877][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8311'. [ 719.602926][ T3533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8309'. [ 719.705654][T16771] IPVS: starting estimator thread 0... [ 719.769753][ T3545] wg1 speed is unknown, defaulting to 1000 [ 719.787190][ T3534] netlink: 'syz.2.8310': attribute type 39 has an invalid length. [ 719.797138][ T3551] IPVS: using max 32 ests per chain, 76800 per kthread [ 720.289434][ T3572] xt_ecn: cannot match TCP bits for non-tcp packets [ 721.039871][ T3612] bridge9: entered promiscuous mode [ 721.049979][ T3612] bridge9: entered allmulticast mode [ 721.100783][ T3612] bridge10: entered promiscuous mode [ 721.106122][ T3612] bridge10: entered allmulticast mode [ 721.131020][ T3612] bridge11: entered promiscuous mode [ 721.136473][ T3612] bridge11: entered allmulticast mode [ 721.186079][ T3612] bridge12: entered promiscuous mode [ 721.192039][ T3612] bridge12: entered allmulticast mode [ 721.208277][ T3612] bridge13: entered promiscuous mode [ 721.213603][ T3612] bridge13: entered allmulticast mode [ 721.257752][ T3612] bridge14: entered promiscuous mode [ 721.263206][ T3612] bridge14: entered allmulticast mode [ 721.276557][ T3637] pim6reg: entered allmulticast mode [ 721.299473][ T3612] bridge15: entered promiscuous mode [ 721.304811][ T3612] bridge15: entered allmulticast mode [ 721.312920][ T3637] pim6reg: left allmulticast mode [ 721.338114][ T3634] xt_SECMARK: invalid mode: 9 [ 721.409783][ T3612] bridge16: entered promiscuous mode [ 721.415126][ T3612] bridge16: entered allmulticast mode [ 721.496194][ T3612] bridge17: entered promiscuous mode [ 721.502813][ T3612] bridge17: entered allmulticast mode [ 721.522284][ T3612] bridge18: entered promiscuous mode [ 721.530572][ T3612] bridge18: entered allmulticast mode [ 721.551468][ T3612] bridge19: entered promiscuous mode [ 721.557764][ T3612] bridge19: entered allmulticast mode [ 721.588381][ T3659] __nla_validate_parse: 40 callbacks suppressed [ 721.588399][ T3659] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8345'. [ 721.607555][ T3612] bridge20: entered promiscuous mode [ 721.620085][ T3612] bridge20: entered allmulticast mode [ 721.637749][ T3612] bridge21: entered promiscuous mode [ 721.643473][ T3612] bridge21: entered allmulticast mode [ 721.669244][ T3612] bridge22: entered promiscuous mode [ 721.674716][ T3612] bridge22: entered allmulticast mode [ 721.681436][ T3668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8348'. [ 721.691480][ T3668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8348'. [ 721.746855][ T3612] bridge23: entered promiscuous mode [ 721.752860][ T3612] bridge23: entered allmulticast mode [ 721.848541][ T3674] syzkaller0: entered promiscuous mode [ 721.854242][ T3674] syzkaller0: entered allmulticast mode [ 721.961736][ T3687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8354'. [ 721.972291][ T3685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8354'. [ 721.984730][ T3687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8354'. [ 722.055376][ T3692] netlink: 'syz.4.8356': attribute type 17 has an invalid length. [ 722.135373][ T3705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8356'. [ 722.472650][ T3724] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8364'. [ 722.507167][ T3724] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8364'. [ 722.664942][ T3729] netlink: 'syz.3.8365': attribute type 9 has an invalid length. [ 722.707773][ T3729] netlink: 'syz.3.8365': attribute type 11 has an invalid length. [ 722.715854][ T3729] netlink: 'syz.3.8365': attribute type 12 has an invalid length. [ 722.726983][ T3729] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.8365'. [ 722.932304][ T3743] Cannot find add_set index 0 as target [ 723.051558][ T3748] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 723.100085][ T3748] bond4: (slave lo): Enslaving as an active interface with an up link [ 723.130202][ T3748] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 723.195198][ T3755] netlink: 'syz.0.8374': attribute type 14 has an invalid length. [ 723.287307][ T3755] netlink: 'syz.0.8374': attribute type 13 has an invalid length. [ 723.511252][ T3775] netlink: 'syz.0.8380': attribute type 21 has an invalid length. [ 724.251453][ T3839] netlink: 'syz.2.8396': attribute type 1 has an invalid length. [ 724.259438][ T3839] netlink: 'syz.2.8396': attribute type 7 has an invalid length. [ 724.279144][ T3839] netlink: 'syz.2.8396': attribute type 8 has an invalid length. [ 724.590392][ T3861] netlink: 'syz.3.8401': attribute type 11 has an invalid length. [ 724.612239][ T3862] syzkaller0: entered promiscuous mode [ 724.617175][ T3861] netlink: 'syz.3.8401': attribute type 11 has an invalid length. [ 724.629649][ T3862] syzkaller0: entered allmulticast mode [ 724.867593][ T3878] tipc: Enabled bearer , priority 0 [ 724.934440][ T3889] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 724.952575][ T3889] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 725.019976][ T3881] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 725.054656][ T3881] syzkaller0: entered promiscuous mode [ 725.089648][ T3881] syzkaller0: entered allmulticast mode [ 725.109865][ T3881] tipc: Resetting bearer [ 725.173963][ T3881] tipc: Resetting bearer [ 725.228160][ T3881] tipc: Disabling bearer [ 725.606781][ T3927] netlink: 'syz.3.8418': attribute type 23 has an invalid length. [ 725.861427][ T3942] syzkaller0: entered promiscuous mode [ 725.870153][ T3942] syzkaller0: entered allmulticast mode [ 725.944720][ T3947] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 726.383329][ T3981] netlink: 'syz.2.8427': attribute type 21 has an invalid length. [ 726.671157][ T3992] __nla_validate_parse: 21 callbacks suppressed [ 726.671177][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8434'. [ 726.909681][ T3993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8434'. [ 727.268295][ T4024] netlink: 'syz.0.8445': attribute type 1 has an invalid length. [ 727.283239][ T4027] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.8446'. [ 727.305043][ T4024] IPv6: Can't replace route, no match found [ 727.322564][ T4024] bond9: (slave ip6gretap1): making interface the new active one [ 727.335363][ T4024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 727.343648][ T4024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 727.351736][ T4024] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 727.379190][ T4028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8443'. [ 727.478259][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8449'. [ 727.506039][ T4037] openvswitch: netlink: Flow actions attr not present in new flow. [ 727.578250][ T4047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8449'. [ 727.706814][ T4037] wg1 speed is unknown, defaulting to 1000 [ 727.849500][ T4066] netlink: 412 bytes leftover after parsing attributes in process `syz.4.8457'. [ 728.013382][ T4070] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8458'. [ 728.126754][ T4078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.181868][ T4078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8461'. [ 728.192372][ T4084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8463'. [ 728.205502][ T4082] netlink: 'syz.1.8462': attribute type 1 has an invalid length. [ 728.223147][ T4078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.695274][ T4104] mac80211_hwsim hwsim64 : renamed from wlan1 [ 728.880437][ T4118] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 729.388310][ T4155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.486617][ T4165] openvswitch: netlink: Flow actions attr not present in new flow. [ 729.595654][ T4177] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:19998 [ 729.835183][ T4191] netlink: 'syz.0.8498': attribute type 9 has an invalid length. [ 730.058208][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.231183][ T4215] openvswitch: netlink: Flow key attribute not present in set flow. [ 730.433438][ T4227] netlink: 'syz.3.8510': attribute type 29 has an invalid length. [ 730.462243][ T4229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.582687][ T4231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.980022][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.148992][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.229096][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.250145][ T4286] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 731.253970][ T4293] Cannot find map_set index 65533 as target [ 731.349389][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.461044][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.558984][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.638437][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.722398][ T4265] netlink: 'syz.1.8521': attribute type 17 has an invalid length. [ 731.737199][ T4265] __nla_validate_parse: 24 callbacks suppressed [ 731.737217][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8521'. [ 731.758986][ T4265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8521'. [ 731.787313][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8541'. [ 731.969373][ T4338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 732.049341][ T4345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8545'. [ 732.219515][ T4352] wg1 speed is unknown, defaulting to 1000 [ 732.544263][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8552'. [ 732.689297][ T4372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8553'. [ 733.079673][ T4391] syzkaller1: entered promiscuous mode [ 733.090719][ T4391] syzkaller1: entered allmulticast mode [ 733.150385][ T4396] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 733.226491][ T4398] netlink: 'syz.2.8561': attribute type 11 has an invalid length. [ 733.446077][ T4410] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8565'. [ 733.724292][ T4429] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8571'. [ 733.818597][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8573'. [ 733.831029][ T4437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8573'. [ 733.926406][ T4447] : entered promiscuous mode [ 734.453578][ T4484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.463199][ T4483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.516313][ T4484] 8021q: adding VLAN 0 to HW filter on device bond10 [ 734.593884][ T4483] bond10: (slave gretap3): making interface the new active one [ 734.649169][ T4483] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 734.671403][ T4496] : renamed from bond0 (while UP) [ 734.919878][ T4515] syzkaller0: entered promiscuous mode [ 734.925459][ T4515] syzkaller0: entered allmulticast mode [ 736.891232][ T4555] macvtap2: entered promiscuous mode [ 736.896687][ T4555] macvtap2: entered allmulticast mode [ 736.962915][ T4560] macvtap2: entered promiscuous mode [ 736.995823][ T4560] macvtap2: entered allmulticast mode [ 737.027002][T23143] lec:lec_start_xmit: lec0:No lecd attached [ 737.101203][ T4571] validate_nla: 5 callbacks suppressed [ 737.101220][ T4571] netlink: 'syz.3.8607': attribute type 1 has an invalid length. [ 737.185486][ T4571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.207925][ T4571] bond5: (slave geneve5): making interface the new active one [ 737.216777][ T4571] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 737.226276][T29711] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 737.229036][ T4571] netlink: 'syz.3.8607': attribute type 2 has an invalid length. [ 737.242798][ T4571] __nla_validate_parse: 9 callbacks suppressed [ 737.242816][ T4571] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8607'. [ 737.269436][T29711] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 737.318884][T29711] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 737.357345][T29711] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 737.367938][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8610'. [ 737.453365][ T4596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 737.470340][ T4593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8614'. [ 737.489707][ T4598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8614'. [ 737.615530][ T4608] netlink: 'syz.0.8619': attribute type 4 has an invalid length. [ 737.764452][ T4628] sit2: entered promiscuous mode [ 737.769928][ T4628] sit2: entered allmulticast mode [ 737.816074][ T4630] vlan1: entered promiscuous mode [ 737.827673][ T4630] vlan1: entered allmulticast mode [ 737.832829][ T4630] hsr_slave_1: entered allmulticast mode [ 737.876739][ T4629] delete_channel: no stack [ 737.880927][ T4641] sock: sock_timestamping_bind_phc: sock not bind to device [ 737.931143][ T4640] sock: sock_timestamping_bind_phc: sock not bind to device [ 738.065293][ T4637] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 738.300058][ T4669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.313731][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8637'. [ 738.323472][ T4669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.631359][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8640'. [ 738.681500][ T4675] netlink: 'syz.3.8640': attribute type 3 has an invalid length. [ 738.691239][ T4675] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8640'. [ 738.816697][ T4673] bond9: option mode: unable to set because the bond device has slaves [ 738.993200][ T4692] netlink: 'syz.4.8645': attribute type 6 has an invalid length. [ 739.024175][ T4700] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8646'. [ 739.316419][ T4731] netlink: 'syz.2.8653': attribute type 5 has an invalid length. [ 739.324611][ T4731] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8653'. [ 739.355461][ T4731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8653'. [ 739.691636][ T4767] netlink: 'syz.1.8661': attribute type 1 has an invalid length. [ 739.924873][ T4778] x_tables: duplicate underflow at hook 1 [ 739.971276][ T4785] rdma_rxe: rxe_newlink: failed to add lo [ 739.978199][ T4785] netlink: 'syz.3.8666': attribute type 17 has an invalid length. [ 740.057814][ T4788] bond11: option fail_over_mac: invalid value (16) [ 740.079556][ T4788] bond11 (unregistering): Released all slaves [ 740.116121][ T4785] gretap0: entered promiscuous mode [ 740.125249][ T4785] gretap0: left promiscuous mode [ 740.173090][ T4794] lo: entered allmulticast mode [ 740.207121][ T4794] lo: left allmulticast mode [ 740.218352][ T4813] netlink: 'syz.0.8670': attribute type 13 has an invalid length. [ 740.384112][ T4822] netlink: 'syz.1.8674': attribute type 12 has an invalid length. [ 740.428131][ T4822] bond0: option primary_reselect: invalid value (255) [ 740.447513][ T4822] bond0 (unregistering): Released all slaves [ 740.713356][ T4845] xt_hashlimit: overflow, rate too high: 0 [ 740.760464][ T4853] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 741.053617][ T4879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.248491][ T4898] SET target dimension over the limit! [ 742.452716][ T4994] __nla_validate_parse: 13 callbacks suppressed [ 742.452737][ T4994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8716'. [ 742.523120][ T4994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.533292][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8718'. [ 742.560692][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8718'. [ 742.583027][ T4998] validate_nla: 3 callbacks suppressed [ 742.583043][ T4998] netlink: 'syz.1.8718': attribute type 14 has an invalid length. [ 742.642288][ T4998] netlink: 'syz.1.8718': attribute type 13 has an invalid length. [ 742.690517][ T5012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8721'. [ 742.766921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 742.774951][ C1] lec:lec_tx_timeout: lec0 [ 742.910763][ T5032] netlink: 'syz.4.8726': attribute type 16 has an invalid length. [ 742.921808][ T5032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8726'. [ 742.934011][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8727'. [ 743.012064][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8727'. [ 743.058121][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8727'. [ 743.374512][ T5060] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8734'. [ 743.501147][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 743.643149][ T5083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.720467][ T5090] syzkaller0: entered promiscuous mode [ 743.729528][ T5090] syzkaller0: entered allmulticast mode [ 743.779052][ T5093] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 743.792032][ T5093] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 743.800589][ T5093] gretap1: entered promiscuous mode [ 743.806261][ T5093] gretap1: entered allmulticast mode [ 744.097618][ T5112] wg1 speed is unknown, defaulting to 1000 [ 744.221341][ T5122] sock: sock_timestamping_bind_phc: sock not bind to device [ 744.673604][ T5151] netlink: 'syz.0.8760': attribute type 11 has an invalid length. [ 744.876805][ T5166] netlink: 'syz.3.8765': attribute type 21 has an invalid length. [ 745.054204][ T5182] openvswitch: netlink: Missing key (keys=40, expected=80) [ 745.300339][ T5203] netlink: 'syz.3.8775': attribute type 1 has an invalid length. [ 745.378378][ T5203] bond6: entered promiscuous mode [ 745.379943][ T5212] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 745.383578][ T5203] bond6: entered allmulticast mode [ 745.398495][ T5203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.419412][ T5217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.432793][ T5210] netlink: 'syz.4.8777': attribute type 9 has an invalid length. [ 745.440709][ T5209] netlink: 'syz.4.8777': attribute type 9 has an invalid length. [ 745.541025][ T5222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.552842][ T5222] netlink: 'syz.3.8779': attribute type 7 has an invalid length. [ 745.569314][ T5222] gretap0: entered promiscuous mode [ 745.575846][ T5222] debugfs: 'hsr1' already exists in 'hsr' [ 745.586924][ T5222] Cannot create hsr debugfs directory [ 745.594732][ T5222] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 745.628206][ T5222] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 745.875078][ T5251] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 745.975215][ T5254] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 746.338437][ T5279] netlink: 'syz.2.8797': attribute type 1 has an invalid length. [ 746.372183][ T5279] 8021q: adding VLAN 0 to HW filter on device bond11 [ 746.422848][ T5288] x_tables: duplicate underflow at hook 1 [ 746.502020][ T5293] geneve5: entered promiscuous mode [ 746.509489][T29711] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 40912 - 0 [ 746.525660][T29711] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 40912 - 0 [ 746.553273][T29711] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 40912 - 0 [ 746.567444][T29711] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 40912 - 0 [ 746.798380][ T5312] netlink: 'syz.4.8811': attribute type 1 has an invalid length. [ 747.024251][ T5339] dvmrp8: entered allmulticast mode [ 747.163775][ T5346] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 747.197988][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 747.610042][ T5378] __nla_validate_parse: 31 callbacks suppressed [ 747.610056][ T5378] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.8830'. [ 747.754164][ T5390] netlink: zone id is out of range [ 747.760016][ T5390] netlink: zone id is out of range [ 747.765394][ T5390] netlink: zone id is out of range [ 747.791060][ T5390] netlink: zone id is out of range [ 747.797350][ T5390] netlink: zone id is out of range [ 747.803425][ T5390] netlink: zone id is out of range [ 747.817409][ T5390] netlink: zone id is out of range [ 747.822586][ T5390] netlink: zone id is out of range [ 747.847422][ T5390] netlink: zone id is out of range [ 747.852631][ T5390] netlink: zone id is out of range [ 747.938193][ T5397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8833'. [ 747.957252][ T5396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8833'. [ 747.978534][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8836'. [ 747.993891][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8837'. [ 748.024088][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8836'. [ 748.063899][T29685] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.076603][T29685] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.100470][T29685] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.128138][T29685] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.183565][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 748.183565][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 748.184877][ T5414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8841'. [ 748.192823][ T5415] validate_nla: 2 callbacks suppressed [ 748.192837][ T5415] netlink: 'syz.2.8842': attribute type 5 has an invalid length. [ 748.374445][ T5427] xt_ecn: cannot match TCP bits for non-tcp packets [ 748.513977][ T5440] netlink: 'syz.0.8850': attribute type 5 has an invalid length. [ 748.645489][ T5447] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 748.808223][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 748.820714][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 748.829916][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 748.842613][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 748.854470][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 748.914728][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 748.922759][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 748.930774][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 748.940307][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 748.948314][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 749.132716][T29685] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.158994][T29685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 749.167145][ T5479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8859'. [ 749.178906][T29685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 749.178979][T29685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 749.179004][T29685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 3] type 2 family 0 port 40912 - 0 [ 749.257339][ T5455] wg1 speed is unknown, defaulting to 1000 [ 749.268156][ T5479] tipc: Enabling of bearer rejected, failed to enable media [ 749.301573][T29685] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.332565][T29685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 749.350698][T29685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 749.361786][T29685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 749.372941][T29685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 3] type 2 family 0 port 40912 - 0 [ 749.482601][T29685] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.522018][T29685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 749.533514][T29685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 749.543701][T29685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 749.557634][T29685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 3] type 2 family 0 port 40912 - 0 [ 749.578274][ T5503] netlink: 'syz.4.8867': attribute type 12 has an invalid length. [ 749.640156][ T5503] vlan2: entered promiscuous mode [ 749.645237][ T5503] geneve1: entered promiscuous mode [ 749.673862][ T5503] vlan2: entered allmulticast mode [ 749.680080][ T5503] geneve1: entered allmulticast mode [ 749.688652][T29685] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.699728][T29685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 749.710628][T29685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 749.721883][T29685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 749.748694][T29685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 3] type 2 family 0 port 40912 - 0 [ 749.820315][ T5519] lo: left promiscuous mode [ 750.028918][ T5529] sctp: [Deprecated]: syz.0.8876 (pid 5529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.028918][ T5529] Use struct sctp_sack_info instead [ 750.079582][ T5531] macvtap1: entered promiscuous mode [ 750.087189][ T5531] bond0: entered promiscuous mode [ 750.092900][ T5531] macvtap1: entered allmulticast mode [ 750.099372][ T5531] bond0: entered allmulticast mode [ 750.104504][ T5531] bond_slave_0: entered allmulticast mode [ 750.112388][ T5531] bond_slave_1: entered allmulticast mode [ 750.120752][ T5531] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 750.166664][ T5536] macvtap2: entered promiscuous mode [ 750.174165][ T5536] macvtap2: entered allmulticast mode [ 750.244981][ T5540] syzkaller0: entered promiscuous mode [ 750.263751][ T5540] syzkaller0: entered allmulticast mode [ 750.315818][ T5546] xfrm1: entered promiscuous mode [ 750.330828][ T5546] xfrm1: entered allmulticast mode [ 750.381378][T29685] bridge_slave_0: left allmulticast mode [ 750.389086][T29685] bridge_slave_0: left promiscuous mode [ 750.394849][T29685] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.913275][T29685] bond7 (unregistering): (slave gretap2): Releasing active interface [ 750.946020][T29685] dvmrp1 (unregistering): left allmulticast mode [ 750.960742][T29685] bond5 (unregistering): (slave geneve4): Releasing active interface [ 751.008517][ T51] Bluetooth: hci2: command tx timeout [ 751.341068][T29685] bond7 (unregistering): (slave bridge7): Releasing active interface [ 752.040456][T29685] bond1 (unregistering): Released all slaves [ 752.053625][T29685] bond2 (unregistering): Released all slaves [ 752.065701][T29685] bond3 (unregistering): Released all slaves [ 752.079414][T29685] bond4 (unregistering): Released all slaves [ 752.095105][T29685] bond5 (unregistering): Released all slaves [ 752.108139][T29685] bond6 (unregistering): Released all slaves [ 752.126263][T29685] bond7 (unregistering): Released all slaves [ 752.140839][T29685]  (unregistering): Released all slaves [ 752.260744][ T5591] netlink: 'syz.4.8883': attribute type 1 has an invalid length. [ 752.307340][ T5594] Cannot find set identified by id 3 to match [ 752.313624][ T5594] Cannot find set identified by id 3 to match [ 752.355482][ T5591] 8021q: adding VLAN 0 to HW filter on device bond11 [ 752.368340][ T5594] Cannot find set identified by id 3 to match [ 752.377516][ T5594] Cannot find set identified by id 3 to match [ 752.383756][ T5594] Cannot find set identified by id 3 to match [ 752.407652][ T5594] Cannot find set identified by id 3 to match [ 752.422687][T29685] : left promiscuous mode [ 752.452348][ T5594] Cannot find set identified by id 3 to match [ 752.473869][ T5455] chnl_net:caif_netlink_parms(): no params data found [ 752.482756][ T5594] Cannot find set identified by id 3 to match [ 752.503704][T29685] tipc: Disabling bearer [ 752.511269][ T5594] Cannot find set identified by id 3 to match [ 752.518738][ T5594] Cannot find set identified by id 3 to match [ 752.527482][T29685] tipc: Left network mode [ 752.730647][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.739114][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.746362][ T5455] bridge_slave_0: entered allmulticast mode [ 752.758633][ T5455] bridge_slave_0: entered promiscuous mode [ 752.771509][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.773502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 752.779291][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.786550][ C1] lec:lec_tx_timeout: lec0 [ 752.794562][ T5455] bridge_slave_1: entered allmulticast mode [ 752.878390][ T5455] bridge_slave_1: entered promiscuous mode [ 753.089064][ T5833] Bluetooth: hci2: command tx timeout [ 753.152389][ T5455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.220480][ T5455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.449666][ T5455] team0: Port device team_slave_0 added [ 753.465869][ T5455] team0: Port device team_slave_1 added [ 753.672435][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.690398][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.743278][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.764701][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.778485][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.805679][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.988845][ T5681] __nla_validate_parse: 4 callbacks suppressed [ 753.988865][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8901'. [ 754.001815][ T5455] hsr_slave_0: entered promiscuous mode [ 754.029274][ T5455] hsr_slave_1: entered promiscuous mode [ 754.045649][ T5455] debugfs: 'hsr0' already exists in 'hsr' [ 754.059341][ T5455] Cannot create hsr debugfs directory [ 754.100052][ T5681] 8021q: adding VLAN 0 to HW filter on device bond12 [ 754.107248][ T5689] SET target dimension over the limit! [ 754.660465][ T5722] netlink: 356 bytes leftover after parsing attributes in process `syz.4.8910'. [ 754.789351][T29685] hsr_slave_0: left promiscuous mode [ 754.795439][T29685] hsr_slave_1: left promiscuous mode [ 754.802924][T29685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.812630][T29685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.821757][T29685] veth1_macvtap: left promiscuous mode [ 754.827604][T29685] veth1_vlan: left promiscuous mode [ 754.833036][T29685] veth0_vlan: left promiscuous mode [ 755.035979][T29685] team0 (unregistering): Port device team_slave_1 removed [ 755.049886][T29685] team0 (unregistering): Port device team_slave_0 removed [ 755.167560][ T5833] Bluetooth: hci2: command tx timeout [ 755.349824][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8912'. [ 755.378624][ T29] audit: type=1800 audit(1772020613.112:8): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8913" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC0430820 dev="tmpfs" ino=3025 res=0 errno=0 [ 755.601222][ T5740] dvmrp6: entered allmulticast mode [ 755.704501][ T5757] netlink: 'syz.0.8916': attribute type 1 has an invalid length. [ 755.824570][ T5757] 8021q: adding VLAN 0 to HW filter on device bond10 [ 755.851197][ T5767] sch_fq: defrate 0 ignored. [ 755.870976][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8917'. [ 755.941167][ T5757] bond10: (slave gretap2): making interface the new active one [ 755.955454][ T5757] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 755.976359][T29685] IPVS: stop unused estimator thread 0... [ 756.158634][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8920'. [ 756.217885][ T5786] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 756.249873][ T5791] netlink: 'syz.3.8922': attribute type 4 has an invalid length. [ 756.313993][ T5794] netlink: 'syz.3.8922': attribute type 4 has an invalid length. [ 756.330101][ T5455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 756.410609][ T5455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 756.419607][ T5798] netlink: 'syz.2.8924': attribute type 1 has an invalid length. [ 756.447871][ T5455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 756.498162][ T5798] tipc: Enabling of bearer rejected, failed to enable media [ 756.519795][ T5455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 756.872350][ T5840] netlink: 'syz.2.8928': attribute type 29 has an invalid length. [ 756.907457][ T5840] netlink: 'syz.2.8928': attribute type 29 has an invalid length. [ 756.945999][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.983511][ T5840] netlink: 'syz.2.8928': attribute type 29 has an invalid length. [ 757.008061][ T5840] netlink: 'syz.2.8928': attribute type 29 has an invalid length. [ 757.037772][ T5840] netlink: 'syz.2.8928': attribute type 29 has an invalid length. [ 757.057087][ T5840] netlink: 'syz.2.8928': attribute type 29 has an invalid length. [ 757.140435][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8932'. [ 757.152652][ T5455] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.187940][T29687] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.195146][T29687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.242675][T29697] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.249888][T29697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.259551][ T5833] Bluetooth: hci2: command tx timeout [ 757.468696][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8936'. [ 757.713149][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8938'. [ 757.760499][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8940'. [ 757.939098][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.114865][ T5455] veth0_vlan: entered promiscuous mode [ 758.161048][ T5455] veth1_vlan: entered promiscuous mode [ 758.230675][ T5455] veth0_macvtap: entered promiscuous mode [ 758.268338][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8945'. [ 758.311925][ T5455] veth1_macvtap: entered promiscuous mode [ 758.370985][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.419948][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.449842][T29685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.472781][T29685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.518871][T29685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.582480][T29685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.770433][T29685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.797556][T29685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.880438][T29685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.890226][T29685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.050887][ T5969] __nla_validate_parse: 2 callbacks suppressed [ 759.050906][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8849'. [ 759.096769][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8958'. [ 759.108955][ T5976] sctp: [Deprecated]: syz.2.8959 (pid 5976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.108955][ T5976] Use struct sctp_sack_info instead [ 759.135208][ T5972] sctp: [Deprecated]: syz.2.8959 (pid 5972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.135208][ T5972] Use struct sctp_sack_info instead [ 759.226795][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8961'. [ 759.397266][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8962'. [ 759.424706][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8962'. [ 759.442615][ T5994] xt_hashlimit: invalid interval [ 759.470338][ T5989] syzkaller0: entered promiscuous mode [ 759.497982][ T5989] syzkaller0: entered allmulticast mode [ 759.526005][ T5989] net_ratelimit: 47 callbacks suppressed [ 759.526024][ T5989] 0: reclassify loop, rule prio 0, protocol 800 [ 759.719179][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.733728][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.746356][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.754776][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.764207][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 760.009027][ T6008] wg1 speed is unknown, defaulting to 1000 [ 760.067383][ T6023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 760.107486][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8970'. [ 760.247518][ T6035] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8972'. [ 760.532200][ T6046] syzkaller0: entered promiscuous mode [ 760.537860][ T6046] syzkaller0: entered allmulticast mode [ 760.562248][ T6022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 760.732135][ T6057] bond0: entered promiscuous mode [ 760.738592][T29685] bond0: (slave bond_slave_0): interface is now down [ 760.745303][T29685] bond0: (slave bond_slave_1): interface is now down [ 760.754684][ T6057] bond_slave_0: entered promiscuous mode [ 760.767703][ T6057] bond_slave_1: entered promiscuous mode [ 760.768380][T29685] bond0: (slave bridge_slave_1): interface is now down [ 760.784558][ T6057] bridge_slave_1: entered promiscuous mode [ 760.791426][ T6057] bond0: entered allmulticast mode [ 760.796690][ T6057] bond_slave_0: entered allmulticast mode [ 760.802560][ T6057] bond_slave_1: entered allmulticast mode [ 760.808730][ T6057] bridge_slave_1: entered allmulticast mode [ 760.815895][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.986420][ T6070] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8980'. [ 761.071796][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 761.451862][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.459464][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.466717][ T6008] bridge_slave_0: entered allmulticast mode [ 761.475194][ T6008] bridge_slave_0: entered promiscuous mode [ 761.486376][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.550791][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.574614][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.594018][ T6008] bridge_slave_1: entered allmulticast mode [ 761.624346][ T6008] bridge_slave_1: entered promiscuous mode [ 761.702669][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8987'. [ 761.792504][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.807383][ T51] Bluetooth: hci1: command tx timeout [ 761.811908][ T6122] validate_nla: 2 callbacks suppressed [ 761.811926][ T6122] netlink: 'syz.1.8988': attribute type 9 has an invalid length. [ 761.854280][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.902605][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8989'. [ 761.905511][ T6008] team0: Port device team_slave_0 added [ 761.930045][ T6008] team0: Port device team_slave_1 added [ 761.984263][ T6130] netlink: 'syz.0.8991': attribute type 4 has an invalid length. [ 762.132076][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.164095][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.205430][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.240689][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.251461][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.295104][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.388672][ T6156] x_tables: duplicate underflow at hook 1 [ 762.405555][ T6008] hsr_slave_0: entered promiscuous mode [ 762.413120][ T6156] x_tables: duplicate underflow at hook 1 [ 762.420808][ T6008] hsr_slave_1: entered promiscuous mode [ 762.441018][ T6155] delete_channel: no stack [ 762.672044][ T6008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.683699][ T6008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.716329][ T6168] tipc: Enabled bearer , priority 0 [ 762.767503][ T6168] syzkaller0: entered promiscuous mode [ 762.773144][ T6168] syzkaller0: entered allmulticast mode [ 762.779317][ T6168] tipc: Resetting bearer [ 762.816287][ T6008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.829042][ T6008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.891667][T29702] tipc: Resetting bearer [ 762.899296][ T6167] tipc: Resetting bearer [ 763.215746][ T6186] --map-set only usable from mangle table [ 763.335523][T29685] bond0: (slave bond_slave_0): interface is now down [ 763.344655][T29685] bond0: (slave bond_slave_1): interface is now down [ 763.350646][ T6193] netlink: 'syz.3.9009': attribute type 5 has an invalid length. [ 763.352462][T29685] bond0: (slave bridge_slave_1): interface is now down [ 763.359793][ T6193] netlink: 'syz.3.9009': attribute type 6 has an invalid length. [ 763.377566][ T6193] netlink: 'syz.3.9009': attribute type 5 has an invalid length. [ 763.385357][ T6193] netlink: 'syz.3.9009': attribute type 6 has an invalid length. [ 763.897031][ T51] Bluetooth: hci1: command tx timeout [ 764.605409][ T6167] tipc: Disabling bearer [ 764.624849][ T6008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.635330][ T6008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.770155][ T6008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.787264][ T6008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.812465][ T6213] netlink: 'syz.3.9016': attribute type 1 has an invalid length. [ 764.820343][ T6213] __nla_validate_parse: 9 callbacks suppressed [ 764.820358][ T6213] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9016'. [ 764.836649][ T6213] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9016'. [ 764.846787][ T6207] netlink: 'syz.0.9013': attribute type 11 has an invalid length. [ 764.848012][ T6213] netlink: 'syz.3.9016': attribute type 1 has an invalid length. [ 764.862882][ T6213] netlink: 'syz.3.9016': attribute type 8 has an invalid length. [ 764.872229][ T6213] netlink: 606 bytes leftover after parsing attributes in process `syz.3.9016'. [ 764.891699][ T6219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9016'. [ 764.923149][ T6219] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9016'. [ 764.934480][ T6219] netlink: 606 bytes leftover after parsing attributes in process `syz.3.9016'. [ 764.999446][ T6218] syzkaller0: entered promiscuous mode [ 764.999887][ T6226] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 765.005012][ T6218] syzkaller0: entered allmulticast mode [ 765.052977][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9019'. [ 765.063961][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9018'. [ 765.206669][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9022'. [ 765.246805][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9021'. [ 765.887851][T29686] bond0: (slave bond_slave_0): interface is now down [ 765.894687][T29686] bond0: (slave bond_slave_1): interface is now down [ 765.901678][T29686] bond0: (slave bridge_slave_1): interface is now down [ 765.977519][ T51] Bluetooth: hci1: command tx timeout [ 766.758469][ T6239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.846788][ T6008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 766.884961][ T6008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 766.923001][ T6008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 766.946562][ T6008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 767.134917][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.195310][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.212647][ T6279] syzkaller0: entered promiscuous mode [ 767.229578][ T6279] syzkaller0: entered allmulticast mode [ 767.247987][T29687] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.255169][T29687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.279934][ T6290] validate_nla: 3 callbacks suppressed [ 767.279954][ T6290] netlink: 'syz.4.9035': attribute type 30 has an invalid length. [ 767.345062][T29686] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.352255][T29686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.444229][ T6290] macvtap2: entered allmulticast mode [ 767.458034][ T6290] veth0_macvtap: entered allmulticast mode [ 767.915065][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.951922][ T6316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.959230][ T6316] IPv6: NLM_F_CREATE should be set when creating new route [ 768.049138][ T51] Bluetooth: hci1: command tx timeout [ 768.055482][ T6316] pim6reg527: entered allmulticast mode [ 768.072372][ T6008] veth0_vlan: entered promiscuous mode [ 768.157954][ T6008] veth1_vlan: entered promiscuous mode [ 768.268982][ T6008] veth0_macvtap: entered promiscuous mode [ 768.309532][ T6008] veth1_macvtap: entered promiscuous mode [ 768.384500][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.437378][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.447176][T29687] bond0: (slave bond_slave_0): interface is now down [ 768.463118][T29687] bond0: (slave bond_slave_1): interface is now down [ 768.510049][T29704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.519036][T29687] bond0: (slave bridge_slave_1): interface is now down [ 768.537080][T29704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.639920][T29704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.665333][T29704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.686385][ T6368] openvswitch: netlink: EtherType 53b is less than min 600 [ 768.713398][ T6369] : entered promiscuous mode [ 768.773184][ T6368] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 768.784241][T29697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.808687][T29697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.894795][ T6375] syzkaller0: entered promiscuous mode [ 768.906441][ T6375] syzkaller0: entered allmulticast mode [ 768.984018][T29704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.992493][T29704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.271164][ T6402] netlink: 'syz.0.9063': attribute type 3 has an invalid length. [ 769.862376][ T6413] netlink: 'syz.1.9065': attribute type 13 has an invalid length. [ 770.812337][ T6393] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 770.930838][ T6428] __nla_validate_parse: 6 callbacks suppressed [ 770.930857][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9068'. [ 770.968738][ T6434] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9069'. [ 771.091182][T29685] bond0: (slave bond_slave_0): interface is now down [ 771.099410][T29685] bond0: (slave bond_slave_1): interface is now down [ 771.114473][T29685] bond0: (slave bridge_slave_1): interface is now down [ 771.210923][ T6426] syzkaller0: entered promiscuous mode [ 771.239177][ T6426] syzkaller0: entered allmulticast mode [ 771.297252][ T6449] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9072'. [ 771.307388][ T6449] bridge_slave_1: default FDB implementation only supports local addresses [ 771.420764][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9076'. [ 773.022435][ T6457] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 773.379361][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9081'. [ 773.387209][ T6491] vlan2: entered allmulticast mode [ 773.437844][ T6492] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9082'. [ 773.442777][ T6506] syzkaller0: entered promiscuous mode [ 773.457584][ T6506] syzkaller0: entered allmulticast mode [ 773.531977][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.552566][ T6492] bond_slave_0: left promiscuous mode [ 773.564788][ T6492] bond_slave_0: left allmulticast mode [ 773.593095][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.622562][ T6492] bond_slave_1: left promiscuous mode [ 773.637746][ T6492] bond_slave_1: left allmulticast mode [ 773.644892][ T6492] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 773.675050][ T6492] bridge_slave_1: left promiscuous mode [ 773.694725][ T6492] bridge_slave_1: left allmulticast mode [ 773.707590][ T6492] bond0 (unregistering): Released all slaves [ 774.037514][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9094'. [ 774.208163][ T6544] netlink: 'syz.4.9096': attribute type 1 has an invalid length. [ 774.577654][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9108'. [ 774.734962][ T6588] netlink: 'syz.2.9111': attribute type 1 has an invalid length. [ 774.868048][ T6598] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9115'. [ 774.988933][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9118'. [ 775.022937][ T6609] : entered promiscuous mode [ 775.454230][ T6637] netlink: 'syz.4.9125': attribute type 1 has an invalid length. [ 776.300634][ T6668] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 776.328601][ T6669] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 776.364088][ T6669] __nla_validate_parse: 1 callbacks suppressed [ 776.364107][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9134'. [ 776.399742][ T6669] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 776.510189][ T6675] x_tables: duplicate underflow at hook 3 [ 776.784259][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9141'. [ 777.041763][ T6708] netlink: 'syz.0.9148': attribute type 1 has an invalid length. [ 777.059369][ T6708] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9148'. [ 777.199834][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9151'. [ 777.333336][ T6720] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 777.795883][ T6746] IPVS: set_ctl: invalid protocol: 45 10.1.1.1:20004 [ 777.862011][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9162'. [ 777.864268][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9162'. [ 777.933018][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9166'. [ 777.983254][ T6762] bond8: option mode: unable to set because the bond device has slaves [ 777.992314][ T6762] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 778.014452][ T6762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.072576][ T6770] 0: reclassify loop, rule prio 0, protocol 700 [ 778.109181][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9166'. [ 778.135090][ T6762] block nbd3: Unsupported socket: should be TCP or UNIX. [ 778.144624][ T6778] sctp: [Deprecated]: syz.1.9169 (pid 6778) Use of int in max_burst socket option. [ 778.144624][ T6778] Use struct sctp_assoc_value instead [ 778.404790][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 778.415501][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 778.426584][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 778.517478][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 778.598601][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 778.859450][ T6798] wg1 speed is unknown, defaulting to 1000 [ 778.973077][ T6840] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9181'. [ 779.021436][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9181'. [ 779.123738][ T6841] vxcan2: entered allmulticast mode [ 779.141810][ T6843] nbd: couldn't find a device at index 1 [ 779.330617][ T6853] netlink: 'syz.1.9185': attribute type 1 has an invalid length. [ 779.349980][ T6853] netlink: 'syz.1.9185': attribute type 1 has an invalid length. [ 779.566742][ T6798] chnl_net:caif_netlink_parms(): no params data found [ 779.661281][ T6869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 779.761187][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.772881][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.780349][ T6798] bridge_slave_0: entered allmulticast mode [ 779.789079][ T6798] bridge_slave_0: entered promiscuous mode [ 779.798338][ T6879] 8021q: VLANs not supported on ip6tnl0 [ 779.807896][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.815082][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.827229][ T6798] bridge_slave_1: entered allmulticast mode [ 779.834987][ T6798] bridge_slave_1: entered promiscuous mode [ 779.920344][ T6798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.944014][ T6891] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 779.950306][ T6798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.046277][ T6798] team0: Port device team_slave_0 added [ 780.072049][ T6798] team0: Port device team_slave_1 added [ 780.156228][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.178099][ T6898] xt_CT: No such helper "snmp_trap" [ 780.183404][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.221119][ T6798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.284189][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.304859][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.331796][ T6798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.514744][ T6925] netlink: 'syz.4.9201': attribute type 11 has an invalid length. [ 780.580077][ T6798] hsr_slave_0: entered promiscuous mode [ 780.588005][ T6798] hsr_slave_1: entered promiscuous mode [ 780.594465][ T6798] debugfs: 'hsr0' already exists in 'hsr' [ 780.601601][ T6798] Cannot create hsr debugfs directory [ 780.687147][ T51] Bluetooth: hci0: command tx timeout [ 780.836051][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.919602][ T6953] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003 [ 780.955919][ T6798] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.978602][ T6798] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 780.990864][ T6798] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.002506][ T6798] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 781.058349][ T6798] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.078632][ T6798] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 781.105476][ T6798] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.126165][ T6798] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 781.190614][ T6798] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.218701][ T6798] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 781.230001][ T6973] IPv6: NLM_F_CREATE should be specified when creating new route [ 781.237850][ T6798] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.237918][ T6798] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 781.311912][ T6798] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.325221][ T6798] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 781.336622][ T6798] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.350884][ T6798] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 781.377897][ T6982] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 781.625034][ T6988] __nla_validate_parse: 11 callbacks suppressed [ 781.625053][ T6988] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9220'. [ 781.641768][ T6988] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9220'. [ 781.655741][ T6988] tipc: Started in network mode [ 781.660988][ T6988] tipc: Node identity , cluster identity 4711 [ 781.668267][ T6988] tipc: Failed to obtain node identity [ 781.673841][ T6988] tipc: Enabling of bearer rejected, failed to enable media [ 781.688731][ T6798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 781.782287][ T6798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 781.793395][ T6798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 781.811557][ T6798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 781.832132][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9224'. [ 781.958322][ T6798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.985109][ T6798] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.000969][T29684] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.008155][T29684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.045643][T29684] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.052872][T29684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.113534][ T6798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.263225][ T7017] syzkaller0: entered promiscuous mode [ 782.269129][ T7017] syzkaller0: entered allmulticast mode [ 782.328495][ T7021] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9231'. [ 782.450226][ T6798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.494141][ T7027] netlink: 'syz.2.9232': attribute type 10 has an invalid length. [ 782.510139][ T7029] x_tables: duplicate underflow at hook 1 [ 782.540332][ T6798] veth0_vlan: entered promiscuous mode [ 782.624774][ T7031] bond1 (unregistering): Released all slaves [ 782.691908][ T6798] veth1_vlan: entered promiscuous mode [ 782.697580][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 782.704573][ T6925] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 782.712283][ T6925] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 782.768050][ T51] Bluetooth: hci0: command tx timeout [ 782.848752][ T7042] x_tables: unsorted entry at hook 3 [ 782.867789][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9241'. [ 782.876658][ T6798] veth0_macvtap: entered promiscuous mode [ 782.896391][ T6798] veth1_macvtap: entered promiscuous mode [ 782.954931][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.979540][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.999325][ T7057] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9245'. [ 783.014871][ T7058] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9245'. [ 783.027801][T29684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.037198][T29684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.067439][T29684] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.083436][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.178345][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9246'. [ 783.298037][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9248'. [ 783.388678][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9247'. [ 783.472373][ T6925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 783.478551][ T6925] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 783.510393][ T6925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 783.517306][ T6925] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 783.667602][ T7077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.681551][T29702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.699620][T29702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.756048][T29702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.776227][T29702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.895847][ T7088] netlink: 'syz.0.9255': attribute type 1 has an invalid length. [ 783.952886][ T7088] 8021q: adding VLAN 0 to HW filter on device bond11 [ 784.035049][ T7090] netlink: 'syz.3.9171': attribute type 1 has an invalid length. [ 784.150195][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.171081][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.187737][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.210011][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.219185][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 784.415708][ T7106] wg1 speed is unknown, defaulting to 1000 [ 784.739898][T29685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.762194][T29685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 784.794886][T29685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.950072][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.969412][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.009899][T29685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.022933][T29685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 785.051935][T29685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 786.291956][ T51] Bluetooth: hci5: command tx timeout [ 787.529321][ T7147] __nla_validate_parse: 5 callbacks suppressed [ 787.529341][ T7147] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9269'. [ 787.546302][T29685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.553433][ T7147] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9269'. [ 787.584056][T29685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 787.625139][T29685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 787.689637][ T7158] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9271'. [ 787.869781][T29685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.881347][ T7164] netlink: 'syz.4.9274': attribute type 10 has an invalid length. [ 787.898747][T29685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 787.916379][T29685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 787.952592][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.959967][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.982002][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.989222][ T7164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.996763][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.003946][ T7164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.044326][ T7164] bridge0: entered promiscuous mode [ 788.053466][ T7164] bridge0: entered allmulticast mode [ 788.060521][ T7164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 788.216271][ T7175] wg1 speed is unknown, defaulting to 1000 [ 788.366987][ T51] Bluetooth: hci5: command tx timeout [ 788.462730][ T7186] netlink: 596 bytes leftover after parsing attributes in process `syz.3.9279'. [ 788.615088][ T7199] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9282'. [ 788.750626][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 789.041449][T29685] veth5: left allmulticast mode [ 789.046364][T29685] veth5: left promiscuous mode [ 789.067142][T29685] bridge2: port 1(veth5) entered disabled state [ 789.250743][T29685] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 789.370605][T29685] erspan0 (unregistering): left promiscuous mode [ 789.404504][T29685] gretap0 (unregistering): left promiscuous mode [ 789.446245][T29685] bond10 (unregistering): (slave gretap2): Releasing active interface [ 789.913021][T29685] bond1 (unregistering): Released all slaves [ 789.931642][T29685] bond2 (unregistering): Released all slaves [ 789.951153][T29685] bond3 (unregistering): Released all slaves [ 789.973461][T29685] bond4 (unregistering): Released all slaves [ 789.997424][T29685] bond5 (unregistering): Released all slaves [ 790.021187][T29685] bond6 (unregistering): (slave batadv1): Releasing active interface [ 790.034885][T29685] bond6 (unregistering): Released all slaves [ 790.058312][T29685] bond7 (unregistering): Released all slaves [ 790.077563][T29685] bond8 (unregistering): Released all slaves [ 790.100594][T29685] bond9 (unregistering): Released all slaves [ 790.122071][T29685] bond10 (unregistering): Released all slaves [ 790.143411][T29685] bond0 (unregistering): Released all slaves [ 790.163824][T29685] bond11 (unregistering): Released all slaves [ 790.308423][T29685] : left promiscuous mode [ 790.446978][ T51] Bluetooth: hci5: command tx timeout [ 790.482012][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.507747][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.526048][ T7247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9293'. [ 790.538167][ T7106] bridge_slave_0: entered allmulticast mode [ 790.565622][ T7106] bridge_slave_0: entered promiscuous mode [ 790.596600][T29685] : left promiscuous mode [ 790.639137][ T7253] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.9295'. [ 790.660746][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.686059][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.731126][ T7106] bridge_slave_1: entered allmulticast mode [ 790.750336][ T7106] bridge_slave_1: entered promiscuous mode [ 790.761668][T29685] tipc: Left network mode [ 790.924018][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.988875][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.232479][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9299'. [ 791.396454][ T7106] team0: Port device team_slave_0 added [ 791.420284][ T7279] netlink: 'syz.2.9300': attribute type 3 has an invalid length. [ 791.433090][ T7106] team0: Port device team_slave_1 added [ 791.462278][ T7283] netlink: 'syz.1.9302': attribute type 2 has an invalid length. [ 791.478898][ T7283] netlink: 119 bytes leftover after parsing attributes in process `syz.1.9302'. [ 791.614534][ T7282] netlink: 'syz.4.9301': attribute type 29 has an invalid length. [ 791.699017][ T7288] netlink: 'syz.4.9301': attribute type 29 has an invalid length. [ 791.742434][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.751427][ T7288] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 791.767382][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.825913][ T7106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.948800][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.955873][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.038068][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9307'. [ 792.097033][ T7106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.279029][ T7106] hsr_slave_0: entered promiscuous mode [ 792.285713][ T7106] hsr_slave_1: entered promiscuous mode [ 792.292425][ T7106] debugfs: 'hsr0' already exists in 'hsr' [ 792.299665][ T7106] Cannot create hsr debugfs directory [ 792.527005][ T51] Bluetooth: hci5: command tx timeout [ 792.746093][T29685] hsr_slave_0: left promiscuous mode [ 792.760775][T29685] hsr_slave_1: left promiscuous mode [ 792.783392][T29685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.827173][T29685] pimreg3 (unregistering): left allmulticast mode [ 792.875807][T29685] pim6reg (unregistering): left allmulticast mode [ 793.157270][T29685] team0 (unregistering): Port device team_slave_1 removed [ 793.186422][T29685] team0 (unregistering): Port device team_slave_0 removed [ 793.433431][ T7340] lo: Caught tx_queue_len zero misconfig [ 793.915695][ T7363] netlink: 'syz.2.9316': attribute type 10 has an invalid length. [ 793.929161][ T7376] __nla_validate_parse: 2 callbacks suppressed [ 793.929180][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9319'. [ 794.046758][ T7363] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 794.275772][T29685] IPVS: stop unused estimator thread 0... [ 794.445020][ T7410] tipc: Started in network mode [ 794.476253][ T7410] tipc: Node identity 664c69ad121a, cluster identity 4711 [ 794.484081][ T7410] tipc: Enabled bearer , priority 0 [ 794.594702][ T7410] syzkaller0: MTU too low for tipc bearer [ 794.607949][ T7410] tipc: Disabling bearer [ 794.680349][ T7423] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9329'. [ 794.748289][ T7431] netlink: 'syz.4.9327': attribute type 6 has an invalid length. [ 794.901425][ T7437] nft_compat: unsupported protocol 0 [ 794.992147][ T7443] netlink: 'syz.1.9333': attribute type 5 has an invalid length. [ 795.011179][ T7440] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 795.088289][ T7440] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 795.151986][ T5901] IPVS: starting estimator thread 0... [ 795.248125][ T7453] IPVS: using max 41 ests per chain, 98400 per kthread [ 795.265249][ T7106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 795.290892][ T7459] netlink: 'syz.4.9335': attribute type 1 has an invalid length. [ 795.336653][ T7106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 795.395734][ T7106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 795.421614][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9336'. [ 795.554050][ T7106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.673494][ T7471] netlink: 164940 bytes leftover after parsing attributes in process `syz.1.9338'. [ 795.848804][ T7106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.917768][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.945658][T29686] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.952886][T29686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.014503][T29702] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.021710][T29702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.051791][ T7502] netlink: 'syz.3.9341': attribute type 1 has an invalid length. [ 796.303755][ T7522] netlink: 'syz.2.9346': attribute type 16 has an invalid length. [ 796.329029][ T7522] netlink: 'syz.2.9346': attribute type 17 has an invalid length. [ 796.486569][ T7522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.571336][ T7537] netlink: 'syz.2.9346': attribute type 3 has an invalid length. [ 796.601045][ T7537] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9346'. [ 796.845955][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.003706][ T7106] veth0_vlan: entered promiscuous mode [ 797.056100][ T7106] veth1_vlan: entered promiscuous mode [ 797.152871][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9358'. [ 797.466587][ T7106] veth0_macvtap: entered promiscuous mode [ 797.512381][ T7106] veth1_macvtap: entered promiscuous mode [ 797.562646][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.598871][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.638819][T29697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.658512][T29697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.716287][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9364'. [ 797.775019][T29697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.799715][T29697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.847241][ T7634] netlink: 'syz.2.9365': attribute type 3 has an invalid length. [ 797.958084][ T7637] netlink: 'syz.4.9364': attribute type 1 has an invalid length. [ 798.090259][ T7637] 8021q: adding VLAN 0 to HW filter on device bond16 [ 798.195029][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9367'. [ 798.215408][T29687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.238199][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.245573][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.269564][T29687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.301327][ T7644] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9367'. [ 798.343357][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.350609][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.358141][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.365284][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.388276][ T7644] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9367'. [ 798.413606][T29697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.422593][T29697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.424249][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.437306][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.437834][ T7660] sctp: [Deprecated]: syz.4.9369 (pid 7660) Use of int in maxseg socket option. [ 798.437834][ T7660] Use struct sctp_assoc_value instead [ 799.124481][ T7710] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 799.135647][ T7710] syzkaller0: entered promiscuous mode [ 799.141388][ T7710] syzkaller0: entered allmulticast mode [ 799.148872][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9380'. [ 799.160674][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9380'. [ 799.257998][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9381'. [ 799.267501][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9381'. [ 799.323663][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9381'. [ 799.345166][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9381'. [ 799.588555][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.599308][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.608342][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.616700][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.625049][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 799.746362][ T7732] wg1 speed is unknown, defaulting to 1000 [ 799.824846][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9387'. [ 799.870599][ T7698] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 800.081786][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9391'. [ 800.169276][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9393'. [ 800.193149][ T7768] netlink: 'syz.2.9394': attribute type 1 has an invalid length. [ 800.211438][ T7768] netlink: 'syz.2.9394': attribute type 2 has an invalid length. [ 800.232545][T23143] lec:lec_start_xmit: lec0:No lecd attached [ 800.282921][ T7768] netlink: 'syz.2.9394': attribute type 1 has an invalid length. [ 800.292126][ T7768] netlink: 'syz.2.9394': attribute type 2 has an invalid length. [ 800.401125][ T7776] syzkaller0: entered promiscuous mode [ 800.411488][ T7776] syzkaller0: entered allmulticast mode [ 800.435156][ T7781] tipc: Started in network mode [ 800.441385][ T7781] tipc: Node identity 12be8c26c43b, cluster identity 4711 [ 800.449409][ T7781] tipc: Enabled bearer , priority 0 [ 800.474214][ T7775] tipc: Resetting bearer [ 800.479906][ T7785] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9400'. [ 800.504888][ T7775] tipc: Disabling bearer [ 800.524911][ T7790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.592879][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 800.707527][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.714828][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.722495][ T7732] bridge_slave_0: entered allmulticast mode [ 800.730466][ T7732] bridge_slave_0: entered promiscuous mode [ 800.739394][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.747805][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.755137][ T7732] bridge_slave_1: entered allmulticast mode [ 800.763366][ T7732] bridge_slave_1: entered promiscuous mode [ 800.804098][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.817630][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.867033][ T7809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.890352][ T7732] team0: Port device team_slave_0 added [ 800.910921][ T7732] team0: Port device team_slave_1 added [ 800.960216][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.972418][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.006054][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.025411][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.032679][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.060195][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.129709][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.145958][ T7732] hsr_slave_0: entered promiscuous mode [ 801.153707][ T7732] hsr_slave_1: entered promiscuous mode [ 801.160349][ T7732] debugfs: 'hsr0' already exists in 'hsr' [ 801.166150][ T7732] Cannot create hsr debugfs directory [ 801.361125][ T7732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.371967][ T7732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.470878][ T7732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.481349][ T7732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.548954][ T7732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.559799][ T7732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.634521][ T7732] batman_adv: batadv0: Removing interface: netdevsim0 [ 801.643540][ T7732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.654211][ T7732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.727386][ T51] Bluetooth: hci4: command tx timeout [ 803.807068][ T51] Bluetooth: hci4: command tx timeout [ 803.972348][ T7815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.999083][ T7732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 804.034212][ T7732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 804.141125][ T7732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 804.179001][ T7854] __nla_validate_parse: 1 callbacks suppressed [ 804.179020][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9417'. [ 804.209870][ T7732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 804.214849][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9417'. [ 804.253110][ T7854] IPv6: NLM_F_CREATE should be specified when creating new route [ 804.280171][ T9382] IPVS: starting estimator thread 0... [ 804.378407][ T7869] IPVS: using max 35 ests per chain, 84000 per kthread [ 804.480723][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.528407][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9423'. [ 804.540871][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.565516][ T7885] netlink: 'syz.0.9424': attribute type 7 has an invalid length. [ 804.569689][T29687] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.580469][T29687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.593795][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9426'. [ 804.606031][ T7885] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9424'. [ 804.642540][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9427'. [ 804.647845][T29687] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.658645][T29687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.708593][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9428'. [ 804.744817][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.786687][ T7902] siw: device registration error -23 [ 804.799965][ T7903] nbd: must specify at least one socket [ 804.951415][ T7914] syzkaller0: entered promiscuous mode [ 804.961274][ T7914] syzkaller0: entered allmulticast mode [ 804.992399][ T7914] netlink: 'syz.3.9431': attribute type 23 has an invalid length. [ 805.122982][ T7927] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9433'. [ 805.158085][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.679804][ T7732] veth0_vlan: entered promiscuous mode [ 805.695344][ T7732] veth1_vlan: entered promiscuous mode [ 805.748625][ T7732] veth0_macvtap: entered promiscuous mode [ 805.761792][ T7732] veth1_macvtap: entered promiscuous mode [ 805.790105][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.807093][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 805.815152][ C1] lec:lec_tx_timeout: lec0 [ 805.823974][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.844875][T29684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.862059][T29684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.884305][T29684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.894789][ T51] Bluetooth: hci4: command tx timeout [ 805.904573][T29684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.036731][ T7981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9448'. [ 806.070273][T29697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.097436][T29697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.175470][T29697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.204727][T29697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.270317][ T7992] team0: Device gtp0 is up. Set it down before adding it as a team port [ 806.362218][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9454'. [ 806.390877][ T7998] openvswitch: netlink: Missing key (keys=40, expected=80) [ 806.444506][ T8001] syzkaller0: entered promiscuous mode [ 806.457092][ T8001] syzkaller0: entered allmulticast mode [ 806.597914][ T8018] netlink: 'syz.1.9459': attribute type 32 has an invalid length. [ 806.625831][ T8025] netlink: 'syz.3.9460': attribute type 1 has an invalid length. [ 806.740657][ T8025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 806.752270][ T8031] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 806.784533][ T8025] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 806.848723][T29697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 806.988390][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 807.001425][T29687] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.049519][ T8052] netlink: 'syz.3.9467': attribute type 3 has an invalid length. [ 807.057980][ T8052] netlink: 'syz.3.9467': attribute type 3 has an invalid length. [ 807.137437][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 807.145308][T29685] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.272084][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 807.290628][T29711] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.364054][ T8068] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 807.425082][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 807.443526][T29685] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.630093][ T8092] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 807.967568][ T51] Bluetooth: hci4: command tx timeout [ 808.091179][ T8120] xt_hashlimit: size too large, truncated to 1048576 [ 808.104635][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.112375][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.272195][ T8116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.290229][ T8116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.457366][T29685] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.475200][T29685] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.526327][T29685] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.550798][T29685] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.604563][ T8154] syzkaller0: entered promiscuous mode [ 808.617795][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 808.626234][ T8159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.628235][ T8154] syzkaller0: entered allmulticast mode [ 808.674392][ T8162] tipc: Enabled bearer , priority 0 [ 808.703068][ T8152] tipc: Resetting bearer [ 808.740055][ T8152] tipc: Disabling bearer [ 809.164263][ T8194] syzkaller0: entered promiscuous mode [ 809.192857][ T8194] syzkaller0: entered allmulticast mode [ 809.389434][ T8213] syz_tun: entered allmulticast mode [ 809.441937][ T8217] netlink: 'syz.0.9513': attribute type 1 has an invalid length. [ 809.464020][ T8217] netlink: 'syz.0.9513': attribute type 2 has an invalid length. [ 809.484391][ T8221] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 809.495038][ T8221] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 809.502704][ T8221] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 809.623554][ T8230] __nla_validate_parse: 10 callbacks suppressed [ 809.623574][ T8230] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9518'. [ 809.646189][ T8234] netlink: 'syz.2.9520': attribute type 2 has an invalid length. [ 809.663249][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9519'. [ 809.664314][ T8234] 9: entered promiscuous mode [ 809.678324][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9519'. [ 809.683192][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.698701][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.710591][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.719632][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.755751][ T8240] syzkaller0: entered promiscuous mode [ 809.762015][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9520'. [ 809.767301][ T8240] syzkaller0: entered allmulticast mode [ 810.015643][ T8253] sock: sock_timestamping_bind_phc: sock not bind to device [ 810.183218][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9532'. [ 810.199265][ T8273] bridge0: entered promiscuous mode [ 810.214855][ T8273] macsec1: entered promiscuous mode [ 810.221376][ T8273] macsec1: entered allmulticast mode [ 810.226813][ T8273] bridge0: entered allmulticast mode [ 810.245950][ T8273] bridge0: left allmulticast mode [ 810.252138][ T8273] bridge0: left promiscuous mode [ 810.379017][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9537'. [ 810.389497][ T8292] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9537'. [ 810.420439][ T8294] netlink: 'syz.2.9538': attribute type 3 has an invalid length. [ 810.708584][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9547'. [ 810.812217][ T8327] tc_dump_action: action bad kind [ 810.866670][ T8333] netlink: 'syz.3.9552': attribute type 1 has an invalid length. [ 810.940807][ T8333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.950183][ T8333] bond2: (slave bond3): making interface the new active one [ 810.953331][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9552'. [ 810.968158][ T8333] bond2: (slave bond3): Enslaving as an active interface with an up link [ 810.976962][ T8336] tipc: Started in network mode [ 810.981851][ T8336] tipc: Node identity 2e110a45e418, cluster identity 4711 [ 810.998896][ T8336] tipc: Enabled bearer , priority 0 [ 811.014615][ T8337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 811.092814][ T8338] syzkaller0: entered promiscuous mode [ 811.106745][ T8338] syzkaller0: entered allmulticast mode [ 811.116204][ T8338] tipc: Resetting bearer [ 811.129036][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9554'. [ 811.262573][ T8359] IPVS: length: 239 != 24 [ 811.294755][ T8362] tipc: Failed to remove unknown binding: 66,1,1/0:3566278138/3566278140 [ 811.407260][T29697] net_ratelimit: 122 callbacks suppressed [ 811.407279][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 811.422908][ T8359] netlink: 'syz.0.9556': attribute type 7 has an invalid length. [ 811.424807][T29697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 811.531217][ T8378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.559244][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 811.567805][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.577490][T29685] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 811.680838][T29711] tipc: Resetting bearer [ 811.701100][ T8380] macvlan0: entered promiscuous mode [ 811.708465][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 811.726247][ T8329] tipc: Resetting bearer [ 811.737348][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 811.771104][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 811.811981][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 811.891936][ T8397] IPVS: length: 248 != 24 [ 813.430226][ T8329] tipc: Disabling bearer [ 813.442497][ T8388] validate_nla: 1 callbacks suppressed [ 813.442514][ T8388] netlink: 'syz.0.9568': attribute type 1 has an invalid length. [ 813.611934][ T8395] netlink: 'syz.2.9569': attribute type 12 has an invalid length. [ 813.621443][ T8395] netlink: 'syz.2.9569': attribute type 29 has an invalid length. [ 813.629916][ T5901] tipc: Node number set to 3389590085 [ 813.667161][ T8404] bridge1: entered promiscuous mode [ 813.807014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.815050][ C1] lec:lec_tx_timeout: lec0 [ 813.982744][ T8437] geneve2: entered promiscuous mode [ 814.116366][ T8453] tipc: New replicast peer: 255.255.255.255 [ 814.133305][ T8453] tipc: Enabled bearer , priority 10 [ 814.363298][ T8471] syzkaller0: entered promiscuous mode [ 814.384820][ T8471] syzkaller0: entered allmulticast mode [ 814.641118][ T8487] __nla_validate_parse: 19 callbacks suppressed [ 814.641138][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9597'. [ 814.674777][ T8492] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9600'. [ 814.748664][ T8487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9597'. [ 815.101290][ T8530] syzkaller0: entered promiscuous mode [ 815.106774][ T8530] syzkaller0: entered allmulticast mode [ 815.247003][T16770] tipc: Node number set to 1951820205 [ 816.437125][T29685] net_ratelimit: 166 callbacks suppressed [ 816.437148][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.467916][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.487103][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.508239][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.537084][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.568179][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.589106][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.617866][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.639117][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 816.666981][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 817.643227][ T8493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.831644][ T8541] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.9611'. [ 817.870895][ T8552] tipc: Enabling of bearer rejected, failed to enable media [ 817.910512][ T8555] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9614'. [ 817.946668][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9615'. [ 817.970421][ T8559] netlink: 'syz.1.9615': attribute type 7 has an invalid length. [ 817.990646][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9615'. [ 818.024349][ T8559] erspan0: entered promiscuous mode [ 818.044910][ T8559] erspan0: left promiscuous mode [ 818.523607][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9623'. [ 818.562119][ T8606] syz_tun: entered allmulticast mode [ 818.580312][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9624'. [ 818.641288][ T8606] syz_tun (unregistering): left allmulticast mode [ 818.957867][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9632'. [ 819.414894][ T8660] gretap0: entered promiscuous mode [ 819.438420][ T8660] erspan0: entered promiscuous mode [ 819.443800][ T8651] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 819.471229][ T8660] : Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 819.505759][ T8660] : Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 819.524682][ T8651] xt_ecn: cannot match TCP bits for non-tcp packets [ 819.772100][ T8687] __nla_validate_parse: 7 callbacks suppressed [ 819.772118][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9649'. [ 819.787592][ T8687] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9649'. [ 819.845214][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9649'. [ 819.887143][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9652'. [ 819.896220][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9652'. [ 820.040034][ T8706] xt_ecn: cannot match TCP bits for non-tcp packets [ 820.077265][ T8710] netlink: 'syz.0.9654': attribute type 7 has an invalid length. [ 820.112848][T29686] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.112975][ T8710] netlink: 'syz.0.9654': attribute type 7 has an invalid length. [ 820.131287][T29686] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.131327][T29686] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.131358][T29686] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.165214][ T8717] x_tables: duplicate underflow at hook 1 [ 820.384828][ T8737] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 820.437733][ T8737] netlink: 19 bytes leftover after parsing attributes in process `syz.3.9664'. [ 820.518304][ T8749] netlink: 'syz.2.9667': attribute type 1 has an invalid length. [ 820.530826][ T8749] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 820.704588][ T8765] netlink: 'syz.4.9672': attribute type 1 has an invalid length. [ 820.770683][ T8769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9672'. [ 820.794459][ T8776] netlink: 'syz.2.9675': attribute type 1 has an invalid length. [ 820.816101][ T8765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 820.847212][ T5909] page_pool_release_retry() stalled pool shutdown: id 213, 1 inflight 60 sec [ 820.890878][ T8776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 820.906486][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 820.943128][ T8769] bond2: (slave batadv1): making interface the new active one [ 820.953885][ T8769] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 820.998486][ T8787] bond2: (slave geneve2): making interface the new active one [ 821.011469][ T8787] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 821.015026][ T8794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9679'. [ 821.072213][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9681'. [ 821.128884][ T8796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.442699][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9690'. [ 821.497750][T16770] IPVS: starting estimator thread 0... [ 821.527225][T29686] net_ratelimit: 137 callbacks suppressed [ 821.527245][T29686] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.528817][ T8831] vlan2: entered allmulticast mode [ 821.548818][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.571612][ T8831] bond0: entered allmulticast mode [ 821.577308][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.580479][ T8831] bond_slave_0: entered allmulticast mode [ 821.587320][ T8833] IPVS: using max 32 ests per chain, 76800 per kthread [ 821.599194][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.610562][ T8831] bond_slave_1: entered allmulticast mode [ 821.616779][ T8831] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 821.628834][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.656555][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.656993][T29686] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.698015][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.708893][T29686] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.737737][T29686] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.767064][T29686] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 821.775121][T29686] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 822.003211][ T8864] netlink: 'syz.2.9703': attribute type 9 has an invalid length. [ 822.554653][ T8903] netlink: 'syz.4.9716': attribute type 33 has an invalid length. [ 822.572036][ T8908] netlink: 'syz.3.9717': attribute type 1 has an invalid length. [ 822.632135][ T8905] syzkaller0: entered promiscuous mode [ 822.639569][ T8909] netlink: 'syz.2.9714': attribute type 4 has an invalid length. [ 822.649340][ T8905] syzkaller0: entered allmulticast mode [ 822.722456][ T8907] netlink: 'syz.2.9714': attribute type 4 has an invalid length. [ 824.958269][ T8970] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 825.077863][ T8982] __nla_validate_parse: 8 callbacks suppressed [ 825.077883][ T8982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9729'. [ 825.389717][ T9009] sctp: [Deprecated]: syz.0.9736 (pid 9009) Use of int in maxseg socket option. [ 825.389717][ T9009] Use struct sctp_assoc_value instead [ 825.392204][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9737'. [ 825.417619][ T9010] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9737'. [ 825.429939][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9737'. [ 825.737594][ T9052] validate_nla: 1 callbacks suppressed [ 825.737612][ T9052] netlink: 'syz.2.9748': attribute type 13 has an invalid length. [ 825.755914][ T9052] netlink: 'syz.2.9748': attribute type 58 has an invalid length. [ 825.787089][ T9052] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9748'. [ 825.828051][ T9057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9749'. [ 825.907199][ T9066] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9752'. [ 825.916404][ T9066] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9752'. [ 825.926235][ T9066] netlink: 'syz.2.9752': attribute type 6 has an invalid length. [ 825.956523][ T9066] netlink: 'syz.2.9752': attribute type 5 has an invalid length. [ 825.967675][ T9066] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9752'. [ 826.022194][ T9079] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9754'. [ 826.159804][ T9084] tunl0: entered promiscuous mode [ 826.165050][ T9084] netlink: 'syz.4.9756': attribute type 3 has an invalid length. [ 826.283593][ T9091] netlink: 'syz.1.9759': attribute type 1 has an invalid length. [ 826.366435][ T9091] tipc: Enabled bearer , priority 0 [ 826.385520][ T9096] tipc: Enabling of bearer rejected, already enabled [ 826.397676][ T9091] syzkaller0: entered promiscuous mode [ 826.403175][ T9091] syzkaller0: entered allmulticast mode [ 826.480716][ T9091] tipc: Resetting bearer [ 826.519041][ T9117] sctp: [Deprecated]: syz.0.9765 (pid 9117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.519041][ T9117] Use struct sctp_sack_info instead [ 826.537021][T29697] net_ratelimit: 191 callbacks suppressed [ 826.537038][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 826.577062][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 826.600011][ T9121] netlink: zone id is out of range [ 826.605489][ T9121] netlink: zone id is out of range [ 826.612436][ T9121] netlink: zone id is out of range [ 826.620378][ T9121] netlink: zone id is out of range [ 826.620520][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 826.625638][ T9121] netlink: zone id is out of range [ 826.640170][ T9121] netlink: zone id is out of range [ 826.646091][T29684] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 826.682291][ T9090] tipc: Resetting bearer [ 826.747595][ T9090] tipc: Disabling bearer [ 826.991808][ T9151] netlink: 'syz.2.9778': attribute type 1 has an invalid length. [ 827.491082][ T9198] netlink: 'syz.3.9787': attribute type 6 has an invalid length. [ 827.849798][ T9228] netlink: 'syz.0.9794': attribute type 1 has an invalid length. [ 828.187024][ T9243] Bluetooth: MGMT ver 1.23 [ 828.454288][ T9251] bond3: entered allmulticast mode [ 828.610357][ T9267] netlink: 'syz.1.9803': attribute type 23 has an invalid length. [ 829.310709][ T9326] tipc: Enabled bearer , priority 0 [ 829.399026][ T9326] syzkaller0: entered promiscuous mode [ 829.404543][ T9326] syzkaller0: entered allmulticast mode [ 829.408816][ T9334] x_tables: duplicate underflow at hook 1 [ 829.432262][ T9326] tipc: Resetting bearer [ 829.492942][ T9325] tipc: Resetting bearer [ 831.319044][ T9325] tipc: Disabling bearer [ 831.334739][ T9353] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 831.524690][ T9384] bond4 (unregistering): Released all slaves [ 831.557077][T29697] net_ratelimit: 183 callbacks suppressed [ 831.557095][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.574862][T29697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 831.582883][ T9397] validate_nla: 3 callbacks suppressed [ 831.582894][ T9397] netlink: 'syz.4.9834': attribute type 9 has an invalid length. [ 831.624933][ T9394] : renamed from team_slave_1 (while UP) [ 831.698342][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.727457][T29697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.757019][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.765131][T29684] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 831.888552][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.903928][ T9411] syzkaller1: entered promiscuous mode [ 831.909816][ T9411] syzkaller1: entered allmulticast mode [ 831.916963][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.921079][ T9411] netlink: 'syz.0.9839': attribute type 10 has an invalid length. [ 831.928472][ T9414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.969879][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 831.989893][ T9411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 831.997063][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 832.025012][ T9417] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 832.059168][ T9422] __nla_validate_parse: 17 callbacks suppressed [ 832.059187][ T9422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9843'. [ 832.085611][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.093037][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.152020][ T9422] --map-set only usable from mangle table [ 832.164011][ T9429] netlink: 'syz.3.9844': attribute type 29 has an invalid length. [ 832.172769][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9844'. [ 832.260540][ T9437] netlink: 'syz.2.9846': attribute type 12 has an invalid length. [ 832.270561][ T9437] netlink: 'syz.2.9846': attribute type 29 has an invalid length. [ 832.278807][ T9437] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9846'. [ 832.290598][ T9437] netlink: 'syz.2.9846': attribute type 2 has an invalid length. [ 832.314682][ T9437] netlink: 23 bytes leftover after parsing attributes in process `syz.2.9846'. [ 835.432968][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9848'. [ 836.041558][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9854'. [ 836.570447][T29687] net_ratelimit: 228 callbacks suppressed [ 836.570469][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.597041][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.618716][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.646948][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.678844][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.717323][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.738711][T29685] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.760071][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.787257][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 836.809070][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 837.302292][ T9457] kthread_run failed with err -4 [ 837.308080][ T9459] netlink: 'syz.1.9852': attribute type 13 has an invalid length. [ 837.372889][ T9477] netlink: 'syz.2.9855': attribute type 21 has an invalid length. [ 837.413891][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9855'. [ 837.431187][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9855'. [ 837.508101][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9856'. [ 837.519469][ T9484] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 837.677789][ T9499] netlink: 'syz.3.9863': attribute type 18 has an invalid length. [ 837.683088][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9865'. [ 837.717316][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.738528][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.788536][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.800243][ T9504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9861'. [ 837.814048][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.031342][ T9517] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9869'. [ 838.048251][ T9517] syzkaller1: entered promiscuous mode [ 838.053758][ T9517] syzkaller1: entered allmulticast mode [ 838.210032][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9872'. [ 838.362866][ T9538] wg1 speed is unknown, defaulting to 1000 [ 838.377886][ T9541] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9876'. [ 838.383366][ T9542] syzkaller0: entered promiscuous mode [ 838.404879][ T9542] syzkaller0: entered allmulticast mode [ 838.436380][ T9542] tipc: Enabled bearer , priority 0 [ 838.456782][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9876'. [ 838.584368][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9877'. [ 840.541149][ T9537] tipc: Resetting bearer [ 840.561948][ T9537] tipc: Disabling bearer [ 840.581554][ T5901] tipc: Node number set to 3599076390 [ 840.749346][ T9579] [ 840.751712][ T9579] ====================================================== [ 840.758760][ T9579] WARNING: possible circular locking dependency detected [ 840.765771][ T9579] syzkaller #0 Not tainted [ 840.770166][ T9579] ------------------------------------------------------ [ 840.777160][ T9579] syz.2.9886/9579 is trying to acquire lock: [ 840.783139][ T9579] ffffffff8fd47ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 840.792253][ T9579] [ 840.792253][ T9579] but task is already holding lock: [ 840.799594][ T9579] ffff888059717070 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 840.808804][ T9579] [ 840.808804][ T9579] which lock already depends on the new lock. [ 840.808804][ T9579] [ 840.819206][ T9579] [ 840.819206][ T9579] the existing dependency chain (in reverse order) is: [ 840.828211][ T9579] [ 840.828211][ T9579] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 840.836197][ T9579] _raw_spin_lock_bh+0x36/0x50 [ 840.841481][ T9579] nr_rt_device_down+0x153/0x860 [ 840.846930][ T9579] nr_device_event+0x137/0x150 [ 840.852204][ T9579] notifier_call_chain+0x1be/0x400 [ 840.857833][ T9579] __dev_notify_flags+0x16d/0x310 [ 840.863376][ T9579] netif_change_flags+0xe8/0x1a0 [ 840.868825][ T9579] dev_change_flags+0x130/0x260 [ 840.874190][ T9579] dev_ioctl+0x7b4/0x1150 [ 840.879028][ T9579] sock_do_ioctl+0x23e/0x320 [ 840.884123][ T9579] sock_ioctl+0x5c6/0x7f0 [ 840.888960][ T9579] __se_sys_ioctl+0xfc/0x170 [ 840.894056][ T9579] do_syscall_64+0x14d/0xf80 [ 840.899160][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.905565][ T9579] [ 840.905565][ T9579] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 840.913374][ T9579] _raw_spin_lock_bh+0x36/0x50 [ 840.918654][ T9579] nr_rt_device_down+0xbe/0x860 [ 840.924017][ T9579] nr_device_event+0x137/0x150 [ 840.929293][ T9579] notifier_call_chain+0x1be/0x400 [ 840.934919][ T9579] __dev_notify_flags+0x16d/0x310 [ 840.940462][ T9579] netif_change_flags+0xe8/0x1a0 [ 840.945912][ T9579] dev_change_flags+0x130/0x260 [ 840.951272][ T9579] dev_ioctl+0x7b4/0x1150 [ 840.956114][ T9579] sock_do_ioctl+0x23e/0x320 [ 840.961213][ T9579] sock_ioctl+0x5c6/0x7f0 [ 840.966058][ T9579] __se_sys_ioctl+0xfc/0x170 [ 840.971160][ T9579] do_syscall_64+0x14d/0xf80 [ 840.976282][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.982686][ T9579] [ 840.982686][ T9579] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 840.990583][ T9579] __lock_acquire+0x15a5/0x2cf0 [ 840.995948][ T9579] lock_acquire+0xf0/0x2e0 [ 841.000874][ T9579] _raw_spin_lock_bh+0x36/0x50 [ 841.006152][ T9579] nr_del_node+0x57d/0xbb0 [ 841.011084][ T9579] nr_rt_ioctl+0xb34/0xf90 [ 841.016020][ T9579] sock_do_ioctl+0x101/0x320 [ 841.021115][ T9579] sock_ioctl+0x5c6/0x7f0 [ 841.025952][ T9579] __se_sys_ioctl+0xfc/0x170 [ 841.031050][ T9579] do_syscall_64+0x14d/0xf80 [ 841.036155][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.042557][ T9579] [ 841.042557][ T9579] other info that might help us debug this: [ 841.042557][ T9579] [ 841.052777][ T9579] Chain exists of: [ 841.052777][ T9579] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 841.052777][ T9579] [ 841.066603][ T9579] Possible unsafe locking scenario: [ 841.066603][ T9579] [ 841.074068][ T9579] CPU0 CPU1 [ 841.079419][ T9579] ---- ---- [ 841.084767][ T9579] lock(&nr_node->node_lock); [ 841.089518][ T9579] lock(nr_node_list_lock); [ 841.096617][ T9579] lock(&nr_node->node_lock); [ 841.103886][ T9579] lock(nr_neigh_list_lock); [ 841.108554][ T9579] [ 841.108554][ T9579] *** DEADLOCK *** [ 841.108554][ T9579] [ 841.116681][ T9579] 2 locks held by syz.2.9886/9579: [ 841.121776][ T9579] #0: ffffffff8fd47b38 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 841.131347][ T9579] #1: ffff888059717070 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 841.140998][ T9579] [ 841.140998][ T9579] stack backtrace: [ 841.146874][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.2.9886 Not tainted syzkaller #0 PREEMPT(full) [ 841.146892][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.146903][ T9579] Call Trace: [ 841.146911][ T9579] [ 841.146919][ T9579] dump_stack_lvl+0xe8/0x150 [ 841.146942][ T9579] print_circular_bug+0x2e1/0x300 [ 841.146967][ T9579] check_noncircular+0x12e/0x150 [ 841.146991][ T9579] __lock_acquire+0x15a5/0x2cf0 [ 841.147018][ T9579] lock_acquire+0xf0/0x2e0 [ 841.147035][ T9579] ? nr_del_node+0x57d/0xbb0 [ 841.147058][ T9579] ? nr_del_node+0x247/0xbb0 [ 841.147081][ T9579] ? nr_del_node+0x57d/0xbb0 [ 841.147101][ T9579] _raw_spin_lock_bh+0x36/0x50 [ 841.147122][ T9579] ? nr_del_node+0x57d/0xbb0 [ 841.147142][ T9579] nr_del_node+0x57d/0xbb0 [ 841.147166][ T9579] nr_rt_ioctl+0xb34/0xf90 [ 841.147191][ T9579] ? kasan_quarantine_put+0xbb/0x1f0 [ 841.147205][ T9579] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 841.147230][ T9579] ? apparmor_capable+0x137/0x1a0 [ 841.147254][ T9579] ? capable+0x88/0xe0 [ 841.147273][ T9579] ? nr_ioctl+0x1b1/0x3b0 [ 841.147298][ T9579] sock_do_ioctl+0x101/0x320 [ 841.147315][ T9579] ? __pfx_sock_do_ioctl+0x10/0x10 [ 841.147329][ T9579] ? do_futex+0x333/0x420 [ 841.147352][ T9579] sock_ioctl+0x5c6/0x7f0 [ 841.147367][ T9579] ? __pfx_sock_ioctl+0x10/0x10 [ 841.147381][ T9579] ? __fget_files+0x2a/0x420 [ 841.147401][ T9579] ? __fget_files+0x3a0/0x420 [ 841.147420][ T9579] ? __fget_files+0x2a/0x420 [ 841.147440][ T9579] ? bpf_lsm_file_ioctl+0x9/0x20 [ 841.147459][ T9579] ? __pfx_sock_ioctl+0x10/0x10 [ 841.147472][ T9579] __se_sys_ioctl+0xfc/0x170 [ 841.147489][ T9579] do_syscall_64+0x14d/0xf80 [ 841.147511][ T9579] ? trace_irq_disable+0x3b/0x150 [ 841.147533][ T9579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.147549][ T9579] ? clear_bhb_loop+0x40/0x90 [ 841.147566][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.147581][ T9579] RIP: 0033:0x7f3ce359c629 [ 841.147595][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.147609][ T9579] RSP: 002b:00007f3ce44b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.147626][ T9579] RAX: ffffffffffffffda RBX: 00007f3ce3815fa0 RCX: 00007f3ce359c629 [ 841.147638][ T9579] RDX: 0000200000000140 RSI: 000000000000890c RDI: 0000000000000007 [ 841.147648][ T9579] RBP: 00007f3ce3632b39 R08: 0000000000000000 R09: 0000000000000000 [ 841.147659][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.147668][ T9579] R13: 00007f3ce3816038 R14: 00007f3ce3815fa0 R15: 00007fff7a2ddd28 [ 841.147685][ T9579] [ 841.481723][ T9587] syzkaller0: entered promiscuous mode [ 841.491218][ T9587] syzkaller0: entered allmulticast mode [ 841.598548][T29687] net_ratelimit: 166 callbacks suppressed [ 841.598568][T29687] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 841.647094][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 841.654891][T29684] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 841.727031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.735597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.743834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.752119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.760371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.768611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.776766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.627469][ T12] net_ratelimit: 96 callbacks suppressed [ 846.627490][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.641447][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.756960][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.764743][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.877053][T29684] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 846.884836][T29684] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 846.996980][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 847.004762][T29711] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 847.116985][T29711] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 847.124752][T29711] bond1: (slave ip6gretap1): failed to get link speed/duplex