last executing test programs: 1.659331031s ago: executing program 2 (id=2165): unshare(0x6020400) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRES8=0x0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x18, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @exit, @tail_call, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], &(0x7f0000000000)='GPL\x00', 0x80, 0x4d, &(0x7f0000000100)=""/77, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x8001, 0xe9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, r0], &(0x7f0000000380)=[{0x4, 0x3, 0x2, 0x5}, {0x3, 0x4, 0xa, 0x7}, {0x4, 0x1, 0x1, 0x8}], 0x10, 0xfffffffa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) 1.59184587s ago: executing program 2 (id=2167): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) 1.230299588s ago: executing program 2 (id=2179): syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 1.132384475s ago: executing program 3 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x24000880}, 0x4048010) socket$l2tp6(0xa, 0x2, 0x73) 1.131312924s ago: executing program 4 (id=2182): r0 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000100900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a05000000000000000000070000000900010073797a30000000000c0010"], 0xb0}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newroute={0x2c, 0x18, 0x300, 0x70bd28, 0x25dfdbfe, {0xa, 0x10, 0x10, 0x7, 0xfc, 0x4, 0xff, 0x9, 0x400}, [@RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_PREF={0x5, 0x14, 0x1}]}, 0x2c}}, 0x0) 1.130767833s ago: executing program 2 (id=2183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="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", 0x10a}], 0x1}, 0xad3d961e210f60a5) 1.057759483s ago: executing program 3 (id=2185): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r1) 1.050158921s ago: executing program 2 (id=2186): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=@delchain={0x34, 0x64, 0xf31, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async, rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 984.203209ms ago: executing program 4 (id=2187): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0, 0x37, 0x0, 0x1, 0x0, 0x10000}, 0x28) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB="01000000f0"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket(0x29, 0x4, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) 923.514763ms ago: executing program 4 (id=2189): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44040) (async, rerun: 64) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="b0a2120f2a7a15affed93e3f826d2744", 0x10) 812.216791ms ago: executing program 2 (id=2190): r0 = socket$inet6(0xa, 0x5, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) listen(r0, 0x800803fc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x2, 0x2, 0x0, 0x2}}]}}]}, 0x48}}, 0xc0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) shutdown(r0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f00000009c0)) 779.978125ms ago: executing program 3 (id=2192): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$rxrpc(0x21, 0x2, 0x2) splice(r0, &(0x7f0000000080)=0xfff, r2, &(0x7f0000000100)=0x6, 0x8, 0xa) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) close(r0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f00000005c0)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}, 'virt_wifi0\x00'}) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) 657.789102ms ago: executing program 0 (id=2194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) 642.64736ms ago: executing program 1 (id=2195): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x0) (rerun: 32) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000100)="23000000010006", 0x7) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYRES8=r2], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 568.143405ms ago: executing program 0 (id=2196): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0xa945, 0x4) r2 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000000)=""/69, 0x45, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0xa945, 0x4) (async) socket(0x10, 0x80000, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pread64(r0, &(0x7f0000000000)=""/69, 0x45, 0xffffffffffffffff) (async) 567.524263ms ago: executing program 4 (id=2197): r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) socketpair(0x6, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='veth1_to_bridge\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, r7}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x274, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xe6, 0xc, "6d92148ef69df174857b513aaa836f5b1f18509f19374305ac15f7e5758a9eefe298de8674406a93a5b1f4d97177685fe4e1f6d43329f1339fc7838f67febf17ec551f328cf3ad2075c321d3040fa668b291605b1fec1afa7fd8fdf68b542de87d298887ff31037d6005b43d98391f9d95c6ef5c2ea8c0259170e6aa84dd8d2e1e9e1e4271eba103deef2b2f4ba44ed69fe64d2c5f1cda58a503fd5c9bd2def277ccc152f520b53b52347f3a8cc9eab4b88a8c21daaf311262ee57aeb1e561bf3c53ac7dec8a9ec00d888cc1670e6ec34af4386106598e694efd1f57ff6c7870ad95"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x46}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x104, 0xc, "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"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x72705b7120f6926e, 0x0, 0x1}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bbdb6c7}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x765b50a6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x3e0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa44}, @NFTA_SET_DESC={0x218, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb8f}]}]}, @NFTA_SET_DESC_CONCAT={0x194, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36f54a97}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x431}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffe622}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf369a96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3fff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}]}]}, @NFTA_SET_DESC={0xfc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff6f9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d41}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7e17}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x8c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x86c}, 0x1, 0x0, 0x0, 0x20008015}, 0x20000005) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={r5}) 527.508891ms ago: executing program 0 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) 466.252735ms ago: executing program 4 (id=2199): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x5, 0x1, 0x51, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1, 0x40, 0x7, 0x101, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xd}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x110, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x4, 0xa34]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xd2, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xed}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0xf}}, 0x0, 0x1, 0x17, @val={0x10, 0x1, 0xc1}, [{0xdd, 0xab, "5d86c3763f560e1aeddce92a5d623bae95735d2c6fde6ccfca870847884268a069e8aef845d3581983b8fe5576fb9f9873d6c7b55c0e32ca54cda9cdbef3a8ea9def633de4634f4982ba20015e3c44d663ac23680dc7c79150fb8272bf3a89254683afa3e81899113d72b5ed9a4ddfef01612e30169e0da50658302830c96b178d63e3efc9c3df4e67cabb84971bfc7ee8f420165e8a2b36487be5c5debcf3fa713c967f15e70037756473"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 384.039201ms ago: executing program 1 (id=2200): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="007b0000000000005ac1d31470deedee76a700ccf30ca689f4dedcea15daa5d15d43def368e4616ee13ca821f7d18f0899631584ff69f3a3aad44c5070d23b50f827353cd9ab8fb345726346fc5b6dfb4dc8091d6bf27c838e4860391e6e53d33e28302e54fb8b0a1bcd343c836bbec4059f9176681e57daf87ec8333b253e271d7bae06ab0cb996b46035cd8c52b6c2c4da868df0ccf2198cbc469f9079b4891c9b96c6d2903ed3c4947f8b9d4dd2a48c9c2f32d3276aba8f85dbd7b0465cb4ff43f0d4dd3561326cb14e68392764bdd8709bf98279393799f79cc1bde88a93ed5378eb0e76d6585b40b95dfc68c059d4719f556d4e605c39fa32"], 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "d5a038e286ab13ce", "6b07ed92e924cd89e3e2f419b7689ee4e210a5ce1492e25783a3b47c0698e0f8", "82a681dd", "31ab7818128b2c01"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "59addfce7ba79bf5", "eefc6bc1067fafcdfba8791cdeabde32f3d80eb4b4c2f1b41d915437ad469248", "aed7cbdd", "d3f6000e0d26cc5f"}, 0x38) r3 = getpid() r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='ata_eh_link_autopsy_qc\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000340)={r3, r4, 0x0, 0x0, 0x0, 0x0}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r10, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01032aa14ee8610d9b090b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) (async) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01032aa14ee8610d9b090b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) bind$alg(r0, 0x0, 0x0) (async) bind$alg(r0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000d7def54042cf61e02797090f2baa000a0000007f00000100000000000000000000000000000000000000fe80000000000000"], 0x23c}}, 0x4084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="8bdfd8ec37aa8d0a00c9c0e4185c", 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="8bdfd8ec37aa8d0a00c9c0e4185c", 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 344.302275ms ago: executing program 1 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r4, 0x801, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async) recvmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}, 0x7}, {{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1}, 0x7ff}], 0x2, 0x40002080, &(0x7f0000000500)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) (async) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002740)=""/4077, 0xfed}, {&(0x7f0000000040)=""/53, 0x35}], 0x2}}], 0x1, 0x102, 0x0) 342.304662ms ago: executing program 0 (id=2202): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) r1 = socket$inet(0x2, 0x3, 0x6) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000180)=""/146, &(0x7f0000000240)=0x92) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x6, 0x1b, 0x0, &(0x7f0000000240)) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000200000004000000ff00160000000000", @ANYRES8=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) pipe(&(0x7f0000000300)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r4, &(0x7f0000000980)="16c2a8858c6361e13c3089bdf19a1894ad1b7934aaef55d83ef9250a9e5ca67b1abd89ff55687dd317710a00a48038ca3df8526afa6f27c8644f2f6872ca9c5c87620c9005e47d7066565c93f5222beac5ce2b499f813f1ba571e5593da28c21d902b50e5738b59de65bb2245b2fcffb76c0f78dd95d7c049ac56eecdc39d30a62d7c8d60d7dbb278742a51602f89954741799c4b665d049ad45413f8c6040d058c5d35aa3928200bcfd644752367c0c07"}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x14, 0x0, "5f18c9ea8b7d36c8ce9b1afcd1bca0027ab0169723d3d9bac5cfa12ed02073871d561d9c68efda8827e2b6d9f9f63b41d3725635714de04461a4924b283bda83cc493f8d531c69c5d62fbce3701246ae"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r7, @ANYBLOB="408052"], 0x1c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r3}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x9, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @alu={0x4, 0x0, 0x8, 0x3, 0x9, 0xfffffffffffffffc, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x10, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r4], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x3, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES16=r5, @ANYRESHEX=r7], 0x0, 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x84) r10 = socket$vsock_stream(0x28, 0x1, 0x0) r11 = accept4(r10, 0x0, &(0x7f0000000400), 0x180000) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000480)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x1}, @rc={0x1f, @any, 0x9}, @l2={0x1f, 0x401, @any, 0x9, 0x1}, 0x3007, 0x0, 0x0, 0x0, 0x7edf, &(0x7f0000000440)='wg2\x00', 0x2, 0x5, 0x2}) setsockopt$sock_attach_bpf(r9, 0x84, 0x84, &(0x7f0000000000), 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001000000127bd70000500000000000000", @ANYRES32=0x0, @ANYBLOB="630e0100142800000000198000000400f4ec7b059105a541b92e21a82aa8996bc76960029b8050406aaeecc11572"], 0x56}, 0x1, 0x2000000000000000, 0x0, 0x40}, 0x80) ioctl$sock_inet_SIOCGIFNETMASK(r12, 0x891b, &(0x7f0000000140)={'veth0\x00', {0x2, 0x0, @private}}) sendmsg$inet(r9, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 337.532111ms ago: executing program 4 (id=2203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000005c0)='I', 0x1) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x25, 0x148, 0x138, 0x60, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x21b, 0x0, 0x0, 0xffffffff, 0x7fff}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x12c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x118, 0x1, [@m_police={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x56, 0x6, "1c129a716c96006c48db5bd2cddfe272990659b02aaa270b7c5d8953ab343fcb2a95dd3ced4d5f00000000000000802211f4465d6db6ddcf712ea44ae1478857c0ae6f336ce39b6ecdda0b3ac3adde0adef7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x80, 0x7, 0xecf, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xd81, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0xc4) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 160.090895ms ago: executing program 3 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8dc}, 0x20004004) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) 159.316578ms ago: executing program 1 (id=2205): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003700000828bd7000fddbdf251300000008004200", @ANYRES32=0x0, @ANYBLOB="ef369231683e5148c7496624f527a3db00335bdad743ce26ab631d8efd2a6efa7622023b9e983a8223d90899416f4801a3632c96f0b702271b08353819ae654634b5c4cea69d761551c707f0959bcf64b7ac51a73e7c9565d36e4658c3656a81f1a5a3ceffefd6d939e05c11282541bed501373c4a5b5ec2dc3fec297602d7a344da6b3b3d338fc8f83bd4068085367a89d79106eb102456e697e88c52c9082bc891c7db087842bcb7de37d4c020d094b3dffebb789de423ebef9527550e08d94a156e6d"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x11c, 0x2b, 0x1, 0x2, 0x25dfdbfc, "", [@nested={0x109, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x11c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 156.116308ms ago: executing program 0 (id=2206): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) 93.371259ms ago: executing program 0 (id=2207): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {0xffff, 0x8}, {0x3}}, [{0x4}, {0x4}]}, 0x2c}}, 0x44000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x3c67032e14c713a, 0xffffffffffffffff, 0x16aa5000) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200ff0000000000000040000a00000008000100feffffff"], 0x1c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) (async) sendto$packet(r1, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {0xffff, 0x8}, {0x3}}, [{0x4}, {0x4}]}, 0x2c}}, 0x44000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r6, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) (async) shutdown(r6, 0x1) (async) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) (async) 90.643085ms ago: executing program 3 (id=2208): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000180)=""/212, 0x2e, 0x91, 0x1}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) 87.011521ms ago: executing program 1 (id=2209): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) 376.295µs ago: executing program 3 (id=2210): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) 0s ago: executing program 1 (id=2211): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) shutdown(r2, 0x1) (async) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=ANY=[@ANYBLOB="b00c0000120000032dbd7000ffdbdf251b0000007cd3d82105d343c0d41b7ed0389fa67097718a2de22795cfa1ec2496c562130a6e0228a06d964691f166a081eea48d5d84a9e11ae2d0962aeabb1cb1d1d728b1d2e7b0ac055666abb6092f5ced1f7570803e450ad44c54afcf02183217cb854ea88385fd5641a3397701fe347591cd38ff89", @ANYRES32=0x0, @ANYBLOB="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"], 0xcb0}, 0x1, 0x0, 0x0, 0x1800}, 0x10) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x10f, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000380)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8b03806}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x814) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 68.978471][ T5846] cgroup: Unknown subsys name 'net' [ 69.109953][ T5846] cgroup: Unknown subsys name 'cpuset' [ 69.117879][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.461970][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.508589][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.515370][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.264579][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.286616][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.296384][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.307811][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.317294][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.325915][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.326313][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.333362][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.341566][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.355388][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.362943][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.363219][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.370313][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.384323][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.386201][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.399249][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.400523][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.408484][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.414877][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.422687][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.432601][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.446430][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.455115][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.462533][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.463933][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.862852][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 74.890813][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 74.949596][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 74.971735][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 75.044106][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 75.115627][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.123955][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.132614][ T5857] bridge_slave_0: entered allmulticast mode [ 75.140867][ T5857] bridge_slave_0: entered promiscuous mode [ 75.175992][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.184084][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.191488][ T5857] bridge_slave_1: entered allmulticast mode [ 75.198542][ T5857] bridge_slave_1: entered promiscuous mode [ 75.209101][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.216287][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.223548][ T5859] bridge_slave_0: entered allmulticast mode [ 75.230475][ T5859] bridge_slave_0: entered promiscuous mode [ 75.241688][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.249050][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.256306][ T5873] bridge_slave_0: entered allmulticast mode [ 75.263171][ T5873] bridge_slave_0: entered promiscuous mode [ 75.285475][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.292828][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.300059][ T5859] bridge_slave_1: entered allmulticast mode [ 75.307000][ T5859] bridge_slave_1: entered promiscuous mode [ 75.318679][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.325915][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.333224][ T5873] bridge_slave_1: entered allmulticast mode [ 75.340781][ T5873] bridge_slave_1: entered promiscuous mode [ 75.393351][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.404691][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.412395][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.420168][ T5856] bridge_slave_0: entered allmulticast mode [ 75.427749][ T5856] bridge_slave_0: entered promiscuous mode [ 75.462002][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.472161][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.480140][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.488808][ T5856] bridge_slave_1: entered allmulticast mode [ 75.495697][ T5856] bridge_slave_1: entered promiscuous mode [ 75.504519][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.517667][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.527716][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.534881][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.542321][ T5864] bridge_slave_0: entered allmulticast mode [ 75.549631][ T5864] bridge_slave_0: entered promiscuous mode [ 75.558875][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.570449][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.602227][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.609626][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.617264][ T5864] bridge_slave_1: entered allmulticast mode [ 75.624262][ T5864] bridge_slave_1: entered promiscuous mode [ 75.679059][ T5873] team0: Port device team_slave_0 added [ 75.687167][ T5857] team0: Port device team_slave_0 added [ 75.694970][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.706424][ T5859] team0: Port device team_slave_0 added [ 75.722154][ T5873] team0: Port device team_slave_1 added [ 75.737931][ T5857] team0: Port device team_slave_1 added [ 75.745778][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.757988][ T5859] team0: Port device team_slave_1 added [ 75.774117][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.819564][ T5856] team0: Port device team_slave_0 added [ 75.827921][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.838783][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.847123][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.874748][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.902401][ T5856] team0: Port device team_slave_1 added [ 75.925599][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.933519][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.960267][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.971888][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.979077][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.005324][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.016823][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.023813][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.050066][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.070124][ T5864] team0: Port device team_slave_0 added [ 76.082037][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.089080][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.115936][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.131202][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.138520][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.165556][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.185212][ T5864] team0: Port device team_slave_1 added [ 76.210046][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.217406][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.243628][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.256566][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.263957][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.290445][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.309956][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.317904][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.347797][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.361029][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.368916][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.404564][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.476235][ T5872] Bluetooth: hci0: command tx timeout [ 76.482298][ T5857] hsr_slave_0: entered promiscuous mode [ 76.493317][ T5857] hsr_slave_1: entered promiscuous mode [ 76.503684][ T5873] hsr_slave_0: entered promiscuous mode [ 76.512417][ T5873] hsr_slave_1: entered promiscuous mode [ 76.520529][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 76.526790][ T5873] Cannot create hsr debugfs directory [ 76.543120][ T5864] hsr_slave_0: entered promiscuous mode [ 76.546387][ T5872] Bluetooth: hci4: command tx timeout [ 76.548924][ T5866] Bluetooth: hci3: command tx timeout [ 76.554514][ T5872] Bluetooth: hci2: command tx timeout [ 76.560050][ T5869] Bluetooth: hci1: command tx timeout [ 76.568811][ T5864] hsr_slave_1: entered promiscuous mode [ 76.577059][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 76.582892][ T5864] Cannot create hsr debugfs directory [ 76.610396][ T5856] hsr_slave_0: entered promiscuous mode [ 76.617067][ T5856] hsr_slave_1: entered promiscuous mode [ 76.623186][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 76.629182][ T5856] Cannot create hsr debugfs directory [ 76.673262][ T5859] hsr_slave_0: entered promiscuous mode [ 76.680132][ T5859] hsr_slave_1: entered promiscuous mode [ 76.686632][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 76.692389][ T5859] Cannot create hsr debugfs directory [ 77.038488][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.049995][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.060630][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.070578][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.121296][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.131028][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.141105][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.158697][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.201911][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.227022][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.237231][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.259152][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.297233][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.308516][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.319185][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.330456][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.413237][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.424626][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.444622][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.455388][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.466563][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.481984][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.515960][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.523150][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.553334][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.565762][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.575109][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.615599][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.654436][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.661836][ T4918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.672106][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.680289][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.720308][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.732576][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.764025][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.775514][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.835094][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.845426][ T5859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.863677][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.888450][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.924030][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.931459][ T4922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.942189][ T4922] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.949387][ T4922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.001656][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.008844][ T4922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.034962][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.042765][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.084972][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.134214][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.210056][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.254475][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.261682][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.291687][ T5864] veth0_vlan: entered promiscuous mode [ 78.309891][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.321168][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.328815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.418172][ T5864] veth1_vlan: entered promiscuous mode [ 78.466650][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.512685][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.547502][ T5866] Bluetooth: hci0: command tx timeout [ 78.564181][ T5864] veth0_macvtap: entered promiscuous mode [ 78.583583][ T5864] veth1_macvtap: entered promiscuous mode [ 78.626593][ T5866] Bluetooth: hci3: command tx timeout [ 78.632758][ T5866] Bluetooth: hci1: command tx timeout [ 78.640221][ T5869] Bluetooth: hci2: command tx timeout [ 78.646660][ T5863] Bluetooth: hci4: command tx timeout [ 78.684292][ T5856] veth0_vlan: entered promiscuous mode [ 78.704160][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.733226][ T5857] veth0_vlan: entered promiscuous mode [ 78.744759][ T5856] veth1_vlan: entered promiscuous mode [ 78.765607][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.774923][ T5857] veth1_vlan: entered promiscuous mode [ 78.811597][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.823441][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.835680][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.846837][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.868521][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.924285][ T5857] veth0_macvtap: entered promiscuous mode [ 78.933751][ T5856] veth0_macvtap: entered promiscuous mode [ 78.944172][ T5856] veth1_macvtap: entered promiscuous mode [ 78.960292][ T5857] veth1_macvtap: entered promiscuous mode [ 79.015774][ T5873] veth0_vlan: entered promiscuous mode [ 79.016583][ T4918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.030571][ T5873] veth1_vlan: entered promiscuous mode [ 79.040383][ T4918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.052875][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.082111][ T5859] veth0_vlan: entered promiscuous mode [ 79.091896][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.101346][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.115262][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.126914][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.134336][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.151030][ T5859] veth1_vlan: entered promiscuous mode [ 79.169003][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.184363][ T5873] veth0_macvtap: entered promiscuous mode [ 79.198267][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.217290][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.242918][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.252708][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.264894][ T5873] veth1_macvtap: entered promiscuous mode [ 79.277121][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.304485][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.327797][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.338324][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.372935][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.395112][ T5859] veth0_macvtap: entered promiscuous mode [ 79.447302][ T4918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.451353][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.455376][ T4918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.497417][ T5859] veth1_macvtap: entered promiscuous mode [ 79.544663][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.553920][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.602495][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.611843][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.620909][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.638251][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.667478][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.675784][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.686964][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.699042][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.741665][ T4922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.758880][ T4922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.787002][ T4918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.848242][ T4918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.881586][ T4922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.896687][ T5992] Zero length message leads to an empty skb [ 79.906783][ T4922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.914377][ T4918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945744][ T4918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.038287][ T4922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.050479][ T4922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.061289][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.071162][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.094484][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.099186][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.105403][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.191992][ T5996] syzkaller1: entered promiscuous mode [ 80.200039][ T5996] syzkaller1: entered allmulticast mode [ 80.213270][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.247397][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.400961][ T6019] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.13'. [ 80.564971][ T6031] lo: entered promiscuous mode [ 80.597811][ T6031] netlink: 'syz.1.16': attribute type 2 has an invalid length. [ 80.620340][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.627759][ T6031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.636383][ T5866] Bluetooth: hci0: command tx timeout [ 80.706193][ T5866] Bluetooth: hci1: command tx timeout [ 80.711755][ T5866] Bluetooth: hci2: command tx timeout [ 80.719607][ T5869] Bluetooth: hci4: command tx timeout [ 80.725112][ T5863] Bluetooth: hci3: command tx timeout [ 80.831367][ T6051] 8021q: VLANs not supported on caif0 [ 80.879010][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.895446][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.910013][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.952914][ T6058] warning: `syz.3.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.989558][ T6064] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 81.045070][ T6064] veth0_vlan: entered allmulticast mode [ 81.086250][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.097268][ T6064] veth0_vlan: left promiscuous mode [ 81.123964][ T6071] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET) [ 81.149664][ T6064] veth0_vlan: entered promiscuous mode [ 81.191094][ T6064] team0: Device veth0_vlan failed to register rx_handler [ 81.257461][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.336314][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.406196][ T6015] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.719908][ T6097] netlink: 'syz.4.32': attribute type 30 has an invalid length. [ 81.729460][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 81.746440][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 81.806854][ T6096] netlink: 'syz.4.32': attribute type 5 has an invalid length. [ 81.842277][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'. [ 81.924078][ T6096] geneve2: entered promiscuous mode [ 81.936536][ T6096] geneve2: entered allmulticast mode [ 82.021482][ T4922] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 82.062920][ T34] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 82.089135][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 82.100270][ T6110] netlink: 'syz.1.38': attribute type 6 has an invalid length. [ 82.158857][ T34] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 82.190304][ T34] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 82.380133][ T6126] Bluetooth: MGMT ver 1.23 [ 82.484176][ T6132] tipc: Started in network mode [ 82.506949][ T6132] tipc: Node identity aa4e6508c731, cluster identity 4711 [ 82.527676][ T6132] tipc: Enabled bearer , priority 0 [ 82.563350][ T6129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.689827][ T6133] tipc: Disabling bearer [ 82.706455][ T5863] Bluetooth: hci0: command tx timeout [ 82.770507][ T6129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.786494][ T5863] Bluetooth: hci4: command tx timeout [ 82.792115][ T5866] Bluetooth: hci1: command tx timeout [ 82.792141][ T5872] Bluetooth: hci3: command tx timeout [ 82.799313][ T5866] Bluetooth: hci2: command tx timeout [ 82.853080][ T6155] ksmbd: Unknown IPC event: 4, ignore. [ 82.872216][ T6154] batman_adv: batadv0: Adding interface: wlan1 [ 82.904320][ T6154] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.955257][ T6154] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 82.977943][ T6129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.080894][ T6129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.094036][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.224988][ T1219] IPVS: starting estimator thread 0... [ 83.232451][ T6181] bridge_slave_1: left allmulticast mode [ 83.240735][ T6181] bridge_slave_1: left promiscuous mode [ 83.258048][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.283456][ T6181] bridge_slave_0: left allmulticast mode [ 83.305308][ T6181] bridge_slave_0: left promiscuous mode [ 83.312423][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.321025][ T6182] IPVS: using max 37 ests per chain, 88800 per kthread [ 83.427751][ T34] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.455743][ T6188] bridge: RTM_NEWNEIGH with invalid ether address [ 83.475470][ T34] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537182][ T34] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.579960][ T4922] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.673077][ T6202] tipc: Enabled bearer , priority 10 [ 83.706923][ T6209] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 83.972206][ T6227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.267004][ T6237] syzkaller1: entered promiscuous mode [ 84.303260][ T6237] syzkaller1: entered allmulticast mode [ 84.491468][ T6246] tipc: Started in network mode [ 84.520533][ T6246] tipc: Node identity b626fd138c43, cluster identity 4711 [ 84.551365][ T6246] tipc: Enabled bearer , priority 0 [ 84.580779][ T6246] syzkaller0: entered promiscuous mode [ 84.606136][ T6246] syzkaller0: entered allmulticast mode [ 84.626159][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.644874][ T6246] tipc: Resetting bearer [ 84.668857][ T5867] tipc: Node number set to 1837065480 [ 84.675158][ T6244] tipc: Resetting bearer [ 84.773957][ T6244] tipc: Disabling bearer [ 85.087411][ T6282] block nbd0: server does not support multiple connections per device. [ 85.120063][ T6282] block nbd0: shutting down sockets [ 85.122447][ T6291] macvlan2: entered allmulticast mode [ 85.155078][ T6291] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 85.201941][ T6301] unknown channel width for channel at 909000KHz? [ 85.216878][ T6301] unknown channel width for channel at 909000KHz? [ 85.298909][ T6305] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 85.538831][ T6318] __nla_validate_parse: 22 callbacks suppressed [ 85.538853][ T6318] netlink: 112 bytes leftover after parsing attributes in process `syz.2.101'. [ 85.634377][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 86.332245][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 86.411014][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.426263][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 86.450096][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.488586][ T6381] lo: entered allmulticast mode [ 86.504659][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.535418][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.759105][ T6395] sctp: [Deprecated]: syz.1.122 (pid 6395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.759105][ T6395] Use struct sctp_sack_info instead [ 86.792791][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.120'. [ 87.013688][ T6411] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 87.116371][ T6423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.127'. [ 87.170524][ T6418] netlink: 'syz.1.126': attribute type 21 has an invalid length. [ 87.339026][ T6436] netlink: 'syz.3.131': attribute type 3 has an invalid length. [ 87.352060][ T6438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.129'. [ 87.590628][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 87.637688][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 87.675275][ T6456] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.853374][ T6470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.004108][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 88.084757][ T6484] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 88.123512][ T6484] bond1: (slave vcan1): Error -95 calling set_mac_address [ 88.435964][ T6498] netlink: 'syz.1.147': attribute type 27 has an invalid length. [ 88.469431][ T6498] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 88.719369][ T6520] netlink: 'syz.3.149': attribute type 33 has an invalid length. [ 88.720980][ T6519] netlink: 'syz.4.152': attribute type 12 has an invalid length. [ 88.948030][ T6519] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 89.011421][ T6519] 0ªî{X¹¦: entered allmulticast mode [ 89.053311][ T6519] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 89.271319][ T6555] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.319554][ T6556] veth3: entered allmulticast mode [ 89.365760][ T6559] trusted_key: syz.3.160 sent an empty control message without MSG_MORE. [ 89.381700][ T6556] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 89.389674][ T6556] netlink: 'syz.3.160': attribute type 2 has an invalid length. [ 89.591325][ T6580] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 89.676558][ T6580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.728041][ T6586] team_slave_0: entered promiscuous mode [ 89.733861][ T6586] team_slave_1: entered promiscuous mode [ 89.820921][ T6594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.847225][ T6594] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 89.866478][ T6594] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 89.918561][ T6607] netlink: 'syz.3.167': attribute type 8 has an invalid length. [ 89.955534][ T6602] vlan2: entered allmulticast mode [ 89.985318][ T6602] bond2: entered allmulticast mode [ 90.214669][ T6624] openvswitch: netlink: Flow key attr not present in new flow. [ 90.407811][ T6639] IPVS: length: 237 != 8 [ 91.246607][ T6715] __nla_validate_parse: 17 callbacks suppressed [ 91.246630][ T6715] netlink: 84 bytes leftover after parsing attributes in process `syz.2.204'. [ 91.276598][ T6712] netem: unknown loss type 0 [ 91.281645][ T6712] netem: change failed [ 91.319971][ T6708] tipc: Enabled bearer , priority 0 [ 91.335570][ T6708] syzkaller0: entered allmulticast mode [ 91.343434][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 91.378060][ T6708] tipc: Resetting bearer [ 91.521147][ T6713] tipc: Disabling bearer [ 91.554383][ T6735] netlink: 72 bytes leftover after parsing attributes in process `syz.0.210'. [ 91.681400][ T6744] netlink: 56 bytes leftover after parsing attributes in process `syz.4.211'. [ 91.801589][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 91.992172][ T24] cfg80211: failed to load regulatory.db [ 92.082241][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 92.108185][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 92.219931][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 92.262472][ T6781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.372230][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 92.385597][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 92.425818][ T6798] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 92.442410][ T6800] validate_nla: 4 callbacks suppressed [ 92.442505][ T6800] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 92.460038][ T6789] syzkaller1: entered promiscuous mode [ 92.465656][ T6789] syzkaller1: entered allmulticast mode [ 92.626371][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.642305][ T6808] team_slave_0: entered promiscuous mode [ 92.648180][ T6808] team_slave_1: entered promiscuous mode [ 92.974720][ T4918] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.051532][ T6828] geneve3: entered promiscuous mode [ 93.067965][ T6828] geneve3: entered allmulticast mode [ 93.082191][ T4918] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.093193][ T6836] netlink: 'syz.1.234': attribute type 12 has an invalid length. [ 93.103158][ T4918] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.122396][ T6835] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 93.139282][ T4918] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.188913][ T6835] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 93.219222][ T6841] netlink: 'syz.2.233': attribute type 11 has an invalid length. [ 93.503082][ T4922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.531978][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.550803][ T4922] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.670599][ T6873] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.788605][ T6881] tipc: New replicast peer: 255.255.255.255 [ 93.795083][ T6881] tipc: Enabled bearer , priority 10 [ 93.865643][ T6885] veth3: entered allmulticast mode [ 93.872716][ T6886] veth1_macvtap: left promiscuous mode [ 93.880386][ T6886] macsec0: entered promiscuous mode [ 93.885653][ T6886] macsec0: entered allmulticast mode [ 93.894199][ T6887] veth1_macvtap: entered promiscuous mode [ 93.900819][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.922968][ T6887] veth1_macvtap: entered allmulticast mode [ 93.933643][ T6887] macsec0: left promiscuous mode [ 93.940051][ T6887] macsec0: left allmulticast mode [ 93.945424][ T6887] veth1_macvtap: left allmulticast mode [ 94.103981][ T6905] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 94.316257][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.449810][ T6922] dummy0: entered promiscuous mode [ 94.463295][ T6922] batadv_slave_1: entered promiscuous mode [ 94.782533][ T6940] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 95.405020][ T6983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.501061][ T6991] tc_dump_action: action bad kind [ 95.615546][ T5867] IPVS: starting estimator thread 0... [ 95.756662][ T7010] IPVS: using max 34 ests per chain, 81600 per kthread [ 95.930949][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.026156][ T7037] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.055658][ T7038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 96.071771][ T7042] tipc: Enabling of bearer rejected, already enabled [ 96.087836][ T7037] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 96.141873][ T7037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.194224][ T1161] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.231509][ T1161] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.241824][ T1161] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.263122][ T7060] __nla_validate_parse: 30 callbacks suppressed [ 96.263141][ T7060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.303'. [ 96.291970][ T1161] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.321322][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 96.343426][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 96.432746][ T7068] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 96.509214][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 96.540739][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 96.599445][ T7078] netlink: 'syz.4.308': attribute type 2 has an invalid length. [ 96.603897][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 96.845006][ T7097] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 96.992236][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 97.408968][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 97.462138][ T7141] tipc: Enabling of bearer rejected, failed to enable media [ 97.506145][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.518697][ T7139] pim6reg527: entered allmulticast mode [ 97.552821][ T7148] netlink: 196 bytes leftover after parsing attributes in process `syz.2.326'. [ 97.603313][ T7148] netlink: 196 bytes leftover after parsing attributes in process `syz.2.326'. [ 97.670054][ T7156] vlan2: entered allmulticast mode [ 97.699009][ T7156] bond0: entered allmulticast mode [ 97.713082][ T5867] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/1 [ 97.719527][ T7156] bond_slave_0: entered allmulticast mode [ 97.727584][ T7156] bond_slave_1: entered allmulticast mode [ 97.744514][ T7155] bridge_slave_0: left allmulticast mode [ 97.750601][ T7155] bridge_slave_0: left promiscuous mode [ 97.761586][ T5867] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 97.766510][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.818469][ T7155] bridge_slave_1: left allmulticast mode [ 97.839002][ T7155] bridge_slave_1: left promiscuous mode [ 97.854548][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.898137][ T7155] bond0: (slave bond_slave_0): Releasing backup interface [ 97.935513][ T7155] bond0: (slave bond_slave_1): Releasing backup interface [ 97.970738][ T7155] team_slave_0: left promiscuous mode [ 97.979309][ T7155] team0: Port device team_slave_0 removed [ 97.987287][ T7155] team_slave_1: left promiscuous mode [ 97.995198][ T7155] team0: Port device team_slave_1 removed [ 98.004071][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.011740][ T7155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.022967][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.031396][ T7155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.076406][ T1219] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.202768][ T7182] : entered promiscuous mode [ 98.234028][ T7188] netlink: 'syz.1.336': attribute type 5 has an invalid length. [ 98.275213][ T7188] sctp: [Deprecated]: syz.1.336 (pid 7188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.275213][ T7188] Use struct sctp_sack_info instead [ 98.404219][ T5233] udevd[5233]: worker [5865] terminated by signal 33 (Unknown signal 33) [ 98.452486][ T5233] udevd[5233]: worker [5865] failed while handling '/devices/virtual/block/loop3' [ 98.656633][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.668170][ T7217] dvmrp1: entered allmulticast mode [ 98.703368][ T7220] tipc: Enabled bearer , priority 0 [ 98.820809][ T7219] tipc: Disabling bearer [ 98.932473][ T7246] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 98.990709][ T7246] bond4: entered promiscuous mode [ 98.996563][ T7246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.004671][ T7257] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 99.040143][ T7254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 99.064961][ T7254] bond4: (slave bond5): making interface the new active one [ 99.082593][ T7249] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 99.084323][ T7254] bond5: entered promiscuous mode [ 99.096586][ T7257] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 99.100061][ T7254] bond4: (slave bond5): Enslaving as an active interface with an up link [ 99.310293][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.367207][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.405007][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.435100][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.492445][ T7292] gretap0: entered promiscuous mode [ 99.510748][ T7293] 0ªî{X¹¦: renamed from gretap0 [ 99.527925][ T7293] 0ªî{X¹¦: left promiscuous mode [ 99.533264][ T7293] 0ªî{X¹¦: entered allmulticast mode [ 99.541095][ T7293] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 99.948942][ T7331] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 99.964196][ T7331] bridge_slave_1: entered allmulticast mode [ 99.971232][ T7331] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.285376][ T7366] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 100.323087][ T7372] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 101.167387][ T7450] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 101.175379][ T7450] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 101.339242][ T7466] __nla_validate_parse: 28 callbacks suppressed [ 101.339264][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 101.356693][ T7468] netlink: 'syz.2.416': attribute type 83 has an invalid length. [ 101.462097][ T7475] veth1_macvtap: left promiscuous mode [ 101.735674][ T7501] Bluetooth: MGMT ver 1.23 [ 101.884235][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 101.893404][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 101.899925][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.432'. [ 101.918856][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 101.923680][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.935356][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.944428][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 102.041919][ T7531] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 102.202642][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 102.433011][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 102.534916][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 102.544350][ T7572] netlink: 176 bytes leftover after parsing attributes in process `syz.4.449'. [ 102.638065][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.660411][ T7577] bond2: (slave veth3): Enslaving as an active interface with a down link [ 102.678750][ T7577] veth5: entered promiscuous mode [ 102.688922][ T7577] vlan2: entered allmulticast mode [ 102.694104][ T7577] bond2: entered allmulticast mode [ 102.701016][ T7577] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 103.075612][ T7598] syzkaller1: entered promiscuous mode [ 103.086865][ T7598] syzkaller1: entered allmulticast mode [ 103.103785][ T7598] lo speed is unknown, defaulting to 1000 [ 103.123731][ T7598] lo speed is unknown, defaulting to 1000 [ 103.141010][ T7598] lo speed is unknown, defaulting to 1000 [ 103.338182][ T7598] infiniband syz0: set active [ 103.343013][ T7598] infiniband syz0: added lo [ 103.347806][ T1219] lo speed is unknown, defaulting to 1000 [ 103.397394][ T7598] RDS/IB: syz0: added [ 103.407990][ T7598] smc: adding ib device syz0 with port count 1 [ 103.414495][ T7598] smc: ib device syz0 port 1 has pnetid [ 103.434736][ T5867] lo speed is unknown, defaulting to 1000 [ 103.463297][ T7598] lo speed is unknown, defaulting to 1000 [ 103.474813][ T7623] validate_nla: 6 callbacks suppressed [ 103.474833][ T7623] netlink: 'syz.2.464': attribute type 2 has an invalid length. [ 103.493666][ T7623] pim6reg1: entered promiscuous mode [ 103.499114][ T7623] pim6reg1: entered allmulticast mode [ 103.508002][ T7625] syzkaller1: entered promiscuous mode [ 103.527256][ T7625] syzkaller1: entered allmulticast mode [ 103.653492][ T7598] lo speed is unknown, defaulting to 1000 [ 103.730216][ T7645] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 103.808749][ T7650] netlink: 'syz.1.475': attribute type 10 has an invalid length. [ 103.861749][ T7650] team0: Device hsr_slave_0 failed to register rx_handler [ 103.936216][ T7598] lo speed is unknown, defaulting to 1000 [ 104.030041][ T7662] nbd: couldn't find a device at index -373156329 [ 104.246424][ T7598] lo speed is unknown, defaulting to 1000 [ 104.557497][ T7598] lo speed is unknown, defaulting to 1000 [ 104.631416][ T7707] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 104.731672][ T7716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.863264][ T7712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 104.888426][ T7712] bond3: (slave bond4): making interface the new active one [ 104.896721][ T7712] bond3: (slave bond4): Enslaving as an active interface with an up link [ 104.980839][ T7707] bond3: (slave gretap0): Enslaving as a backup interface with an up link [ 105.019041][ T7731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.035783][ T7742] netlink: 'syz.1.497': attribute type 10 has an invalid length. [ 105.051731][ T7745] netlink: 'syz.2.494': attribute type 16 has an invalid length. [ 105.072795][ T7745] netlink: 'syz.2.494': attribute type 3 has an invalid length. [ 105.104671][ T7742] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.163382][ T7742] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.202307][ T7751] netlink: 'syz.1.497': attribute type 10 has an invalid length. [ 105.229589][ T7751] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.378480][ T7742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.678932][ T7778] nbd0: detected capacity change from 0 to 127 [ 105.691357][ T5869] block nbd0: Receive control failed (result -32) [ 105.698458][ T5866] block nbd0: Receive control failed (result -32) [ 105.746505][ T7790] batman_adv: batadv0: Removing interface: wlan1 [ 105.782243][ T7797] bridge: RTM_NEWNEIGH with invalid ether address [ 105.915852][ T7812] lo speed is unknown, defaulting to 1000 [ 106.054853][ T7827] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 106.066307][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.084244][ T7827] netlink: 'syz.1.515': attribute type 18 has an invalid length. [ 106.436173][ T7856] __nla_validate_parse: 16 callbacks suppressed [ 106.436204][ T7856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.524'. [ 106.564420][ T7866] netem: incorrect gi model size [ 106.584429][ T7866] netem: change failed [ 106.604929][ T7866] netem: incorrect gi model size [ 106.610488][ T7866] netem: change failed [ 106.714563][ T7880] C: renamed from team_slave_0 (while UP) [ 106.730214][ T7877] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 106.755939][ T7880] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 106.764438][ T7880] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 107.987279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.142811][ T7931] netlink: 64 bytes leftover after parsing attributes in process `syz.3.549'. [ 108.174461][ T7936] tipc: Enabling of bearer rejected, failed to enable media [ 108.190541][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 108.576581][ T7970] netlink: 11 bytes leftover after parsing attributes in process `syz.3.556'. [ 108.963698][ T7989] validate_nla: 1 callbacks suppressed [ 108.963721][ T7989] netlink: 'syz.4.559': attribute type 16 has an invalid length. [ 109.030137][ T7989] netlink: 'syz.4.559': attribute type 17 has an invalid length. [ 109.090706][ T7989] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 109.348641][ T8021] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 109.374689][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 110.602247][ T8058] netlink: 3 bytes leftover after parsing attributes in process `syz.2.573'. [ 110.729458][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 111.091085][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 111.137605][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 111.195696][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 111.358407][ T8106] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 111.419295][ T7918] Set syz1 is full, maxelem 65536 reached [ 111.472661][ T8116] __nla_validate_parse: 30 callbacks suppressed [ 111.472684][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.515631][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.534633][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 111.550193][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.560930][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.571313][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.581084][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.591472][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.605003][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.614418][ T8116] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 111.698974][ T8131] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 111.729145][ T8131] nbd: illegal input index 1048576 [ 111.927599][ T8138] ip6erspan0: entered promiscuous mode [ 111.933420][ T8138] ip6erspan0: entered allmulticast mode [ 112.698124][ T8170] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 112.885723][ T8186] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 112.925097][ T8194] netlink: 'syz.0.617': attribute type 4 has an invalid length. [ 113.124766][ T8212] netlink: 'syz.4.623': attribute type 10 has an invalid length. [ 113.165587][ T8212] team0: Device veth1_macvtap failed to register rx_handler [ 113.281843][ T8230] tipc: Enabling of bearer rejected, failed to enable media [ 113.301303][ T8232] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.388662][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.430056][ T5866] Bluetooth: hci4: command tx timeout [ 113.664962][ T8267] netlink: 'syz.3.640': attribute type 3 has an invalid length. [ 113.673158][ T8267] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 113.920882][ T8282] veth0_vlan: entered allmulticast mode [ 113.937630][ T8282] veth0_vlan: left promiscuous mode [ 113.944410][ T8282] veth0_vlan: entered promiscuous mode [ 113.955430][ T8282] team0: Device veth0_vlan failed to register rx_handler [ 114.049965][ T8295] x_tables: ip_tables: udp match: only valid for protocol 17 [ 114.053944][ T8297] openvswitch: netlink: IP tunnel dst address not specified [ 114.064915][ T8298] openvswitch: netlink: IP tunnel dst address not specified [ 114.207396][ T8308] Unsupported xt match [ 114.207417][ T8308] unable to load match [ 114.218566][ T8308] IPVS: ip_vs_add_dest(): server weight less than zero [ 114.338975][ T8310] validate_nla: 1 callbacks suppressed [ 114.338995][ T8310] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 114.385757][ T8310] bond1: entered promiscuous mode [ 114.391528][ T8310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.427405][ T8317] lo speed is unknown, defaulting to 1000 [ 114.558679][ T8323] sctp: [Deprecated]: syz.3.656 (pid 8323) Use of int in maxseg socket option. [ 114.558679][ T8323] Use struct sctp_assoc_value instead [ 114.688666][ T8331] delete_channel: no stack [ 115.343365][ T8368] xt_socket: unknown flags 0xd0 [ 115.682713][ T8396] sch_fq: defrate 0 ignored. [ 115.731644][ T8400] netlink: 'syz.1.682': attribute type 4 has an invalid length. [ 115.764229][ T8400] `: renamed from bond0 (while UP) [ 115.793326][ T8402] syzkaller0: entered promiscuous mode [ 115.806843][ T8402] syzkaller0: entered allmulticast mode [ 115.820228][ T8402] tipc: Started in network mode [ 115.825305][ T8402] tipc: Node identity 4a547d5d0016, cluster identity 4711 [ 115.832957][ T8402] tipc: Enabled bearer , priority 0 [ 115.845637][ T8402] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 115.860979][ T8402] tipc: Resetting bearer [ 115.993974][ T8401] tipc: Resetting bearer [ 116.004534][ T8401] tipc: Disabling bearer [ 116.129784][ T8421] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 116.278487][ T8425] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 116.623152][ T8466] __nla_validate_parse: 49 callbacks suppressed [ 116.623173][ T8466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.704'. [ 116.672951][ T8454] nbd1: detected capacity change from 0 to 127 [ 116.713732][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.709'. [ 116.730034][ T8471] pim6reg1: entered promiscuous mode [ 116.736041][ T8471] pim6reg1: entered allmulticast mode [ 116.754680][ T5866] block nbd1: Receive control failed (result -32) [ 116.820472][ T8476] netlink: 'syz.4.710': attribute type 17 has an invalid length. [ 116.838695][ T8481] netlink: 'syz.0.712': attribute type 11 has an invalid length. [ 116.846763][ T8481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.712'. [ 116.851766][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 116.866777][ T8479] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 116.867976][ T8481] bond0: Error: Cannot enslave bond to itself. [ 116.882336][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.710'. [ 116.938018][ T8484] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 116.963122][ T8484] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 117.005911][ T8496] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 117.028954][ T8496] netlink: 224 bytes leftover after parsing attributes in process `syz.4.717'. [ 117.343472][ T8522] veth0: entered promiscuous mode [ 117.363732][ T8527] netlink: 80 bytes leftover after parsing attributes in process `syz.3.725'. [ 117.392893][ T8519] veth0: left promiscuous mode [ 117.397093][ T8524] netlink: 'syz.1.724': attribute type 21 has an invalid length. [ 117.472748][ T8533] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.595341][ T8547] gre2: entered promiscuous mode [ 117.608326][ T8547] gre2: entered allmulticast mode [ 117.688196][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.732'. [ 118.017183][ T8586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.739'. [ 118.058023][ T8584] syzkaller1: entered promiscuous mode [ 118.063767][ T8584] syzkaller1: entered allmulticast mode [ 118.091444][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.740'. [ 118.104453][ T8589] pim6reg1: entered promiscuous mode [ 118.110155][ T8589] pim6reg1: entered allmulticast mode [ 118.194280][ T8600] netlink: 'syz.0.743': attribute type 83 has an invalid length. [ 118.358512][ T8617] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 118.465052][ T8622] tipc: Enabled bearer , priority 10 [ 118.569600][ T8635] netlink: 'syz.3.753': attribute type 2 has an invalid length. [ 118.570454][ T8631] vlan2: entered promiscuous mode [ 118.583246][ T8631] vlan2: entered allmulticast mode [ 118.589846][ T8631] hsr_slave_1: entered allmulticast mode [ 118.618845][ T8635] tipc: Enabled bearer , priority 0 [ 118.631686][ T8635] syzkaller0: entered promiscuous mode [ 118.646493][ T8635] syzkaller0: entered allmulticast mode [ 118.680049][ T8635] tipc: Resetting bearer [ 118.746264][ T8633] tipc: Resetting bearer [ 118.771331][ T8633] tipc: Disabling bearer [ 119.150673][ T8671] lo speed is unknown, defaulting to 1000 [ 119.391893][ T8700] netlink: 'syz.2.771': attribute type 3 has an invalid length. [ 119.678164][ T8718] netlink: 'syz.0.777': attribute type 12 has an invalid length. [ 119.716416][ T8718] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 119.726215][ T5945] tipc: Node number set to 1245871453 [ 119.992294][ T8736] geneve2: entered promiscuous mode [ 120.256253][ T8759] netlink: 'syz.0.787': attribute type 13 has an invalid length. [ 120.304595][ T8759] veth0_macvtap: left promiscuous mode [ 120.316269][ T8759] macvtap0: entered allmulticast mode [ 120.333456][ T8759] macvtap0: refused to change device tx_queue_len [ 120.500020][ T8775] netlink: 'syz.1.794': attribute type 11 has an invalid length. [ 120.760372][ T8807] netlink: 'syz.4.799': attribute type 3 has an invalid length. [ 120.826900][ T8809] netlink: 'syz.2.802': attribute type 39 has an invalid length. [ 120.849431][ T8813] vlan3: entered promiscuous mode [ 120.854535][ T8813] bridge0: entered promiscuous mode [ 120.881789][ T8812] bridge0: port 3(vlan2) entered blocking state [ 120.888510][ T8812] bridge0: port 3(vlan2) entered disabled state [ 120.895161][ T8812] vlan2: entered allmulticast mode [ 120.903302][ T8812] bridge0: entered allmulticast mode [ 120.912827][ T8812] vlan2: left allmulticast mode [ 120.919933][ T8812] bridge0: left allmulticast mode [ 121.089756][ T8833] tipc: Enabled bearer , priority 0 [ 121.099374][ T8833] syzkaller0: entered promiscuous mode [ 121.104893][ T8833] syzkaller0: entered allmulticast mode [ 121.126202][ T8833] tipc: Resetting bearer [ 121.145119][ T8832] tipc: Resetting bearer [ 121.160161][ T8832] tipc: Disabling bearer [ 121.206119][ T8841] netlink: 'syz.1.812': attribute type 21 has an invalid length. [ 121.218010][ T8841] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 121.286450][ T8843] syz.4.813 (8843) used greatest stack depth: 17992 bytes left [ 121.690381][ T8861] sctp: [Deprecated]: syz.1.820 (pid 8861) Use of int in maxseg socket option. [ 121.690381][ T8861] Use struct sctp_assoc_value instead [ 121.721152][ T8851] macvlan2: entered allmulticast mode [ 121.735881][ T8851] bond0: (slave macvlan2): Opening slave failed [ 121.778916][ T8867] tipc: Enabled bearer , priority 0 [ 121.796372][ T8867] syzkaller0: entered promiscuous mode [ 121.815417][ T8867] syzkaller0: entered allmulticast mode [ 121.843403][ T8867] tipc: Resetting bearer [ 121.869009][ T8867] dvmrp0: entered allmulticast mode [ 121.880113][ T8866] tipc: Resetting bearer [ 121.883508][ T8879] __nla_validate_parse: 14 callbacks suppressed [ 121.883533][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 121.904404][ T8866] tipc: Disabling bearer [ 121.965662][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 122.191536][ T8901] netlink: 'syz.2.836': attribute type 21 has an invalid length. [ 122.198662][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 122.221910][ T8906] tipc: Enabling of bearer rejected, failed to enable media [ 122.238761][ T8906] tipc: Enabled bearer , priority 11 [ 122.255143][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 123.346419][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.366176][ T5945] tipc: Node number set to 979762451 [ 123.963810][ T8920] netlink: 'syz.4.846': attribute type 11 has an invalid length. [ 123.987252][ T8920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.846'. [ 124.067562][ T8933] netlink: 100 bytes leftover after parsing attributes in process `syz.3.848'. [ 124.084571][ T8934] veth0: entered promiscuous mode [ 124.127492][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.848'. [ 124.164511][ T8918] veth0: left promiscuous mode [ 124.221692][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 124.268558][ T8951] vlan1: entered allmulticast mode [ 124.273743][ T8951] veth0_vlan: entered allmulticast mode [ 124.282655][ T8951] netlink: del zone limit has 4 unknown bytes [ 124.303595][ T8954] netlink: 'syz.0.855': attribute type 33 has an invalid length. [ 124.331118][ T8954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.855'. [ 124.370307][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 124.502889][ T8968] lo: left promiscuous mode [ 124.664105][ T34] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.680047][ T34] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.695332][ T8985] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 124.708225][ T8985] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 124.728023][ T8985] gretap1: entered promiscuous mode [ 124.737785][ T8985] gretap1: entered allmulticast mode [ 124.759724][ T34] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.794797][ T34] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.815605][ T8992] syzkaller0: entered promiscuous mode [ 124.844521][ T8992] syzkaller0: entered allmulticast mode [ 124.930083][ T9006] wg1: mtu less than device minimum [ 124.940878][ T9004] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 124.942678][ T9003] ªªªªªªcursive: renamed from vlan0 (while UP) [ 125.182075][ T24] IPVS: starting estimator thread 0... [ 125.212678][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.220336][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.286781][ T9029] IPVS: using max 41 ests per chain, 98400 per kthread [ 125.348777][ T9042] sctp: [Deprecated]: syz.1.881 (pid 9042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.348777][ T9042] Use struct sctp_sack_info instead [ 125.426623][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.555539][ T9063] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 125.666232][ T5945] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.971010][ T9100] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 126.039106][ T9105] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 126.050203][ T9104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.067596][ T9105] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 126.080831][ T9105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.114560][ T9100] bond0: (slave wlan1): Releasing backup interface [ 126.148034][ T9110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.176277][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.231564][ T9120] tipc: Started in network mode [ 126.236850][ T9120] tipc: Node identity f8ffffffffffffff590c, cluster identity 4711 [ 126.252739][ T9120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.374732][ T9131] netlink: 'syz.3.911': attribute type 4 has an invalid length. [ 126.507032][ T9141] syzkaller0: entered promiscuous mode [ 126.513222][ T9141] syzkaller0: entered allmulticast mode [ 126.556271][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.865167][ T9174] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 126.879386][ T9174] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 126.896605][ T9172] __nla_validate_parse: 14 callbacks suppressed [ 126.896624][ T9172] netlink: 88 bytes leftover after parsing attributes in process `syz.4.926'. [ 126.938011][ T9172] netem: invalid attributes len -24 [ 126.943291][ T9172] netem: change failed [ 127.005847][ T9186] netlink: 'syz.2.931': attribute type 21 has an invalid length. [ 127.036829][ T9189] sctp: [Deprecated]: syz.1.932 (pid 9189) Use of int in max_burst socket option deprecated. [ 127.036829][ T9189] Use struct sctp_assoc_value instead [ 127.049720][ T9186] netlink: 128 bytes leftover after parsing attributes in process `syz.2.931'. [ 127.062159][ T9190] netlink: 'syz.2.931': attribute type 21 has an invalid length. [ 127.063848][ T9186] netlink: 'syz.2.931': attribute type 5 has an invalid length. [ 127.070685][ T9190] netlink: 128 bytes leftover after parsing attributes in process `syz.2.931'. [ 127.092322][ T9186] netlink: 3 bytes leftover after parsing attributes in process `syz.2.931'. [ 127.105427][ T9190] netlink: 'syz.2.931': attribute type 5 has an invalid length. [ 127.145715][ T9190] netlink: 3 bytes leftover after parsing attributes in process `syz.2.931'. [ 127.256614][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 127.273967][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 127.322684][ T9207] syzkaller0: entered promiscuous mode [ 127.328854][ T9207] syzkaller0: entered allmulticast mode [ 127.340388][ T9204] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 127.350720][ T9204] netlink: 'syz.1.937': attribute type 2 has an invalid length. [ 127.533795][ T9226] netlink: 168 bytes leftover after parsing attributes in process `syz.1.945'. [ 127.572460][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 127.582060][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 127.920328][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054f53800: rx timeout, send abort [ 127.932285][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054f53800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 128.020890][ T9275] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.039983][ T9277] vlan3: entered promiscuous mode [ 128.047812][ T9277] erspan0: entered promiscuous mode [ 128.055449][ T9275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.072253][ T9279] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.191025][ T9289] xt_limit: Overflow, try lower: 271964/0 [ 128.197812][ T9290] xt_limit: Overflow, try lower: 271964/0 [ 128.542341][ T9315] netlink: 'syz.2.976': attribute type 11 has an invalid length. [ 129.285918][ T9376] bridge_slave_0: left allmulticast mode [ 129.323519][ T9376] bridge_slave_0: left promiscuous mode [ 129.332047][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.346780][ T9376] bridge_slave_1: left allmulticast mode [ 129.352489][ T9376] bridge_slave_1: left promiscuous mode [ 129.359964][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.372125][ T9376] bond0: (slave bond_slave_0): Releasing backup interface [ 129.385187][ T9376] bond0: (slave bond_slave_1): Releasing backup interface [ 129.402169][ T9376] team0: Port device team_slave_0 removed [ 129.411078][ T9376] team0: Port device team_slave_1 removed [ 129.418160][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.425623][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.435004][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.442889][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.463196][ T9376] bond2: (slave veth3): Releasing active interface [ 129.480570][ T9376] bond3: (slave bond4): Releasing backup interface [ 129.488161][ T9376] bond3: (slave bond4): the permanent HWaddr of slave - 96:bb:47:a3:bf:43 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 129.509070][ T9376] bond3: (slave gretap0): making interface the new active one [ 129.520203][ T9376] bond3: (slave gretap0): Releasing backup interface [ 129.545884][ T9396] syzkaller0: refused to change device tx_queue_len [ 130.015071][ T9435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 130.089509][ T9376] syz.4.997 (9376) used greatest stack depth: 17576 bytes left [ 130.323847][ T9462] validate_nla: 2 callbacks suppressed [ 130.323867][ T9462] netlink: 'syz.4.1024': attribute type 2 has an invalid length. [ 130.757915][ T9495] tipc: Started in network mode [ 130.762955][ T9495] tipc: Node identity ac14140f, cluster identity 4711 [ 130.785284][ T9495] tipc: New replicast peer: 255.255.255.255 [ 130.793814][ T9495] tipc: Enabled bearer , priority 10 [ 130.932990][ T9513] netlink: 'syz.0.1040': attribute type 32 has an invalid length. [ 130.942903][ T9513] (unnamed net_device) (uninitialized): option coupled_control: invalid value (91) [ 131.155580][ T9462] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 131.308468][ T9548] net_ratelimit: 2 callbacks suppressed [ 131.308492][ T9548] netlink: zone id is out of range [ 131.319753][ T9548] netlink: zone id is out of range [ 131.325383][ T9548] netlink: zone id is out of range [ 131.332210][ T9548] netlink: zone id is out of range [ 131.338803][ T9548] netlink: zone id is out of range [ 131.344114][ T9548] netlink: zone id is out of range [ 131.349926][ T9548] netlink: zone id is out of range [ 131.355233][ T9548] netlink: zone id is out of range [ 131.360639][ T9548] netlink: zone id is out of range [ 131.365911][ T9548] netlink: zone id is out of range [ 131.917080][ T1219] tipc: Node number set to 2886997007 [ 132.013306][ T9603] netlink: 'syz.2.1063': attribute type 12 has an invalid length. [ 132.363436][ T9626] __nla_validate_parse: 94 callbacks suppressed [ 132.363457][ T9626] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1069'. [ 132.475816][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 132.561640][ T9656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1077'. [ 132.614040][ T9663] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1080'. [ 132.627738][ T9663] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 132.675882][ T9665] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.692895][ T9665] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.705829][ T9665] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 132.747819][ T9663] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.764752][ T9663] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.794163][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 132.824587][ T9675] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.859896][ T9675] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.949660][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957781][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.055840][ T9702] team0: Device gtp2 is of different type [ 133.079233][ T9703] team0: Device gtp2 is of different type [ 133.116880][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 133.200166][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 133.211410][ T9707] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1092'. [ 133.250309][ T9712] netlink: 'syz.0.1094': attribute type 12 has an invalid length. [ 133.453841][ T9740] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 133.534720][ T9748] netlink: 'syz.0.1101': attribute type 6 has an invalid length. [ 134.017526][ T9780] lo speed is unknown, defaulting to 1000 [ 134.022470][ T9785] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1110'. [ 134.087840][ T9789] netlink: 'syz.0.1110': attribute type 13 has an invalid length. [ 134.119908][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 134.162190][ T9789] netlink: 'syz.0.1110': attribute type 17 has an invalid length. [ 134.363702][ T5945] lo speed is unknown, defaulting to 1000 [ 134.728472][ T9833] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 135.064089][ T9860] vlan4: entered promiscuous mode [ 135.162238][ T9871] 8021q: VLANs not supported on ip_vti0 [ 135.268622][ T9878] geneve1: entered allmulticast mode [ 135.274585][ T9878] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 135.330830][ T9893] validate_nla: 3 callbacks suppressed [ 135.330849][ T9893] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 135.349737][ T9891] tipc: Enabled bearer , priority 0 [ 135.376434][ T9891] syzkaller0: entered promiscuous mode [ 135.381965][ T9891] syzkaller0: entered allmulticast mode [ 135.423030][ T9891] tipc: Resetting bearer [ 135.445930][ T9889] tipc: Resetting bearer [ 135.505334][ T9889] tipc: Disabling bearer [ 135.825967][ T9932] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 135.892824][ T9938] netem: change failed [ 135.934413][ T9940] sctp: [Deprecated]: syz.0.1162 (pid 9940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.934413][ T9940] Use struct sctp_sack_info instead [ 136.157479][ T9962] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 136.385633][ T9973] netlink: 'syz.4.1174': attribute type 16 has an invalid length. [ 136.468373][ T9974] tipc: Resetting bearer [ 136.482318][ T9974] tipc: Resetting bearer [ 136.750358][ T30] audit: type=1800 audit(1756324631.956:2): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1180" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1153 res=0 errno=0 [ 136.779032][ T9998] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 136.948001][T10002] netlink: 'syz.2.1183': attribute type 2 has an invalid length. [ 137.165009][T10033] veth0: entered promiscuous mode [ 137.212293][T10028] net_ratelimit: 17 callbacks suppressed [ 137.212314][T10028] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 137.249382][T10038] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 137.390110][T10050] __nla_validate_parse: 17 callbacks suppressed [ 137.390132][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 137.426102][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.491490][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 137.516171][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 137.527811][T10056] netlink: 'syz.3.1205': attribute type 14 has an invalid length. [ 137.535847][T10056] netlink: 'syz.3.1205': attribute type 13 has an invalid length. [ 137.786801][T10086] netlink: 'syz.3.1210': attribute type 33 has an invalid length. [ 137.794871][T10086] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1210'. [ 137.822871][T10086] geneve2: entered promiscuous mode [ 137.835816][T10086] geneve2: entered allmulticast mode [ 137.848822][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.871327][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.903468][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 137.933839][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.034604][T10103] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1214'. [ 138.140338][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 138.315521][T10133] netem: incorrect gi model size [ 138.329662][T10133] netem: change failed [ 138.425153][T10142] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 138.460974][T10142] bond2: (slave bridge5): making interface the new active one [ 138.469816][T10142] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 138.469978][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'. [ 138.553010][T10155] macvlan3: entered promiscuous mode [ 138.561993][T10155] macvlan3: entered allmulticast mode [ 138.569680][T10155] bond8: entered promiscuous mode [ 138.593590][T10155] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.699289][T10155] bond8: left promiscuous mode [ 138.887577][T10183] erspan0: mtu less than device minimum [ 139.033845][T10197] netlink: 'syz.0.1240': attribute type 7 has an invalid length. [ 139.063260][T10197] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1240'. [ 139.075485][T10197] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 139.094109][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 139.317679][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 139.347007][ T5866] block nbd2: Receive control failed (result -32) [ 139.479308][T10242] syzkaller0: entered promiscuous mode [ 139.500120][T10242] syzkaller0: entered allmulticast mode [ 139.708547][T10259] lo speed is unknown, defaulting to 1000 [ 140.090302][T10289] gre0: entered promiscuous mode [ 140.368825][T10296] netlink: 'syz.0.1260': attribute type 13 has an invalid length. [ 140.384173][T10296] netlink: 'syz.0.1260': attribute type 17 has an invalid length. [ 140.420808][T10298] can: request_module (can-proto-0) failed. [ 140.471437][T10296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.630065][T10315] netlink: 'syz.4.1273': attribute type 15 has an invalid length. [ 140.763812][T10334] IPv4: Oversized IP packet from 172.20.20.11 [ 140.783393][T10335] sch_fq: defrate 0 ignored. [ 140.840352][T10340] bridge_slave_1: default FDB implementation only supports local addresses [ 140.843085][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.941681][T10346] netlink: 'syz.0.1284': attribute type 3 has an invalid length. [ 140.969101][T10346] netdevsim netdevsim0: Direct firmware load for ñ failed with error -2 [ 140.984435][T10346] netdevsim netdevsim0: Falling back to sysfs fallback for: ñ [ 141.106194][T10352] nbd3: detected capacity change from 0 to 127 [ 141.209609][ T5866] block nbd3: Receive control failed (result -32) [ 141.399365][T10376] IPVS: Scheduler module ip_vs_sip not found [ 141.873180][T10399] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 141.908221][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802546f800: rx timeout, send abort [ 141.916734][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802546f800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 142.174206][T10428] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 142.361531][T10453] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 142.419908][T10453] __nla_validate_parse: 17 callbacks suppressed [ 142.419931][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 142.753715][T10475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.798384][T10481] C: left promiscuous mode [ 142.802997][T10481] team_slave_1: left promiscuous mode [ 142.885560][T10481] team0 (unregistering): Port device C removed [ 142.895441][T10481] team0 (unregistering): Port device team_slave_1 removed [ 142.932523][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 142.962432][T10485] sctp: [Deprecated]: syz.2.1331 (pid 10485) Use of int in max_burst socket option. [ 142.962432][T10485] Use struct sctp_assoc_value instead [ 142.984329][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'. [ 142.997102][T10493] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1333'. [ 143.151243][T10507] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 143.167358][T10510] tipc: Enabled bearer , priority 0 [ 143.185219][T10510] syzkaller0: entered promiscuous mode [ 143.194977][T10510] syzkaller0: entered allmulticast mode [ 143.244128][T10507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.275760][T10510] tipc: Resetting bearer [ 143.300996][T10509] tipc: Resetting bearer [ 143.349109][T10509] tipc: Disabling bearer [ 143.381273][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 143.402681][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1342'. [ 143.422724][T10523] Unsupported xt match [ 143.422745][T10523] unable to load match [ 143.427868][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1342'. [ 143.440759][T10526] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1342'. [ 143.455681][T10529] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 [ 143.543098][T10534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1346'. [ 143.569368][T10534] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1346'. [ 143.596133][T10534] IPVS: Error joining to the multicast group [ 143.602451][T10540] pim6reg1: entered promiscuous mode [ 143.614375][T10540] pim6reg1: entered allmulticast mode [ 143.944144][T10574] : renamed from bridge_slave_0 (while UP) [ 144.145892][T10597] ip6gre0: Master is either lo or non-ether device [ 144.191806][T10599] netlink: 'syz.4.1370': attribute type 16 has an invalid length. [ 144.305824][T10610] bridge_slave_0: default FDB implementation only supports local addresses [ 144.515766][T10627] : entered promiscuous mode [ 144.560225][T10631] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 144.666764][T10638] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.673823][ T9725] IPVS: starting estimator thread 0... [ 144.806979][T10643] IPVS: using max 39 ests per chain, 93600 per kthread [ 144.857229][T10658] vlan3: entered allmulticast mode [ 144.862443][T10658] erspan0: entered allmulticast mode [ 144.959802][T10664] tipc: Enabled bearer , priority 0 [ 144.975189][T10675] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 144.997948][T10665] tipc: Enabling of bearer rejected, already enabled [ 145.047924][T10664] syzkaller0: entered promiscuous mode [ 145.055910][T10664] syzkaller0: entered allmulticast mode [ 145.170792][T10664] tipc: Resetting bearer [ 145.232128][T10704] netlink: 'syz.1.1406': attribute type 16 has an invalid length. [ 145.241715][T10663] tipc: Resetting bearer [ 145.279288][T10663] tipc: Disabling bearer [ 145.479374][T10730] erspan0: entered promiscuous mode [ 145.485662][T10730] batadv_slave_1: entered promiscuous mode [ 145.501236][T10730] debugfs: 'hsr1' already exists in 'hsr' [ 145.525183][T10730] Cannot create hsr debugfs directory [ 145.532624][T10734] netlink: 'syz.3.1416': attribute type 32 has an invalid length. [ 145.558696][T10734] (unnamed net_device) (uninitialized): option coupled_control: invalid value (46) [ 145.599779][T10731] vlan5: entered allmulticast mode [ 145.611808][T10731] bridge0: entered allmulticast mode [ 145.624242][T10731] bridge2: port 1(vlan5) entered blocking state [ 145.640035][T10731] bridge2: port 1(vlan5) entered disabled state [ 145.651190][T10731] vlan5: entered promiscuous mode [ 145.659436][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.966288][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.985803][T10771] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 146.011559][T10774] netlink: 'syz.1.1429': attribute type 2 has an invalid length. [ 146.274155][T10796] netlink: 'syz.3.1435': attribute type 10 has an invalid length. [ 146.707323][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.715820][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.897548][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.357204][T10826] macvtap1: entered promiscuous mode [ 147.376257][T10826] vlan0: entered promiscuous mode [ 147.381709][T10826] macvtap1: entered allmulticast mode [ 147.396868][T10826] vlan0: entered allmulticast mode [ 147.417221][T10832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.520793][T10828] __nla_validate_parse: 47 callbacks suppressed [ 147.520814][T10828] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1449'. [ 147.563098][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 147.627981][T10856] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 147.665628][T10856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 147.676107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.754680][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 147.784217][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 147.809794][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1463'. [ 147.869221][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 147.877989][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 147.890376][T10877] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.899062][T10882] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 147.919820][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1468'. [ 148.032636][T10897] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 148.043801][T10897] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1471'. [ 148.056633][T10897] netlink: 'syz.3.1471': attribute type 2 has an invalid length. [ 148.064445][T10897] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 148.072562][T10899] netlink: 'syz.2.1469': attribute type 11 has an invalid length. [ 148.088629][T10899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.100844][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 148.111307][T10901] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 148.135614][T10901] sctp: [Deprecated]: syz.4.1473 (pid 10901) Use of int in maxseg socket option. [ 148.135614][T10901] Use struct sctp_assoc_value instead [ 148.420674][T10925] bridge5: entered promiscuous mode [ 148.441291][T10925] bridge5: entered allmulticast mode [ 148.478316][T10928] netlink: 'syz.4.1482': attribute type 33 has an invalid length. [ 148.504996][T10928] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 148.552628][T10928] netlink: 'syz.4.1482': attribute type 33 has an invalid length. [ 148.577699][T10928] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 148.620002][T10935] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 149.100717][T10969] lo speed is unknown, defaulting to 1000 [ 149.203391][T10977] can: request_module (can-proto-0) failed. [ 149.468439][T10993] netlink: 'syz.4.1505': attribute type 11 has an invalid length. [ 149.925086][T11025] syzkaller1: entered promiscuous mode [ 149.930922][T11025] syzkaller1: entered allmulticast mode [ 149.991297][T11028] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 150.016962][T11028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.454031][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.473242][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.491718][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.515823][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.527761][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.540866][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.555554][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.569190][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.609852][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.666773][T11075] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 150.866414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.037191][T11098] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 151.054631][T11098] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 151.291206][T11148] validate_nla: 6 callbacks suppressed [ 151.291224][T11148] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 151.317492][T11148] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 151.330945][T11151] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 151.358141][T11151] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 151.384075][T11151] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 151.403045][T11151] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.475242][T11176] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 151.565444][T11184] tipc: Resetting bearer [ 151.628544][T11185] tipc: Resetting bearer [ 151.850236][T11209] netlink: 'syz.3.1571': attribute type 11 has an invalid length. [ 151.860024][T11209] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 152.022232][T11225] IPVS: length: 210 != 8 [ 152.079414][T11226] IPVS: length: 210 != 8 [ 152.275717][T11244] tipc: Enabled bearer , priority 0 [ 152.284393][T11244] syzkaller0: entered promiscuous mode [ 152.290203][T11244] syzkaller0: entered allmulticast mode [ 152.308160][T11244] tipc: Resetting bearer [ 152.329645][T11243] tipc: Resetting bearer [ 152.346538][T11243] tipc: Disabling bearer [ 152.365109][T11246] tipc: Enabled bearer , priority 0 [ 152.379395][T11246] syzkaller0: entered promiscuous mode [ 152.385085][T11246] syzkaller0: entered allmulticast mode [ 152.394952][T11246] tipc: Resetting bearer [ 152.402494][T11245] tipc: Resetting bearer [ 152.409630][T11245] tipc: Disabling bearer [ 152.463349][T11254] team0: Mode changed to "broadcast" [ 152.579633][T11269] veth0: entered promiscuous mode [ 152.590759][T11269] __nla_validate_parse: 105 callbacks suppressed [ 152.590781][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 152.610057][T11271] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1591'. [ 152.666242][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880696de400: rx timeout, send abort [ 152.674685][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880696de400: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 152.681369][T11274] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 152.704850][T11274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1594'. [ 152.738018][T11274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1594'. [ 152.773643][T11277] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1596'. [ 152.851480][T11286] netlink: ct family unspecified [ 152.857934][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1600'. [ 152.858370][T11286] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.903009][T11288] delete_channel: no stack [ 152.914624][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 152.972848][T11297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1603'. [ 152.995726][T11297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1603'. [ 153.103691][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 153.115186][T11314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.127363][T11314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.138419][T11314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.147969][T11314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.157133][T11314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.165244][T11314] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.179518][T11319] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 153.399050][T11306] bond1: left promiscuous mode [ 153.405006][T11306] vlan2: left promiscuous mode [ 153.410329][T11306] vlan2: left allmulticast mode [ 153.415241][T11306] hsr_slave_1: left allmulticast mode [ 153.432816][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.442697][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.451309][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.461095][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.485457][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.499732][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.515664][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.525304][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.615706][T11344] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 153.626221][ T34] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 153.650988][ T34] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 153.660059][ T34] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 153.669208][ T34] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 153.755292][ T34] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.765592][ T34] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.843162][T11360] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.926467][T11368] rdma_rxe: rxe_newlink: failed to add lo [ 153.939175][T11368] 1ªî{X¹¦: left allmulticast mode [ 153.955585][T11368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.095275][T11384] tipc: New replicast peer: 255.255.255.255 [ 154.119007][T11384] tipc: Enabled bearer , priority 10 [ 154.161207][T11389] batadv1: entered allmulticast mode [ 154.264165][T11401] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.393979][T11415] syz.1.1639 uses old SIOCAX25GETINFO [ 154.446995][T11418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.461474][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.848851][T11461] openvswitch: netlink: Message has 5 unknown bytes. [ 155.237351][ T9726] tipc: Node number set to 1577844736 [ 155.322590][T11493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.340180][T11493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.381073][T11493] tipc: Resetting bearer [ 155.415406][T11493] bond4: left promiscuous mode [ 155.420670][T11493] bond5: left promiscuous mode [ 155.434621][T11493] geneve2: left promiscuous mode [ 155.443241][T11497] team0: Cannot enslave team device to itself [ 155.454537][T11499] netlink: 'syz.3.1664': attribute type 5 has an invalid length. [ 155.464559][ T4922] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.475324][ T4922] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.494267][ T4922] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 155.505136][ T4922] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 155.514875][ T4922] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.524306][ T4922] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.536325][ T4922] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 155.545405][ T4922] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 155.554577][ T4922] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.565885][ T4922] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.575065][ T4922] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 155.585076][ T4922] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 155.595746][ T4922] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.605797][ T4922] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.616218][ T4922] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 155.625247][ T4922] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 155.789743][T11522] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.839765][T11527] netlink: 'syz.2.1673': attribute type 11 has an invalid length. [ 155.882579][T11527] netlink: 'syz.2.1673': attribute type 11 has an invalid length. [ 155.990512][T11547] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 156.117094][T11556] netlink: 'syz.4.1684': attribute type 13 has an invalid length. [ 156.184302][T11566] netlink: 'syz.3.1687': attribute type 8 has an invalid length. [ 156.335092][T11577] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 156.494798][T11595] netlink: 'syz.0.1696': attribute type 7 has an invalid length. [ 156.528816][T11588] syzkaller0: entered promiscuous mode [ 156.534567][T11595] netlink: 'syz.0.1696': attribute type 8 has an invalid length. [ 156.566170][T11588] syzkaller0: entered allmulticast mode [ 156.666006][T11605] Illegal XDP return value 16128 on prog (id 511) dev lo, expect packet loss! [ 156.687250][T11607] netlink: 'syz.4.1699': attribute type 11 has an invalid length. [ 156.708572][T11607] netlink: 'syz.4.1699': attribute type 11 has an invalid length. [ 156.926084][T11615] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 157.131624][T11632] netlink: 'syz.3.1709': attribute type 21 has an invalid length. [ 157.153836][T11635] netlink: 'syz.1.1708': attribute type 2 has an invalid length. [ 157.214888][T11637] atomic_op ffff888054d0f198 conn xmit_atomic 0000000000000000 [ 157.245876][T11637] netlink: 'syz.4.1710': attribute type 4 has an invalid length. [ 158.159984][T11664] netlink: 'syz.1.1716': attribute type 3 has an invalid length. [ 158.178850][T11664] __nla_validate_parse: 28 callbacks suppressed [ 158.178870][T11664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1716'. [ 158.196767][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 158.209750][T11666] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1718'. [ 158.238860][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 158.328766][T11679] netlink: 'syz.2.1720': attribute type 25 has an invalid length. [ 158.336875][T11682] netlink: 'syz.0.1723': attribute type 9 has an invalid length. [ 158.378730][T11682] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1723'. [ 158.442235][T11694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1726'. [ 158.553059][T11706] syzkaller1: entered promiscuous mode [ 158.561057][T11706] syzkaller1: entered allmulticast mode [ 158.737427][T11725] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1736'. [ 158.749921][T11725] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.869409][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 158.878659][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 159.014408][T11744] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1742'. [ 159.260312][T11761] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 159.332192][T11766] net_ratelimit: 5 callbacks suppressed [ 159.332212][T11766] openvswitch: netlink: Flow key attr not present in new flow. [ 159.355384][T11766] 8021q: VLANs not supported on syzkaller1 [ 159.498477][T11778] netlink: 'syz.2.1756': attribute type 11 has an invalid length. [ 159.619567][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.659977][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.681915][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.826175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.937432][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.086712][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.178132][T11841] 8021q: VLANs not supported on lo [ 160.706373][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.386607][T11915] validate_nla: 5 callbacks suppressed [ 161.386627][T11915] netlink: 'syz.3.1796': attribute type 13 has an invalid length. [ 161.404199][T11915] netlink: 'syz.3.1796': attribute type 13 has an invalid length. [ 161.429602][T11921] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 161.468956][T11921] bond4: (slave geneve2): Opening slave failed [ 161.528766][T11939] tipc: Enabling of bearer rejected, media not registered [ 161.591430][T11945] tipc: Failed to remove unknown binding: 66,1,1/1837065480:3437281405/3437281407 [ 161.963736][T11969] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 161.970657][T11971] openvswitch: netlink: IPv4 tun info is not correct [ 161.998799][ T9724] lo speed is unknown, defaulting to 1000 [ 162.005775][ T9724] syz0: Port: 1 Link DOWN [ 162.012581][T11969] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 162.025190][ T9724] lo speed is unknown, defaulting to 1000 [ 162.042966][ T980] lo speed is unknown, defaulting to 1000 [ 162.049298][ T980] syz0: Port: 1 Link ACTIVE [ 162.053980][ T980] lo speed is unknown, defaulting to 1000 [ 162.528620][T11984] nftables ruleset with unbound set [ 162.607372][T11996] nbd: socks must be embedded in a SOCK_ITEM attr [ 162.713162][T12005] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 162.730689][T12005] nbd: couldn't find device at index 1048576 [ 162.813335][T12016] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 162.973928][T12021] syzkaller1: entered promiscuous mode [ 162.986834][T12021] syzkaller1: entered allmulticast mode [ 163.068084][T12025] unknown channel width for channel at 909000KHz? [ 163.075514][T12036] netlink: 'syz.3.1835': attribute type 1 has an invalid length. [ 163.089734][T12025] unknown channel width for channel at 909000KHz? [ 163.097980][T12036] netlink: 'syz.3.1835': attribute type 4 has an invalid length. [ 163.109096][T12025] unknown channel width for channel at 909000KHz? [ 163.187124][ T1161] tipc: Subscription rejected, illegal request [ 163.217050][T12054] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4095 [ 163.249036][T12055] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 163.465238][T12084] openvswitch: netlink: IP tunnel TTL not specified. [ 163.660306][T12098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.705807][T12101] can: request_module (can-proto-0) failed. [ 163.723182][T12104] erspan0: entered allmulticast mode [ 163.762749][T12101] __nla_validate_parse: 26 callbacks suppressed [ 163.762768][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 163.805936][T12109] team0: Device gtp0 is up. Set it down before adding it as a team port [ 163.962250][T12119] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 163.983121][T12119] team0: Device vti0 is of different type [ 164.071239][T12127] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1864'. [ 164.094563][T12127] gre0: left promiscuous mode [ 164.100986][T12127] 0ªî{X¹¦: left allmulticast mode [ 164.122632][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1864'. [ 164.220655][T12139] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1867'. [ 164.291990][T12142] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1868'. [ 164.391900][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1872'. [ 164.850652][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 164.861157][T12185] net_ratelimit: 2 callbacks suppressed [ 164.861178][T12185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.937671][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 164.965336][T12198] netem: change failed [ 164.975749][T12198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.984346][T12198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.189415][T12202] tipc: Enabled bearer , priority 0 [ 165.257569][T12201] tipc: Resetting bearer [ 165.278578][T12201] tipc: Disabling bearer [ 165.372623][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1894'. [ 165.383097][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 165.392256][T12221] nbd: socks must be embedded in a SOCK_ITEM attr [ 165.401206][T12220] nbd: socks must be embedded in a SOCK_ITEM attr [ 165.920397][T12275] lo speed is unknown, defaulting to 1000 [ 166.247734][T12292] 8021q: adding VLAN 0 to HW filter on device bond12 [ 166.290038][T12292] bond11: (slave bond12): making interface the new active one [ 166.320513][T12292] bond11: (slave bond12): Enslaving as an active interface with an up link [ 166.342444][T12304] bond11: (slave gretap1): Enslaving as a backup interface with an up link [ 166.443764][T12292] 8021q: adding VLAN 0 to HW filter on device bond11 [ 166.662762][T12330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.801017][T12346] syz_tun: entered allmulticast mode [ 166.809084][T12345] syz_tun: left allmulticast mode [ 166.948178][T12357] validate_nla: 10 callbacks suppressed [ 166.948199][T12357] netlink: 'syz.2.1935': attribute type 4 has an invalid length. [ 166.967361][T12360] netlink: 'syz.2.1935': attribute type 4 has an invalid length. [ 167.094910][T12371] netlink: 'syz.1.1940': attribute type 83 has an invalid length. [ 167.095269][T12368] macvtap1: entered promiscuous mode [ 167.110142][T12368] vlan0: entered promiscuous mode [ 167.115469][T12368] macvtap1: entered allmulticast mode [ 167.121631][T12368] vlan0: entered allmulticast mode [ 167.702367][T12428] tipc: Enabled bearer , priority 0 [ 167.761979][T12428] tipc: Disabling bearer [ 167.875563][T12447] netlink: 'syz.3.1960': attribute type 2 has an invalid length. [ 167.944693][T12450] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 168.032783][T12459] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 168.065309][T12450] veth7: entered promiscuous mode [ 168.075943][T12450] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 168.509873][T12505] netlink: 'syz.2.1979': attribute type 10 has an invalid length. [ 168.546546][T12508] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 168.575643][T12508] netlink: 'syz.3.1978': attribute type 2 has an invalid length. [ 168.771845][T12521] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 168.836341][T12529] netlink: 'syz.0.1983': attribute type 3 has an invalid length. [ 169.198497][T12546] __nla_validate_parse: 17 callbacks suppressed [ 169.198519][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 169.251983][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 169.286517][T12548] block nbd4: server does not support multiple connections per device. [ 169.301536][T12548] block nbd4: shutting down sockets [ 169.481149][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1997'. [ 169.514103][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 169.978721][T12598] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2006'. [ 170.143877][T12617] openvswitch: netlink: EtherType 0 is less than min 600 [ 170.206813][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 170.217833][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 170.624665][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 171.097743][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 171.174744][T12670] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2029'. [ 171.281314][T12683] vlan0: entered allmulticast mode [ 171.288824][T12683] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 171.398424][T12705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.420775][T12705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.428406][T12705] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.442112][T12705] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 171.495022][T12711] veth5: entered promiscuous mode [ 171.505494][T12711] bond4: (slave veth5): Enslaving as an active interface with a down link [ 171.524018][T12714] tipc: Disabling bearer [ 171.568724][T12705] gretap3: entered allmulticast mode [ 171.578138][T12705] bond4: (slave gretap3): making interface the new active one [ 171.587750][T12717] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 171.589068][T12705] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 172.161599][T12744] validate_nla: 4 callbacks suppressed [ 172.161618][T12744] netlink: 'syz.2.2048': attribute type 10 has an invalid length. [ 172.219432][T12744] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.472492][T12767] pim6reg1: entered promiscuous mode [ 172.492340][T12767] pim6reg1: entered allmulticast mode [ 172.630276][T12780] tipc: Enabled bearer , priority 0 [ 172.638071][T12780] syzkaller0: entered promiscuous mode [ 172.643679][T12780] syzkaller0: entered allmulticast mode [ 172.654331][T12780] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 172.882853][T12786] geneve3: entered promiscuous mode [ 172.896456][T12786] geneve3: entered allmulticast mode [ 172.913147][T12792] netlink: 'syz.3.2062': attribute type 4 has an invalid length. [ 173.398044][T12812] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 173.405855][T12812] netlink: 'syz.4.2069': attribute type 2 has an invalid length. [ 173.447666][T12776] tipc: Resetting bearer [ 173.457467][T12776] tipc: Disabling bearer [ 173.657016][T12826] tipc: Enabled bearer , priority 0 [ 173.701595][T12826] syzkaller0: entered promiscuous mode [ 173.707650][T12826] syzkaller0: entered allmulticast mode [ 173.722221][T12826] tipc: Resetting bearer [ 173.731870][T12825] tipc: Resetting bearer [ 173.798514][T12832] netlink: 'syz.4.2078': attribute type 2 has an invalid length. [ 173.820425][T12825] tipc: Disabling bearer [ 173.914286][T12841] pim6reg527: entered allmulticast mode [ 174.145283][T12862] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 174.176056][T12862] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 174.210094][T12867] __nla_validate_parse: 31 callbacks suppressed [ 174.210115][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 174.264827][T12870] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.303840][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 174.314851][T12876] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2091'. [ 174.324713][T12870] netlink: 'syz.0.2090': attribute type 5 has an invalid length. [ 174.343983][T12877] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2092'. [ 174.353056][T12876] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2091'. [ 174.353080][T12876] netlink: 'syz.1.2091': attribute type 5 has an invalid length. [ 174.353094][T12876] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2091'. [ 174.371834][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2090'. [ 174.393410][T12879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2093'. [ 174.410370][T12877] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.450434][T12879] bridge2: port 1(vlan5) entered disabled state [ 174.491523][T12870] geneve2: entered promiscuous mode [ 174.498793][T12870] geneve2: entered allmulticast mode [ 174.507975][T12877] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2092'. [ 174.527955][ T34] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 174.546243][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 174.577656][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 174.633037][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 174.657822][T12877] 1ªî{X¹¦: entered promiscuous mode [ 174.667082][T12896] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 174.689097][T12896] 0ªî{X¹¦: left promiscuous mode [ 174.694181][T12896] 0ªî{X¹¦: entered allmulticast mode [ 174.710577][T12896] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 174.738084][T12898] netlink: 'syz.2.2098': attribute type 15 has an invalid length. [ 174.851816][T12903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.177986][T12936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 175.185916][T12936] bond6: (slave bond7): making interface the new active one [ 175.195047][T12936] bond6: (slave bond7): Enslaving as an active interface with an up link [ 175.213267][T12936] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 175.236783][T12936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.573337][T12974] ip6erspan0: mtu less than device minimum [ 175.667439][ T5866] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 175.688636][T12977] tipc: Enabled bearer , priority 0 [ 175.711944][T12977] syzkaller0: entered promiscuous mode [ 175.725926][T12977] syzkaller0: entered allmulticast mode [ 175.750570][T12977] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.772759][T12977] tipc: Resetting bearer [ 175.801262][T12975] tipc: Resetting bearer [ 175.838208][T12975] tipc: Disabling bearer [ 175.860060][T12990] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 176.025454][T13002] nbd: must specify a size in bytes for the device [ 176.640655][T13070] xt_policy: neither incoming nor outgoing policy selected [ 176.700216][T13074] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 176.723270][T13075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 176.745093][T13075] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.757264][T13075] gretap2: entered promiscuous mode [ 176.762699][T13075] gretap2: entered allmulticast mode [ 177.162768][T13097] 8021q: adding VLAN 0 to HW filter on device bond11 [ 177.304934][T13106] bond11: (slave veth1): Enslaving as an active interface with a down link [ 177.322931][T13120] sctp: [Deprecated]: syz.2.2165 (pid 13120) Use of int in maxseg socket option. [ 177.322931][T13120] Use struct sctp_assoc_value instead [ 177.372863][T13097] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 177.441545][T13123] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 177.497707][T13126] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 177.649037][T13148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.746240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.867540][T13166] validate_nla: 6 callbacks suppressed [ 177.867560][T13166] netlink: 'syz.0.2180': attribute type 3 has an invalid length. [ 178.064112][T13188] geneve4: entered promiscuous mode [ 178.401965][T13212] netlink: 'syz.3.2192': attribute type 3 has an invalid length. [ 178.412120][T13212] netlink: 'syz.3.2192': attribute type 3 has an invalid length. [ 178.534300][T13230] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 178.581972][T13230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.849148][T13253] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 178.861988][T13252] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 178.977939][T13261] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 178.989925][T13261] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 178.998375][T13261] CPU: 1 UID: 0 PID: 13261 Comm: syz.3.2210 Not tainted syzkaller #0 PREEMPT(full) [ 179.007769][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.017850][T13261] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 179.023363][T13261] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 179.042997][T13261] RSP: 0018:ffffc9001b67fae0 EFLAGS: 00010202 [ 179.049113][T13261] RAX: 0000000000000000 RBX: ffff8880789d2400 RCX: 0000000000000000 [ 179.057109][T13261] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.065107][T13261] RBP: ffffc9001b67fc10 R08: 0000000000000003 R09: 0000000000000004 [ 179.073105][T13261] R10: dffffc0000000000 R11: fffff520036cff4c R12: dffffc0000000000 [ 179.081369][T13261] R13: dffffc0000000000 R14: ffff88805334ce00 R15: 0000000000000002 [ 179.089375][T13261] FS: 00007f5bf14066c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 179.096287][T13258] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 179.098420][T13261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.098441][T13261] CR2: 0000001b32a63fff CR3: 0000000048280000 CR4: 00000000003526f0 [ 179.098462][T13261] Call Trace: [ 179.098472][T13261] [ 179.132769][T13261] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 179.137934][T13261] ? bpf_lsm_capable+0x9/0x20 [ 179.142563][T13258] bond8: entered promiscuous mode [ 179.142641][T13261] ? security_capable+0x7e/0x2e0 [ 179.149222][T13258] bond8: entered allmulticast mode [ 179.152607][T13261] rose_ioctl+0x3ce/0x8b0 [ 179.152633][T13261] ? __pfx_rose_ioctl+0x10/0x10 [ 179.158361][T13258] 8021q: adding VLAN 0 to HW filter on device bond8 [ 179.162066][T13261] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.162102][T13261] sock_do_ioctl+0xd9/0x300 [ 179.183063][T13261] ? __pfx_sock_do_ioctl+0x10/0x10 [ 179.188207][T13261] ? do_futex+0x333/0x420 [ 179.192569][T13261] sock_ioctl+0x576/0x790 [ 179.196906][T13261] ? lock_release+0x4b/0x3e0 [ 179.201509][T13261] ? __pfx_sock_ioctl+0x10/0x10 [ 179.206366][T13261] ? __fget_files+0x2a/0x420 [ 179.210979][T13261] ? __fget_files+0x3a0/0x420 [ 179.215677][T13261] ? __fget_files+0x2a/0x420 [ 179.220304][T13261] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.225256][T13261] ? __pfx_sock_ioctl+0x10/0x10 [ 179.230138][T13261] __se_sys_ioctl+0xfc/0x170 [ 179.234735][T13261] do_syscall_64+0xfa/0x3b0 [ 179.239256][T13261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.245327][T13261] ? clear_bhb_loop+0x60/0xb0 [ 179.250013][T13261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.255909][T13261] RIP: 0033:0x7f5bf058ebe9 [ 179.260333][T13261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.280082][T13261] RSP: 002b:00007f5bf1406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.288512][T13261] RAX: ffffffffffffffda RBX: 00007f5bf07b5fa0 RCX: 00007f5bf058ebe9 [ 179.296499][T13261] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000004 [ 179.304570][T13261] RBP: 00007f5bf0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 179.312548][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.320524][T13261] R13: 00007f5bf07b6038 R14: 00007f5bf07b5fa0 R15: 00007ffea1f66078 [ 179.328518][T13261] [ 179.331567][T13261] Modules linked in: [ 179.335598][T13261] ---[ end trace 0000000000000000 ]--- [ 179.341113][T13261] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 179.346735][T13261] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 179.366398][T13261] RSP: 0018:ffffc9001b67fae0 EFLAGS: 00010202 [ 179.372510][T13261] RAX: 0000000000000000 RBX: ffff8880789d2400 RCX: 0000000000000000 [ 179.380599][T13261] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.388604][T13261] RBP: ffffc9001b67fc10 R08: 0000000000000003 R09: 0000000000000004 [ 179.396727][T13261] R10: dffffc0000000000 R11: fffff520036cff4c R12: dffffc0000000000 [ 179.404712][T13261] R13: dffffc0000000000 R14: ffff88805334ce00 R15: 0000000000000002 [ 179.412715][T13261] FS: 00007f5bf14066c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 179.421706][T13261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.428325][T13261] CR2: 0000001b32a63fff CR3: 0000000048280000 CR4: 00000000003526f0 [ 179.436352][T13261] Kernel panic - not syncing: Fatal exception in interrupt [ 179.443713][T13261] Kernel Offset: disabled [ 179.448041][T13261] Rebooting in 86400 seconds..