last executing test programs: 3.875251513s ago: executing program 3 (id=2864): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.713739094s ago: executing program 3 (id=2870): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000000)={{}, "8d52ac60418e3e5d65f4169829191f135841a3474987d2530f0f2a667a5c5f4204741f4f32f0cf9650ee6df645ebd13d68df66f69d42b2b260ca7c305fbdcea004f34f8deb7ffabbcf4860cabe779434ba3857ac431cb81d1ec8e905f6d3b4fb8e9c8b62c8d2aeda4820c77f0c5bae64b8b0c44cb5571c1f7b80fe489cba02113fc46e60058c281a426077e417de5b8cd12e7d342ddc1d0ce209f5c45102991c3b5e4b82ed71b8fcac68f9688ed8ed480f2afec326053338bef6a3b690471891d108470ade3b4d262fd05649906d4bd6888fd3e7892d86456f724717de312239ab49aa82088453bf309c5e18e3a4b6806e7ee144a04b805800151e8efe97f208cebc9f2e8ad7f18c6745ea45f5a22262ea0c89dc34f3a35a6e8bffe2acb9bf0fa7dfcc880e21d8b1dea1e245126b601a8d8bc82bb9f3c92b7abb3625f401db020ef9bf1b53dbf3f0c89c607bcbebf232b196c687dc57d8592f1ac8ee6c466c51b4cbc0965d73a0c74f2eb18f26c96e3e0b85339a04571b208898203a79ab042f99b74793b49bc190b1fbe7ea7e4a04d274d617943edba3dfb0704d437e8d4e2b7cf30113586510f3050989465987f1841a5b073a27b239943cc31e5ecbd94a5934de8fecafe4de273d51f5876c8a8d9f2bd88f5545c2833f081c8d2639c6b88a31f362018ed5582a5e2d41cdac5a0de61c0391bab509b550d00d96e5c7bb4f281ebe144c3fbdcd5d9f85203728553886cb4c338dc2063e3b120610932da56edff3b0694719744502e66e74ed94296dff279b8ccc78a1317ae8637ffcf8f58e21966b2eca045970db610b5e8469bb8b77f2f8556f431441bf00436e91e7bb2a7f845df708161ab53d4e45b3f1088c5ac59257120a1e2fc6afd77a942beb860c72b22ad4668ad4ed6b0ef68e66264ae96d0fffaee5d5664e215b2e2b46a84ceb09c6c363031339977227103b0bbb13c20864d49f452f10822ebbee0f7f190d837f21a6bdcf0cd58d82b503432bb97a3d030af82b4443cb0459a73c9991416e9bcd649a3895e16ddcc69f7f01a40495538ab8ae2890ddace13a3453f193d04676484467857e2b6e0562b8c97625bdb4035f521c813a5272f58c54433bb07f40e6098e135612c9102d6e0c6850a001797cf66ec697f274a0b9b5752d85521fb7631848d21e9550cb616216467c63a0ae75fda077afce1684b270f07f995c1b5cc459349126df4735a1a905ea8963330a1d148b0e3a2bfbb97523c94d285fabc79b01a45fdf212cf7e1a550b9bfa7974ca19afd7b568d5953ff6727451b8368014df766ce1b02c0c85616bebba9f6319b7f9ca08c4b405beb92c68df0ffa852276476d3246afdb9cfd8d25d6c7e3649884b8e045440c12727f5161ad63ebdd6beaad7bb528bdfe0045cb6558e2618db464110a37c2e7771844d8c37edc37f3153c0d07dbac180f5ed9fe744bd9a4a1ac1ca91a34ba1ac3165034126d72842ff070e383ee109311f309933dd49cba83b0de012e21e689cd44c4f358b998e8967ba04ade9d0c726c7cccb17e2b6fa32ac2c9d7f1bd98cd39e051b3170ad2b431ef0d794bcb4c3ef8ce3e252f611b6c1b254e38fa6681fe9e68671b3b0157eb709a1e911c4f555549f41bb5b913d3bbc8918c7c39d312b58c25e71c908d0b6b79c256e38062c455be7ca2e607386c9853ef3793fefbb3d5f170188565a2c4c91b15b1a03fa9794615b1029e10c41e20734adecf7cde62f892c7f7eaf4cf1986abd55fafeb9d9baca951593040ca83c6408c02bb9d6693761462f26b7e480d4cf64c74f07d4077f41b109f7759d72f97e92f35b24a41d00f191781c5bd6533db3589e40eb37601bae81bee7b9456a02e2bd3d0b183069254cfd238a416f76da0c17d6da44ac1bb44a0ab112efb58c3d931eba44bc5c1261a4d3a907ff6bd44aca782375e1e7a058b842a368d4fbe6d3e8f8225029b13eef1562826f369632c23502985e71a2fc7ae8f913f57d1c00b58030869857d75ce8c9f459f73188178f5b73ec310f95bbc67c2324c088108533566612230eafb5fb5be09a3b1fdf0de2e5e2024cadd1169a8594b8aa8d41e38f809bcf70a61134c2901bd033f22f34a08dcfcfaf9157ad075b800e25cf680b992fb65eeff8791067141e947dbb49282ba46656b79287f16cf72a9d45e4728e77066ae463ef932048da2d43cf85659d1b4ca6f76a2f490f1ab9c1694a79c85489863ba42c4540772243d577d5018f8428d9a16714c66abc48065159d9dfcf968eb65258e77dc0da9225ce573d4add790c6fe6df8ac2761e92569273904bbd061e648b43b4182d894d891e45e58eab2429d2f0065a8e0aba6f0e45fcb54c8061dafd42e2ab408f0b994f3449498016ab891c3a343482289f83af95c071dae783493b87116c4de9228f64823e5631363bc851473da6dfc273a5883fc2ed313096cf953ac592f215f000810b056c5aa2bf9a992284e1359b678862d2d72bc52f6bf12aa696934cc38305c9baf2d82da01ec336552596f625bf6b4fdf4cf4f14113ae6a97df96a74dc55083f9b2f4a010bf20296285e75e862881a3ea5725dcc648a54ff993ef3715789847394019976b60bf46db36a2e61efb42b759697be1a9cce83099cd21ea30a21d8f357711be60a465f37da15fbb85401c432ec6cddbbcd7f79e6342032fdf770f23ceafce679ffab97703cc2eec794937ce4805fe2af9ad06e60ffc1f8bf730066d32d03d25c35b6df1d41c26575b4455a3004739ff0d543ea8d77ef19094894456599cbfddae324ec15ffdf254ee42dad108ea1251180924c1749766581db289070aaef98363f2ccd12e983735ef90d8f9940083895a573fcb1fbadcb99183307dbbc908b3dcbec66516d8a6280789ff28ee7b7ae8b3d3752a49783346ab201a4be91a6cd4fe24f9906ce48d67bee84ae53ca43f3584a040bbf9d22bf99249b89d741e49541167d6741fa82546e51cd419565e1082a2058f76a5cb2e1cf6860f604bd624c50ad5704e87505fa9dc9d99472c7b5c834cd7abd0d7e191f3dbcd1a4987fe4b3378d7239e95cd714d3efa30d18d192896bc2880f51b2f126f649b8d0d461d068eae2186a84e23c38948403658c60baf0dbb5211c04abb9ae732ee6924fb3e91177819c32587614168ae27e0d7c9eae87ce3cd97da04131520dd3bccf816ed79bd7541dc15c7cf2671128cc0cf03c0fb79e43eef0fb4d9d9c74088df0c43de819934e4737a00533c04581533c63d2ca3f03725fa4e768325904a96ee816744acb0247b25bd67ef58f6ba51a95a0dd64c9c6acdb93356ffd7a257be6956eba9fee1f51f396240da08c7601bab8b749fe379bf02917c0bb2f4e8caeae68e0b2e8cb0a1663be59b3cc154db61d5eead40c765d8b83f082e1df7ac6e2d2093f9201b6c436c010d55bf3f171b5d7105a1addb127b1d271c31840487c6d6426a11a6b094f77b6f5c2cbe15316aa653e676c2ffb05a97521f756f0ef42b65cf6bd0d7c910b121468f62a9771f274f3298ebc81a4eee70b826678b9020dfbe4bae86985187769d449aa633ff8f69150a14fe1518726b7c28eb12e65a1da219faf29f40e6bfd4522fc32cdb31350b962ce0547dde8eed738c4af9f2e4d18d9d6c8d63fd0a522285e6594b68d714d22568f66c7a96c4ba493c9a55ce4875a84358b308075ab08f369fe7cc8d34c73330b8fe576e32593835ea591d1d939a4b919866547c53c0388667a855b2dafc71ca13d40986163f841690845ece826d74f6adbf091914c68ad249acecbb85b595b9125d3738569f0c8328fae081b9d260d4fbe523ea01ec7a519246c556cbeaa39af098c82129539987f114275bda0cb779079fbc9a870985cae6d96fd518ea91c5adfce62c5b16e75cf21e71f39d53ed4299ba9737fb9226110f4df3d9d8cf1b108fd8c8af2f0db0f79360c9b9a2632bf622503205a3c794f124760fd570a25ed871c1fe4e4da111e612797fc6c2642375bb271ee59457a8b19814ac3a5a92f86e7435774c79ed1fb95feb6d6189b54f9e1e7ee3e5380c06965f04697b405a0268125c7404803eee7e4653c0a554754f123cfbddd808673eacafebad5a21ecaf7f58d693f86d8ae532d4dd2c7b4225935f4b7b19b6363bbba9d4f874b6c43cbf1d50bb9655b67f944305a0abc45edd74fe0ffe06361a4bbe46e569d4e84919ed0c5f6f840764c1ee0bce9ef8b93e96d48a29fcc655d2cab9d56c8c51e9afb66d8c68b5df840060c2c5d314f767828718b158a71c02999f83e96a48ddb00ab9b05e473a67724976b04d2e40d2f8609ea55d7aa07f794326881f53bf1edfea0c0a7edc991331b6fd5ee6109ae51dc99c082d444299c85effc357757523f6e6eab3560ea6ef383482c860d700a03d5a3a50431dfacec9d3f08a6453061e6df0f2ca5ab31c94fb58a3882e8271ebc399e273fc5bb19d5ac355901e42722ff2da600b7bf29178bb67f6dbcbf6a8dd912baf891b0cbbd39d4a8f0fcc8c1f46038f154bfb56b8f5af7af084f8432ac6bc2b6d8017d159c2f00645b6342ad12de08b910d2cfd676c398f5281a99f0386678394ab8672b4ecd8c79c4756b42450d3b6b060e85f3382dd9456e14a59ca5ad45724ac1b4c72cff44b8a320b71c0cf7c1c17402b0f8fe073a2a522ace34bca96826b8eab436b24695ec3c84393f3979ee2033996f643c2a8ccddad7a347a1af9eba186121d99349a3b3cc845c0806ffd085a62b6292b6ef4df465cb675e668c149d32c4c10a5ddebcb5a94d7aecad9780c764adf1ce5aafdd783e71dc41dbfc0d01be9edabe52238c2ec95ada491475c66f7bbe5bd5a00ebfcd53ba398c138f156fed5c7a311760d120fa774dfa3e23724231dfe5184084c8b6a486fb7f980cfb8dfb46a7a399d2ebb8186e3fcaca506162dd69274455d432ef4c4fc88eb778255dba44928da3f75a1cefe31954d5da8533214035c06ad5962adcf1b34e09f93f84910ab6378e9b8184fffb542ce801f101641fdd6e2c78574e0ce37ac1d842e599016502915c6fabf61ec0815b73413b06f77ed1bc772892a4dcf97e18cadd634b78d6392bd98947286b219068564caaf592eefc7fc1e35fbfd019b5ab7e7f185200cbb5d462e0893622fc7fe5397737afa327386771827627ba8c21781c23917b2d4c5809b5eed2360a33bdde2fda9cddb9ac686be17d83521d3a5488aaf11f96f25002756225febbf2db118bcb81fdb0954e36d9249ab8fda707e747fe13d7174673af8204edb3d15ce9c75d66670c2833967860e34f6d244af0955e8703fe98a2a314411a02198bf12076eb7dd52e3615696dba196a76b7c99f5d972de8858dd4e21bf2fa4f8e872795c3b7be42ea944446664592864a99d4743df088bac8d912d135698d2cdcb2a14f909d9fd10bf66bd13b7964f554c400a8c0b9c1fb7a85bf5eaa2079f3a2672a383bb325f6386949fec96149a2dea53d00ce46159bbee5c747a6197f16ac02d09725b2a340309c54b1b4b3eb9d0aeb60e1312c8ea19df08a675deabe077ea2abf3cb6af1fa53d5148ca0942442bcbd0dad7b5f8dce94a54eeb760bb585314fe669325b888b86b5b254f2b964b01a54775a398807d01f3075565894b7d150524b21e494ef8edb4bc548320a21d265f253392b93497378cac70e44da846f7e367f2549a9c44d737a46fe88c44fd9cf7d462abc8a7a83450b828f9a851aea9b712f17899bcaa02ac75dba0a5c77c2f6231e13155bb4a9c0e5eaebf9f0288e3e52f"}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x0, @private}, &(0x7f0000001040)=0x10, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f00000022c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002280)={&(0x7f00000010c0)={0x11a4, 0x33, 0x1, 0x70bd27, 0x25dfdbfd, {0xd}, [@generic="b590e0588e941f167531113878319abe24ca46dc9a8956f6c13d51340bc4bac1a0c86385545ccbb4db87a2d7b7b17eeae05d1ac28c437843b6b47ef05451159ac04b0ca90dd978168395599edf64d50e74f630f4f7fb257bdcdda272df91aee6c99f0b8710", @typed={0x6, 0x5, 0x0, 0x0, @str=']\x00'}, @nested={0x1030, 0xce, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xe6}, @generic="1c7714b0d4c0f4a3b94530ce5707bc2c0d2047c635ced4f85a289538d62c60c4f82b049568b4f9d674c0d5979553c2d33fb442fa8b86859e766dbd414b12b7f19d5038dd1e8195484a756151c9534889709cf2fda45c8de37651c42de91b66110efcff43b0e32ef6e98f5e876f8f8df017f55133cd0b806685b93c26cac1eafd84f67f4199c9dd8b5a7d683e7dd327c70ce9fcb84af022cfc20b828acf41b7d5b0e9b8f2a44da5e8b0825b88f5ea8010b3d2259461c24f2a4c9573e9203de049d300a19b5a87be195c0a50ea9d79bfb1c462e9538b1864aa5c1261da160852a028b901ded2b3fcb9957b7f4b32f3660319996cacd02c8ab0492fd1c71efbe482ba8c930b25e10a0702623645d9b3f168aed8cc98d077de1a02df79c3888c9ff4b9b9902c14de14ccdcc11ae9d3737138fb9d9bed21acb195cd482380603dfcf724f8dc3ca2dd352e56885e36da08bcba9e122bd983e6fdc5aa7c5692a7849de597ce4bb19da6e471c9a6d2091d6e2b07eb711fa19c65bf30b979b7fb6cf0ece0db7ba53721c517718ad12adcff32065de84055d132e92adf73500c40a2d79a7f75a329ff1dcabdd64cac14946534c222a7e043034fcd6a0a333fe71118d6420ea5d2e99ac672fbc85be65497b367197bd32af763d8abbcc9de17ccf1b200fe130d8f16c4da2def1b5cdafc423730cbdee3a1fcb79251a3500aaa1540963f9d73dc92b0f0422acb69141f3e46be4ef0dc7ee0076fe8c753ea98b04900e4e53b0109375aa1b74f081fa1053f8a383f6a0408df2b88d0795f91e593ce55c81e20af7f5842312cd05099f1f2ce9ee7e0048035ca9472c894da73b27d19c42e5503d831b2c300997789b70bdb4aae9a64b0ab05df94807f719f3f9a5edea8357e332433f0068755953b33f08e104c4e2ec32c941d7531bea6648ddf481276eeb724a3ad201e7453c8317554d4a2d593eb610a1c67a0ce5cabae332710dafdb0cb45d01ea623f3e67ec4539a91c657a1a6c65a03f705b7a647d98081970d1e599e659d71536b902db5371647465549c4dac80bfc094761b5fdfcb126de65cc83ef067bc79b94a005373954d266320a2b17505046022712b3915417fe87085f839f98c3dc207b62f7a6e1b0f5e99be679a396ff64f28ae6b91cfa643102df55938bdf93bd09bdfe3bcc33f40c64de00482e223a49ec04125eb6809ac9c3baed99cc63bf0dc8d5ba53d39cddd6e9c2f27820bdb1b1fd4a947777928b96859ed23a39596965960ca85e943e7c00b548b21ca7b72fc1cedd2834072b097c130e708a4a26e724705a180ff3d5ba153d7eed7eab71c2b6d9faa15a508edbf1ab67495931d0f8d867193d75401c77d9f919f86cdbd331423e48c058a6ae7dcd518c32478d86a2d5a92f277cbdb96452ab730c5160fb4ddec7259e795895ab665387f7215f5a3dae2608652c72d4485e3b72ca004611ad5b0a9ee46e6f426d94ba774be16e25f5222f9ced85ae59affe521fbcc69c1a6cedd383540eb370bfc7c1da4de778b7a48f7bb76513a937563e2e4417865e69c335bac1504fdf1c3d9e21a57540e5a2fecdf9dd463c291f94ba0709783b8aa8e19f1538bd81a7be358e1fe9a7d8b322c6e80c9f02e37f973390d510d711a53e6149911fdc22bd26230fcf0a10d13d573687030009f885a01cfb4ab1f6518fcb5bb2b8e322ade96788382e02ad428183a3757ad99319e3089ab63b5a01ae0addd6d86de799af1580b6d6b8a24f779fff072248c69e5694da9e0cdd9edb610bb91abf4bdaedcee14a98ad642262c47504a96efc3b7867aacdea7f09281be3836976a54ef46410daa6fb5938392396461730547ffe856232c3ddfe5a1118f1a7c829ed28e643355e2fda470b71795b2c398cbf5964b00a46cab8061c0b9f27af83b3add7dc6c62105b5e34a4fac8068cda315ec95bc6878934efa4d12cd08d9035e800f40b90d890401e1cc3668d17d44d85011b772f646258b31e2906634b6eb386b973f2591edee3c835702ba362f138fb6a078f5aa855b13287eecf533ef377a1238c155ec0782069dfb5374bc2b44ed923877237f649c73d71fa217acd003335a1bf0e510bab6e9e20550e953b0774426ce415462eed91806b1e6bbef72ecec0d5ff71faa5819d56b21a4e292688f3de8b1963eae0a39b60d52b52a00d3638ba83689e95c9f586be96e652824cb37b42debf8c6aa52d5280f57330a5fe6a775a6e9c40562c10b0902f8b8d59a577499ed21c4f6300eec38186bb18c2d956791853e5f8dd089ff1310b8e142dfe81ed32dab63c09df3759b999a76ffa0f1839353bfdaec935caf6c8a91b1d0d3eb28558189de2913e31403e713c802d2932403b58846f85e3d5221f75f877eddb0312430170d80602563422f77987b102ccb46db62b57de3ac59350542c641039e1f2449b00d25287df0ddb71e92e73d56a96eeee5c45f4deb47e555d5aa2f92df0c71c4241c1f2d0a3dfff74302c203a7968bed38cc037045411a04f762f3cfb4f6556c4d6096980469e98a164119fb8f2e3a5966e3c10d4472bd38fd7d8942291d9ad345dfcb878d1903dfaf0e8018d2a8a53afc6593c7f25e3293997c3a744fe7199a3343b96eb06afbc6ecd67ef645f9209e9ad091d444b8670e6a81ddc37dd00e8158f5d5f88d68a713a34a9f7b068f89381ce1b4de48532b2f2d2ca054126498db53a8310fcf9a7f523bb330fb507dc7380fee117f06d0c874ae2b5db5a63be0095bc3579cbad8d293c81979e9d5fb6c01adedd3b165eb468c7f1418e3edcfd133711f2df676eb4372281fdf1a06fc9f339a790abe2c8fe2a9ed876454723ef9709658caa5737679c7f63bdee68e176808f359ae0d0b46c146fa0d38f117275d3c562e6698db687998f1fca6e2f73f088e2da34c9e1a0b07e4ed8afd35407cb062c09a5335a9b859dceb152a69556c67b6d43ae0864e76fb09209862308016cf738c50c872910a64f48a456bad613bf4799142fe018885c61d7bcf78d77583d1d234c97eac1e0ac5b9c38492a1270988350b32426550e9420588db7f6ab2caad7530d38c17a360627262377c96fb881b72af691af21ac89d680b014d986fea5ae8fd062e205b3ef934262a48e32d37b12e58d9a3e19bdde99b750ae96208b91907757e7bc726f174d1036ec51a777123910e5da28a95d375e52408e3ba426c8e2901b38cfdd230770661e06a078885f481c79eb6f7f7a56dc95f65099f17b2478f1683b9d3604d7638ef752d55bc6e02bff1d40212f2006dbc6f42f044f21b88b88b52cbca9ee7c21677c4c853eeaf5b96372fe84e7d9f1e2f871ab80965c7309bc2e357eab43e7e4e0bf29c09d71c03f83f9fc10dc3ab1f6c677e052093b69831da37db027b621fdc6e85caf7f5afdd48b605d6b31edb43c3375cd6cbbec1dcde14d6c9df8e54c8f11408e44203580599dac49b8e75e603fbfe9cabcc7e15224ec658c7cb5d069f8a4e8a0793919088f5c98eea62e8b24d53c603fdc6c32bc90a243ec2214a32e18cd60485ffe191e125f93a4cc42a4220920da3b2e77f005c87393f6d62151525a19864f4343809949e17232283deaaa51521cfa60033788f40551f3b61c0ca3935d2d95edf8a83c3f56cea351fbea6d9e55d08590b258d9183cf1fda890e457295cc3e5d0731914f13219600f85a8191afadec294a92d82ff1eef1c55bb4f767145b55f13610ddc033e560f053317585784b44e3b33124485a26a638ac663d4411691e510c6fac34c5e526d5e51d7346fd675bbb1b64a612ade3193b807b78a83ee851c62c282688a108f55d0856796df98986497468c2cb81eaa3473c88daea8e316a4a1d08628eb381c46a404123240b49c7518d177362bdcf382b087dbe7c10e858b514d04b60c44c66a4131a9c487a58556f38ca8f0722098541f0248cc492c98a3abe6f9a72fbe04431783ab28d30b2e60d642e92f2819435438db2c7dedb3f7aa2c337f496e819f900c74fba55ae40cc3b5798a39b3973e8b15c113387dd442212c08c491eafe1719a605c742aa69ebff8af63bfba50d6ae83d328c187f39007f3a1c08769e790a5f9bd0122c0b67964f508e8685cd6b79f4450a0a7be64ed68aaa02143e43a3e38b92aacd3e9a35469535317e854c018a0e164dcdf99cec23fbf99bac04c59cdcb67b91f89982f49906b3be368b24b9450e01136d4b769fc258010806ccb0b21bbb10ae7a84741fc469aedc3a0a468fb5cc6d5a250ff829114bf573cf4bc28b3a5fb49d3b171b36dcf2473e6ad1975ab06462277e38d6c834ca76290c028d1e6a503b7d62888c32f7556b8d391d94954a80f9e7eda3cdbbaba89aef4a788bc108ea82c30002b94ef2d4175ff010ebb16ec2a5b0a31373ba2c6cc1ce979d98463b0acebae41d59581070991c0d8c057ef4ed3bf858215c31b92f420a9084dd173f922527ddde6b9b33608271a5fc7bf06cc07ca873a68a38fc8448f9cac5dc9c0fcbef3077a9d0b7d4673c02dc2c7a34a08b1b7602f79b5d1b16084e4670b866629a94be66e7f37aaeb7a4271dac23b4b83271ca0769df3854ac67c09b39ca7bc84b41186cc4d02bedfe8b144c8c6e1a15a5827382bb9a0505d42fa8a0866898fc141d458f95e66ee5c20240d4f929f31ef2666c28be05a1523eb4c9a6f5e226af80eacabd5dd16e2ccb100356c5213752de19c92b0b6ba3d79925f1b52455b0dbef850b1a2d586931c47a112575547e44b8715dabc1103fd944211b15fc54b21cb0f44e742ab9f91120f86abe09bd319b5b0d16872d4af1fcbc5792c43d4a09c10b71e6202c2c8b918f712c39b99e206c786e52a5cb926346609402bb147e1b807835774dcd8a96fbb2fdd2327e5d1b27258d0268f57d13d9006f0194c62a914e4791e2b9ac61865ca50d444aeb7e224ea0cd21d7e621f3f9e9d4ad9ebc252d14540284f613d17588a53bed4669a4436f0e554c945313a6b598009f528f2f51a5a85050b21cf0e09a3a05ae2eed87f3a71261ea3e2b81096ade5eaf44999606a99a845f05aab39fa705fdea55cbaf2734b094581634fc94c72ed317cf06783df2638c934da02a2f0c86755ffcfbb30a7c484aaa1b125669b526374a5ce7018edef955ac75c6f8ec3120838cedad5705177ed772874bf2edc3874a056d4c282782d7d8709f14604146674990af58d2958abaf35e8aeee8d8342b7ebca4c57aa60aef3b6f545e1a85375dbf8412a7c6ecde2528d88ac187b703bd819470cac59925f5df711fc24e8e83721d7d8d99441f7f893fe90416dd1ab59fb09dc92703beb574c8abff428154537c5a79a919ac91ee90fc752a814bcef9d09e05b32305b30f5f3ecdf5640ae70df19bdcccccc4d0dcc11e52474d7a0bf6a3894b1fe653ea8d3bd1c8d231a530c10e067b5b674e4f381b648bc9e4e3074b0fc699241f46787276c9011ce65fea93524220a33e208de375d60f4ee7a530043b2f16e56494b01e998dd94001813b2bb7670c4386db208144657d6b7b684b2be5ea2a82cfd40686024895d059ba1fb8d38aa0cb8f847b059ba1047b0bb737db6c59feb50509ae840fc50e8ce2571a9cae3ca432f944bf5e7c4de731649df3c95979d4816759e29dd3749d0243ba98d8fc28409e2dfc60f4330c679e69b34a4ada05e1bbd8a3062bf170601630a16eaa27cbea5667476f3624c66d7791a5c8b4e87f158d28352d0a23074a43b5184780f6a3d084103e2cd89c62a7c27377e3e87df22fa3f75e12176da3d8fea9d4d7b103e7d3379d09", @typed={0x1d, 0xf0, 0x0, 0x0, @binary="95bca438809562a33ba05b9e9a5a6bac86fc0d02c863b686c8"}]}, @nested={0x4, 0xd}, @nested={0xe4, 0xa0, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @u32=0x3}, @generic="1a0f5129d040f532f709b71b5a5fc9ccee814e8beb5aa643cc77de922fee", @generic="c3be50cb55fa690f85f7cebae121e34c0c40d4f8998c338822b8b428c2ae2951ce144de66782d86d71617445fce9f5317d202201958cc6557e38cc", @generic="feabfab2936bb43a8e6d2ec01f4ffa4efe09d59a28e470afd10e525e71931bcc9116dd25736c92bc5315145233fb920bcb6c1b04028b139b49a96422b80d81691101fb5605fa80c9e716de9c5757a8eedcc48a7661a1b1fa3a5bbe1652065ceb3047791c730f65bee41283f39fb1caddea68533b4a8cb030077c72", @nested={0x4, 0xaf}]}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r1}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x8000}, 0x11) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000002300), &(0x7f0000002340)=0x4) (async) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000002300), &(0x7f0000002340)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000023c0), r2) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000023c0), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x55}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002500), r2) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002500), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x7c, r6, 0x206, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x28000010) getpeername$packet(0xffffffffffffffff, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000026c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002700)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002800)={'gretap0\x00', &(0x7f0000002740)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0xd, 0x6, {{0x27, 0x4, 0x0, 0x8, 0x9c, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0xaa, [@empty, @multicast2]}, @timestamp={0x44, 0x1c, 0x2d, 0x0, 0x1, [0x8, 0x4274, 0x3, 0x1f25f6cf, 0xe, 0x358]}, @timestamp_prespec={0x44, 0x44, 0x1e, 0x3, 0x1, [{@loopback, 0x5}, {@multicast2, 0x2}, {@remote, 0x3}, {@broadcast, 0x2}, {@loopback, 0x9}, {@broadcast, 0x80}, {@local, 0x5ce9}, {@rand_addr=0x64010100, 0x7029}]}, @timestamp_addr={0x44, 0x1c, 0xe5, 0x1, 0x9, [{@multicast1, 0xfffffffa}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002940)={'syztnl2\x00', &(0x7f0000002840)={'sit0\x00', 0x0, 0x20, 0x80, 0xef5f, 0xfffffff9, {{0x29, 0x4, 0x1, 0x2, 0xa4, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @empty, {[@cipso={0x86, 0x3f, 0x0, [{0x6, 0xf, "cda9d07f85ddadac61022d3864"}, {0x7, 0xa, "2039d3d9c01c7c2f"}, {0x2, 0xf, "853d49dd7adf2daa032ce57ea7"}, {0x0, 0x5, "a2a255"}, {0x1, 0x2}, {0x7, 0xa, "73d811236b813b69"}]}, @timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x140000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @noop, @timestamp_addr={0x44, 0x24, 0xe1, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x4}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@loopback, 0x800}]}, @generic={0x94, 0x6, "8197c275"}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002980)={0x0, @rand_addr, @initdev}, &(0x7f00000029c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002a00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002bc0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x138, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40004081}, 0x2c008880) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0xb}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x891) socketpair$tipc(0x1e, 0x320473ac0f9f6b5e, 0x0, &(0x7f0000002d00)) (async) socketpair$tipc(0x1e, 0x320473ac0f9f6b5e, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r13, &(0x7f0000002d40)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1}}, 0x10) (async) bind$tipc(r13, &(0x7f0000002d40)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1}}, 0x10) sendmsg$OSF_MSG_REMOVE(r13, &(0x7f0000003080)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003040)={&(0x7f0000002dc0)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x400}, 0x6, 0x0, 0x90, 0x4184, 0xd, 'syz0\x00', "b93a91fa3f7e02cf9b83bdfe003cd0c662b8982f9ce3de97c1fe0c33a275f376", "527b373fedfb2d401807fdb825d6c7b48c909fc8706c276153aa4ab48365bf0a", [{0x6, 0x9da, {0x2, 0x5}}, {0x401, 0x4, {0x3, 0xc3}}, {0x3, 0x3, {0x2, 0x6}}, {0x3, 0x2, {0x2, 0x1}}, {0x8, 0xe4fe, {0x2, 0x3}}, {0x10, 0x8, {0x0, 0xb}}, {0x6, 0x4, {0x1, 0x1000}}, {0x3, 0x2, {0x0, 0xfffffffb}}, {0x8, 0x9, {0x0, 0x8000}}, {0x4, 0xf001, {0x2, 0x5}}, {0x7, 0x8, {0x2}}, {0x1, 0x5, {0x1, 0x352d}}, {0x7, 0x9, {0x3, 0x1}}, {0x8, 0x7f, {0x2, 0x5}}, {0x3ff, 0x58, {0x3, 0x2650}}, {0x10, 0x4, {0x1, 0x2}}, {0x1, 0x0, {0x2, 0xc}}, {0xfcec, 0x3, {0x1, 0x2}}, {0x100, 0x9, {0x2, 0x3}}, {0x4, 0x9, {0x1, 0x80000000}}, {0x10, 0x85, {0x2, 0x8001}}, {0x7, 0x6, {0x1, 0x1}}, {0x10, 0xa, {0x2, 0x6}}, {0x400, 0x101, {0x0, 0x5}}, {0xfff2, 0x101, {0x0, 0x7ff}}, {0x5, 0x4, {0x0, 0xf}}, {0x3, 0x4, {0x2, 0x1}}, {0x0, 0xfffa, {0x2, 0x7}}, {0x9, 0x7ff, {0x2, 0x8}}, {0x84b1, 0x8, {0x2, 0x1}}, {0x5, 0x3c4a, {0x0, 0x251}}, {0x8, 0x7fff, {0x3, 0x80}}, {0xffaa, 0x7, {0x2, 0xb95}}, {0x9, 0xd, {0x1, 0x9}}, {0x3, 0x10}, {0x80, 0x4, {0x1, 0x2e}}, {0x7fff, 0x1, {0x0, 0x10001}}, {0xc, 0x100, {0x1}}, {0x6, 0x9, {0x2, 0x4}}, {0x16c, 0x2, {0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$OSF_MSG_REMOVE(r13, &(0x7f0000003080)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003040)={&(0x7f0000002dc0)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x400}, 0x6, 0x0, 0x90, 0x4184, 0xd, 'syz0\x00', "b93a91fa3f7e02cf9b83bdfe003cd0c662b8982f9ce3de97c1fe0c33a275f376", "527b373fedfb2d401807fdb825d6c7b48c909fc8706c276153aa4ab48365bf0a", [{0x6, 0x9da, {0x2, 0x5}}, {0x401, 0x4, {0x3, 0xc3}}, {0x3, 0x3, {0x2, 0x6}}, {0x3, 0x2, {0x2, 0x1}}, {0x8, 0xe4fe, {0x2, 0x3}}, {0x10, 0x8, {0x0, 0xb}}, {0x6, 0x4, {0x1, 0x1000}}, {0x3, 0x2, {0x0, 0xfffffffb}}, {0x8, 0x9, {0x0, 0x8000}}, {0x4, 0xf001, {0x2, 0x5}}, {0x7, 0x8, {0x2}}, {0x1, 0x5, {0x1, 0x352d}}, {0x7, 0x9, {0x3, 0x1}}, {0x8, 0x7f, {0x2, 0x5}}, {0x3ff, 0x58, {0x3, 0x2650}}, {0x10, 0x4, {0x1, 0x2}}, {0x1, 0x0, {0x2, 0xc}}, {0xfcec, 0x3, {0x1, 0x2}}, {0x100, 0x9, {0x2, 0x3}}, {0x4, 0x9, {0x1, 0x80000000}}, {0x10, 0x85, {0x2, 0x8001}}, {0x7, 0x6, {0x1, 0x1}}, {0x10, 0xa, {0x2, 0x6}}, {0x400, 0x101, {0x0, 0x5}}, {0xfff2, 0x101, {0x0, 0x7ff}}, {0x5, 0x4, {0x0, 0xf}}, {0x3, 0x4, {0x2, 0x1}}, {0x0, 0xfffa, {0x2, 0x7}}, {0x9, 0x7ff, {0x2, 0x8}}, {0x84b1, 0x8, {0x2, 0x1}}, {0x5, 0x3c4a, {0x0, 0x251}}, {0x8, 0x7fff, {0x3, 0x80}}, {0xffaa, 0x7, {0x2, 0xb95}}, {0x9, 0xd, {0x1, 0x9}}, {0x3, 0x10}, {0x80, 0x4, {0x1, 0x2e}}, {0x7fff, 0x1, {0x0, 0x10001}}, {0xc, 0x100, {0x1}}, {0x6, 0x9, {0x2, 0x4}}, {0x16c, 0x2, {0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000030c0)=0x488, 0x4) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000003180)={'syztnl1\x00', &(0x7f0000003100)={'syztnl0\x00', r12, 0x2f, 0x3, 0x7, 0x4, 0x10, @mcast1, @remote, 0x80, 0x20, 0x7, 0xe80}}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000003580)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003200)=@bridge_dellink={0x310, 0x11, 0x800, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x5801, 0x4004}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve0\x00'}]}, @IFLA_VFINFO_LIST={0x278, 0x16, 0x0, 0x1, [{0xc8, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ac6200, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1f1, 0x38e, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff211f, 0xa05, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x9f1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd4a6, 0x8000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x28000, 0x9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0xeef, 0xfff, 0x4dfc}}, {0x14, 0x1, {0x9, 0xb6f, 0xfffffffd, 0x8100}}, {0x14, 0x1, {0x0, 0xb16, 0x74, 0x8100}}]}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x800000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf6af, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x10000}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x937, 0x4, 0x88a8}}, {0x14, 0x1, {0x9, 0x255, 0x6, 0x8100}}, {0x14, 0x1, {0xfffffffd, 0xd0c, 0x7, 0x88a8}}, {0x14, 0x1, {0x2, 0xebd, 0x4, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x10001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0xc}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb7e3, 0xfffffffffffffffb}}, @IFLA_VF_MAC={0x28, 0x1, {0x27, @random="21f8ba41fbaf"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1ff, 0xc2e0}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xc, 0xe39}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x46500000, 0x26e, 0x3ff, 0x88a8}}, {0x14, 0x1, {0x401, 0x8ce, 0x7, 0x8100}}, {0x14, 0x1, {0x2, 0x41f, 0x9, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xaa1a, 0x4}}]}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3cb18d33}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) (async) sendmsg$nl_route(r15, &(0x7f0000003580)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003200)=@bridge_dellink={0x310, 0x11, 0x800, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x5801, 0x4004}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'geneve0\x00'}]}, @IFLA_VFINFO_LIST={0x278, 0x16, 0x0, 0x1, [{0xc8, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ac6200, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1f1, 0x38e, 0x8000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff211f, 0xa05, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x9f1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd4a6, 0x8000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x28000, 0x9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0xeef, 0xfff, 0x4dfc}}, {0x14, 0x1, {0x9, 0xb6f, 0xfffffffd, 0x8100}}, {0x14, 0x1, {0x0, 0xb16, 0x74, 0x8100}}]}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x800000, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf6af, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x10000}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x937, 0x4, 0x88a8}}, {0x14, 0x1, {0x9, 0x255, 0x6, 0x8100}}, {0x14, 0x1, {0xfffffffd, 0xd0c, 0x7, 0x88a8}}, {0x14, 0x1, {0x2, 0xebd, 0x4, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x10001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0xc}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb7e3, 0xfffffffffffffffb}}, @IFLA_VF_MAC={0x28, 0x1, {0x27, @random="21f8ba41fbaf"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1ff, 0xc2e0}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xc, 0xe39}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x46500000, 0x26e, 0x3ff, 0x88a8}}, {0x14, 0x1, {0x401, 0x8ce, 0x7, 0x8100}}, {0x14, 0x1, {0x2, 0x41f, 0x9, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xaa1a, 0x4}}]}]}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3cb18d33}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000037c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r7, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) 3.170768086s ago: executing program 3 (id=2876): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000009"], 0x108}}, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.323167829s ago: executing program 0 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) listen(r1, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7e5300000000040000001f800000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100027bd7000fedbdf2500000000080009000300000008000100", @ANYRES32=r6, @ANYBLOB="0800090003f1e000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.04223205s ago: executing program 0 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x400000) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x8d}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xca}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xd0}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400817800000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021000000000000040000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYRESDEC=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d1) 1.439257813s ago: executing program 2 (id=2896): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x9548d16c160a1e8a}, 0x20000000) 1.35433458s ago: executing program 3 (id=2898): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x40c0}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) (async, rerun: 64) r2 = epoll_create(0x7fff) (rerun: 64) writev(r2, 0x0, 0x0) (async) clock_gettime(0x23eaa8d54bacd65c, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000000c0)=""/235, &(0x7f0000000040)=0xeb) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5, 0x4}, 0x20) 1.296197128s ago: executing program 2 (id=2899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x4810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.178126782s ago: executing program 1 (id=2901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000ebffffff1f00007bacf19c2eaea01bdc8107410008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032dbd7000d700df2554000000000100"/26], 0x20}, 0x1, 0x0, 0x0, 0x44335f0c8bee9286}, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.16116665s ago: executing program 2 (id=2902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x2616}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000023c0)='westwood\x00', 0x9) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000200)={0x2, 0x8, 0xa6, &(0x7f00000002c0)=""/166}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) splice(r4, &(0x7f0000000040)=0xfffffffffffffffc, r1, 0x0, 0x800000000ff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'vxcan1\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @local}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6, 0xfc}]}) 1.123806364s ago: executing program 3 (id=2903): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) getpid() r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0040000000000000000000000000f77b19ae7fb3b1f1ab23290954ce09bd2ff6f4000000", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1.067237519s ago: executing program 0 (id=2904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.066988078s ago: executing program 4 (id=2905): r0 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x107, 0x14, 0x0, 0x20000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.048890137s ago: executing program 1 (id=2906): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffff4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 949.642571ms ago: executing program 4 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x18) (async) poll(0x0, 0x0, 0x7f) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async, rerun: 64) close(r3) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 827.095899ms ago: executing program 1 (id=2908): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a00"/28], 0x1c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000500)='pids.max\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) listen(r1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='o\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xa}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000800}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x1fb, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x10d}}, 0x800) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf2520010000000000000000000000000001ac141439000000000000000000000000000000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b070000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002abd70000035000002000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000217d66d36547aa140db8a200000000c538c7cb7a1c0004"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 808.407839ms ago: executing program 4 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffff"], 0x0, 0x2}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000300)="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", 0xfb, 0x4840, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x2, 0x0, 0x1, 0x1}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x76b60f1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000100000001800018014000200776c616e310000000000000000000000080006000300000008000700f3"], 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f00000008c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) r10 = accept4(r9, &(0x7f0000000080)=@hci, 0x0, 0x800) sendmsg$nl_netfilter(r10, 0x0, 0x4000054) r11 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x74}}, 0x0) 768.751383ms ago: executing program 1 (id=2910): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="040000004008000000000000000000009a5ccd938580d5fc5d46065dc65b96", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x3, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) 670.810863ms ago: executing program 4 (id=2911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000080)="dd", 0x1}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0xfe88, 0x117, 0x3, 0x1}], 0x18, 0x20000890}, 0x0) unshare(0x26020e00) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x0, 0x7, 0x0, 0x0, 0x2, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xc8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1f}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x3ef589f8, 0x3}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000ef0000000010000000000a40000000060a0b0400000000000000000200000014000480100001800b00010065787468647200000900010073797a303200000000140000001100010000000000000000000000000a00"/104], 0x68}}, 0x0) 662.974953ms ago: executing program 1 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 552.832819ms ago: executing program 1 (id=2913): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x34, &(0x7f00000002c0)='\xd9~\x1eG!\xd4\x15\xce\xc3\xa2v+U\x99\xf4\xbd\x9f`\xd7\x0f\xb08vK\x9d%O(\xe4g\xd0>\x83b\'\x14\xa4\n\xa2\xd3,c\xdex\xb6f\b}\x15\xeb\xd7N\x95uWPz\x9f\'\xd1\xd8\xe0\xe8\xc5)\x90H\xbe\xcc\xd2\xa0\xc7\xfb\x85S\xbdG\x0e\xc9q\xfa\xe8\ra\xd6i\x15\xb7\xbf\f\xb6\x96\xb7g\x1cR\x9f@\x1a\"~)\x03Y\x8b\x15)T\xbb\xfdC\xe9:\xb2\x14&\x11\x9ey\"4\x1e\x8e\x1f\x11,\x93\xb4\x06\a\xb8\x9a\b\x97\xe9\xb4'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESOCT], 0x44) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7110010596"], 0x5) 479.748104ms ago: executing program 4 (id=2914): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="487e1000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000"], 0x48}, 0x1, 0x4801000000000000}, 0x0) 407.152591ms ago: executing program 4 (id=2915): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=r1, @ANYBLOB="ad43000000000000000004000000"], 0x14}}, 0x0) 346.641471ms ago: executing program 0 (id=2916): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 259.103105ms ago: executing program 0 (id=2917): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0xffffffff}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c}, 0x20) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="130000001800010000001000000000000800000000000000"], 0x18}}, 0x0) 258.342132ms ago: executing program 2 (id=2918): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$bt_hci(r2, 0x84, 0x81, 0x0, &(0x7f0000001200)) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6235, 0x2}}}}]}, 0x44}}, 0x800) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8}, {{0x2, 0x0, 0x1, 0x1}, {0x1}}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r8, 0x203, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x39}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f0000000800)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x18}}, 0x26000800) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@ipv4_delroute={0x44, 0x19, 0x10, 0x70bd2c, 0x25dfdbfc, {0x2, 0x80, 0x0, 0x88, 0xfe, 0x1, 0xc8, 0x3, 0xe00}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @loopback}}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_UID={0x8, 0x19, 0xee01}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0xfffffffffffffffc, 0x20004044) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000040)={r11, 0x9, 0x800, 0x3}) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r12, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x154, 0x13, 0x100, 0x70bd2a, 0x25dfdbff, {0x28, 0x4, 0xa, 0x5, {0x4e24, 0x4e22, [0x9, 0x3, 0x40000000, 0x80], [0x7, 0x4a, 0x4, 0xc00], r14, [0x1, 0x25b8]}, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, '\x00\x00\x00'}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "9aa9c1f18a1e450f34487e6ed6dc47c45ff3a7834dab894c2a343912a5c9b4d91ae355f2d065aef18a0de78d58781eef761042e7debcd000cfb0a1770e5187c98b3df99ca164616c2c57c73c4cbe335d92f273ae9950fb1118fa139942571cabd309ebda01dbe5818bc07066740dc5ca9b84da4c45c6b0563ebe71cb75689d555ecaf761549dc1d854bc5a2016fb83086b51a46ef81f665efb44e64a5df3fa05df83344123466a834aedb0fb56bf647b076742f50e258e929be29fecb7062437e00745d531021a8b2e7d1752f03bede8b8c549c1ed925307c9c27910fd"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "7ecf5ad76a79607f2df77f77aafa19914432cff4fa"}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 248.938294ms ago: executing program 0 (id=2919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'macvlan0\x00', 0x800}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 190.612872ms ago: executing program 3 (id=2920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0xb, 0x6, 0x9, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x0, 0x8, 0xa, 0x80000001}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xc, 0x7}, {0x2, 0xffff}}}, 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0xfffffffc, 0x32}, 0x0, @in=@local}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0xfffffffc, 0x32}, 0x0, @in=@local}}, 0xe8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009002efc8acea25b39d1870571f366e11d80cfc1d0f90936010100626f6e640000000014000280058e637795700d1a2973a5087b4a59039a451477bbda36d084c7d8bcfc5270862d33581257b064dc8a190734663154173d9bb7e90d65d0d20399182a90ec1fce26ab1af51baeb7fb307397a4dff1c633fcfd73683fe48ffd91165292860fa37a8ac4532a48e1ee0c52ce8a28821dbaf0670b7f6134f99e47f6612fb790e81460c148ce33a67357d3b8366c6f03b8305c3edc5c894174b44c328e31c90b28fac1edb675525b8212c77c55fe7d50296c01f97f82500cbad51c2a4f074fa02eb4da2845f54837"], 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x48000) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009002efc8acea25b39d1870571f366e11d80cfc1d0f90936010100626f6e640000000014000280058e637795700d1a2973a5087b4a59039a451477bbda36d084c7d8bcfc5270862d33581257b064dc8a190734663154173d9bb7e90d65d0d20399182a90ec1fce26ab1af51baeb7fb307397a4dff1c633fcfd73683fe48ffd91165292860fa37a8ac4532a48e1ee0c52ce8a28821dbaf0670b7f6134f99e47f6612fb790e81460c148ce33a67357d3b8366c6f03b8305c3edc5c894174b44c328e31c90b28fac1edb675525b8212c77c55fe7d50296c01f97f82500cbad51c2a4f074fa02eb4da2845f54837"], 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x48000) pread64(r4, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 79.281628ms ago: executing program 2 (id=2921): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) r2 = socket(0x18, 0x80000, 0xfffffff9) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x4000810) close(r0) 0s ago: executing program 2 (id=2923): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="020096047e45ef23bcfb862498a8da69dece8e11b71962fa2a3ea5"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7fe, 0x25, 0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4800) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.3.295'. [ 105.664611][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 105.783354][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 105.886610][ T7017] vcan0: entered allmulticast mode [ 105.929277][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 105.953091][ T7021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 106.369960][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 106.568539][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 106.896473][ T7063] xt_policy: neither incoming nor outgoing policy selected [ 106.927651][ T7069] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 107.433975][ T7106] tunl0: entered promiscuous mode [ 107.470811][ T7106] netlink: 'syz.3.325': attribute type 3 has an invalid length. [ 107.884112][ T7132] IPv6: sit1: Disabled Multicast RS [ 107.901258][ T7132] sit1: entered allmulticast mode [ 107.971505][ T7137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.012041][ T7136] netlink: 'syz.4.336': attribute type 29 has an invalid length. [ 108.023816][ T7140] netlink: 'syz.4.336': attribute type 29 has an invalid length. [ 108.064291][ T7144] netlink: 'syz.4.336': attribute type 29 has an invalid length. [ 108.079849][ T7144] netlink: 'syz.4.336': attribute type 29 has an invalid length. [ 108.089369][ T7136] Unsupported ieee802154 address type: 0 [ 108.171374][ T7152] atomic_op ffff888032b0c198 conn xmit_atomic 0000000000000000 [ 108.264241][ T7131] netlink: 'syz.2.333': attribute type 30 has an invalid length. [ 108.463281][ T7168] erspan0: entered allmulticast mode [ 108.696187][ T7179] openvswitch: netlink: Key type 85 is out of range max 32 [ 108.914852][ T7195] trusted_key: syz.3.352 sent an empty control message without MSG_MORE. [ 109.078237][ T7203] netlink: 'syz.4.355': attribute type 17 has an invalid length. [ 109.166525][ T7210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.280575][ T7217] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 109.288051][ T7217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.031807][ T7246] __nla_validate_parse: 17 callbacks suppressed [ 110.031826][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 110.069497][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 110.414194][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.366'. [ 110.497273][ T7260] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 110.498917][ T24] IPVS: starting estimator thread 0... [ 110.639008][ T7261] IPVS: using max 32 ests per chain, 76800 per kthread [ 110.699263][ T7254] IPVS: Error connecting to the multicast addr [ 110.955102][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.991027][ T7276] openvswitch: netlink: IPv4 tun info is not correct [ 111.003449][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.019584][ T7276] netlink: 84 bytes leftover after parsing attributes in process `syz.2.371'. [ 111.053213][ T7275] veth1_macvtap: left promiscuous mode [ 111.080830][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 111.098661][ T7275] macsec0: entered promiscuous mode [ 111.120114][ T7275] macsec0: entered allmulticast mode [ 111.120259][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 111.125708][ T7284] netlink: 'syz.4.374': attribute type 30 has an invalid length. [ 111.156832][ T6294] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.183353][ T6294] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.222831][ T7283] netlink: 'syz.1.375': attribute type 3 has an invalid length. [ 111.236761][ T7283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.375'. [ 111.429053][ T7298] can: request_module (can-proto-4) failed. [ 111.538604][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 111.847211][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.384'. [ 112.385245][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 112.631136][ T7371] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 112.743339][ T7371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.997278][ T7392] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 113.040297][ T7394] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 113.136191][ T7397] pimreg3: entered allmulticast mode [ 113.225752][ T7394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.255083][ T7403] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.295457][ T7403] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.321309][ T7403] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 113.463405][ T7413] veth3: entered promiscuous mode [ 113.486493][ T7413] bond3: (slave veth3): Enslaving as an active interface with a down link [ 113.496888][ T7426] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 113.545985][ T7394] vlan2: entered allmulticast mode [ 113.584256][ T7394] bond3: entered allmulticast mode [ 113.679105][ T7419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.700471][ T7440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.700941][ T7422] net veth1_virt_wifi .: renamed from virt_wifi0 [ 113.784879][ T7426] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.787095][ T7442] netlink: 'syz.2.412': attribute type 16 has an invalid length. [ 113.846603][ T7442] netlink: 'syz.2.412': attribute type 17 has an invalid length. [ 113.961349][ T7448] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 113.970514][ T7448] nbd: error processing sock list [ 113.975629][ T7448] block nbd1: shutting down sockets [ 114.024251][ T7454] netlink: 'syz.1.416': attribute type 11 has an invalid length. [ 114.056388][ T7454] netlink: 'syz.1.416': attribute type 11 has an invalid length. [ 114.150154][ T7452] syzkaller0: entered promiscuous mode [ 114.165583][ T7452] syzkaller0: entered allmulticast mode [ 114.749039][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 115.996940][ T7479] __nla_validate_parse: 5 callbacks suppressed [ 115.996979][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.423'. [ 116.012904][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.423'. [ 116.163916][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 116.288493][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 116.446866][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 117.121761][ T7549] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.446'. [ 117.139135][ T7549] netlink: zone id is out of range [ 117.152463][ T7549] netlink: get zone limit has 8 unknown bytes [ 117.231988][ T7554] gretap0: refused to change device tx_queue_len [ 117.265874][ T7554] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.507940][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 117.784561][ T7572] syzkaller0: entered promiscuous mode [ 117.798293][ T7572] syzkaller0: entered allmulticast mode [ 117.799113][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 117.829658][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 117.859383][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 118.802220][ T7622] netlink: 'syz.3.466': attribute type 11 has an invalid length. [ 120.258633][ T7617] pim6reg1: entered promiscuous mode [ 120.268490][ T7617] pim6reg1: entered allmulticast mode [ 120.656364][ T7633] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 120.705852][ T7635] tipc: Started in network mode [ 120.732900][ T7635] tipc: Node identity 16f8b2aa81a7, cluster identity 4711 [ 120.767481][ T7640] sctp: [Deprecated]: syz.4.473 (pid 7640) Use of int in max_burst socket option deprecated. [ 120.767481][ T7640] Use struct sctp_assoc_value instead [ 120.769899][ T7635] tipc: Enabled bearer , priority 0 [ 120.839360][ T7636] syzkaller0: entered promiscuous mode [ 120.845140][ T7636] syzkaller0: entered allmulticast mode [ 120.963528][ T7635] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.066705][ T7632] tipc: Resetting bearer [ 121.077991][ T7658] syzkaller0: entered promiscuous mode [ 121.084322][ T7658] syzkaller0: entered allmulticast mode [ 121.109795][ T7630] tipc: Resetting bearer [ 121.145472][ T7630] tipc: Disabling bearer [ 121.404738][ T7675] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 121.604201][ T7684] __nla_validate_parse: 6 callbacks suppressed [ 121.604217][ T7684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.483'. [ 121.659905][ T7684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.483'. [ 122.001628][ T7703] netlink: 240 bytes leftover after parsing attributes in process `syz.1.489'. [ 122.071661][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 122.230465][ T7712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 122.471498][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 122.982534][ T7734] bridge1: entered promiscuous mode [ 122.987795][ T7734] bridge1: entered allmulticast mode [ 123.085827][ T7746] tipc: Started in network mode [ 123.097866][ T7746] tipc: Node identity ba0b1f8a7fd5, cluster identity 4711 [ 123.118718][ T7746] tipc: Enabled bearer , priority 0 [ 123.188369][ T7746] tipc: Disabling bearer [ 123.387868][ T7761] sctp: [Deprecated]: syz.2.505 (pid 7761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.387868][ T7761] Use struct sctp_sack_info instead [ 123.684316][ T7781] netlink: 'syz.2.509': attribute type 4 has an invalid length. [ 123.695169][ T7779] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 123.835910][ T7786] bond2: entered allmulticast mode [ 123.846452][ T7786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.857693][ T7786] bridge0: port 3(bond2) entered blocking state [ 123.864570][ T7786] bridge0: port 3(bond2) entered disabled state [ 123.865647][ T7792] netlink: 'syz.0.515': attribute type 3 has an invalid length. [ 123.890636][ T7786] bond2: entered promiscuous mode [ 123.896538][ T7786] bridge0: port 3(bond2) entered blocking state [ 123.903370][ T7786] bridge0: port 3(bond2) entered forwarding state [ 123.947823][ T7799] netlink: 44 bytes leftover after parsing attributes in process `syz.3.516'. [ 124.107027][ T7808] syz.3.519 uses old SIOCAX25GETINFO [ 124.161257][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 124.251979][ T7816] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 124.266016][ T7816] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 124.387138][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 124.396698][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 124.408682][ T7821] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 124.419064][ T7821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.523'. [ 124.424722][ T1090] bridge0: port 3(bond2) entered disabled state [ 124.708317][ T7829] netlink: 'syz.2.526': attribute type 11 has an invalid length. [ 124.727759][ T4543] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.728043][ T7829] netlink: 'syz.2.526': attribute type 11 has an invalid length. [ 124.738561][ T4543] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.756724][ T4543] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.767202][ T4543] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.029351][ T7844] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 125.037274][ T7844] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 125.048276][ T7844] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 125.249952][ T5236] udevd[5236]: worker [5878] terminated by signal 33 (Unknown signal 33) [ 125.286632][ T5236] udevd[5236]: worker [5878] failed while handling '/devices/virtual/block/loop4' [ 125.652306][ T7885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.838104][ T7902] netlink: 'syz.4.546': attribute type 4 has an invalid length. [ 125.891055][ T7905] netlink: 'syz.0.550': attribute type 13 has an invalid length. [ 126.464723][ T7945] veth0_to_team: entered promiscuous mode [ 126.472550][ T7945] veth0_to_team: entered allmulticast mode [ 126.556735][ T7952] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.732275][ T7962] __nla_validate_parse: 7 callbacks suppressed [ 126.732293][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 126.747668][ T7965] netlink: 51 bytes leftover after parsing attributes in process `syz.1.570'. [ 126.786893][ T7962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 126.847453][ T7974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 126.862802][ T7974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 126.909494][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 126.934217][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 126.979024][ T7974] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.000572][ T7974] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.016431][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 127.225872][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'. [ 127.745981][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 128.105206][ T8044] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 128.521174][ T8058] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 128.967257][ T8087] gretap0: entered promiscuous mode [ 128.983606][ T8087] 0ªî{X¹¦: renamed from gretap0 [ 128.997479][ T8087] 0ªî{X¹¦: left promiscuous mode [ 129.014682][ T8087] 0ªî{X¹¦: entered allmulticast mode [ 129.042170][ T8087] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 129.074430][ T55] block nbd0: Possible stuck request ffff8880251d5080: control (read@0,1024B). Runtime 30 seconds [ 129.088426][ T55] block nbd0: Possible stuck request ffff8880251d5240: control (read@1024,1024B). Runtime 30 seconds [ 129.099723][ T55] block nbd0: Possible stuck request ffff8880251d5400: control (read@2048,1024B). Runtime 30 seconds [ 129.110836][ T55] block nbd0: Possible stuck request ffff8880251d55c0: control (read@3072,1024B). Runtime 30 seconds [ 131.140154][ T8197] tap0: tun_chr_ioctl cmd 1074025678 [ 131.145648][ T8197] tap0: group set to 0 [ 131.642563][ T8209] macsec1: entered promiscuous mode [ 131.658163][ T8209] macsec1: entered allmulticast mode [ 131.835867][ T8211] __nla_validate_parse: 10 callbacks suppressed [ 131.835884][ T8211] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.638'. [ 131.861254][ T8211] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 131.891959][ T8211] openvswitch: netlink: Message has 6332 unknown bytes. [ 132.105873][ T8223] validate_nla: 3 callbacks suppressed [ 132.105892][ T8223] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 132.132542][ T8223] netlink: 172 bytes leftover after parsing attributes in process `syz.2.641'. [ 132.475537][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 132.676238][ T8250] bond0: (slave rose0): Error: Device can not be enslaved while up [ 132.736462][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'. [ 132.915712][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.203478][ T8286] delete_channel: no stack [ 133.243968][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 133.291527][ T8294] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 133.415847][ T8294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.557864][ T8303] can: request_module (can-proto-5) failed. [ 133.674459][ T8310] : entered promiscuous mode [ 133.784788][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 134.020659][ T8337] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 134.314383][ T8360] netlink: 'syz.1.680': attribute type 11 has an invalid length. [ 134.338093][ T8360] netlink: 224 bytes leftover after parsing attributes in process `syz.1.680'. [ 134.517540][ T8377] netlink: 52 bytes leftover after parsing attributes in process `syz.0.685'. [ 134.523187][ T8368] geneve2: entered promiscuous mode [ 134.535691][ T8368] geneve2: entered allmulticast mode [ 134.559402][ T4543] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 134.572587][ T4543] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 134.582179][ T4543] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 134.639698][ T4543] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 134.898265][ T8407] tipc: Enabling of bearer rejected, failed to enable media [ 134.942796][ T8408] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.695'. [ 135.051006][ T8415] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 135.103169][ T8415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.145839][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 135.205371][ T8415] veth3: entered promiscuous mode [ 135.217683][ T8426] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 135.223735][ T8415] bond3: (slave veth3): Enslaving as an active interface with a down link [ 135.293923][ T8415] gretap0: entered allmulticast mode [ 135.306411][ T8415] bond3: (slave gretap0): making interface the new active one [ 135.323697][ T8415] gretap0: entered promiscuous mode [ 135.331731][ T8415] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 135.502661][ T8444] netlink: 'syz.2.706': attribute type 4 has an invalid length. [ 135.857977][ T8466] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 135.883237][ T8466] netlink: 'syz.4.713': attribute type 4 has an invalid length. [ 135.911873][ T8466] openvswitch: netlink: Missing key (keys=40, expected=80) [ 136.317153][ T8498] TCP: TCP_TX_DELAY enabled [ 136.617059][ T8522] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 136.699059][ T8527] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 136.762572][ T8529] IPVS: Unknown mcast interface: netpci0 [ 136.988487][ T8547] __nla_validate_parse: 8 callbacks suppressed [ 136.988507][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 137.201387][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 138.317106][ T8565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.457882][ T8573] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.749'. [ 138.575504][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'. [ 138.580498][ T8578] ip6erspan0: entered allmulticast mode [ 138.623643][ T8581] team_slave_0: entered promiscuous mode [ 138.629633][ T8581] team_slave_1: entered promiscuous mode [ 138.653305][ T8581] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 138.689429][ T8581] team0: Device macvtap1 is already an upper device of the team interface [ 138.731772][ T8581] team_slave_0: left promiscuous mode [ 138.737330][ T8581] team_slave_1: left promiscuous mode [ 138.784598][ T8598] netlink: 'syz.1.759': attribute type 64 has an invalid length. [ 138.803425][ T8598] netlink: 5 bytes leftover after parsing attributes in process `syz.1.759'. [ 138.866353][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 138.877281][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.757'. [ 138.893406][ T8607] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 139.019432][ T8610] xt_limit: Overflow, try lower: 271964/0 [ 139.222245][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.230675][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.449288][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.462036][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.615488][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.635361][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.659594][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 139.668677][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.683036][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.695582][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 139.717604][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.731028][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.740283][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 139.760331][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.772903][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.785050][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 139.887122][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 139.903822][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.921097][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.951175][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.961426][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.658073][ T8700] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 140.760896][ T8705] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 140.923655][ T8717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'. [ 140.986693][ T8725] netlink: 88 bytes leftover after parsing attributes in process `syz.3.792'. [ 142.002890][ T8785] __nla_validate_parse: 3 callbacks suppressed [ 142.002908][ T8785] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.805'. [ 142.024978][ T8788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.125784][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 142.311757][ T8797] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 142.323189][ T8797] netlink: 228 bytes leftover after parsing attributes in process `syz.4.809'. [ 142.333312][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 142.595580][ T8810] netlink: 80 bytes leftover after parsing attributes in process `syz.4.813'. [ 142.620386][ T8810] netlink: 68 bytes leftover after parsing attributes in process `syz.4.813'. [ 142.902190][ T8822] netlink: 76 bytes leftover after parsing attributes in process `syz.4.818'. [ 142.933785][ T8822] nbd: illegal input index -8454144 [ 142.970849][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 143.062250][ T8833] netlink: 'syz.1.821': attribute type 83 has an invalid length. [ 143.180601][ T8842] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 143.184650][ T8840] netlink: 148 bytes leftover after parsing attributes in process `syz.1.824'. [ 143.188280][ T8842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.825'. [ 143.219142][ T8838] netlink: 'syz.4.823': attribute type 26 has an invalid length. [ 144.378215][ T8912] netlink: 'syz.3.841': attribute type 10 has an invalid length. [ 144.460735][ T8912] batman_adv: batadv0: Adding interface: team0 [ 144.466944][ T8912] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.518426][ T8912] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 144.719884][ T8931] bond2: entered promiscuous mode [ 144.725367][ T8931] bond2: entered allmulticast mode [ 144.731439][ T8931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.156963][ T8958] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 145.168300][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.215670][ T8967] netlink: 'syz.4.857': attribute type 4 has an invalid length. [ 145.386391][ T8975] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 145.693873][ T8992] netlink: 'syz.2.866': attribute type 2 has an invalid length. [ 145.750524][ T8995] netlink: 'syz.2.866': attribute type 2 has an invalid length. [ 145.824764][ T9001] netlink: 'syz.3.867': attribute type 1 has an invalid length. [ 145.948136][ T9001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.021386][ T9009] bond3: (slave geneve3): making interface the new active one [ 146.031624][ T9009] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 146.296065][ T5928] IPVS: starting estimator thread 0... [ 146.335482][ T9032] tipc: Enabled bearer , priority 10 [ 146.365654][ T9039] nbd: socks must be embedded in a SOCK_ITEM attr [ 146.389668][ T9033] IPVS: using max 35 ests per chain, 84000 per kthread [ 146.411703][ T9045] nbd: socks must be embedded in a SOCK_ITEM attr [ 146.430769][ T61] gretap0: left promiscuous mode [ 146.715327][ T9063] netlink: 'syz.3.886': attribute type 3 has an invalid length. [ 147.056649][ T9082] tipc: Enabled bearer , priority 0 [ 147.080066][ T9082] syzkaller0: entered promiscuous mode [ 147.096610][ T9082] syzkaller0: entered allmulticast mode [ 147.104405][ T9090] __nla_validate_parse: 18 callbacks suppressed [ 147.104422][ T9090] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.899'. [ 147.218628][ T9101] tipc: Resetting bearer [ 147.226934][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 147.305016][ T9080] tipc: Resetting bearer [ 147.350645][ T9080] tipc: Disabling bearer [ 147.460139][ T5928] tipc: Node number set to 2539631274 [ 147.598120][ T9128] dvmrp0: entered allmulticast mode [ 147.680379][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 147.692404][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 147.811660][ T9146] Bluetooth: MGMT ver 1.23 [ 148.013879][ T9162] IPVS: set_ctl: invalid protocol: 58 172.20.20.55:20004 [ 148.044824][ T9158] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 148.184882][ T9164] openvswitch: netlink: IPv4 tun info is not correct [ 148.237502][ T9167] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 148.247101][ T9171] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 148.280002][ T9167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.912'. [ 148.785897][ T9203] openvswitch: netlink: IP tunnel dst address not specified [ 148.807848][ T9203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.931'. [ 148.936740][ T9211] team0: Device ip6gre1 is of different type [ 149.111303][ T9222] nbd: must specify a size in bytes for the device [ 149.293545][ T9233] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.940'. [ 149.356797][ T9235] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 149.386371][ T9239] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.943'. [ 149.465965][ T9242] sctp: [Deprecated]: syz.3.945 (pid 9242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.465965][ T9242] Use struct sctp_sack_info instead [ 149.495368][ T9242] netlink: 'syz.3.945': attribute type 3 has an invalid length. [ 149.507804][ T9242] netlink: 766 bytes leftover after parsing attributes in process `syz.3.945'. [ 149.588645][ T9252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.944'. [ 151.563657][ T9307] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 152.185049][ T9343] tc_dump_action: action bad kind [ 152.201326][ T9350] tc_dump_action: action bad kind [ 152.217587][ T9353] erspan0: entered promiscuous mode [ 152.397615][ T9365] netlink: 'syz.2.976': attribute type 6 has an invalid length. [ 152.438994][ T9366] netlink: 'syz.2.976': attribute type 6 has an invalid length. [ 152.594852][ T9379] __nla_validate_parse: 4 callbacks suppressed [ 152.594869][ T9379] netlink: 72 bytes leftover after parsing attributes in process `syz.2.980'. [ 153.010933][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 153.061890][ T9393] can: request_module (can-proto-0) failed. [ 153.183729][ T9409] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 153.225848][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 153.272035][ T9409] bond3: (slave bridge3): making interface the new active one [ 153.289614][ T9409] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 153.360595][ T9422] tipc: Enabled bearer , priority 0 [ 153.367968][ T9423] syzkaller0: entered promiscuous mode [ 153.387230][ T9423] syzkaller0: entered allmulticast mode [ 153.407400][ T9422] tipc: Enabling of bearer rejected, already enabled [ 153.457449][ T9423] tipc: Resetting bearer [ 153.498621][ T9423] tipc: Disabling bearer [ 153.526254][ T9429] netlink: 'syz.4.994': attribute type 3 has an invalid length. [ 153.546303][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 153.950811][ T4543] wlan1: Trigger new scan to find an IBSS to join [ 153.975863][ T9454] Bluetooth: MGMT ver 1.23 [ 154.072860][ T9459] netlink: 'syz.2.1000': attribute type 3 has an invalid length. [ 154.081391][ T9459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1000'. [ 154.275720][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'. [ 154.920982][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 154.991557][ T9484] bond0: (slave team0): Releasing backup interface [ 155.007436][ T9481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1009'. [ 155.056637][ T9484] bridge_slave_0: left allmulticast mode [ 155.081623][ T9484] bridge_slave_0: left promiscuous mode [ 155.087529][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.117807][ T9484] bridge_slave_1: left allmulticast mode [ 155.165966][ T9484] bridge_slave_1: left promiscuous mode [ 155.185140][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.203777][ T9484] bond0: (slave bond_slave_0): Releasing backup interface [ 155.217657][ T9484] bond0: (slave bond_slave_1): Releasing backup interface [ 155.247765][ T9484] team0: Port device team_slave_0 removed [ 155.261480][ T9484] team0: Port device team_slave_1 removed [ 155.273497][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.281382][ T9484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.291334][ T9484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.299434][ T9484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.316428][ T9484] bond1: (slave vlan2): Releasing active interface [ 155.333842][ T9484] bond3: (slave bridge3): Releasing active interface [ 155.423431][ T9492] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 155.573927][ T9513] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 155.620553][ T9515] netlink: 'syz.3.1018': attribute type 8 has an invalid length. [ 155.874345][ T9529] policy can only be matched on NF_INET_PRE_ROUTING [ 155.874368][ T9529] unable to load match [ 155.877999][ T9534] netlink: 'syz.1.1025': attribute type 177 has an invalid length. [ 156.010453][ T9537] openvswitch: netlink: Missing key (keys=40, expected=80) [ 156.088257][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 156.108217][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 156.147967][ T9547] netlink: 'syz.2.1031': attribute type 4 has an invalid length. [ 156.318161][ T9555] Bluetooth: MGMT ver 1.23 [ 156.564331][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.574012][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.716938][ T9580] veth0: entered promiscuous mode [ 156.766112][ T9578] veth0: left promiscuous mode [ 156.930807][ T9599] netlink: 'syz.4.1046': attribute type 9 has an invalid length. [ 156.992799][ T4543] wlan1: Trigger new scan to find an IBSS to join [ 157.252797][ T9622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.317487][ T9627] netlink: 'syz.2.1053': attribute type 11 has an invalid length. [ 157.586423][ T9637] macvlan2: entered promiscuous mode [ 157.620830][ T9637] macvlan2: entered allmulticast mode [ 157.627471][ T9637] bond4: entered promiscuous mode [ 157.633448][ T9637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.649940][ T9637] bond4: left promiscuous mode [ 157.671142][ T9667] __nla_validate_parse: 10 callbacks suppressed [ 157.671159][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 157.754534][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 157.805855][ T9676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.448035][ T9703] ip6gre1: entered allmulticast mode [ 158.944759][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 158.962713][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'. [ 159.128201][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 159.143345][ T9744] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 159.151471][ T55] block nbd0: Possible stuck request ffff8880251d5080: control (read@0,1024B). Runtime 60 seconds [ 159.162771][ T55] block nbd0: Possible stuck request ffff8880251d5240: control (read@1024,1024B). Runtime 60 seconds [ 159.174265][ T55] block nbd0: Possible stuck request ffff8880251d5400: control (read@2048,1024B). Runtime 60 seconds [ 159.185652][ T55] block nbd0: Possible stuck request ffff8880251d55c0: control (read@3072,1024B). Runtime 60 seconds [ 159.347449][ T9759] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 159.373357][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1081'. [ 159.462382][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1084'. [ 159.479654][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 159.713974][ T9780] sctp: [Deprecated]: syz.1.1087 (pid 9780) Use of int in max_burst socket option deprecated. [ 159.713974][ T9780] Use struct sctp_assoc_value instead [ 159.743185][ T9786] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 159.744612][ T9784] netlink: 'syz.2.1090': attribute type 2 has an invalid length. [ 159.836717][ T9786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.841235][ T9789] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 159.858341][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 159.912337][ T9785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.922554][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 159.933841][ T9785] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.946981][ T9785] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 159.949774][ T9645] wlan1: Creating new IBSS network, BSSID 66:10:be:13:95:6d [ 159.971025][ T9802] geneve1: entered allmulticast mode [ 160.208322][ T9801] geneve1: left allmulticast mode [ 160.614423][ T9836] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 161.317033][ T9855] netlink: 'syz.3.1115': attribute type 21 has an invalid length. [ 161.397157][ T9861] syzkaller1: entered promiscuous mode [ 161.405261][ T9861] syzkaller1: entered allmulticast mode [ 161.562986][ T9866] tipc: New replicast peer: 255.255.255.255 [ 161.573907][ T9866] tipc: Enabled bearer , priority 10 [ 162.688964][ T5942] tipc: Node number set to 3319668618 [ 162.731751][ T9927] __nla_validate_parse: 11 callbacks suppressed [ 162.731769][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 162.749752][ T9930] sctp: [Deprecated]: syz.4.1137 (pid 9930) Use of int in maxseg socket option. [ 162.749752][ T9930] Use struct sctp_assoc_value instead [ 162.892767][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'. [ 162.918575][ T9936] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1140'. [ 163.340767][ T9971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1149'. [ 163.637080][ T9983] IPVS: set_ctl: invalid protocol: 137 172.20.20.65:257 [ 163.690726][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 163.992508][T10003] netlink: 'syz.4.1161': attribute type 1 has an invalid length. [ 164.139340][T10006] netlink: 616 bytes leftover after parsing attributes in process `syz.0.1162'. [ 164.279799][T10014] netlink: 'syz.3.1165': attribute type 2 has an invalid length. [ 164.339163][T10014] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1165'. [ 164.552443][ T5942] IPVS: starting estimator thread 0... [ 164.650848][T10029] IPVS: using max 34 ests per chain, 81600 per kthread [ 164.731201][T10036] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 164.759645][T10036] netlink: 'syz.2.1172': attribute type 2 has an invalid length. [ 164.868627][T10040] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 164.991427][T10040] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.584350][T10074] IPVS: Unknown mcast interface: vcan0 [ 165.986168][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 166.041733][T10099] veth0_to_bond: entered allmulticast mode [ 166.066555][T10104] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1195'. [ 166.219687][T10108] syzkaller0: entered promiscuous mode [ 166.313066][T10108] syzkaller0: entered allmulticast mode [ 166.408028][T10116] netlink: 'syz.3.1199': attribute type 6 has an invalid length. [ 166.458190][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 167.058113][T10153] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 167.126217][T10153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.202619][T10153] vlan2: entered allmulticast mode [ 167.208057][T10153] bridge0: entered allmulticast mode [ 167.218761][T10153] bond5: (slave vlan2): Opening slave failed [ 167.433249][T10176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.757403][T10200] macvtap1: entered promiscuous mode [ 167.763129][T10200] vlan0: entered promiscuous mode [ 167.768510][T10200] macvtap1: entered allmulticast mode [ 167.774298][T10200] vlan0: entered allmulticast mode [ 167.779953][T10200] veth0_vlan: entered allmulticast mode [ 167.956564][T10211] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 167.968006][T10211] __nla_validate_parse: 4 callbacks suppressed [ 167.968022][T10211] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1228'. [ 167.984362][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 168.010381][T10213] bond6: entered allmulticast mode [ 168.016070][T10213] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.054063][T10213] bond7: entered allmulticast mode [ 168.059760][T10213] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.101400][T10213] bond8: entered allmulticast mode [ 168.110973][T10213] 8021q: adding VLAN 0 to HW filter on device bond8 [ 168.148270][T10213] bond9: entered allmulticast mode [ 168.157720][T10213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 168.181778][T10213] bond10: entered allmulticast mode [ 168.187414][T10213] 8021q: adding VLAN 0 to HW filter on device bond10 [ 168.213061][T10213] bond11: entered allmulticast mode [ 168.218754][T10213] 8021q: adding VLAN 0 to HW filter on device bond11 [ 168.247214][T10213] bond12: entered allmulticast mode [ 168.253148][T10213] 8021q: adding VLAN 0 to HW filter on device bond12 [ 168.287258][T10213] bond13: entered allmulticast mode [ 168.293359][T10213] 8021q: adding VLAN 0 to HW filter on device bond13 [ 168.341228][T10213] bond14: entered allmulticast mode [ 168.348189][T10213] 8021q: adding VLAN 0 to HW filter on device bond14 [ 168.389608][T10213] bond15: entered allmulticast mode [ 168.395205][T10213] 8021q: adding VLAN 0 to HW filter on device bond15 [ 168.432479][T10213] bond16: entered allmulticast mode [ 168.438187][T10213] 8021q: adding VLAN 0 to HW filter on device bond16 [ 168.473655][T10213] bond17: entered allmulticast mode [ 168.479435][T10213] 8021q: adding VLAN 0 to HW filter on device bond17 [ 168.529564][T10233] syzkaller0: entered promiscuous mode [ 168.535068][T10233] syzkaller0: entered allmulticast mode [ 168.603346][T10213] bond18: entered allmulticast mode [ 168.612541][T10213] 8021q: adding VLAN 0 to HW filter on device bond18 [ 168.615325][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 168.623387][T10240] bond0: Error: Cannot enslave bond to itself. [ 170.356979][T10213] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 170.357680][T10249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'. [ 170.375987][T10249] tipc: Invalid UDP bearer configuration [ 170.376041][T10249] tipc: Enabling of bearer rejected, failed to enable media [ 170.422356][T10259] veth1_macvtap: left promiscuous mode [ 170.527774][T10266] veth1_macvtap: entered promiscuous mode [ 170.808039][T10296] syzkaller1: entered promiscuous mode [ 170.822843][T10296] syzkaller1: entered allmulticast mode [ 170.924442][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1252'. [ 170.958686][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'. [ 171.234388][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 171.279016][T10317] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 171.299908][T10317] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 171.307865][T10317] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1255'. [ 171.367625][T10344] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 171.474192][T10357] gretap1: entered promiscuous mode [ 171.486288][T10349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.515149][T10357] bond5: (slave gretap1): making interface the new active one [ 171.549486][T10357] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 171.609308][T10344] macvlan2: entered promiscuous mode [ 171.624971][T10344] macvlan2: entered allmulticast mode [ 171.649769][T10344] bond5: entered promiscuous mode [ 171.667992][T10344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.700207][T10344] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 171.771159][T10344] bond5: left promiscuous mode [ 172.133526][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'. [ 172.167615][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 172.188299][T10402] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 172.321277][T10412] vlan2: entered promiscuous mode [ 172.326368][T10412] gretap0: entered promiscuous mode [ 172.728409][T10449] nft_compat: unsupported protocol 0 [ 172.974827][T10463] __nla_validate_parse: 4 callbacks suppressed [ 172.974845][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 172.995833][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 173.007159][T10466] netlink: zone id is out of range [ 173.042998][T10466] netlink: zone id is out of range [ 173.066118][T10466] netlink: zone id is out of range [ 173.091017][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'. [ 173.499823][T10511] wg0: entered allmulticast mode [ 173.726273][T10525] !€ÿ: renamed from bond_slave_0 (while UP) [ 173.745794][T10525] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 173.761990][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 173.789032][T10534] tc_dump_action: action bad kind [ 173.800776][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 173.832203][T10530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1315'. [ 173.842326][T10530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1315'. [ 173.852828][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 173.957099][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 174.857907][T10576] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1329'. [ 175.122354][T10599] tipc: Started in network mode [ 175.136140][T10599] tipc: Node identity 5e23b684b773, cluster identity 4711 [ 175.164536][T10599] tipc: Enabled bearer , priority 0 [ 175.187974][T10599] syzkaller0: entered promiscuous mode [ 175.197791][T10599] syzkaller0: entered allmulticast mode [ 175.259305][T10599] tipc: Resetting bearer [ 175.287364][T10598] tipc: Resetting bearer [ 175.326965][T10598] tipc: Disabling bearer [ 175.338175][T10615] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 175.366380][T10615] bond5: entered promiscuous mode [ 175.372440][T10615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.400809][T10615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.412967][T10615] bond5: (slave bond6): making interface the new active one [ 175.420602][T10615] bond6: entered promiscuous mode [ 175.426735][T10615] bond5: (slave bond6): Enslaving as an active interface with an up link [ 175.905545][T10657] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.047270][T10662] veth0: entered promiscuous mode [ 176.212635][T10671] netlink: 'syz.4.1360': attribute type 1 has an invalid length. [ 176.222609][T10671] netlink: 'syz.4.1360': attribute type 1 has an invalid length. [ 176.246495][T10671] netlink: 'syz.4.1360': attribute type 2 has an invalid length. [ 176.577638][T10698] : renamed from bridge_slave_0 (while UP) [ 177.723246][T10779] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 177.780606][T10784] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 177.798099][T10784] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 177.826962][T10792] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 177.858457][T10792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.867749][T10797] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 178.026867][T10807] __nla_validate_parse: 16 callbacks suppressed [ 178.026881][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 178.546756][T10818] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1407'. [ 178.556470][T10818] NCSI netlink: No device for ifindex 0 [ 178.663916][T10826] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 178.695301][T10828] openvswitch: netlink: IP tunnel dst address not specified [ 178.714058][T10831] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.732525][T10826] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.851814][T10832] veth3: entered promiscuous mode [ 178.866307][T10832] bond5: (slave veth3): Enslaving as an active interface with a down link [ 178.920352][T10826] gretap1: entered allmulticast mode [ 178.950697][T10826] bond5: (slave gretap1): making interface the new active one [ 178.979647][T10826] gretap1: entered promiscuous mode [ 178.990429][T10826] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 179.159317][T10857] IPVS: set_ctl: invalid protocol: 19 172.20.20.170:20000 [ 179.191840][T10858] netlink: 'syz.2.1420': attribute type 3 has an invalid length. [ 179.202732][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1420'. [ 180.290007][T10887] pim6reg1: entered promiscuous mode [ 180.310532][T10887] pim6reg1: entered allmulticast mode [ 180.537909][T10898] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 180.715273][T10905] IPVS: Error connecting to the multicast addr [ 180.747014][T10915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.107381][T10937] netlink: 'syz.1.1446': attribute type 10 has an invalid length. [ 181.124692][T10937] team0: entered allmulticast mode [ 181.139066][T10937] team_slave_0: entered allmulticast mode [ 181.145856][T10937] team_slave_1: entered allmulticast mode [ 181.185634][T10945] netlink: 'syz.1.1446': attribute type 10 has an invalid length. [ 181.216650][T10937] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.259229][T10937] bond0: (slave team0): Enslaving as an active interface with an up link [ 181.274178][T10950] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1449'. [ 181.300077][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1446'. [ 181.394789][T10945] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 181.476720][T10959] openvswitch: netlink: Flow key attr not present in new flow. [ 181.675291][T10972] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.856511][T10985] netlink: 'syz.2.1461': attribute type 3 has an invalid length. [ 182.186979][T11010] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 182.237186][T11010] 8021q: adding VLAN 0 to HW filter on device bond19 [ 182.275910][T11016] bond19: (slave veth7): Enslaving as an active interface with a down link [ 182.442751][T11010] veth9: entered promiscuous mode [ 182.451418][T11010] bond19: (slave veth9): Enslaving as an active interface with a down link [ 182.487860][T11016] vlan2: entered allmulticast mode [ 182.494808][T11016] bond19: entered allmulticast mode [ 182.507378][T11016] bond19: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.691743][T11038] team0: Device gtp0 is of different type [ 183.098613][T11069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1489'. [ 183.406139][T11087] validate_nla: 1 callbacks suppressed [ 183.406158][T11087] netlink: 'syz.1.1493': attribute type 21 has an invalid length. [ 183.423823][T11088] netlink: 'syz.1.1493': attribute type 21 has an invalid length. [ 183.432156][T11087] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1493'. [ 183.457582][T11088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1493'. [ 183.516927][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.534538][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.554527][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.572245][ T61] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.700277][T11099] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 183.763768][T11099] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 183.788759][T11099] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 183.808665][T11105] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 183.813327][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 183.837791][T11105] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 183.881873][T11105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.925732][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 183.938424][T11115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1500'. [ 184.295194][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 184.327137][T11122] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 184.375409][T11122] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1501'. [ 184.518336][T11139] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.526482][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 184.528324][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 184.897540][T11163] netlink: 'syz.0.1513': attribute type 5 has an invalid length. [ 184.919194][T11163] geneve2: entered promiscuous mode [ 184.924485][T11163] geneve2: entered allmulticast mode [ 184.937017][ T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 184.956505][ T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 184.976887][ T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 184.998062][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 185.145014][T11174] bond20: entered allmulticast mode [ 185.151456][T11174] 8021q: adding VLAN 0 to HW filter on device bond20 [ 185.297977][T11174] bond20 (unregistering): Released all slaves [ 185.356951][T11184] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 185.367227][T11184] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 185.378484][T11184] netlink: 'syz.0.1519': attribute type 2 has an invalid length. [ 186.091423][T11240] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 186.113667][T11244] netlink: 'syz.0.1538': attribute type 21 has an invalid length. [ 186.121768][T11240] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 186.168937][T11244] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 186.188979][T11244] netlink: 'syz.0.1538': attribute type 5 has an invalid length. [ 186.222819][T11251] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 186.371932][T11261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.408600][T11261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.453287][T11261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.472861][T11261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.483993][T11261] batman_adv: batadv0: Removing interface: team0 [ 186.587503][T11279] netlink: 'syz.1.1547': attribute type 11 has an invalid length. [ 186.823422][T11289] ip6gre1: entered allmulticast mode [ 187.075552][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.097325][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.115431][T11320] syzkaller1: entered promiscuous mode [ 187.121580][T11320] syzkaller1: entered allmulticast mode [ 187.398238][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.410285][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.446424][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.475292][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.023007][T11380] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.051131][T11380] bridge_slave_1: left allmulticast mode [ 188.064014][T11380] bridge_slave_1: left promiscuous mode [ 188.100487][T11380] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.107327][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.132126][T11380] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 188.267970][T11396] __nla_validate_parse: 33 callbacks suppressed [ 188.267987][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 188.286708][T11395] team_slave_0: mtu greater than device maximum [ 188.355807][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 188.516318][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 188.516816][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 188.544941][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 188.564927][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 188.574782][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 188.576842][T11410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.587357][T11414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1590'. [ 188.606922][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 188.617560][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 188.732290][T11412] hsr_slave_1 (unregistering): left promiscuous mode [ 189.041284][T11446] validate_nla: 12 callbacks suppressed [ 189.041302][T11446] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 189.056662][T11446] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 189.083707][T11451] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 189.111122][T11451] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.123447][T11452] netlink: 'syz.2.1600': attribute type 6 has an invalid length. [ 189.136375][T11451] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.143597][T11451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.152035][T11451] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.159276][T11451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.163835][T11452] netlink: 'syz.2.1600': attribute type 5 has an invalid length. [ 189.183225][T11451] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.235045][ T55] block nbd0: Possible stuck request ffff8880251d5080: control (read@0,1024B). Runtime 90 seconds [ 189.248158][ T55] block nbd0: Possible stuck request ffff8880251d5240: control (read@1024,1024B). Runtime 90 seconds [ 189.259588][ T55] block nbd0: Possible stuck request ffff8880251d5400: control (read@2048,1024B). Runtime 90 seconds [ 189.271343][ T55] block nbd0: Possible stuck request ffff8880251d55c0: control (read@3072,1024B). Runtime 90 seconds [ 189.307263][T11460] IPv6: Can't replace route, no match found [ 189.499731][T11471] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 189.789511][T11487] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.943648][T11482] veth1_macvtap: left promiscuous mode [ 191.021649][T11491] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 191.068099][T11491] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.150767][ T9645] gretap1: left promiscuous mode [ 191.197067][T11491] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 191.219701][T11491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.413408][T11574] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 192.437327][T11574] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 192.487827][T11578] sctp: [Deprecated]: syz.1.1636 (pid 11578) Use of int in maxseg socket option. [ 192.487827][T11578] Use struct sctp_assoc_value instead [ 192.704014][T11588] nbd: device at index 4 is going down [ 193.120064][T11628] sctp: [Deprecated]: syz.1.1650 (pid 11628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.120064][T11628] Use struct sctp_sack_info instead [ 193.298588][T11635] syzkaller0: entered allmulticast mode [ 193.676367][T11656] __nla_validate_parse: 73 callbacks suppressed [ 193.676384][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 194.353635][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.972172][T11661] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 195.105453][T11669] 8021q: adding VLAN 0 to HW filter on device bond7 [ 195.116330][T11669] bond6: (slave bond7): making interface the new active one [ 195.125137][T11669] bond6: (slave bond7): Enslaving as an active interface with an up link [ 195.135805][T11661] bridge0: Device is already in use. [ 195.148564][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 195.186352][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 195.369569][T11692] netlink: 'syz.3.1666': attribute type 6 has an invalid length. [ 195.402991][T11692] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 195.562172][ T9648] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 195.610001][T11713] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 195.647618][T11713] bond8: (slave geneve4): making interface the new active one [ 195.657216][T11713] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 195.666666][ T9642] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.676614][ T9642] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.686947][ T9642] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 195.696285][ T9642] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.055723][T11728] 8021q: VLANs not supported on ip6_vti0 [ 196.063792][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 196.073261][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 196.083042][T11728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 196.095387][T11728] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1678'. [ 196.105870][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 196.115162][T11728] netlink: 'syz.0.1678': attribute type 5 has an invalid length. [ 196.123524][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1678'. [ 196.164519][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 196.213805][T11732] netlink: 'syz.0.1680': attribute type 30 has an invalid length. [ 196.315233][T11725] netlink: 'syz.1.1677': attribute type 11 has an invalid length. [ 196.428093][T11739] netlink: 'syz.3.1683': attribute type 8 has an invalid length. [ 197.285650][T11809] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.484481][T11822] sctp: [Deprecated]: syz.2.1707 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.484481][T11822] Use struct sctp_sack_info instead [ 197.785356][T11847] bond0: (slave rose0): Error: Device can not be enslaved while up [ 197.886378][T11855] netlink: 'syz.4.1721': attribute type 11 has an invalid length. [ 198.081567][T11870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.088553][T11874] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 198.088863][T11870] IPv6: NLM_F_CREATE should be set when creating new route [ 198.108059][T11870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.449862][T11902] IPv6: sit2: Disabled Multicast RS [ 198.463945][T11902] sit2: entered allmulticast mode [ 198.506479][T11904] syz_tun: entered promiscuous mode [ 198.513869][T11904] syz_tun: left promiscuous mode [ 198.639740][T11911] unknown channel width for channel at 909000KHz? [ 198.703212][T11916] openvswitch: netlink: Multiple metadata blocks provided [ 198.711860][T11915] openvswitch: netlink: Multiple metadata blocks provided [ 198.724886][T11915] __nla_validate_parse: 14 callbacks suppressed [ 198.724901][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'. [ 198.732444][T11918] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1745'. [ 198.786500][T11915] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.806372][T11916] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.813643][T11916] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.825949][T11916] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 198.841918][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 198.868407][T11922] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.880315][T11922] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 198.902535][T11921] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 198.913162][T11921] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1746'. [ 198.981619][T11927] netlink: 'syz.1.1748': attribute type 18 has an invalid length. [ 199.086062][T11931] macvtap1: entered promiscuous mode [ 199.098934][T11931] vlan0: entered promiscuous mode [ 199.106305][T11931] macvtap1: entered allmulticast mode [ 199.126000][T11931] vlan0: entered allmulticast mode [ 199.139202][T11931] veth0_vlan: entered allmulticast mode [ 199.156481][T11937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'. [ 199.293849][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 199.450248][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 199.462479][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1757'. [ 199.491889][T11958] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 199.526803][T11961] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.545712][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1758'. [ 199.604360][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 199.757327][T11975] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 200.015080][T11989] nbd: couldn't find a device at index 4 [ 200.055603][T11997] netlink: 'syz.3.1770': attribute type 6 has an invalid length. [ 200.073850][T11997] netlink: 'syz.3.1770': attribute type 5 has an invalid length. [ 200.251098][T12012] netlink: 'syz.0.1774': attribute type 33 has an invalid length. [ 200.787719][T12036] team0: Device ip6gre3 is of different type [ 200.968493][T12041] syzkaller0: entered promiscuous mode [ 200.995069][T12041] syzkaller0: entered allmulticast mode [ 201.303318][T12055] dummy0: entered promiscuous mode [ 201.310706][T12055] batadv_slave_1: entered promiscuous mode [ 201.486645][T12080] netlink: 'syz.3.1797': attribute type 21 has an invalid length. [ 201.498134][T12081] netlink: 'syz.3.1797': attribute type 21 has an invalid length. [ 201.513573][T12080] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 201.552944][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 201.559913][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 201.566036][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 201.911432][T12110] tipc: Started in network mode [ 201.916345][T12110] tipc: Node identity 5e328ba4ca82, cluster identity 4711 [ 201.932310][T12110] tipc: Enabled bearer , priority 0 [ 202.035440][T12110] syzkaller0: entered promiscuous mode [ 202.041614][T12110] syzkaller0: entered allmulticast mode [ 202.127655][T12120] tipc: Resetting bearer [ 202.224543][T12120] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.324006][T12137] bridge_slave_1: left allmulticast mode [ 202.332754][T12137] bridge_slave_1: left promiscuous mode [ 202.342973][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.375188][T12137] bridge_slave_0: left allmulticast mode [ 202.384724][T12137] bridge_slave_0: left promiscuous mode [ 202.392401][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.427764][T12137] bond0: (slave bridge0): Releasing backup interface [ 202.476511][T12109] tipc: Resetting bearer [ 202.525314][T12109] tipc: Disabling bearer [ 202.707592][T12161] openvswitch: netlink: Message has 5 unknown bytes. [ 203.206545][T12204] gtp0: entered promiscuous mode [ 203.335526][T12209] netlink: 'syz.0.1834': attribute type 5 has an invalid length. [ 203.548616][T12225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.050841][T12243] openvswitch: netlink: Multiple metadata blocks provided [ 204.927531][T12292] team0: Port device team_slave_1 removed [ 204.942843][T12288] netlink: 'syz.1.1857': attribute type 12 has an invalid length. [ 204.955611][T12304] netlink: 'syz.3.1861': attribute type 10 has an invalid length. [ 205.000365][ T5186] block nbd1: Receive control failed (result -32) [ 205.109680][T12314] __nla_validate_parse: 35 callbacks suppressed [ 205.109697][T12314] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1865'. [ 205.401321][T12333] tipc: Enabled bearer , priority 0 [ 205.425863][T12333] syzkaller0: MTU too low for tipc bearer [ 205.432382][T12333] tipc: Disabling bearer [ 205.559194][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1874'. [ 205.570042][T12346] tipc: Invalid UDP bearer configuration [ 205.570098][T12346] tipc: Enabling of bearer rejected, failed to enable media [ 205.758335][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.765222][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.773358][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.795184][T12362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.824756][T12362] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 205.871319][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.879840][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.887798][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.896685][T12362] hsr0 speed is unknown, defaulting to 1000 [ 205.906855][T12362] hsr0 speed is unknown, defaulting to 1000 [ 206.066446][T12377] bond20: entered promiscuous mode [ 206.079855][T12377] bond20: entered allmulticast mode [ 206.086095][T12377] 8021q: adding VLAN 0 to HW filter on device bond20 [ 206.230923][T12405] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1887'. [ 206.283129][T12407] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1893'. [ 206.294611][T12404] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1892'. [ 206.337975][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'. [ 206.668131][T12423] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1897'. [ 208.104591][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 208.153188][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'. [ 208.256019][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 208.330977][T12434] netlink: 'syz.4.1902': attribute type 2 has an invalid length. [ 208.363240][T12434] netlink: 'syz.4.1902': attribute type 2 has an invalid length. [ 208.602746][T12451] openvswitch: netlink: Multiple metadata blocks provided [ 208.894732][T12473] dvmrp0: entered allmulticast mode [ 208.905467][T12479] openvswitch: netlink: Multiple metadata blocks provided [ 208.906757][T12480] openvswitch: netlink: Multiple metadata blocks provided [ 208.942962][T12475] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.952054][T12473] dvmrp0: left allmulticast mode [ 208.986292][T12475] vlan0: entered allmulticast mode [ 208.991687][T12475] bond7: entered allmulticast mode [ 209.469614][T12508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.477600][T12508] bond8: entered allmulticast mode [ 209.487401][T12508] team0: Failed to send port change of device bond8 via netlink (err -105) [ 209.510912][T12508] team0: Failed to send options change via netlink (err -105) [ 209.546510][T12508] team0: Port device bond8 added [ 209.590825][T12526] bond10: entered promiscuous mode [ 209.596242][T12526] bond10: entered allmulticast mode [ 209.605079][T12526] 8021q: adding VLAN 0 to HW filter on device bond10 [ 209.677600][T12519] syzkaller1: entered promiscuous mode [ 209.699651][T12519] syzkaller1: entered allmulticast mode [ 209.928222][T12546] netlink: 'syz.0.1934': attribute type 2 has an invalid length. [ 209.969015][T12546] netlink: 'syz.0.1934': attribute type 2 has an invalid length. [ 210.019144][T12546] netlink: 'syz.0.1934': attribute type 11 has an invalid length. [ 210.599811][T12574] netlink: 'syz.0.1944': attribute type 24 has an invalid length. [ 210.658959][T12577] __nla_validate_parse: 12 callbacks suppressed [ 210.658984][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 210.689770][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 210.973032][T12552] hsr0 speed is unknown, defaulting to 1000 [ 211.110935][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 211.325212][T12619] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1956'. [ 211.631822][T12634] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1958'. [ 211.644086][T12635] netlink: 'syz.1.1959': attribute type 21 has an invalid length. [ 211.682896][T12635] netlink: 'syz.1.1959': attribute type 22 has an invalid length. [ 211.691058][T12635] netlink: 'syz.1.1959': attribute type 23 has an invalid length. [ 211.699528][T12635] netlink: 'syz.1.1959': attribute type 25 has an invalid length. [ 211.707679][T12635] netlink: 'syz.1.1959': attribute type 26 has an invalid length. [ 211.715981][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1959'. [ 212.326977][T12667] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1971'. [ 212.522552][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 212.584701][T12685] 8021q: adding VLAN 0 to HW filter on device bond21 [ 212.596583][T12685] team0: Failed to send port change of device bond21 via netlink (err -105) [ 212.613582][T12685] team0: Failed to send options change via netlink (err -105) [ 212.623586][T12685] team0: Port device bond21 added [ 212.758105][T12694] bond8 (unregistering): Released all slaves [ 214.632984][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 214.777710][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'. [ 215.083322][T12687] hsr0 speed is unknown, defaulting to 1000 [ 215.214873][T12745] validate_nla: 1 callbacks suppressed [ 215.214891][T12745] netlink: 'syz.4.1991': attribute type 2 has an invalid length. [ 215.488056][T12756] netlink: 'syz.4.1995': attribute type 11 has an invalid length. [ 215.529610][T12716] hsr0 speed is unknown, defaulting to 1000 [ 215.725274][T12761] __nla_validate_parse: 4 callbacks suppressed [ 215.725291][T12761] netlink: 212384 bytes leftover after parsing attributes in process `syz.4.1997'. [ 215.749490][T12761] netlink: zone id is out of range [ 215.755392][T12761] netlink: get zone limit has 8 unknown bytes [ 216.218702][T12777] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 216.227108][T12777] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 216.477650][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2006'. [ 216.667107][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 216.683423][T12801] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.732714][T12808] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 217.198062][T12841] netlink: 'syz.1.2020': attribute type 11 has an invalid length. [ 217.379524][T12852] syzkaller1: entered promiscuous mode [ 217.388021][T12852] syzkaller1: entered allmulticast mode [ 217.496266][T12865] syzkaller1: entered promiscuous mode [ 217.504095][T12865] syzkaller1: entered allmulticast mode [ 217.513641][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 217.633279][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 217.654875][T12874] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 217.663062][T12874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.675425][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 217.804359][T12881] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2036'. [ 218.120881][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2039'. [ 218.915672][T12968] : entered promiscuous mode [ 219.032557][ T9648] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.275297][T12991] tipc: Enabling of bearer rejected, failed to enable media [ 219.293112][T12991] netlink: 'syz.1.2064': attribute type 18 has an invalid length. [ 219.306300][T12991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 219.328999][ T55] block nbd0: Possible stuck request ffff8880251d5080: control (read@0,1024B). Runtime 120 seconds [ 219.341981][ T55] block nbd0: Possible stuck request ffff8880251d5240: control (read@1024,1024B). Runtime 120 seconds [ 219.353559][ T55] block nbd0: Possible stuck request ffff8880251d5400: control (read@2048,1024B). Runtime 120 seconds [ 219.362605][T12991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.364778][ T55] block nbd0: Possible stuck request ffff8880251d55c0: control (read@3072,1024B). Runtime 120 seconds [ 219.387194][T12991] gretap1: entered promiscuous mode [ 219.392702][T12991] gretap1: entered allmulticast mode [ 219.578288][T13014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2070'. [ 219.841085][T13034] sctp: [Deprecated]: syz.3.2078 (pid 13034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.841085][T13034] Use struct sctp_sack_info instead [ 219.994841][T13039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.104913][T13039] syzkaller0: entered promiscuous mode [ 220.110882][T13039] syzkaller0: entered allmulticast mode [ 220.136636][T13049] tipc: Enabled bearer , priority 0 [ 220.162628][T13039] tipc: Resetting bearer [ 220.183127][T13054] team0: Device gtp0 is of different type [ 220.227859][T13038] tipc: Resetting bearer [ 221.209232][ T5942] tipc: Node number set to 2494598052 [ 221.773020][T13038] tipc: Disabling bearer [ 222.030759][T13087] __nla_validate_parse: 6 callbacks suppressed [ 222.030776][T13087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2092'. [ 222.096953][T13093] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2094'. [ 222.959697][T13123] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2101'. [ 222.991866][T13123] openvswitch: netlink: Flow key attr not present in new flow. [ 223.370373][T13132] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 223.451409][T13132] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.473878][T13132] bond9: (slave gretap2): making interface the new active one [ 223.483386][T13132] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 223.507428][T13143] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2107'. [ 223.727176][T13159] syz_tun: entered allmulticast mode [ 223.750023][T13159] syz_tun: left allmulticast mode [ 223.878087][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 223.898583][T13165] bond2: left promiscuous mode [ 223.933262][T13165] bridge0: port 3(bond2) entered disabled state [ 223.948642][T13170] netlink: zone id is out of range [ 223.960920][T13165] bridge_slave_1: left allmulticast mode [ 223.976870][T13165] bridge_slave_1: left promiscuous mode [ 223.986809][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.021709][T13165] bridge_slave_0: left allmulticast mode [ 224.027397][T13165] bridge_slave_0: left promiscuous mode [ 224.039297][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.179381][T13184] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 224.222562][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'. [ 224.570638][T13198] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 224.669073][T13198] 8021q: adding VLAN 0 to HW filter on device bond11 [ 224.687065][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 224.921092][T13214] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2128'. [ 224.960429][T13214] netlink: 'syz.1.2128': attribute type 3 has an invalid length. [ 224.978490][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2128'. [ 225.059885][T13222] tipc: Enabled bearer , priority 0 [ 225.077839][T13222] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 225.091107][T13222] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 225.110524][T13228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2135'. [ 225.127859][T13222] tipc: Resetting bearer [ 225.162526][T13231] tipc: Enabling of bearer rejected, already enabled [ 225.348429][T13240] netlink: 'syz.0.2137': attribute type 3 has an invalid length. [ 225.376341][T13240] netlink: 'syz.0.2137': attribute type 6 has an invalid length. [ 225.391164][T13240] netlink: 'syz.0.2137': attribute type 5 has an invalid length. [ 225.406364][T13247] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 225.417785][T13247] netlink: 'syz.1.2139': attribute type 3 has an invalid length. [ 226.002408][T13285] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 226.105023][T13293] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 226.299829][T13305] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 226.373874][T13305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 226.391640][T13311] ªªªªªª: renamed from vlan0 (while UP) [ 226.874284][T13342] netlink: 'syz.3.2166': attribute type 27 has an invalid length. [ 226.902980][T13351] tipc: Enabled bearer , priority 0 [ 226.914152][T13351] syzkaller0: entered promiscuous mode [ 226.920936][T13351] syzkaller0: entered allmulticast mode [ 226.942126][T13351] tipc: Resetting bearer [ 227.296420][T13375] __nla_validate_parse: 17 callbacks suppressed [ 227.296437][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 227.468056][T13382] veth0: entered promiscuous mode [ 227.523241][T13385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.585638][T13381] veth0: left promiscuous mode [ 227.724853][T13350] tipc: Resetting bearer [ 227.769046][T13350] tipc: Disabling bearer [ 227.797694][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 227.807538][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2180'. [ 227.821307][T13398] IPVS: Unknown mcast interface: veth1_to_team [ 228.173902][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.677498][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 228.875539][T13452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2195'. [ 228.953007][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2197'. [ 229.007036][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2195'. [ 229.054844][T13460] tipc: Enabling of bearer rejected, failed to enable media [ 229.069315][T13461] openvswitch: netlink: Message has 4 unknown bytes. [ 229.314373][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2203'. [ 229.354327][T13482] !: renamed from dummy0 (while UP) [ 229.379883][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 229.426625][T13480] bridge_slave_1: entered allmulticast mode [ 229.712786][T13476] hsr0 speed is unknown, defaulting to 1000 [ 229.782759][T13509] unsupported nla_type 11784 [ 229.811865][T13506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.071279][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 230.288217][T13538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.555906][ T6294] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 230.583617][ T5942] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 230.596359][ T6294] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 230.779159][ T5942] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 230.921098][ T5942] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 231.246576][T13595] tipc: Enabling of bearer rejected, already enabled [ 231.582880][T13620] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 231.810714][T13634] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 231.960739][T13633] bond5: (slave gretap1): making interface the new active one [ 231.970163][T13633] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 232.292447][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.403056][T13683] netlink: 'syz.1.2266': attribute type 18 has an invalid length. [ 232.441473][T13683] netlink: 'syz.1.2266': attribute type 18 has an invalid length. [ 232.514723][T13707] __nla_validate_parse: 15 callbacks suppressed [ 232.514743][T13707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2269'. [ 232.599479][T13714] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2271'. [ 232.768624][T13729] openvswitch: netlink: Unknown key attributes 2 [ 232.917085][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 232.972552][T13741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.988257][T13741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2281'. [ 233.026069][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2282'. [ 233.167108][T13749] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2285'. [ 233.188308][T13749] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2285'. [ 233.207830][T13749] netlink: 'syz.1.2285': attribute type 2 has an invalid length. [ 233.226109][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 233.414093][T13770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2294'. [ 233.942194][T13808] tipc: Enabled bearer , priority 0 [ 233.963172][T13808] syzkaller0: entered promiscuous mode [ 233.977456][T13808] syzkaller0: entered allmulticast mode [ 234.085629][T13808] tipc: Resetting bearer [ 234.136074][T13807] tipc: Resetting bearer [ 234.161051][T13807] tipc: Disabling bearer [ 234.269013][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 234.592086][T13860] sctp: [Deprecated]: syz.3.2318 (pid 13860) Use of int in max_burst socket option. [ 234.592086][T13860] Use struct sctp_assoc_value instead [ 234.626100][T13860] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 234.664651][T13860] bond12: entered promiscuous mode [ 234.676247][T13860] 8021q: adding VLAN 0 to HW filter on device bond12 [ 234.953428][T13870] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 234.991265][T13870] veth11: entered promiscuous mode [ 235.032876][T13872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2320'. [ 235.382288][T13888] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 235.420619][T13888] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 235.494008][T13896] 8021q: adding VLAN 0 to HW filter on device bond10 [ 235.894949][T13891] team0 (unregistering): Port device team_slave_0 removed [ 235.913466][T13891] team0 (unregistering): Port device team_slave_1 removed [ 236.046468][T13940] netlink: 'syz.2.2338': attribute type 1 has an invalid length. [ 236.091336][T13944] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 236.131574][T13944] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 236.135980][T13941] syzkaller0: entered promiscuous mode [ 236.168300][T13941] syzkaller0: entered allmulticast mode [ 236.206895][T13939] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 236.222552][T13939] syzkaller0: Linktype set failed because interface is up [ 236.255613][ T9652] syzkaller0: tun_net_xmit 48 [ 237.229173][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 238.365054][T13991] __nla_validate_parse: 7 callbacks suppressed [ 238.365072][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 238.533562][ T5186] Bluetooth: hci4: link tx timeout [ 238.540511][ T5186] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 238.561110][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2358'. [ 238.736980][T14008] can: request_module (can-proto-0) failed. [ 238.936077][T14030] bridge_slave_1: left allmulticast mode [ 239.055846][ T9] hsr0 speed is unknown, defaulting to 1000 [ 239.146150][T14039] netlink: 'syz.2.2368': attribute type 9 has an invalid length. [ 239.184521][T14039] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.2368'. [ 239.191592][T14045] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.2371'. [ 239.417418][T14007] hsr0 speed is unknown, defaulting to 1000 [ 239.898038][T14089] netlink: 'syz.1.2381': attribute type 12 has an invalid length. [ 239.922660][T14087] netlink: 'syz.4.2382': attribute type 10 has an invalid length. [ 239.934276][T14083] netlink: 'syz.1.2381': attribute type 12 has an invalid length. [ 239.954076][T14087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2382'. [ 240.059266][T14087] team0: Port device geneve0 added [ 240.085606][ T9652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.116384][ T9652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.289595][ T9652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.330969][ T9652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.394235][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2385'. [ 240.420426][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 240.475713][T14103] netlink: 'syz.3.2387': attribute type 9 has an invalid length. [ 240.589556][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 240.653777][T14117] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 240.662692][T14117] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2392'. [ 240.691917][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2391'. [ 241.000003][T14134] tipc: Enabled bearer , priority 0 [ 241.015988][T14134] syzkaller0: entered promiscuous mode [ 241.029252][T14134] syzkaller0: entered allmulticast mode [ 241.047996][T14140] netlink: 'syz.4.2401': attribute type 4 has an invalid length. [ 241.057700][T14134] tipc: Resetting bearer [ 241.079725][T14140] netlink: 'syz.4.2401': attribute type 4 has an invalid length. [ 241.087864][T14133] tipc: Resetting bearer [ 241.137486][T14133] tipc: Disabling bearer [ 241.195766][T14136] netlink: 'syz.2.2399': attribute type 4 has an invalid length. [ 241.251513][T14140] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 241.290655][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 241.708987][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 241.853442][T14178] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 243.381934][T14227] __nla_validate_parse: 7 callbacks suppressed [ 243.381952][T14227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2426'. [ 243.447893][T14227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2426'. [ 243.650367][T14247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2429'. [ 243.659966][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'. [ 243.737088][T14253] sctp: [Deprecated]: syz.4.2432 (pid 14253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.737088][T14253] Use struct sctp_sack_info instead [ 243.774419][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'. [ 244.002191][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'. [ 244.561617][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 244.593550][T14311] : renamed from veth0_vlan [ 244.746921][T14322] 8021q: VLANs not supported on gre0 [ 244.753442][T14320] 8021q: VLANs not supported on gre0 [ 244.836535][T14321] IPVS: persistence engine module ip_vs_pe_À not found [ 245.246863][T14348] validate_nla: 2 callbacks suppressed [ 245.246883][T14348] netlink: 'syz.3.2458': attribute type 64 has an invalid length. [ 245.282196][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2458'. [ 245.329802][T14354] netlink: 'syz.3.2458': attribute type 3 has an invalid length. [ 245.370103][T14356] netlink: 'syz.2.2461': attribute type 2 has an invalid length. [ 249.390657][ T55] block nbd0: Possible stuck request ffff8880251d5080: control (read@0,1024B). Runtime 150 seconds [ 249.401981][ T55] block nbd0: Possible stuck request ffff8880251d5240: control (read@1024,1024B). Runtime 150 seconds [ 249.413877][ T55] block nbd0: Possible stuck request ffff8880251d5400: control (read@2048,1024B). Runtime 150 seconds [ 249.425143][ T55] block nbd0: Possible stuck request ffff8880251d55c0: control (read@3072,1024B). Runtime 150 seconds [ 250.059515][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.791961][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 264.321192][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2465'. [ 264.330165][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 264.345343][T14372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2468'. [ 264.359444][T14370] netlink: 23 bytes leftover after parsing attributes in process `syz.0.2464'. [ 264.376154][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2468'. [ 264.378396][T14376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.421013][T14378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.491127][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2469'. [ 264.694459][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'. [ 265.129564][T14418] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2476'. [ 265.444755][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2481'. [ 265.529696][T14447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2481'. [ 265.578183][T14451] netlink: 'syz.2.2484': attribute type 14 has an invalid length. [ 265.633806][T14451] netlink: 'syz.2.2484': attribute type 13 has an invalid length. [ 265.716101][T14460] netlink: 'syz.3.2486': attribute type 3 has an invalid length. [ 265.755446][T14462] netlink: 'syz.1.2487': attribute type 23 has an invalid length. [ 266.077586][T14490] geneve2: entered promiscuous mode [ 266.102347][T14490] geneve2: entered allmulticast mode [ 266.341310][T14503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.828190][T14502] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 267.633806][T14557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.711786][T14608] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 268.804233][T14612] netlink: 'syz.1.2531': attribute type 4 has an invalid length. [ 268.910043][ T9653] wlan1: Trigger new scan to find an IBSS to join [ 269.185885][T14637] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 269.306744][T14651] tipc: Invalid UDP bearer configuration [ 269.306800][T14651] tipc: Enabling of bearer rejected, failed to enable media [ 269.366369][T14652] nbd: must specify an index to disconnect [ 269.378332][T14655] __nla_validate_parse: 26 callbacks suppressed [ 269.378350][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 269.410636][T14655] netlink: 'syz.3.2545': attribute type 12 has an invalid length. [ 269.464276][T14661] netlink: 'syz.4.2547': attribute type 11 has an invalid length. [ 269.534349][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2547'. [ 269.537650][T14666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2547'. [ 269.628351][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 269.675736][T14671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2549'. [ 269.705938][T14671] openvswitch: netlink: Flow key attr not present in new flow. [ 269.725890][T14677] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 269.745556][T14681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2549'. [ 269.761505][T14681] openvswitch: netlink: Flow key attr not present in new flow. [ 269.861809][T14677] 8021q: adding VLAN 0 to HW filter on device bond14 [ 269.930556][T14686] bond14: (slave veth9): Enslaving as an active interface with a down link [ 269.964086][T14691] veth11: entered promiscuous mode [ 269.977239][T14691] bond14: (slave veth11): Enslaving as an active interface with a down link [ 270.000789][T14677] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2551'. [ 270.024212][T14677] vlan0: entered allmulticast mode [ 270.046543][T14677] bond14: entered allmulticast mode [ 270.084507][T14677] bond14: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.340570][T14713] netlink: 'syz.0.2559': attribute type 11 has an invalid length. [ 270.348417][T14713] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2559'. [ 270.393735][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2562'. [ 270.424359][T14722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2562'. [ 271.165701][T14768] validate_nla: 1 callbacks suppressed [ 271.165719][T14768] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 271.773681][T14799] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.912692][T14799] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.950624][ T13] wlan1: Trigger new scan to find an IBSS to join [ 271.969153][T14808] netlink: 'syz.1.2588': attribute type 1 has an invalid length. [ 272.025474][T14799] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.111615][T14814] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20001 [ 272.126418][T14799] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.182605][T14813] gretap3: entered promiscuous mode [ 272.193583][T14813] bond11: (slave gretap3): making interface the new active one [ 272.203497][T14813] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 272.217907][T14823] gretap0: entered promiscuous mode [ 272.311301][ T9652] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.360859][ T9653] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.382738][ T9653] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.406414][T14828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.507974][ T9652] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.537619][ T9652] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.584706][ T9652] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.614587][ T9652] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.644203][ T9652] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.007617][T14860] : renamed from bridge_slave_0 (while UP) [ 273.214121][T14871] netlink: 'syz.2.2602': attribute type 15 has an invalid length. [ 273.236506][T14871] netlink: 'syz.2.2602': attribute type 4 has an invalid length. [ 273.265458][T14871] netlink: 'syz.2.2602': attribute type 4 has an invalid length. [ 273.706156][T14904] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 274.019282][T14935] netlink: 'syz.4.2617': attribute type 4 has an invalid length. [ 274.143175][T14942] netlink: 'syz.4.2617': attribute type 33 has an invalid length. [ 274.158415][T14943] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 274.384875][T14955] __nla_validate_parse: 25 callbacks suppressed [ 274.385887][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 274.714980][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 274.761134][T14973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.775713][T14973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2630'. [ 274.895162][T14988] xfrm1: entered promiscuous mode [ 274.977138][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 274.990196][ T49] wlan1: Trigger new scan to find an IBSS to join [ 275.037349][T15001] tipc: Enabled bearer , priority 0 [ 275.123642][T15001] tipc: Disabling bearer [ 275.157158][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2641'. [ 275.270692][T15024] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2643'. [ 275.305129][T15025] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2645'. [ 275.372234][T15030] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 275.445061][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2647'. [ 275.511120][T15031] bond22: entered promiscuous mode [ 275.516413][T15031] bond22: entered allmulticast mode [ 275.525212][T15031] 8021q: adding VLAN 0 to HW filter on device bond22 [ 275.567312][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 275.909597][T15060] netlink: 'syz.4.2653': attribute type 11 has an invalid length. [ 275.917658][T15060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2653'. [ 275.934138][ T9642] wlan1: Creating new IBSS network, BSSID 56:78:4d:aa:6c:3a [ 275.955678][T15073] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 276.361620][T15094] netlink: 'syz.1.2663': attribute type 2 has an invalid length. [ 277.011470][T15137] gtp1: entered promiscuous mode [ 277.016465][T15137] gtp1: entered allmulticast mode [ 277.058168][T15136] tipc: Enabling of bearer rejected, already enabled [ 277.098156][T15148] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 277.124200][T15147] syzkaller0: mtu less than device minimum [ 277.153311][T15136] tipc: Enabling of bearer rejected, already enabled [ 277.172733][T15152] block nbd2: not configured, cannot reconfigure [ 277.207773][T15148] 8021q: adding VLAN 0 to HW filter on device bond23 [ 277.287909][T15157] veth11: entered promiscuous mode [ 277.309557][T15157] bond23: (slave veth11): Enslaving as an active interface with a down link [ 277.325199][T15143] sch_tbf: peakrate 12 is lower than or equals to rate 13820 ! [ 277.358490][T15148] gretap2: entered allmulticast mode [ 277.368061][T15148] bond23: (slave gretap2): making interface the new active one [ 277.379307][T15148] gretap2: entered promiscuous mode [ 277.384988][T15148] bond23: (slave gretap2): Enslaving as an active interface with an up link [ 277.481962][T15173] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 277.592976][T15178] gretap3: entered promiscuous mode [ 277.654078][T15187] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 277.857032][T15199] wg1: entered promiscuous mode [ 277.883923][T15199] wg1: entered allmulticast mode [ 278.094452][T15205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.204236][T15205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.225618][T15205] batadv_slave_1 (unregistering): left promiscuous mode [ 278.314213][T15223] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 278.342835][T15233] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 278.656736][T15254] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 278.666516][T15254] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 279.055390][T15281] tipc: Enabled bearer , priority 0 [ 279.131197][T15281] syzkaller0: entered promiscuous mode [ 279.136723][T15281] syzkaller0: entered allmulticast mode [ 279.181594][T15284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.191480][T15291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.270653][T15297] tipc: Resetting bearer [ 279.310014][T15276] tipc: Resetting bearer [ 279.360176][T15276] tipc: Disabling bearer [ 279.473103][ T55] block nbd0: Possible stuck request ffff8880251d5080: control (read@0,1024B). Runtime 180 seconds [ 279.484732][ T55] block nbd0: Possible stuck request ffff8880251d5240: control (read@1024,1024B). Runtime 180 seconds [ 279.495811][ T55] block nbd0: Possible stuck request ffff8880251d5400: control (read@2048,1024B). Runtime 180 seconds [ 279.507687][ T55] block nbd0: Possible stuck request ffff8880251d55c0: control (read@3072,1024B). Runtime 180 seconds [ 279.583704][T15314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.595490][T15310] tipc: Enabled bearer , priority 0 [ 279.618045][T15310] syzkaller0: entered promiscuous mode [ 279.655728][T15310] syzkaller0: entered allmulticast mode [ 279.684783][T15312] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 279.832377][T15310] tipc: Resetting bearer [ 279.897055][T15308] tipc: Resetting bearer [ 279.996660][T15308] tipc: Disabling bearer [ 280.065659][T15355] __nla_validate_parse: 20 callbacks suppressed [ 280.065677][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 280.280016][T15368] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 280.356681][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 280.418478][T15382] netlink: 'syz.3.2752': attribute type 13 has an invalid length. [ 280.451723][T15382] netlink: 'syz.3.2752': attribute type 58 has an invalid length. [ 280.485207][T15382] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2752'. [ 280.544178][T15390] syzkaller1: entered promiscuous mode [ 280.563314][T15390] syzkaller1: entered allmulticast mode [ 280.626661][T15401] netlink: 'syz.1.2758': attribute type 33 has an invalid length. [ 280.637184][T15401] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2758'. [ 280.874819][T15414] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 280.902671][T15414] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.915326][T15414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2762'. [ 280.926323][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2762'. [ 280.984225][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.092971][T15420] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 281.121081][T15420] bond10: entered promiscuous mode [ 281.126616][T15420] 8021q: adding VLAN 0 to HW filter on device bond10 [ 281.165125][T15420] 8021q: adding VLAN 0 to HW filter on device bond11 [ 281.176059][T15420] bond10: (slave bond11): making interface the new active one [ 281.187076][T15420] bond11: entered promiscuous mode [ 281.204865][T15420] bond10: (slave bond11): Enslaving as an active interface with an up link [ 281.227042][T15384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.236961][T15397] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2750'. [ 281.253911][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2750'. [ 281.494718][T15443] validate_nla: 1 callbacks suppressed [ 281.494735][T15443] netlink: 'syz.4.2771': attribute type 1 has an invalid length. [ 281.511279][T15443] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2771'. [ 281.534218][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 281.576112][T15445] ip6gre2: entered allmulticast mode [ 281.582212][T15440] tipc: Invalid UDP bearer configuration [ 281.582262][T15440] tipc: Enabling of bearer rejected, failed to enable media [ 281.606793][T15447] tipc: Invalid UDP bearer configuration [ 281.606848][T15447] tipc: Enabling of bearer rejected, failed to enable media [ 281.735526][T15462] sctp: [Deprecated]: syz.4.2776 (pid 15462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.735526][T15462] Use struct sctp_sack_info instead [ 281.756884][T15463] sctp: [Deprecated]: syz.4.2776 (pid 15463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.756884][T15463] Use struct sctp_sack_info instead [ 282.219880][T15491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 282.249554][T15491] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 282.259812][T15491] gretap2: entered promiscuous mode [ 282.265218][T15491] gretap2: entered allmulticast mode [ 282.422172][T15497] netlink: 'syz.3.2786': attribute type 2 has an invalid length. [ 282.630424][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.643018][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.661571][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.674311][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.685155][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.954419][T15500] hsr0 speed is unknown, defaulting to 1000 [ 283.085775][T15515] veth11: entered promiscuous mode [ 283.091605][T15515] veth11: entered allmulticast mode [ 283.671389][T15500] chnl_net:caif_netlink_parms(): no params data found [ 283.802728][T15561] bridge_slave_1: default FDB implementation only supports local addresses [ 283.902850][T15568] team0: Device ip6gre1 is of different type [ 283.949140][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 283.977602][T15576] netlink: 'syz.0.2808': attribute type 39 has an invalid length. [ 283.992244][T15573] veth0: entered promiscuous mode [ 283.997613][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.005732][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.013759][T15500] bridge_slave_0: entered allmulticast mode [ 284.021685][T15500] bridge_slave_0: entered promiscuous mode [ 284.069688][T15500] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.077059][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.090109][T15500] bridge_slave_1: entered allmulticast mode [ 284.097905][T15500] bridge_slave_1: entered promiscuous mode [ 284.142617][T15574] IPv6: sit2: Disabled Multicast RS [ 284.196615][T15500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.206678][T15572] veth0: left promiscuous mode [ 284.230220][T15500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.341763][T15500] team0: Port device team_slave_0 added [ 284.351225][T15500] team0: Port device team_slave_1 added [ 284.409686][T15500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.416692][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.445336][T15500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.498019][T15500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.523052][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.550476][T15500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.646258][T15500] hsr_slave_0: entered promiscuous mode [ 284.656242][T15500] hsr_slave_1: entered promiscuous mode [ 284.662776][T15500] debugfs: 'hsr0' already exists in 'hsr' [ 284.668706][T15500] Cannot create hsr debugfs directory [ 284.759479][ T5186] Bluetooth: hci5: command tx timeout [ 284.794076][T15500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.866370][T15500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.914880][T15500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.031812][T15500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.106203][T15616] tipc: Started in network mode [ 285.112396][T15616] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 285.123917][T15616] tipc: Enabled bearer , priority 10 [ 285.133841][T15615] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 285.163940][T15615] netlink: 'syz.1.2817': attribute type 2 has an invalid length. [ 285.329578][T15625] __nla_validate_parse: 26 callbacks suppressed [ 285.329596][T15625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2820'. [ 285.430480][T15500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.493464][T15500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.518199][T15500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.547022][T15500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.852810][T15500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.989892][T15500] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.050257][T15659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2832'. [ 286.073920][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.081120][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.156471][T15669] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2835'. [ 286.175667][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.182963][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.232089][T15670] netlink: 'syz.2.2837': attribute type 26 has an invalid length. [ 286.249563][ T5962] tipc: Node number set to 10463914 [ 286.383945][T15500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.441507][T15681] sctp: [Deprecated]: syz.0.2840 (pid 15681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.441507][T15681] Use struct sctp_sack_info instead [ 286.473930][T15681] sctp: [Deprecated]: syz.0.2840 (pid 15681) Use of int in maxseg socket option. [ 286.473930][T15681] Use struct sctp_assoc_value instead [ 286.576415][T15693] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 286.704719][T15693] 8021q: adding VLAN 0 to HW filter on device bond9 [ 286.766374][T15696] bond9: (slave veth9): Enslaving as an active interface with a down link [ 286.797963][T15691] bond9: (slave veth0_to_bond): making interface the new active one [ 286.817136][T15691] veth0_to_bond: entered promiscuous mode [ 286.828959][ T5186] Bluetooth: hci5: command tx timeout [ 286.833722][T15691] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 286.868003][T15699] netlink: 'syz.0.2845': attribute type 29 has an invalid length. [ 286.876335][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 286.955931][T15693] bond9: (slave veth11): Enslaving as an active interface with a down link [ 286.988068][T15709] netlink: 'syz.1.2846': attribute type 1 has an invalid length. [ 286.999656][T15709] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2846'. [ 287.055254][T15711] netlink: 'syz.3.2847': attribute type 16 has an invalid length. [ 287.065711][T15711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 287.087959][T15500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.200615][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 287.357330][T15727] tipc: Enabling of bearer rejected, failed to enable media [ 287.396034][T15727] sctp: [Deprecated]: syz.2.2852 (pid 15727) Use of int in max_burst socket option. [ 287.396034][T15727] Use struct sctp_assoc_value instead [ 287.420907][T15735] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 287.439284][T15729] sctp: [Deprecated]: syz.2.2852 (pid 15729) Use of int in max_burst socket option. [ 287.439284][T15729] Use struct sctp_assoc_value instead [ 287.486740][T15735] 8021q: adding VLAN 0 to HW filter on device bond16 [ 287.550057][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 287.564411][T15740] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2856'. [ 287.587802][T15738] bond16: (slave veth15): Enslaving as an active interface with a down link [ 287.613963][T15735] veth0_to_bond: left allmulticast mode [ 287.761740][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 287.882417][T15500] veth0_vlan: entered promiscuous mode [ 287.892019][T15759] xt_socket: unknown flags 0xd0 [ 287.899939][T15500] veth1_vlan: entered promiscuous mode [ 288.089642][T15500] veth0_macvtap: entered promiscuous mode [ 288.123860][T15500] veth1_macvtap: entered promiscuous mode [ 288.273097][ T5962] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 288.342334][T15500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.402635][T15500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.463675][ T9642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.496737][ T9642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.515700][ T9642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.529503][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 288.540436][ T9642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.546975][T15798] openvswitch: netlink: Message has 20 unknown bytes. [ 288.583194][T15800] openvswitch: netlink: Message has 20 unknown bytes. [ 288.609343][T15798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.666666][T15800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.733878][ T9652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.752479][ T9652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.887955][ T6294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.901623][ T9652] gretap2: left promiscuous mode [ 288.908647][ T6294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.923760][ T5186] Bluetooth: hci5: command tx timeout [ 289.021402][T15818] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 289.059365][T15818] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 289.165034][T15825] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 289.243580][T15825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.299995][T15827] netlink: 'syz.2.2880': attribute type 29 has an invalid length. [ 289.314416][T15825] netlink: 'syz.2.2880': attribute type 29 has an invalid length. [ 289.431719][T15825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.439613][T15825] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.444724][T15834] unsupported nlmsg_type 40 [ 289.472195][T15825] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 289.557311][T15809] hsr0 speed is unknown, defaulting to 1000 [ 290.470189][T15878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.660796][T15887] netlink: 'syz.4.2900': attribute type 2 has an invalid length. [ 290.698563][T15887] __nla_validate_parse: 130 callbacks suppressed [ 290.698581][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 290.845141][T15896] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 290.866356][T15896] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 290.873702][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'. [ 290.888568][T15896] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 290.991269][ T5186] Bluetooth: hci5: command tx timeout [ 291.028703][T15912] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2908'. [ 291.118695][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2910'. [ 291.134679][T15919] netlink: 'syz.1.2910': attribute type 7 has an invalid length. [ 291.142612][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 291.216815][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.231613][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2911'. [ 291.360477][ T9652] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 291.403754][ T30] audit: type=1800 audit(1756625199.583:2): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2904" name="memory.events" dev="tmpfs" ino=2974 res=0 errno=0 [ 291.658438][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 291.774292][T15955] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 291.944135][T15958] validate_nla: 1 callbacks suppressed [ 291.944154][T15958] netlink: 'syz.2.2923': attribute type 21 has an invalid length. [ 291.978663][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'. [ 292.143560][ T9887] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 292.155479][ T9887] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 292.163916][ T9887] CPU: 1 UID: 0 PID: 9887 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 292.173481][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.183525][ T9887] RIP: 0010:klist_del+0x49/0x110 [ 292.188458][ T9887] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 33 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 33 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 292.208053][ T9887] RSP: 0018:ffffc900038f7768 EFLAGS: 00010202 [ 292.214125][ T9887] RAX: 000000000000000b RBX: ffff888079d86460 RCX: ffff8880591b0000 [ 292.222098][ T9887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 292.230138][ T9887] RBP: ffffc900038f7890 R08: ffff888075cdd1e3 R09: 1ffff1100eb9ba3c [ 292.238274][ T9887] R10: dffffc0000000000 R11: ffffed100eb9ba3d R12: dffffc0000000000 [ 292.246237][ T9887] R13: 1ffff1100f3b0c8c R14: 0000000000000000 R15: ffff88807eb3e750 [ 292.254208][ T9887] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 292.263130][ T9887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.269701][ T9887] CR2: 00007faa80b746a0 CR3: 000000007d578000 CR4: 00000000003526f0 [ 292.277661][ T9887] Call Trace: [ 292.280924][ T9887] [ 292.283840][ T9887] device_del+0x280/0x8e0 [ 292.288160][ T9887] ? _raw_spin_unlock_irq+0x2e/0x50 [ 292.293363][ T9887] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 292.299439][ T9887] ? __pfx_device_del+0x10/0x10 [ 292.304283][ T9887] ? netdev_unregister_kobject+0x344/0x450 [ 292.310167][ T9887] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 292.316578][ T9887] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 292.323334][ T9887] ? rtnl_net_dev_lock+0x257/0x2f0 [ 292.328444][ T9887] unregister_netdevice_queue+0x33c/0x380 [ 292.334154][ T9887] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 292.340386][ T9887] ? rtnl_net_dev_lock+0x36/0x2f0 [ 292.345404][ T9887] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 292.350509][ T9887] unregister_netdev+0x1f/0x60 [ 292.355276][ T9887] bnep_session+0x294d/0x2b40 [ 292.359945][ T9887] ? rcu_is_watching+0x15/0xb0 [ 292.364696][ T9887] ? trace_sched_exit_tp+0x36/0x110 [ 292.369884][ T9887] ? __lock_acquire+0xab9/0xd20 [ 292.374774][ T9887] ? __pfx_bnep_session+0x10/0x10 [ 292.379791][ T9887] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.385670][ T9887] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.391991][ T9887] ? __pfx_woken_wake_function+0x10/0x10 [ 292.397623][ T9887] ? __kthread_parkme+0x7b/0x200 [ 292.402546][ T9887] ? __kthread_parkme+0x1a1/0x200 [ 292.407557][ T9887] kthread+0x70e/0x8a0 [ 292.411614][ T9887] ? __pfx_bnep_session+0x10/0x10 [ 292.416623][ T9887] ? __pfx_kthread+0x10/0x10 [ 292.421199][ T9887] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.426384][ T9887] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.431569][ T9887] ? __pfx_kthread+0x10/0x10 [ 292.436145][ T9887] ret_from_fork+0x3f9/0x770 [ 292.440726][ T9887] ? __pfx_ret_from_fork+0x10/0x10 [ 292.445827][ T9887] ? __switch_to_asm+0x39/0x70 [ 292.450578][ T9887] ? __switch_to_asm+0x33/0x70 [ 292.455329][ T9887] ? __pfx_kthread+0x10/0x10 [ 292.459910][ T9887] ret_from_fork_asm+0x1a/0x30 [ 292.464668][ T9887] [ 292.467669][ T9887] Modules linked in: [ 292.472973][ T9887] ---[ end trace 0000000000000000 ]--- [ 292.477390][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.494556][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.499781][ T9887] RIP: 0010:klist_del+0x49/0x110 [ 292.502171][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.506487][ T9887] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 33 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 33 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 292.506507][ T9887] RSP: 0018:ffffc900038f7768 EFLAGS: 00010202 [ 292.519385][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.534016][ T9887] RAX: 000000000000000b RBX: ffff888079d86460 RCX: ffff8880591b0000 [ 292.542934][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.564915][ T9887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 292.573218][ T9887] RBP: ffffc900038f7890 R08: ffff888075cdd1e3 R09: 1ffff1100eb9ba3c [ 292.583853][ T9887] R10: dffffc0000000000 R11: ffffed100eb9ba3d R12: dffffc0000000000 [ 292.594127][ T9887] R13: 1ffff1100f3b0c8c R14: 0000000000000000 R15: ffff88807eb3e750 [ 292.609415][ T9887] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 292.619897][ T9887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.626517][ T9887] CR2: 000000110c2d0171 CR3: 000000000df36000 CR4: 00000000003526f0 [ 292.634684][ T9887] Kernel panic - not syncing: Fatal exception [ 292.641024][ T9887] Kernel Offset: disabled [ 292.645368][ T9887] Rebooting in 86400 seconds..