last executing test programs: 3.010396483s ago: executing program 4 (id=10756): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x4}, 0x38) (async) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18027a0000000000000000003b000000950000000000000063c2d1f2c5d306afdff70786302c03cedb6f99f028c038642ba16864c7a878a9e7f59b7e5a6f7b348570a3780c9260825f5ee4a945815874fe9f12b11bc24039f5536b4d0311eaa833d624c2e85e6e82f04321b7f1fa3af46ab270990b9396edfa788a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r1}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r10, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@generic={&(0x7f0000007c80)='.\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) (async, rerun: 64) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 2.809672107s ago: executing program 4 (id=10760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x3, 0x30, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000b40)="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", 0x102, 0x44000, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @mcast2}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000b40)="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", 0x102, 0x44000, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @mcast2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="ee", 0x1, 0x40004, &(0x7f0000000200)={0xa, 0x4e28, 0x40000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) 2.620004616s ago: executing program 1 (id=10762): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) getpeername$llc(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402178006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.456107416s ago: executing program 2 (id=10765): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) 2.455758574s ago: executing program 2 (id=10766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.376192885s ago: executing program 2 (id=10767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001780)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200448c0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c844) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044054) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r4, 0x99d35000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000000), 0x4) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000004c0)=""/213, 0xd5}], 0x5, 0x3, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4fe0d00000069101600"], &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000002b40)={&(0x7f00000017c0)=@qipcrtr, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001840)=""/137, 0x89}, {&(0x7f0000000700)=""/35, 0x23}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000002980)=""/240, 0xf0}, {&(0x7f0000002a80)}], 0x6}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) accept$alg(r1, 0x0, 0x0) 2.132175223s ago: executing program 2 (id=10772): syz_emit_ethernet(0x82, &(0x7f0000000400)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @multicast2]}]}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) (async, rerun: 32) writev(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)="01518258129894b13f5baf09a9d9e6d4623bbcca10c0cbd5fa27b81c7f86b50ab81c46131876e550782e7bb2bdde0e098fdbe16bfac3ad9311a1002713348ec6413e3c82a2c16bb63ccac5c7a0e3611ad15a07fc32dda578d00509a4e68ed844bc5b76a2b1243729cfa26f5575931efac0c393783666a625f3b3ae257637f8c48a6212b19761e601b8d010e48d067b446ccbdf5038efaa492452f07cf09d8b6846e92b25c65810022900baced2b7afb7247f65068c38070d074706cffc6ff4f88b089966c5", 0xc5}, {&(0x7f00000004c0)="a108ac17bcc9c5e21900ce9cc409d7994ddbb8596f39d0e969a6b891cd5323ec2c42f0c6bb062aaf40b64a0916acfbe5cc94f177baea36161e704c5541b5dcaee049435fabd1b5fb7217cf3605eaebfe68ea0c60e6a189242fa6f588dfc7b1350564014e498441aff34a3c469503aaec6de8858b5b32dbc8b33d47cd7418e50c10adfebb71919dca27f10707531d90a88ecedad08ec68f9ea08bc4b2f95b9fdbdb8c86648e84e5e41bccd2193a0d8562de6709ca77d73f252ce6b046e561e7837e66a17c81a9da43e7f6cefa008931a0aef5ef48a6bda9f531660cb42cb574a33dd23f5be9c7b431fb3985", 0xeb}, {&(0x7f00000005c0)="3e3b03f0282bec6fe8be4bc9f06a9b03792f35522e8cc33c892df361a15b0b6e8847ae51dca4b5a2600e6557cf8dd27f0d2738a7dba0916f936a68e3127def141d7580ba0a76", 0x46}], 0x3) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)={0x14, 0x69, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x20048084) (async) r7 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f00000000c0)=0x80, 0x800) recvmsg$unix(r7, &(0x7f0000000180)={&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x100) 2.028696398s ago: executing program 0 (id=10773): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r10, 0x8918, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES16=r5, @ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x22004044}, 0x4000080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/243, 0x102}, {&(0x7f0000000d40)=""/244, 0x41}, {&(0x7f0000000340)=""/218, 0xd0}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000a40)=""/224, 0xe0}, {&(0x7f0000002340)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/198, 0xc6}], 0x8}, 0x40010040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSSL2CALL(r10, 0x8918, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES16=r5, @ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x22004044}, 0x4000080) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/243, 0x102}, {&(0x7f0000000d40)=""/244, 0x41}, {&(0x7f0000000340)=""/218, 0xd0}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000a40)=""/224, 0xe0}, {&(0x7f0000002340)=""/4091, 0xffb}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/198, 0xc6}], 0x8}, 0x40010040) (async) 1.986705138s ago: executing program 3 (id=10774): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001680)={r5}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) (async) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000001800)={0x3, @null}) (async, rerun: 64) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) r7 = socket(0x1d, 0x2, 0x6) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="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", 0xfc}, {&(0x7f0000000340)="e206a33487495f4dad1284085be16082eba86638eb25050be774e1596326ae9fc788758b3c65aea03b1e8082efd9054d2f91d55158c7951fad910ee77ffc2ca975754a76f339927eed5b73180ff0222f3fe67c3ce790ef1f", 0x58}], 0x2) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x80) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) (async) pipe(&(0x7f0000000480)) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x15, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x33}, 0x94) (async, rerun: 32) sendmsg$sock(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)}, {&(0x7f00000003c0)="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", 0x5f8}, {0x0}], 0x3}, 0x80) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000000), 0x4) 1.87633243s ago: executing program 4 (id=10775): syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000002008004500007000000078000701004510011d00640008f38900010a010101640101028913dc1e0101ac1414bbac14142c830fede00000027f000001ffffffff890b9264ed39f367d88c220001830e0b70e94943da3bca5a9d11c700"/121], 0x0) 1.87600156s ago: executing program 3 (id=10776): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x54}, [@NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0xffffff15}, @NFTA_SET_POLICY={0x0, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'nr0\x00'}, {0x0, 0x1, 'team0\x00'}, {0x0, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_NUM]}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'veth0_to_hsr\x00'}, {0x0, 0x1, 'veth1_virt_wifi\x00'}, {0x0, 0x1, 'wg0\x00'}, {0x0, 0x1, 'veth1_virt_wifi\x00'}, {0x0, 0x1, 'pim6reg0\x00'}, {0x0, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'veth1_virt_wifi\x00'}, {0x0, 0x1, 'veth0_to_batadv\x00'}, {0x0, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'macvlan0\x00'}, {0x0, 0x1, 'team_slave_0\x00'}, {0x0, 0x1, 'dvmrp0\x00'}, {0x0, 0x1, 'veth1_macvtap\x00'}, {0x0, 0x1, 'team0\x00'}, {0x0, 0x1, 'team_slave_1\x00'}, {0x0, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS]}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x5, 0x0, 0x0, {0x6, 0x0, 0x6}}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE}, @NFT_MSG_NEWSET={0x0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x81}, @NFTA_SET_NAME={0x0, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x884}]}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "7874a5b107e1ebf829e0433a5cddfd51b626aae0fb5d7c44bcc91ad79b3e4b4174857a01e0ae5cef6b788510bc2ad56a78d9bee8d1a0ba88906cfbf6bc924a5f450051e1835498633c0328293aa6a1b5ced759b9"}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x0, 0x8, "bd8f8b27e91763503a65d2899421cb64107b257435f063ba9cc61ea45d88ce976f6cbec84ffd234dcb795799360475c282dfc2001904c706ddf5af298f8fa596cc0a0855fb8cd2eea0080a9594f65c4f1db35c9ac84b81b6d57a668604bb72f2862ac0a02dbf6654b202ef2bf3b68be7c657525daad1363cc71f5b0f01fd067f5348db37c3cf1259fa01548a2dd35d63"}]}, @NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x28}}, 0x0) 1.80312994s ago: executing program 4 (id=10777): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x40, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @broadcast}}}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) (async, rerun: 64) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x6, 0x80, 0xc9, 0x7, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0xa006, 0x6922, 0xc6, 0x40, r2, 0xe, '\x00', r3, r4, 0x3, 0x1}, 0x50) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1c8, r6, 0x105, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x49d}, {0x8, 0x15, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe9ee}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x33e5}, {0x8, 0x15, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0xfffffffd}}]}, 0x1c8}}, 0x1) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, &(0x7f0000000640)) 1.775940948s ago: executing program 0 (id=10778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x30, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x40}, @calipso={0x7, 0x8, {0x1, 0x0, 0x1, 0x80}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000800}, 0x20004084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}, @ldst={0x0, 0x0, 0x1, 0x5, 0x3, 0x40}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.712904592s ago: executing program 1 (id=10779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f00000003c0), &(0x7f00000000c0)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x480}, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.649915031s ago: executing program 3 (id=10780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x3b, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9", 0x6, 0x830, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.605005579s ago: executing program 0 (id=10781): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1f237e9856d4b833, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500c3ff25000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.452108829s ago: executing program 1 (id=10782): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.33368031s ago: executing program 3 (id=10783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 1.162560152s ago: executing program 1 (id=10784): r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x2, 0x10}, &(0x7f0000000240)=0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000180)={'team_slave_0\x00', {0x2, 0x0, @empty}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.112095637s ago: executing program 2 (id=10785): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x8, 0xffff, 0x403, @random="b67b49c8de9f", 'nr0\x00'}) 1.109360949s ago: executing program 3 (id=10786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x5a, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24870) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 1.049924986s ago: executing program 0 (id=10787): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r0, 0x0) (async) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) (async) socket$kcm(0x29, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x12, &(0x7f0000000140)=""/18, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x9, 0xb}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x1, 0x4, 0x3, 0x1}, {0x2, 0x5, 0x9, 0x6}, {0x4, 0x2, 0x3, 0x4}, {0x0, 0x1, 0x268, 0xb}], 0x10, 0x7}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, r3, 0x2e, 0x0, @void}, 0x10) 934.298324ms ago: executing program 2 (id=10788): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000140)={'veth1_vlan\x00'}) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_int(r13, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x8) 828.106894ms ago: executing program 3 (id=10789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000000000000000000018010000202075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) 819.080561ms ago: executing program 0 (id=10790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x41001) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x66772}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x20046140) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000000800030011"], 0x54}}, 0x0) readv(r5, &(0x7f0000001840)=[{&(0x7f0000001500)=""/35, 0x23}], 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="010000000200703abaff372c8a5f7b07dbe95f3bcbebf26a496021403c3bb49841defd6d07b3dd9b204b792a79528f7669e5aab96ff1e49637b87a45cea100ceea8031b3aa70af8f3d5eea6152b31ad52de770150d907a5332632bf6d5003894bf56bb8b1a7b14adf746b661b2a9a9791754c587f6b0fc55b2b9a75b31bfc82050db6967d5fe79c7506c83c8328458935971ca06c54ce3520b4cfa2531da479cc958e8f8be3d2042b60444b8bcbb69411eaf6679316044"]) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8916, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x80002, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r7, &(0x7f0000000280)=[{&(0x7f0000002040)="18a418e4181d8f36b2d931688c", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) close(r0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000002bb0c3ec4bef0216af0f75fa4c2556bec326db7d4a694bdd567b877675ce232c7f5091c9963febe7ab375a91ccc5e04220fad67ee4e1c8172627e166d60a0570dee28a0fabf12ae879afbeb7c1d17d920624a9986354a9eeec382535f7b5d8afadead95b0efba7c001fb8e8f1b9000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) listen(r8, 0xfffffffc) (async) socket$netlink(0x10, 0x3, 0x8000000004) 783.870805ms ago: executing program 4 (id=10791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x18c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff986}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42f6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x112f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x82}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3078011b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x86e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x18c}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x18c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff986}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42f6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x112f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x82}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3078011b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x86e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x18c}}, 0x20000000) (async) 712.033949ms ago: executing program 1 (id=10792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) 671.00024ms ago: executing program 1 (id=10793): bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x11, 0x0, 0x0, &(0x7f0000002840)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x1, 0x31cf, {{0x1a, 0x4, 0x1, 0x3c, 0x68, 0x64, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@generic={0x89, 0x4, "c7be"}, @end, @lsrr={0x83, 0x1b, 0x2e, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x0, [0x10000, 0x2, 0x5, 0x11ed, 0x10000, 0xc7, 0x6]}, @timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0xf, [{@multicast2}, {@empty, 0xb78}]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f0000002500)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x4, 0x5, 0x2, @mcast2, @mcast2, 0x7, 0x8, 0x2, 0x2bfe}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r6, 0x29, 0x4d, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet(r0, &(0x7f0000002700)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="8494f5842fbfeae67ef6bc45fd13cca562088fb24a38b2e466a3a77ba50c", 0x1e}, {&(0x7f0000000540)="bbb1902e677c9d731bd077e5089a685c93df47baad7bd131eb541f18dec91a1b645cd573d1e52d356cf488076fc8ef3c18626471da72e7f9e5c2164ff3aa9b73f265aa539e0d9926426ea9e417d621ae9f91edbd2d679c9c11f2c973c86f37c576ba335096bf6864dd0d659dfc96d0d57a2785d40c517e7b62ebb5bbc91854cd5cf73a1a469d578f736da28bbc0ec9623f5db345", 0x94}, {&(0x7f0000000600)="df8c5c2ef58d0c525de36101b4b4db5a937e1319412e2535ecc8b0faf68c307d7cf271034137883c9fb5c23af2c98822a882034a907ab26fc4dc7cdcb9cafd9a7dc91199d40bc03d44fbf3207c5dd4bb27d272a804b1", 0x56}], 0x3, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x60}}, {{&(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="254e187eeb348d3f654dc3c32ef220d0c4f7e67acc47c97dc62fec6a0cf8f5bda9af0dc7ef8c11c6bc0fea12cef368bec1", 0x31}, {&(0x7f0000000780)="5c71ab23f6d4a7d7549fe7cfb822ecf88d3efcce9d5b004dce93f341b93d2947372dbe0d535e34e1c4ec36be58af57462619be2c61b7", 0x36}, {&(0x7f00000007c0)="022bc14398bd3cb903de9e33938162c94af3003bf691610b7b1833a38ed49979c446110fdd94500d6a2d9679b04a8b7185392762cc8871462d0ebef513a92670a9992f0b9038ea96a0118ff9da1ed8009f23b0658f97ae9a56e742839a13eeb5627fe14017d873f9dedbc28904451b85877f7b3d517ca7522851ca6d54988f722db96380b832012734e490771825323bb9ac329e", 0x94}, {&(0x7f0000000880)="7d23cb2496e80fad516f6aa9b743eb0dfc2ff1d08bdc910e636b64c7ac0edce4e1fea0b70be4b380609127b4a78f2e0484348925926271f3a2803ea071a62f9eddd716b89b32696288e4cd4f4b569508c90523046906b8942d164da1bd8b6e159b56469cd76d79983d995f07a486e5c33aaf212df451f49d9ff97406332b91a3ffd052d149cf0773c8749d910dd51cd4cfb5603009c43d732b66827478ab7aa643d7def506b076c145a5d6cfe6ca31657eacca0a54c5e9234df57ea581890c9ad54c5bdba74da87ad03bb96a4ebd1f0a1b3c", 0xd2}], 0x4, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xd8, [@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @empty]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@empty, 0x9}, {@empty, 0x9}, {@empty, 0x4}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x46}, {@remote, 0x40}, {@broadcast, 0x4fc}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop]}}}], 0xf0}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000c00), 0x0, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x24, 0x1, 0xf, [{@broadcast, 0x4}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0xffffffff}, {@remote, 0x80000001}, {@broadcast, 0x5}, {@remote, 0xc9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x9}, {@private=0xa010101, 0x922e}, {@private=0xa010101, 0xfffffff8}]}, @noop, @ssrr={0x89, 0x1b, 0x55, [@loopback, @local, @rand_addr=0x64010100, @private=0xa010101, @private=0xa010101, @broadcast]}, @cipso={0x86, 0x52, 0x3, [{0x6, 0xc, "a27e4203b792e58751b6"}, {0x0, 0xa, "39a4c0d25b3aad96"}, {0x1, 0xb, "860cd8744e454d73f9"}, {0x0, 0x3, 'x'}, {0x6, 0xb, "a8c4407390e8eed8b6"}, {0x5, 0xd, "0203d9821fced9df144ed9"}, {0x1, 0xd, "13c8e5b3bc4290faa4793e"}, {0x6, 0x3, '`'}]}]}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000dc0)="394d5e1594085278743600684b809101aad89fd92626e2c148911e77ef94c6dea63e4ad82229c532a4d6858351b70c154b84499cb335fa8dfa58a31194351dd0270982288479c19eef5b6582306a5afee98831e790feee7526d86ce6feba289763c14f3f103f1b007b0c15616019f6a91281332957751ddc6984f1b017e4b22fbf5e4950ff6f47d03641943c8fe588f1b6bff63c0810b832cbc7b46c9e9792ad925ac3e8f9c69d62b07066178078b3df4acee2a564d90af499a71fceb6cb982f03e8e2946944ff8a9f01f76bb2719ffef282e88eca6e9a333d5f36a73d9c4c49e9", 0xe1}, {&(0x7f0000000ec0)="c76079a6024fea5684afaec158724202e403dd6fea21c528a8eb2fc5802beaa79883231b48f957747e566fda7725debf6304de7f422342ddd65fbdba8e451d1d7544f1e8dd0d766fbeb8e08d18e35c951f1ee0f11e61e28bfcf8237c914381e22086b79eb5c38bac65ae0faa35953deb895507736946b6634086f37bde27b6d57874ac220eb908ae1cd21a6e116783adb937987497806b30cbbc4880a477221397d976b9e06b468bdef5b772aa9943087ffb6e62781922864dd071699b2e368dca77abc81fe5f903a8738afa219cbf1e5258b034b15440a366031a54fec3a3040f73f461d37881bdbb3631358f5de2", 0xef}, {&(0x7f0000000fc0)="7d76aba358a876d52f7830f4043882901119764016c98cc5ed03d17df6659610b8b24bc32245903246b5f0af0ee557fd8aea475f700a761be4cc8c49c0287e1efca36454c53aab70fe331aeab5c6ae3cbaeb1a2fcfc947d0f936d5138ed61f791e7307ace656840d917ce747c3567a6531a8d6d11d241cf7", 0x78}, {&(0x7f0000001040)="985f15c4b9fb02ff17e150f1af8f48f794aad2f3dbce7caa69ae01e3d2889e537e01ddfc5a36f5b32d30f843e2b0c0ac5c40a5d77e693d4a1c03bce7d7d19305ed14d54891667111847cdac1fbc6df7b2dc1c881419a5ebdde9c52f0a8ce5af1cc15c78cb8ecd2a18cccf7bed00bedbb70dccf5e6e592c41c6b5a1bc5cad2dd631ecfb7a2d4f5ee6c42899a26e65f193d8aee21cfe48b3b740e0e88efec6e53727310d493bc3dce02aadb5611f72805d9465f02c33736822b2daa3", 0xbb}], 0x4, &(0x7f0000001140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}}, {{&(0x7f0000001180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002480)=[{&(0x7f00000011c0)="78ac4a6ef1b502787f35496ff84a51d70c66941ae360e6025536982020c3f2026b0533cee9ee2a4aa75957d51cca9bfac60f4cbd1dc8a53ff799e8d543fb578c5fa76089066ed5540ed6d25b119fec468560a18c16e3709b7721ed4314022a9cefb0246fc8a409f15fc4b770879e2da800b40a5463d786d0345c00301b359d30e288d1a5fc74b9184a1e89b503a47341ddd9e423ad82a7a28d3b38dbfb8caa3ae8c9d83e1c553f1e9507f7e2f1adacf6815d04dd51a4f84483d5f0e62fc92c50", 0xc0}, {&(0x7f0000001280)="e00f8bd7e02ede8b60c1cdd9c62eb8ff6862146eb4fb84f403e3c1da2d5528ec19931d1db3b749dd6824bc635640a7d9980f5427d863e5b3c3c59b1225e95d0844da46971c94a1eaf3543ffd05364ddbc29ee6b93afb104662e5", 0x5a}, {&(0x7f0000001300)="64d15497eb60564c9866ef4b6ce4e637939d4be8bf98fd0fa2a4", 0x1a}, {&(0x7f0000001340)="7b3ba671e1f4194a6688cebd16958b3a98c19137cfa694a4f0249c024a", 0x1d}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="62b9dc28bb758dd5ec3c277776b590c0c8b55d8bd203b658e94c48d89d11f1b969115d7f1d879d4df6f70446e54e9d66be25dc1087d3b16cbdfbc0ec28e94b1fbafda699a3647753de1671dcc0caeeb676f496c34118e972ec190f0cf3bacf8ec6f9554de8635b45b643f523b90c8467a8700bac151bc64cf9cdac7d2034c574f681344807cac005ea72687efc207606c6e88788afe0f1afa2aab8e74c17d24117bdd2d954348043f279339f9d7859415ecb906bfe42b8b7133c9cd21df68a53541668f7acc081391f0b7896c1f8b28cbc91460b8eb721f5", 0xd8}], 0x6, &(0x7f00000025c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @empty}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x25, 0x0, 0x6, [0x9530, 0x1, 0x5]}, @generic={0x94, 0x12, "ce6bf7e6747023a65aeef74bd5017680"}, @generic={0x94, 0xd, "0e8424d9f3f9b238bbdb91"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x20, [@loopback]}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0x1, [{@multicast2, 0xfff}]}, @timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x128}}], 0x5, 0x8040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r11, &(0x7f0000000180), 0x3ef, 0x0) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 205.857563ms ago: executing program 0 (id=10794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 0s ago: executing program 4 (id=10795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, 0x0) r3 = epoll_create(0x1) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x5832, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2001c39c90d73da07a5e0003000a01746ebde3374f66c0ee644432fe6f76040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000e40001000000140000001100080000000000000000000700000a00"/159], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) recvfrom(r1, &(0x7f0000001240)=""/4096, 0x1000, 0x40000002, 0x0, 0x0) close(0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xf, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0xba, 0x8, 0x4, 0xfffb, 0x8000}, @call={0x85, 0x0, 0x0, 0x6a}, @alu={0x7, 0x1, 0x6, 0x2, 0x6, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x4, 0x4, 0x20, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x7, 0x1, 0x2, 0x1, 0x5, 0x80, 0x4}], &(0x7f0000000500)='syzkaller\x00', 0xfffffff7, 0x94, &(0x7f0000000540)=""/148, 0x41000, 0x46, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000640)=[{0x3, 0x3, 0xd, 0xa}, {0x4, 0x5, 0x8, 0x6}, {0x3, 0x4, 0x9, 0x3}, {0x5, 0x5, 0x3, 0x8}], 0x10, 0x9}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x1, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x17, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff300, 0x0, 0x0, 0x0, 0x7}, [@printk, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x46, &(0x7f00000003c0)=""/70, 0xc3000, 0x4, '\x00', r9, @sched_cls=0x2e, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x6, 0x1}, 0x10, 0x0, r11, 0x3, &(0x7f00000007c0)=[r12, r7], &(0x7f0000000800)=[{0x0, 0x4, 0x6, 0x3}, {0x2, 0x5, 0xe, 0xa}, {0x5, 0x5, 0x7, 0xc}], 0x10, 0xffff0001}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): T3910] netlink: 'syz.1.8885': attribute type 4 has an invalid length. [ 764.858276][ T3911] syz_tun: left promiscuous mode [ 764.886701][ T3919] netlink: 'syz.1.8885': attribute type 4 has an invalid length. [ 764.918401][ T3918] netlink: 'syz.3.8887': attribute type 1 has an invalid length. [ 764.947099][ T3918] nbd: error processing sock list [ 764.952205][ T3918] block nbd3: shutting down sockets [ 765.087637][ T3926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8889'. [ 766.464766][ T4020] vlan2: entered promiscuous mode [ 766.583850][ T4030] netlink: 'syz.3.8915': attribute type 8 has an invalid length. [ 766.647594][ T4030] bridge0: entered promiscuous mode [ 766.731972][ T4040] openvswitch: netlink: Message has 8 unknown bytes. [ 766.740888][ T4040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.803182][ T4047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8915'. [ 766.837673][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8920'. [ 766.872517][ T4048] geneve2: entered promiscuous mode [ 767.125484][ T4069] team0: Port device dummy0 removed [ 767.149574][ T4069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 767.306715][ T4083] syzkaller0: entered promiscuous mode [ 767.313717][ T4083] syzkaller0: entered allmulticast mode [ 767.334282][ T4087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8932'. [ 767.345735][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8932'. [ 767.357967][ T4087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8932'. [ 767.368559][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8932'. [ 767.377605][ T4087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8932'. [ 767.495180][ T4101] netlink: 'syz.4.8936': attribute type 1 has an invalid length. [ 767.552665][ T4106] netlink: 'syz.0.8937': attribute type 11 has an invalid length. [ 767.565556][ T4101] bond9: entered promiscuous mode [ 767.571328][ T4101] 8021q: adding VLAN 0 to HW filter on device bond9 [ 767.622422][ T4111] netlink: 'syz.2.8938': attribute type 32 has an invalid length. [ 767.630669][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8938'. [ 767.655519][ T4111] bond13: option coupled_control: invalid value (16) [ 767.664816][ T4111] bond13 (unregistering): Released all slaves [ 767.692829][ T4108] lo: Caught tx_queue_len zero misconfig [ 767.734160][ T4101] bond9: (slave bridge9): making interface the new active one [ 767.745115][ T4101] bridge9: entered promiscuous mode [ 767.757949][ T4101] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 767.785483][ T4119] siw: device registration error -23 [ 767.903770][ T4124] netlink: 'syz.2.8942': attribute type 2 has an invalid length. [ 767.911857][ T4124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8942'. [ 768.083058][ T4135] netlink: 'syz.2.8945': attribute type 1 has an invalid length. [ 768.130325][ T4135] bond13: entered promiscuous mode [ 768.137848][ T4135] 8021q: adding VLAN 0 to HW filter on device bond13 [ 768.192983][ T4141] 8021q: adding VLAN 0 to HW filter on device bond13 [ 768.204141][ T4141] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 768.215069][ T4141] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 768.238567][ T4141] bond13: (slave wireguard0): making interface the new active one [ 768.255272][ T4141] wireguard0: entered promiscuous mode [ 768.263455][ T4141] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 768.303603][ T4152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8950'. [ 768.489997][ T4159] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 768.634497][ T4178] netlink: 'syz.0.8958': attribute type 1 has an invalid length. [ 768.794326][ T4189] tun0: tun_chr_ioctl cmd 1074025675 [ 768.802127][ T4189] tun0: persist disabled [ 769.550369][ T4222] syzkaller1: entered promiscuous mode [ 769.568513][ T4222] syzkaller1: entered allmulticast mode [ 769.692336][ T4228] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 769.865093][ T4238] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 770.372322][ T4260] sctp: [Deprecated]: syz.3.8980 (pid 4260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.372322][ T4260] Use struct sctp_sack_info instead [ 770.390871][ T4263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.433299][ T4270] team_slave_0: left promiscuous mode [ 770.439238][ T4270] team_slave_1: left promiscuous mode [ 770.444922][ T4270] geneve0: left promiscuous mode [ 770.748111][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 770.779235][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 770.828757][ T4270] team0 (unregistering): Port device geneve0 removed [ 771.586988][ T30] audit: type=1804 audit(1761982748.416:10): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9004" name="/newroot/595/cgroup.controllers" dev="tmpfs" ino=3052 res=1 errno=0 [ 771.657612][ T30] audit: type=1800 audit(1761982748.416:11): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9004" name="cgroup.controllers" dev="tmpfs" ino=3052 res=0 errno=0 [ 771.703651][ T4345] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 771.727584][ T30] audit: type=1800 audit(1761982748.436:12): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9004" name="cgroup.controllers" dev="tmpfs" ino=3052 res=0 errno=0 [ 771.799395][ T4352] validate_nla: 4 callbacks suppressed [ 771.799413][ T4352] netlink: 'syz.4.9007': attribute type 21 has an invalid length. [ 771.853601][ T4358] delete_channel: no stack [ 771.900617][ T4352] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 771.913336][ T4352] bond10 (unregistering): Released all slaves [ 772.165365][ T4376] __nla_validate_parse: 13 callbacks suppressed [ 772.165382][ T4376] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9015'. [ 772.348862][ T4376] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9015'. [ 772.373200][ T4378] wg2: entered promiscuous mode [ 772.391374][ T4378] wg2: entered allmulticast mode [ 772.457641][ T4389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 772.467462][ T4389] bond0: (slave bond10): Enslaving as an active interface with an up link [ 772.491899][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9018'. [ 772.508034][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 772.709479][ T4410] netlink: 'syz.0.9023': attribute type 11 has an invalid length. [ 772.952729][ T4440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9022'. [ 772.989470][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9031'. [ 773.024569][ T13] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 773.033388][ T13] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 52:06:9a:b7:35:56 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 773.642897][ T13] bond0 (unregistering): Released all slaves [ 773.748548][ T13] bond1 (unregistering): Released all slaves [ 773.855850][ T13] bond2 (unregistering): Released all slaves [ 773.870442][ T13] bond3 (unregistering): Released all slaves [ 773.882732][ T13] bond4 (unregistering): Released all slaves [ 773.988581][ T13] bond5 (unregistering): Released all slaves [ 774.000804][ T13] bond6 (unregistering): Released all slaves [ 774.014801][ T13] bond7 (unregistering): (slave veth7): Releasing backup interface [ 774.024986][ T13] bond7 (unregistering): Released all slaves [ 774.149618][ T13] bond8 (unregistering): Released all slaves [ 774.260479][ T13] bond9 (unregistering): Released all slaves [ 774.273354][ T13] bond10 (unregistering): Released all slaves [ 774.285853][ T13] bond11 (unregistering): Released all slaves [ 774.301518][ T13] bond12 (unregistering): Released all slaves [ 774.314059][ T13] bond13 (unregistering): Released all slaves [ 774.327446][ T13] bond14 (unregistering): Released all slaves [ 774.345082][ T13] bond15 (unregistering): Released all slaves [ 774.364793][ T13] bond16 (unregistering): Released all slaves [ 774.379926][ T13] bond17 (unregistering): Released all slaves [ 774.392499][ T13] bond18 (unregistering): Released all slaves [ 774.404989][ T13] bond19 (unregistering): Released all slaves [ 774.418511][ T13] bond20 (unregistering): Released all slaves [ 774.431013][ T13] bond21 (unregistering): Released all slaves [ 774.457318][ T4446] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 774.588705][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 774.608862][ T4455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.661977][ T4455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9033'. [ 774.702929][ T13] tipc: Disabling bearer [ 774.716227][ T13] tipc: Left network mode [ 775.134252][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9041'. [ 775.231313][ T4488] openvswitch: netlink: Flow actions attr not present in new flow. [ 775.276925][ T4490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9043'. [ 775.488058][ T4496] netlink: 'syz.1.9044': attribute type 1 has an invalid length. [ 775.583471][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9046'. [ 775.977697][ T4517] netlink: 'syz.1.9051': attribute type 2 has an invalid length. [ 775.988823][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 775.998991][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.010856][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.047935][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.057311][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.157377][ T13] hsr_slave_1: left promiscuous mode [ 776.427500][ T4536] sctp: [Deprecated]: syz.1.9057 (pid 4536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.427500][ T4536] Use struct sctp_sack_info instead [ 776.444483][ T4536] sctp: [Deprecated]: syz.1.9057 (pid 4536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.444483][ T4536] Use struct sctp_sack_info instead [ 777.070821][ T4542] netem: change failed [ 777.222163][ T4551] netlink: 'syz.3.9059': attribute type 3 has an invalid length. [ 777.257043][ T4547] netlink: 'syz.2.9060': attribute type 1 has an invalid length. [ 777.259169][ T4554] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9059'. [ 777.465398][ T4563] netlink: 'syz.1.9061': attribute type 4 has an invalid length. [ 777.473258][ T4563] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9061'. [ 777.847527][ T4577] SET target dimension over the limit! [ 777.869534][ T13] IPVS: stop unused estimator thread 0... [ 778.176545][ T5844] Bluetooth: hci1: command tx timeout [ 778.321169][ T4514] chnl_net:caif_netlink_parms(): no params data found [ 778.337757][ T4610] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.9076'. [ 778.562676][ T4514] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.590292][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.611132][ T4514] bridge_slave_0: entered allmulticast mode [ 778.619463][ T4514] bridge_slave_0: entered promiscuous mode [ 778.629212][ T4514] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.646953][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.663351][ T4514] bridge_slave_1: entered allmulticast mode [ 778.675140][ T4514] bridge_slave_1: entered promiscuous mode [ 778.831901][ T4514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.881092][ T4514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.037915][ T4514] team0: Port device team_slave_0 added [ 779.054481][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9086'. [ 779.066216][ T4514] team0: Port device team_slave_1 added [ 779.110016][ T4647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9084'. [ 779.124256][ T4647] bond0: Caught tx_queue_len zero misconfig [ 779.135195][ T4652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9084'. [ 779.332333][ T4514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.335820][ T4663] netlink: 'syz.0.9089': attribute type 12 has an invalid length. [ 779.346012][ T4514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.374360][ T4514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.417133][ T4514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.431359][ T4514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.481815][ T4665] netlink: 'syz.3.9091': attribute type 4 has an invalid length. [ 779.490162][ T4514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.513620][ T4670] xt_socket: unknown flags 0xe4 [ 779.536642][ T4671] netlink: 'syz.3.9091': attribute type 4 has an invalid length. [ 779.597748][ T4674] openvswitch: netlink: Unknown nsh attribute 0 [ 779.604877][ T4674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.633154][ T4514] hsr_slave_0: entered promiscuous mode [ 779.675802][ T4514] hsr_slave_1: entered promiscuous mode [ 779.697690][ T4514] debugfs: 'hsr0' already exists in 'hsr' [ 779.703468][ T4514] Cannot create hsr debugfs directory [ 779.777171][ T4682] ip6gre1: entered allmulticast mode [ 779.902587][ T4688] netlink: 'syz.0.9098': attribute type 10 has an invalid length. [ 779.962858][ T4688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9098'. [ 780.118543][ T4698] can: request_module (can-proto-0) failed. [ 780.217905][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9104'. [ 780.256254][ T5844] Bluetooth: hci1: command tx timeout [ 780.353072][ T4717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9108'. [ 780.380428][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9107'. [ 780.458490][ T4514] bond0: (slave netdevsim0): Releasing backup interface [ 780.476113][ T4514] bond0: (slave netdevsim0): the permanent HWaddr of slave - c6:a0:18:9e:74:28 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 780.730283][ T4734] vlan0: entered allmulticast mode [ 780.735460][ T4734] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 780.830317][ T4514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 780.867196][ T4514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 780.892994][ T4514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 780.921851][ T4514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 780.959442][ T4740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.027691][ T4740] sctp: [Deprecated]: syz.0.9115 (pid 4740) Use of int in max_burst socket option. [ 781.027691][ T4740] Use struct sctp_assoc_value instead [ 781.159237][ T4514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.209971][ T4514] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.237916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.245164][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.305944][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.313163][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.810221][ T4795] openvswitch: netlink: Duplicate or invalid key (type 0). [ 781.817995][ T4795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.876322][ T4514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.128106][ T4817] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 782.282623][ T4826] __nla_validate_parse: 47 callbacks suppressed [ 782.282643][ T4826] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9133'. [ 782.300199][ T4822] netlink: 'syz.0.9132': attribute type 4 has an invalid length. [ 782.342341][ T5844] Bluetooth: hci1: command tx timeout [ 782.480362][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9137'. [ 782.530843][ T4514] veth0_vlan: entered promiscuous mode [ 782.565485][ T4842] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9136'. [ 782.568550][ T4514] veth1_vlan: entered promiscuous mode [ 782.599849][ T4842] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9136'. [ 782.640188][ T4848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9139'. [ 782.661153][ T4846] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9138'. [ 782.667802][ T4514] veth0_macvtap: entered promiscuous mode [ 782.700329][ T4514] veth1_macvtap: entered promiscuous mode [ 782.720696][ T4846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.766712][ T4854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9141'. [ 782.791604][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.805798][ T4854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9141'. [ 782.829138][ T4860] netlink: 'syz.1.9141': attribute type 1 has an invalid length. [ 782.830064][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.837731][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9141'. [ 782.858361][ T4862] netlink: 'syz.2.9142': attribute type 4 has an invalid length. [ 782.873618][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.891303][ T4860] netlink: 23 bytes leftover after parsing attributes in process `syz.1.9141'. [ 782.901316][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.901359][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.901393][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.901874][ T4865] netlink: 'syz.1.9141': attribute type 32 has an invalid length. [ 783.086833][T26747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.094817][T26747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.160716][ T4870] tipc: Enabled bearer , priority 0 [ 783.178519][T26746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.193405][T26746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.195649][ T4870] tipc: Disabling bearer [ 783.807062][ T4913] bridge_slave_0: invalid flags given to default FDB implementation [ 784.363006][ T4954] netem: change failed [ 784.417378][ T5844] Bluetooth: hci1: command tx timeout [ 784.535181][ T4958] tipc: Trying to set illegal importance in message [ 785.251597][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 785.275783][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 785.288669][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 785.300831][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 785.310421][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 785.418516][T26771] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.447020][T26771] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.477304][T26771] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.497326][T26771] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.948557][ T5037] netlink: 'syz.0.9191': attribute type 83 has an invalid length. [ 785.966912][ T5037] netlink: 'syz.0.9191': attribute type 83 has an invalid length. [ 785.975630][ T5037] netlink: 'syz.0.9191': attribute type 83 has an invalid length. [ 785.984238][ T5037] netlink: 'syz.0.9191': attribute type 83 has an invalid length. [ 785.992555][ T5037] netlink: 'syz.0.9191': attribute type 83 has an invalid length. [ 786.003769][ T5037] netlink: 'syz.0.9191': attribute type 83 has an invalid length. [ 786.184690][ T5050] netem: incorrect gi model size [ 786.199942][ T5050] netem: change failed [ 786.223041][ T4999] chnl_net:caif_netlink_parms(): no params data found [ 786.399112][ T4999] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.408153][ T4999] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.415636][ T4999] bridge_slave_0: entered allmulticast mode [ 786.424552][ T5016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 786.426479][ T4999] bridge_slave_0: entered promiscuous mode [ 786.438426][ T5016] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 786.467880][ T4999] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.511008][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.531403][ T4999] bridge_slave_1: entered allmulticast mode [ 786.554827][ T4999] bridge_slave_1: entered promiscuous mode [ 786.673333][ T5079] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 786.699474][ T4999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.736420][ T5016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 786.746157][ T5016] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 786.755257][ T5078] gretap1: entered promiscuous mode [ 786.777463][ T4999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.937390][ T4999] team0: Port device team_slave_0 added [ 786.951845][ T4999] team0: Port device team_slave_1 added [ 786.961282][ T5016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 786.979833][ T5016] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 787.100119][ T4999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.111400][ T4999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.144525][ T4999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.156593][ T5016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.158709][ T4999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.170868][ T5016] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 787.171553][ T4999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.205579][ T4999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.340189][ T4999] hsr_slave_0: entered promiscuous mode [ 787.343577][ T5102] __nla_validate_parse: 11 callbacks suppressed [ 787.343595][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9210'. [ 787.356422][ T4999] hsr_slave_1: entered promiscuous mode [ 787.391851][ T4999] debugfs: 'hsr0' already exists in 'hsr' [ 787.398428][ T4999] Cannot create hsr debugfs directory [ 787.399178][ T5107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9211'. [ 787.448081][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9212'. [ 787.470979][ T5109] geneve4: entered promiscuous mode [ 787.493356][ T5111] validate_nla: 6 callbacks suppressed [ 787.493378][ T5111] netlink: 'syz.0.9213': attribute type 1 has an invalid length. [ 787.566249][ T5111] 8021q: adding VLAN 0 to HW filter on device bond11 [ 787.607553][ T5114] bond11: (slave geneve4): making interface the new active one [ 787.618450][ T5114] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 787.645628][ T13] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 787.724081][ T13] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 787.740179][ T13] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 787.788948][ T13] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 787.907752][ T5127] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9216'. [ 788.215377][ T5127] team0 (unregistering): Port device team_slave_0 removed [ 788.240026][ T5127] team0 (unregistering): Port device team_slave_1 removed [ 788.430515][ T4999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.459306][ T4999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.520576][ T5158] netlink: 'syz.1.9225': attribute type 2 has an invalid length. [ 788.618210][ T4999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.628886][ T4999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.644470][ T5164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9226'. [ 788.665076][ T5168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9226'. [ 788.690570][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9226'. [ 788.754759][ T4999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.772125][ T4999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.864145][ T5183] netlink: 'syz.3.9232': attribute type 21 has an invalid length. [ 788.878475][ T5183] IPv6: NLM_F_CREATE should be specified when creating new route [ 788.915289][ T5183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.922598][ T5183] IPv6: NLM_F_CREATE should be set when creating new route [ 788.929941][ T5183] IPv6: NLM_F_CREATE should be set when creating new route [ 788.937216][ T5183] IPv6: NLM_F_CREATE should be set when creating new route [ 788.952526][ T4999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.963709][ T4999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.074004][ T5191] SET target dimension over the limit! [ 789.228377][ T5203] set match dimension is over the limit! [ 789.238400][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9232'. [ 789.305033][ T5194] tipc: Enabled bearer , priority 0 [ 789.356527][ T5183] syzkaller1: entered promiscuous mode [ 789.362048][ T5183] syzkaller1: entered allmulticast mode [ 789.368823][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9235'. [ 789.532600][ T5203] tipc: Resetting bearer [ 789.586155][ T5187] tipc: Disabling bearer [ 789.662746][ T5218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 789.682806][ T4999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 789.716897][ T4999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 789.744179][ T4999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 789.762194][ T4999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 789.786731][ T5221] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9240'. [ 789.945377][ T4999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.978587][ T4999] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.008887][T26746] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.016094][T26746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.056891][T26773] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.064091][T26773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.073978][ T5245] netlink: 'syz.3.9247': attribute type 4 has an invalid length. [ 790.133272][ T5243] netlink: 'syz.1.9246': attribute type 1 has an invalid length. [ 790.638799][ T5276] netlink: 'syz.1.9256': attribute type 1 has an invalid length. [ 790.652460][ T4999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.655945][ T5276] netlink: 'syz.1.9256': attribute type 2 has an invalid length. [ 790.798147][ T4999] veth0_vlan: entered promiscuous mode [ 790.825941][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805394f800: rx timeout, send abort [ 790.835126][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805394f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 790.852855][ T4999] veth1_vlan: entered promiscuous mode [ 790.948976][ T4999] veth0_macvtap: entered promiscuous mode [ 790.964074][ T5290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 791.073409][ T4999] veth1_macvtap: entered promiscuous mode [ 791.099673][ T5298] macvtap1: entered promiscuous mode [ 791.105043][ T5298] macvtap1: entered allmulticast mode [ 791.112075][ T5298] gretap0: entered allmulticast mode [ 791.118837][ T5298] team0: Device macvtap1 failed to register rx_handler [ 791.127200][ T5298] gretap0: left allmulticast mode [ 791.191377][ T4999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.224052][ T4999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.257799][T26773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.277126][T26773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.299868][T26773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.326654][T26773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.490576][T26747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.505268][T26747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.555014][T26747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.568545][T26747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.853164][ T5337] netlink: 'syz.4.9276': attribute type 4 has an invalid length. [ 791.905361][ T5339] netlink: 'syz.4.9276': attribute type 4 has an invalid length. [ 792.047171][ T5346] netlink: 'syz.3.9279': attribute type 16 has an invalid length. [ 792.399362][ T5379] __nla_validate_parse: 7 callbacks suppressed [ 792.399382][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9285'. [ 792.517814][ T5383] ip6gre2: entered allmulticast mode [ 792.548683][ T5384] validate_nla: 2 callbacks suppressed [ 792.548700][ T5384] netlink: 'syz.4.9289': attribute type 39 has an invalid length. [ 792.917142][ T5398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9294'. [ 793.015192][ T5402] netlink: 'syz.4.9295': attribute type 27 has an invalid length. [ 793.460047][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.471673][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.486361][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.505738][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 793.514504][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 793.514889][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9297'. [ 793.764790][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9301'. [ 793.812685][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9302'. [ 794.034278][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9304'. [ 794.134898][ T5443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9306'. [ 794.242580][ T5450] netlink: 'syz.1.9309': attribute type 9 has an invalid length. [ 794.388545][ T5461] netlink: 'syz.3.9312': attribute type 1 has an invalid length. [ 794.453720][ T5461] bond7: entered promiscuous mode [ 794.459568][ T5461] bond7: entered allmulticast mode [ 794.465747][ T5461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 794.481904][ T5469] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9313'. [ 794.484436][ T5463] netlink: 'syz.2.9313': attribute type 29 has an invalid length. [ 794.507411][ T5463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.534248][ T5464] netlink: 'syz.2.9313': attribute type 29 has an invalid length. [ 794.629300][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9315'. [ 794.639963][ T5480] ip6tnl0: Caught tx_queue_len zero misconfig [ 794.647272][ T5480] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9315'. [ 794.792039][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 794.837906][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.845672][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.035105][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.052281][ T5503] SET target dimension over the limit! [ 795.059806][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.060081][ T5412] bridge_slave_0: entered allmulticast mode [ 795.083302][ T5412] bridge_slave_0: entered promiscuous mode [ 795.093781][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.101113][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.109998][ T5412] bridge_slave_1: entered allmulticast mode [ 795.119646][ T5412] bridge_slave_1: entered promiscuous mode [ 795.260203][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.295859][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.379553][ T5412] team0: Port device team_slave_0 added [ 795.394664][ T5412] team0: Port device team_slave_1 added [ 795.479560][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.499373][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.544646][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.578498][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.585485][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.624539][ T5844] Bluetooth: hci5: command tx timeout [ 795.635216][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.740439][ T5412] hsr_slave_0: entered promiscuous mode [ 795.748194][ T5412] hsr_slave_1: entered promiscuous mode [ 795.755016][ T5412] debugfs: 'hsr0' already exists in 'hsr' [ 795.761090][ T5412] Cannot create hsr debugfs directory [ 795.766892][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 795.773078][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 795.801987][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 795.837315][ T5531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 795.852315][ T5536] bond8 (unregistering): Released all slaves [ 795.888928][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 795.905304][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 795.963424][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 795.995470][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.013304][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.067407][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.099906][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.114661][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.139955][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.217083][ T5412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.227812][ T5412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 796.240017][ T5412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 796.262863][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.281566][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.289705][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.342410][ T5412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.359186][ T5412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 796.371348][ T5412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 796.390429][ T5531] hsr0 speed is unknown, defaulting to 1000 [ 796.465160][ T5412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.478876][ T5412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 796.489898][ T5412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 796.617936][ T5412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.642596][ T5412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 796.653214][ T5412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 796.712450][ T5572] netlink: 'syz.2.9339': attribute type 7 has an invalid length. [ 796.721285][ T5572] netlink: 'syz.2.9339': attribute type 8 has an invalid length. [ 796.901080][ T5412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 796.913147][ T5412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 796.927997][ T5412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 796.944765][ T5412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 797.008641][ T5595] netlink: 'syz.1.9342': attribute type 9 has an invalid length. [ 797.229225][ T5605] tipc: Enabled bearer , priority 0 [ 797.268341][ T5608] openvswitch: netlink: Duplicate key (type 1). [ 797.271698][ T5604] syzkaller0: entered promiscuous mode [ 797.293183][ T5604] syzkaller0: entered allmulticast mode [ 797.305117][ T5605] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 797.366979][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.391448][ T5610] tipc: Resetting bearer [ 797.431358][ T5603] tipc: Resetting bearer [ 797.477237][ T5603] tipc: Disabling bearer [ 797.505394][ T5622] __nla_validate_parse: 9 callbacks suppressed [ 797.505412][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9349'. [ 797.530416][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9348'. [ 797.533061][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9349'. [ 797.582545][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.631561][ T5625] xt_nat: multiple ranges no longer supported [ 797.697686][ T5844] Bluetooth: hci5: command tx timeout [ 797.764536][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9352'. [ 797.797537][T26767] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.804743][T26767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.843631][T26767] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.850849][T26767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.978293][ T5654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9354'. [ 798.049398][ T5656] syzkaller0: entered allmulticast mode [ 798.203859][ T5664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9359'. [ 798.230713][ T5664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9359'. [ 798.412406][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.522401][ T5412] veth0_vlan: entered promiscuous mode [ 798.587208][ T5412] veth1_vlan: entered promiscuous mode [ 798.601268][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9365'. [ 798.615132][ T5681] netlink: 'syz.4.9365': attribute type 5 has an invalid length. [ 798.628890][ T5681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9365'. [ 798.669926][ T5681] geneve2: entered promiscuous mode [ 798.675178][ T5681] geneve2: entered allmulticast mode [ 798.686744][T26771] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 798.695612][T26771] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 798.771857][ T5844] block nbd3: Receive control failed (result -32) [ 798.783366][ T5681] syzkaller0: entered promiscuous mode [ 798.789846][ T5681] syzkaller0: entered allmulticast mode [ 798.810313][T26771] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 798.867275][ T5696] netlink: 'syz.3.9370': attribute type 33 has an invalid length. [ 798.875677][ T5696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9370'. [ 798.973495][T26771] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 799.779582][ T5844] Bluetooth: hci5: command tx timeout [ 800.579279][ T5412] veth0_macvtap: entered promiscuous mode [ 800.639007][ T5412] veth1_macvtap: entered promiscuous mode [ 800.761583][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.813417][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.878648][T26773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.899903][T26773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.933308][T26773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.946698][T26773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.102952][T26771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.122621][T26771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.212796][T26773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.238062][T26773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.393499][ T5744] netlink: 'syz.4.9383': attribute type 4 has an invalid length. [ 801.403603][ T5744] netlink: 'syz.4.9383': attribute type 4 has an invalid length. [ 801.485139][ T5754] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 801.518626][ T5754] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 801.856747][ T5844] Bluetooth: hci5: command tx timeout [ 801.872498][ T5780] : renamed from veth1_vlan (while UP) [ 801.949278][ T5791] x_tables: duplicate underflow at hook 3 [ 802.057202][ T5787] netlink: 'syz.3.9397': attribute type 4 has an invalid length. [ 802.076742][ T5787] netlink: 'syz.3.9397': attribute type 4 has an invalid length. [ 802.155673][ T5801] gtp0: entered promiscuous mode [ 802.162991][ T5801] gtp0: entered allmulticast mode [ 802.408934][ T5824] Unsupported ieee802154 address type: 0 [ 802.424693][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.432378][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.617287][ T5833] __nla_validate_parse: 9 callbacks suppressed [ 802.617304][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9406'. [ 802.710098][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9409'. [ 802.723069][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9409'. [ 802.869939][ T5858] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9412'. [ 802.999112][ T5854] netlink: 'syz.1.9411': attribute type 4 has an invalid length. [ 803.011405][ T5875] tipc: Enabling of bearer rejected, failed to enable media [ 803.020862][ T5854] netlink: 'syz.1.9411': attribute type 4 has an invalid length. [ 803.171630][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9417'. [ 803.238984][ T5911] bond2: invalid ARP target 0.0.0.0 specified for addition [ 803.248093][ T5911] bond2: option arp_ip_target: invalid value (0) [ 803.258218][ T5911] bond2 (unregistering): Released all slaves [ 803.480403][ T5920] syzkaller0: entered promiscuous mode [ 803.496729][ T5920] syzkaller0: entered allmulticast mode [ 803.619650][ T5934] bond0: Unable to set down delay as MII monitoring is disabled [ 803.641712][ T5934] bond0 (unregistering): Released all slaves [ 803.657327][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9423'. [ 805.864948][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9431'. [ 805.868877][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9434'. [ 805.984411][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9438'. [ 805.997456][ T5979] bond0: (slave bond_slave_1): Releasing backup interface [ 806.331419][ T6001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.424818][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9438'. [ 806.447643][ T6001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.454784][ T6001] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 806.492712][ T6001] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 806.673765][ T6028] veth1_macvtap: left promiscuous mode [ 806.919985][ T6035] netlink: 'syz.2.9446': attribute type 4 has an invalid length. [ 806.953054][ T6035] netlink: 'syz.2.9446': attribute type 4 has an invalid length. [ 807.112365][ T6059] netlink: 'syz.4.9455': attribute type 10 has an invalid length. [ 807.213059][ T6059] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 807.418873][ T6081] team0: Device macvtap1 is already an upper device of the team interface [ 807.529781][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.537605][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.632276][ T6097] __nla_validate_parse: 70 callbacks suppressed [ 807.632294][ T6097] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9462'. [ 808.359736][ T6114] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 808.424225][ T6126] tipc: Enabled bearer , priority 0 [ 808.437755][ T6130] syzkaller0: entered promiscuous mode [ 808.444696][ T6130] syzkaller0: entered allmulticast mode [ 808.512167][ T6141] tipc: Resetting bearer [ 808.529244][ T6119] tipc: Resetting bearer [ 808.580417][ T6119] tipc: Disabling bearer [ 808.767897][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9476'. [ 808.805603][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9477'. [ 808.981024][ T6173] netlink: 'syz.3.9481': attribute type 10 has an invalid length. [ 809.044597][ T6177] Bluetooth: MGMT ver 1.23 [ 809.173346][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9483'. [ 809.196162][ T6179] bridge_slave_1: left allmulticast mode [ 809.201844][ T6179] bridge_slave_1: left promiscuous mode [ 809.227362][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.270253][ T6179] bridge_slave_0: left allmulticast mode [ 809.279150][ T6179] bridge_slave_0: left promiscuous mode [ 809.309126][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.667726][ T6204] netlink: 'syz.4.9491': attribute type 10 has an invalid length. [ 809.679907][ T6204] bridge_slave_1: left allmulticast mode [ 809.722260][ T6204] bridge_slave_1: left promiscuous mode [ 809.737110][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.766811][ T6204] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 809.802084][ T6206] pim6reg: entered allmulticast mode [ 810.033628][ T6222] netlink: 'syz.3.9496': attribute type 2 has an invalid length. [ 810.542905][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9504'. [ 810.571557][ T6245] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 810.579052][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 810.592036][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 810.602007][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 810.610951][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 810.622379][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 810.767784][ T6252] netlink: 'syz.2.9505': attribute type 10 has an invalid length. [ 810.775668][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9505'. [ 810.866808][ T6252] team0: Port device geneve0 added [ 811.074749][ T6242] hsr0 speed is unknown, defaulting to 1000 [ 811.187934][ T6279] sctp: [Deprecated]: syz.4.9512 (pid 6279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.187934][ T6279] Use struct sctp_sack_info instead [ 811.272482][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9515'. [ 811.296627][ T6289] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9516'. [ 811.553725][ T6304] netlink: 'syz.4.9519': attribute type 1 has an invalid length. [ 811.598927][ T6242] chnl_net:caif_netlink_parms(): no params data found [ 811.663148][ T6311] xt_hashlimit: invalid rate [ 811.663677][ T6304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 811.699634][ T6304] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9519'. [ 811.709122][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9519'. [ 811.719718][ T6309] veth3: entered promiscuous mode [ 811.740837][ T6309] bond2: (slave veth3): Enslaving as an active interface with a down link [ 811.795034][ T6304] veth5: entered promiscuous mode [ 811.805810][ T6304] bond2: (slave veth5): Enslaving as an active interface with a down link [ 811.853340][ T6309] bond2: entered allmulticast mode [ 811.979136][ T6328] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 812.001486][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.009658][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.017226][ T6242] bridge_slave_0: entered allmulticast mode [ 812.025105][ T6242] bridge_slave_0: entered promiscuous mode [ 812.041106][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.049363][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.056909][ T6242] bridge_slave_1: entered allmulticast mode [ 812.064883][ T6242] bridge_slave_1: entered promiscuous mode [ 812.166745][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.185238][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.242019][ T6242] team0: Port device team_slave_0 added [ 812.252168][ T6242] team0: Port device team_slave_1 added [ 812.350782][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.358194][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.391344][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.405237][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.413348][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.440741][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.554262][ T6242] hsr_slave_0: entered promiscuous mode [ 812.573267][ T6242] hsr_slave_1: entered promiscuous mode [ 812.580249][ T6242] debugfs: 'hsr0' already exists in 'hsr' [ 812.587915][ T6242] Cannot create hsr debugfs directory [ 812.590336][ T6361] netlink: 'syz.0.9535': attribute type 3 has an invalid length. [ 812.657806][ T5844] Bluetooth: hci0: command tx timeout [ 812.859591][ T6242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.871646][ T6242] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.912597][ T6375] __nla_validate_parse: 1 callbacks suppressed [ 812.912610][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9539'. [ 812.934990][ T6375] netlink: 'syz.0.9539': attribute type 6 has an invalid length. [ 812.972912][ T6242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.984259][ T6242] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.003432][ T6376] IPVS: Unknown mcast interface: netpci0 [ 813.079989][ T6242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.090354][ T6242] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.497717][ T6242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 813.512811][ T6395] x_tables: duplicate underflow at hook 2 [ 813.512873][ T6242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 813.563140][ T6242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 813.602505][ T6242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 813.722611][ T6402] netlink: 'syz.3.9545': attribute type 32 has an invalid length. [ 813.888758][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.998766][ T6242] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.070286][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.736607][ T5844] Bluetooth: hci0: command tx timeout [ 816.145144][T26711] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.152298][T26711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.169145][ T6443] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 816.183771][T26721] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.199211][T26721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.312502][ T6457] netlink: 'syz.3.9558': attribute type 30 has an invalid length. [ 816.421285][ T6460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.545489][ T5927] IPVS: starting estimator thread 0... [ 816.562568][ T6470] syz_tun: entered allmulticast mode [ 816.584771][ T6469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9563'. [ 816.594925][ T6469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9563'. [ 816.637256][ T6470] dvmrp6: entered allmulticast mode [ 816.661477][ T6471] IPVS: using max 30 ests per chain, 72000 per kthread [ 816.671762][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9564'. [ 816.788657][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.827357][ T5844] Bluetooth: hci0: command tx timeout [ 816.902529][ T6242] veth0_vlan: entered promiscuous mode [ 816.917633][ T6242] veth1_vlan: entered promiscuous mode [ 816.958868][ T6242] veth0_macvtap: entered promiscuous mode [ 816.990231][ T6242] veth1_macvtap: entered promiscuous mode [ 817.020728][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.044009][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.061894][T26721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.083867][T26721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.091892][ T6497] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9569'. [ 817.122488][T26721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.142481][T26721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.263835][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.282478][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.309084][ T6463] syz_tun: left allmulticast mode [ 817.358870][ T6505] rdma_op ffff88814dc5e1f0 conn xmit_rdma 0000000000000000 [ 817.408885][T26716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.426053][T26716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.477744][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9573'. [ 817.671156][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9578'. [ 817.810103][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9579'. [ 817.904568][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9581'. [ 818.065453][ T6542] netlink: 'syz.2.9584': attribute type 1 has an invalid length. [ 818.280750][ T6543] netlink: 'syz.4.9583': attribute type 1 has an invalid length. [ 818.290117][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9583'. [ 818.490030][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 818.511835][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 818.527583][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 818.543950][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 818.552709][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9590'. [ 818.559456][ T6565] delete_channel: no stack [ 818.567147][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 818.569961][ T6563] bridge2: entered allmulticast mode [ 818.842833][ T6575] delete_channel: no stack [ 818.946733][ T5844] Bluetooth: hci0: command tx timeout [ 819.007889][ T6583] netlink: 'syz.2.9597': attribute type 5 has an invalid length. [ 819.283420][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9602'. [ 819.347395][ T6599] tipc: Started in network mode [ 819.357884][ T6599] tipc: Node identity 0ef7967d7e1b, cluster identity 4711 [ 819.366984][ T6599] tipc: Enabled bearer , priority 0 [ 819.511106][ T6599] syzkaller0: entered promiscuous mode [ 819.517238][ T6599] syzkaller0: entered allmulticast mode [ 819.530920][ T6599] tipc: Resetting bearer [ 819.570703][ T6557] hsr0 speed is unknown, defaulting to 1000 [ 819.610601][ T6599] set match dimension is over the limit! [ 819.641810][ T6609] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9604'. [ 819.685037][ T6598] tipc: Resetting bearer [ 820.408163][ T2434] tipc: Node number set to 1894553213 [ 820.657691][ T5844] Bluetooth: hci2: command tx timeout [ 821.341981][ T6598] tipc: Disabling bearer [ 821.490974][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9607'. [ 821.568238][ T6630] veth1_to_bond: entered allmulticast mode [ 821.610538][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9611'. [ 821.657334][ T6629] veth1_to_bond: left allmulticast mode [ 821.809966][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 821.884836][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.892426][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.900621][ T6557] bridge_slave_0: entered allmulticast mode [ 821.909660][ T6557] bridge_slave_0: entered promiscuous mode [ 821.917313][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.924409][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.932509][ T6557] bridge_slave_1: entered allmulticast mode [ 821.939624][ T6557] bridge_slave_1: entered promiscuous mode [ 821.970176][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.982638][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.016223][ T6557] team0: Port device team_slave_0 added [ 822.023949][ T6557] team0: Port device team_slave_1 added [ 822.051411][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.058982][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.084975][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.101566][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.110253][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.137050][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.181062][ T6557] hsr_slave_0: entered promiscuous mode [ 822.187610][ T6557] hsr_slave_1: entered promiscuous mode [ 822.193736][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 822.199733][ T6557] Cannot create hsr debugfs directory [ 822.299839][ T6557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.312430][ T6557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 822.322387][ T6557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 822.385051][ T6557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.395321][ T6557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 822.405169][ T6557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 822.470303][ T6557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.480645][ T6557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 822.490445][ T6557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 822.550216][ T6557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.560048][ T6557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 822.569994][ T6557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 822.704186][ T6557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.725572][ T6557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.735566][ T6557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.745330][ T5844] Bluetooth: hci2: command tx timeout [ 822.755712][ T6557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.828360][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.847778][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.860984][T26711] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.868192][T26711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.884013][T26746] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.891201][T26746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.055376][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.102139][ T6557] veth0_vlan: entered promiscuous mode [ 823.113609][ T6557] veth1_vlan: entered promiscuous mode [ 823.144505][ T6557] veth0_macvtap: entered promiscuous mode [ 823.154548][ T6557] veth1_macvtap: entered promiscuous mode [ 823.172293][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.189446][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.204756][T26771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.214667][T26746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.236674][T26746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.252841][T26746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.313460][T26711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.324426][T26711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.351953][T26773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.360318][T26773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.817538][ T5844] Bluetooth: hci2: command tx timeout [ 826.897766][ T5844] Bluetooth: hci2: command tx timeout [ 865.183558][T26773] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 865.638575][T26773] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 865.647526][T26773] bridge9 (unregistering): left promiscuous mode [ 865.712110][T26773] bond0 (unregistering): (slave bond10): Releasing backup interface [ 865.721550][T26773] bond0 (unregistering): Released all slaves [ 865.735643][T26773] bond1 (unregistering): Released all slaves [ 865.749677][T26773] bond2 (unregistering): Released all slaves [ 865.765134][T26773] bond3 (unregistering): Released all slaves [ 865.880849][T26773] bond4 (unregistering): Released all slaves [ 865.994804][T26773] bond5 (unregistering): Released all slaves [ 866.008482][T26773] bond6 (unregistering): Released all slaves [ 866.118863][T26773] bond7 (unregistering): Released all slaves [ 866.131584][T26773] bond8 (unregistering): Released all slaves [ 866.244840][T26773] bond9 (unregistering): Released all slaves [ 866.353259][T26773] bond10 (unregistering): Released all slaves [ 866.499400][T26773] tipc: Disabling bearer [ 866.504893][T26773] tipc: Left network mode [ 866.874497][T26773] hsr_slave_0: left promiscuous mode [ 866.882738][T26773] hsr_slave_1: left promiscuous mode [ 867.585489][T26773] IPVS: stop unused estimator thread 0... [ 882.919809][ T6667] netlink: 'syz.3.9616': attribute type 1 has an invalid length. [ 883.173312][ T6687] Cannot find add_set index 0 as target [ 883.195744][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9622'. [ 883.474736][ T6699] bridge1: entered promiscuous mode [ 883.480910][ T6699] bridge1: entered allmulticast mode [ 883.489954][ T6699] team0: Port device bridge1 added [ 883.499163][ T6699] bridge0: port 3(team0) entered blocking state [ 883.505742][ T6699] bridge0: port 3(team0) entered disabled state [ 883.512758][ T6699] team0: entered allmulticast mode [ 883.524620][ T6701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.531750][ T6699] team_slave_0: entered allmulticast mode [ 883.548102][ T6699] team_slave_1: entered allmulticast mode [ 883.563259][ T6699] team0: entered promiscuous mode [ 883.579003][ T6699] team_slave_0: entered promiscuous mode [ 883.594376][ T6699] team_slave_1: entered promiscuous mode [ 883.612094][ T6699] bridge0: port 3(team0) entered blocking state [ 883.618568][ T6699] bridge0: port 3(team0) entered forwarding state [ 883.715685][ T6709] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 883.731149][ T6709] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 883.750921][ T6713] xt_recent: Unsupported userspace flags (000000b1) [ 884.001829][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9639'. [ 884.138494][ T6731] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 884.159058][ T6731] bond2 (unregistering): Released all slaves [ 884.211965][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9643'. [ 884.235022][ T6753] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9640'. [ 884.253055][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9644'. [ 884.264386][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9644'. [ 884.605631][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9648'. [ 886.730820][ T2433] hsr0 speed is unknown, defaulting to 1000 [ 886.919350][ T6812] vlan2: entered allmulticast mode [ 887.141234][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9663'. [ 887.154293][ T6831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9662'. [ 887.240980][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9664'. [ 887.277837][ T6836] netlink: 'syz.0.9665': attribute type 1 has an invalid length. [ 887.534136][ T6847] netlink: 'syz.4.9671': attribute type 22 has an invalid length. [ 887.598196][ T6847] veth7: entered promiscuous mode [ 887.603375][ T6847] veth7: entered allmulticast mode [ 887.876956][ T6867] netlink: 'syz.3.9675': attribute type 1 has an invalid length. [ 887.884823][ T6867] netlink: 'syz.3.9675': attribute type 3 has an invalid length. [ 887.973738][ T6869] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 888.200342][ T6886] netlink: 'syz.4.9681': attribute type 13 has an invalid length. [ 888.221136][ T6886] veth0_macvtap: left promiscuous mode [ 888.229250][ T6886] macvtap0: entered allmulticast mode [ 888.289798][ T6886] macvtap0: refused to change device tx_queue_len [ 888.693833][ T6911] syzkaller0: entered promiscuous mode [ 888.699782][ T6911] syzkaller0: entered allmulticast mode [ 888.754504][ T6914] netlink: 'syz.3.9688': attribute type 8 has an invalid length. [ 889.135678][ T6941] __nla_validate_parse: 3 callbacks suppressed [ 889.135696][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9695'. [ 889.173079][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9695'. [ 889.358817][ T6952] sit1: entered promiscuous mode [ 889.364156][ T6952] sit1: entered allmulticast mode [ 889.563578][ T6965] netlink: 'syz.4.9701': attribute type 1 has an invalid length. [ 889.627986][ T6974] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9701'. [ 889.656419][ T6965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 889.992559][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9709'. [ 890.040017][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9709'. [ 890.315097][ T7005] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 890.330014][ T7005] bond1 (unregistering): Released all slaves [ 890.677183][ T7026] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9720'. [ 891.110415][ T7054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.157828][ T7056] netlink: 'syz.0.9729': attribute type 21 has an invalid length. [ 891.165761][ T7056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9729'. [ 891.377949][ T7069] ip6t_rpfilter: unknown options [ 891.390712][ T7067] bridge1: entered allmulticast mode [ 891.543722][ T7075] gtp1: entered promiscuous mode [ 891.548945][ T7075] gtp1: entered allmulticast mode [ 891.565142][ T7076] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 891.827736][ T7092] syzkaller1: entered promiscuous mode [ 891.836493][ T7092] syzkaller1: entered allmulticast mode [ 891.861358][ T7093] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9742'. [ 891.892619][ T7093] 0{X: renamed from gretap0 (while UP) [ 891.895466][ T7097] nbd: must specify a size in bytes for the device [ 891.910872][ T7093] 0{X: entered allmulticast mode [ 891.924988][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9744'. [ 891.957115][ T7098] xt_l2tp: v2 sid > 0xffff: 1114112 [ 891.970254][ T7093] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 892.015692][ T7097] pimreg: entered allmulticast mode [ 892.321204][ T7113] tipc: Started in network mode [ 892.329112][ T7113] tipc: Node identity 960f5bfbdc0b, cluster identity 4711 [ 892.375685][ T7113] tipc: Enabled bearer , priority 0 [ 892.417411][ T7113] syzkaller0: entered promiscuous mode [ 892.440049][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9750'. [ 892.449505][ T7113] syzkaller0: entered allmulticast mode [ 892.524442][ T7113] tipc: Resetting bearer [ 892.534895][ T7111] tipc: Resetting bearer [ 892.578184][ T7111] tipc: Disabling bearer [ 892.635832][ T7128] ip6gre1: entered allmulticast mode [ 892.842710][ T7141] sctp: [Deprecated]: syz.4.9756 (pid 7141) Use of int in maxseg socket option. [ 892.842710][ T7141] Use struct sctp_assoc_value instead [ 893.555455][ T7178] netlink: 'syz.0.9766': attribute type 1 has an invalid length. [ 893.565644][ T7178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.237282][ T7205] netlink: 'syz.4.9778': attribute type 7 has an invalid length. [ 894.355192][ T7215] netlink: 'syz.0.9781': attribute type 1 has an invalid length. [ 894.373433][ T7215] ip6tnl1: entered promiscuous mode [ 894.381077][ T7215] ip6tnl1: entered allmulticast mode [ 894.392577][ T7217] veth0_to_bridge: entered promiscuous mode [ 894.632129][ T7221] syzkaller0: entered promiscuous mode [ 894.638057][ T7221] syzkaller0: entered allmulticast mode [ 894.644375][ T7216] veth0_to_bridge: left promiscuous mode [ 894.649393][ T7221] __nla_validate_parse: 9 callbacks suppressed [ 894.649409][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9784'. [ 894.667786][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9784'. [ 895.106095][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9790'. [ 896.917386][ T5907] IPVS: starting estimator thread 0... [ 896.971278][T26767] tipc: Subscription rejected, illegal request [ 897.008865][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9795'. [ 897.016586][ T7264] IPVS: using max 27 ests per chain, 64800 per kthread [ 897.138503][ T7281] Bluetooth: MGMT ver 1.23 [ 897.182239][ T7283] rdma_op ffff8880227279f0 conn xmit_rdma 0000000000000000 [ 897.189242][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9803'. [ 897.222110][ T7285] bridge0: entered promiscuous mode [ 897.239567][ T7285] bridge0: entered allmulticast mode [ 897.353263][ T7295] netlink: 'syz.2.9806': attribute type 1 has an invalid length. [ 897.366751][ T7295] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9806'. [ 897.424966][ T7294] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9803'. [ 897.455077][ T7294] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9803'. [ 897.463368][ T7302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9808'. [ 897.485318][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9806'. [ 897.519726][ T7295] netlink: 'syz.2.9806': attribute type 1 has an invalid length. [ 897.644831][ T7314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 897.688091][ T7317] veth0: entered promiscuous mode [ 897.700266][ T7315] veth0: left promiscuous mode [ 897.829326][ T7326] tipc: Started in network mode [ 897.834476][ T7326] tipc: Node identity ee8b21e6f523, cluster identity 4711 [ 897.847728][ T7326] tipc: Enabled bearer , priority 0 [ 897.874811][ T7326] tipc: Disabling bearer [ 898.047136][ T7346] netlink: 'syz.4.9819': attribute type 10 has an invalid length. [ 898.541851][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.655016][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.259156][ T7422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.487156][ T7439] netlink: 'syz.2.9845': attribute type 1 has an invalid length. [ 899.507741][ T7439] netlink: 'syz.2.9845': attribute type 1 has an invalid length. [ 899.533593][ T7439] netlink: 'syz.2.9845': attribute type 2 has an invalid length. [ 899.638639][ T7446] netlink: 'syz.3.9846': attribute type 1 has an invalid length. [ 899.678211][ T7446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 899.731225][ T7446] veth3: entered promiscuous mode [ 899.758493][ T7446] bond1: (slave veth3): Enslaving as an active interface with a down link [ 899.789034][ T7455] __nla_validate_parse: 21 callbacks suppressed [ 899.789052][ T7455] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9850'. [ 899.820045][ T7453] veth5: entered promiscuous mode [ 899.831122][ T7453] bond1: (slave veth5): Enslaving as an active interface with a down link [ 899.848334][ T7455] tunl0: entered promiscuous mode [ 899.868659][ T7455] netlink: 'syz.2.9850': attribute type 3 has an invalid length. [ 899.878074][ T7455] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9850'. [ 899.888111][ T7446] bond1: entered allmulticast mode [ 900.132756][ T7477] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9855'. [ 900.144750][ T7477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9855'. [ 900.287891][ T7487] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 900.301024][ T7487] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.315780][ T7487] netlink: 'syz.3.9860': attribute type 4 has an invalid length. [ 900.405267][ T7493] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.482778][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9862'. [ 900.502067][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9862'. [ 900.768748][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9866'. [ 901.163640][ T7534] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20002 [ 901.210485][ T7534] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9875'. [ 901.220807][ T7534] nbd: couldn't find a device at index 0 [ 901.339416][ T7542] netlink: 1743 bytes leftover after parsing attributes in process `syz.0.9880'. [ 901.347655][ T7536] syzkaller1: entered promiscuous mode [ 901.363673][ T7536] syzkaller1: entered allmulticast mode [ 901.378683][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9880'. [ 901.536512][ T5844] Bluetooth: hci2: command tx timeout [ 901.715354][ T7568] tipc: Enabling of bearer rejected, failed to enable media [ 901.719120][ T7572] IPv6: addrconf: prefix option has invalid lifetime [ 901.746245][ T7570] IPv6: addrconf: prefix option has invalid lifetime [ 901.791114][ T7574] netlink: 'syz.2.9890': attribute type 64 has an invalid length. [ 901.843035][ T7573] netlink: 'syz.2.9890': attribute type 1 has an invalid length. [ 902.200667][ T7611] xt_hashlimit: size too large, truncated to 1048576 [ 902.255034][ T7610] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 902.278930][ T7615] netlink: 'syz.4.9903': attribute type 6 has an invalid length. [ 905.145818][ T7697] __nla_validate_parse: 13 callbacks suppressed [ 905.145838][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9921'. [ 908.869267][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9925'. [ 908.880773][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9928'. [ 908.913829][ T7721] netlink: 'syz.0.9926': attribute type 1 has an invalid length. [ 908.922649][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9927'. [ 908.993703][ T7721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 909.058337][ T7715] bond2: (slave gretap2): making interface the new active one [ 909.087877][ T7715] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 909.198425][ T7737] 8021q: VLANs not supported on ip_vti0 [ 909.417544][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9937'. [ 909.467843][ T7744] netlink: 'syz.1.9937': attribute type 10 has an invalid length. [ 909.475832][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9937'. [ 909.808751][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9945'. [ 909.831680][ T7777] netlink: 'syz.4.9945': attribute type 1 has an invalid length. [ 909.875500][ T7777] netlink: 'syz.4.9945': attribute type 2 has an invalid length. [ 910.157436][ T7798] sctp: [Deprecated]: syz.0.9950 (pid 7798) Use of int in max_burst socket option deprecated. [ 910.157436][ T7798] Use struct sctp_assoc_value instead [ 910.253164][ T7803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9950'. [ 910.540617][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9957'. [ 910.575236][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9959'. [ 910.635442][ T7826] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9960'. [ 910.820029][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9962'. [ 910.883790][ T7785] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 910.923158][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9965'. [ 911.149626][ T7854] team0: Device ip6gre1 is of different type [ 911.475258][ T7869] xt_ecn: cannot match TCP bits for non-tcp packets [ 911.693318][ T7889] netlink: 'syz.0.9976': attribute type 3 has an invalid length. [ 911.702169][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9977'. [ 911.703475][ T7886] netlink: 'syz.1.9977': attribute type 1 has an invalid length. [ 911.754356][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9975'. [ 911.764234][ T7889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9976'. [ 911.908943][ T7903] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 911.970196][ T7907] netlink: 'syz.1.9982': attribute type 1 has an invalid length. [ 912.096940][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 912.100662][ T7912] SET target dimension over the limit! [ 912.114931][ T7914] netlink: 'syz.2.9984': attribute type 1 has an invalid length. [ 912.192918][ T7914] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 912.265177][ T7922] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9986'. [ 912.294222][ T7925] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 912.312764][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.373773][ T7927] syzkaller0: entered promiscuous mode [ 912.384065][ T7927] syzkaller0: entered allmulticast mode [ 912.404243][ T7926] tipc: Started in network mode [ 912.410999][ T7926] tipc: Node identity 06c7308b3553, cluster identity 4711 [ 912.419374][ T7926] tipc: Enabled bearer , priority 0 [ 912.432327][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.531408][ T7938] netlink: 'syz.4.9989': attribute type 10 has an invalid length. [ 912.543512][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.590057][ T7936] netlink: 'syz.4.9989': attribute type 4 has an invalid length. [ 912.599985][ T7926] tipc: Resetting bearer [ 912.632435][ T7926] tipc: Disabling bearer [ 912.669173][ T7938] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 912.875376][ T7941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 912.931734][ T7944] bond2: entered allmulticast mode [ 912.988185][ T7953] C: renamed from lo (while UP) [ 913.003946][ T7953] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 913.046564][ T7925] hsr0 speed is unknown, defaulting to 1000 [ 913.071887][ T7946] siw: device registration error -23 [ 913.319939][ T7975] xt_policy: too many policy elements [ 913.338063][ T7975] Bluetooth: MGMT ver 1.23 [ 913.958298][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.404763][ T8032] syzkaller0: entered promiscuous mode [ 914.411211][ T8032] syzkaller0: entered allmulticast mode [ 914.435503][ T8032] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 914.651544][ T8043] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 914.936972][ T8067] lo: entered promiscuous mode [ 915.000066][ T8067] validate_nla: 2 callbacks suppressed [ 915.000084][ T8067] netlink: 'syz.2.10024': attribute type 2 has an invalid length. [ 915.031090][ T8067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.050505][ T8073] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 915.712958][ T8091] __nla_validate_parse: 8 callbacks suppressed [ 915.712977][ T8091] netlink: 116 bytes leftover after parsing attributes in process `syz.3.10033'. [ 916.154121][ T8122] openvswitch: netlink: Message has 2688 unknown bytes. [ 916.319552][ T8131] tipc: Enabled bearer , priority 0 [ 916.347080][ T8131] syzkaller0: entered promiscuous mode [ 916.375789][ T8131] syzkaller0: entered allmulticast mode [ 916.429364][ T8140] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 916.454913][ T8131] tipc: Resetting bearer [ 916.488548][ T8130] tipc: Resetting bearer [ 916.567832][ T8130] tipc: Disabling bearer [ 916.615279][ T8144] netlink: 576 bytes leftover after parsing attributes in process `syz.2.10049'. [ 916.799892][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10054'. [ 916.836867][ T8153] block nbd4: server does not support multiple connections per device. [ 916.846586][ T8153] block nbd4: shutting down sockets [ 916.878111][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10054'. [ 917.107729][ T8187] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10062'. [ 917.145310][ T8189] netlink: 'syz.1.10063': attribute type 2 has an invalid length. [ 917.177894][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10063'. [ 917.690321][ T8223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10076'. [ 917.790821][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10078'. [ 917.860208][ T8235] lo: left promiscuous mode [ 917.873883][ T8235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.134250][ T8250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10086'. [ 918.173438][ T8253] tipc: Enabled bearer , priority 0 [ 918.180935][ T8249] netlink: 'syz.4.10087': attribute type 1 has an invalid length. [ 918.192099][ T8253] syzkaller0: entered promiscuous mode [ 918.197795][ T8253] syzkaller0: entered allmulticast mode [ 918.301625][ T8253] vlan3: entered promiscuous mode [ 918.310798][ T8253] bond0: entered promiscuous mode [ 918.330024][ T8253] bond_slave_0: entered promiscuous mode [ 918.337744][ T8253] bond_slave_1: entered promiscuous mode [ 918.444973][ T8262] tipc: Resetting bearer [ 918.470012][ T8271] tipc: Enabling of bearer rejected, failed to enable media [ 918.482525][ T8251] tipc: Resetting bearer [ 918.513781][ T8251] tipc: Disabling bearer [ 918.661527][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10093'. [ 918.717969][T26773] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.734344][T26773] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.763658][T26773] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.795332][T26773] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.101319][ T8305] veth0_to_bridge: entered promiscuous mode [ 919.153358][ C0] vcan0: j1939_tp_rxtimer: 0xffff888083076800: rx timeout, send abort [ 919.177265][ T8317] nft_compat: unsupported protocol 0 [ 919.191948][ T8317] syzkaller1: entered promiscuous mode [ 919.198320][ T8317] syzkaller1: entered allmulticast mode [ 919.205407][ T8303] veth0_to_bridge: left promiscuous mode [ 919.314239][ T8321] openvswitch: netlink: IP tunnel dst address not specified [ 919.468031][ T8319] hsr_slave_1 (unregistering): left promiscuous mode [ 919.548172][ T8329] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 919.557229][ T8329] bond2: option packets_per_slave: allowed values 0 - 65535 [ 919.577703][ T8329] bond2 (unregistering): Released all slaves [ 919.653467][ C0] vcan0: j1939_tp_rxtimer: 0xffff888084ac1800: rx timeout, send abort [ 919.662335][ C0] vcan0: j1939_tp_rxtimer: 0xffff888083076800: abort rx timeout. Force session deactivation [ 919.832019][ T8350] tipc: Enabled bearer , priority 0 [ 919.851079][ T8350] syzkaller0: entered promiscuous mode [ 919.870539][ T8350] syzkaller0: entered allmulticast mode [ 919.928477][ T8350] tipc: Resetting bearer [ 920.027657][ T8349] tipc: Resetting bearer [ 920.062021][ T8349] tipc: Disabling bearer [ 920.084463][ T8364] bridge0: port 1(batadv1) entered blocking state [ 920.099487][ T8364] bridge0: port 1(batadv1) entered disabled state [ 920.111577][ T8364] batadv1: entered allmulticast mode [ 920.131191][ T8364] batadv1: entered promiscuous mode [ 920.155353][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802312c000: rx timeout, send abort [ 920.166962][ C0] vcan0: j1939_tp_rxtimer: 0xffff888084ac1800: abort rx timeout. Force session deactivation [ 920.529659][ T8387] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 920.587883][T26759] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 920.597627][T26759] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 920.663640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802312c000: abort rx timeout. Force session deactivation [ 920.836220][ T8406] __nla_validate_parse: 6 callbacks suppressed [ 920.836237][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10132'. [ 920.886959][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10134'. [ 920.899500][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10135'. [ 920.927483][ T8412] netlink: 'syz.1.10135': attribute type 7 has an invalid length. [ 920.929115][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10134'. [ 920.944693][ T8412] netlink: 'syz.1.10135': attribute type 8 has an invalid length. [ 920.975287][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10135'. [ 921.069872][ T8373] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 921.078444][ T8373] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 921.249462][ T8422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10138'. [ 921.322260][ T8373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.347550][ T8373] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 921.570965][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10143'. [ 921.587591][ T8438] tipc: Enabled bearer , priority 0 [ 921.598382][ T8438] syzkaller0: entered promiscuous mode [ 921.603886][ T8438] syzkaller0: entered allmulticast mode [ 921.633718][ T8438] tipc: Resetting bearer [ 921.688759][ T8437] tipc: Resetting bearer [ 921.735540][ T8437] tipc: Disabling bearer [ 922.488480][ T8480] tipc: Enabled bearer , priority 0 [ 922.496662][ T8480] syzkaller0: entered promiscuous mode [ 922.502152][ T8480] syzkaller0: entered allmulticast mode [ 922.518859][ T8480] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 922.564255][ T8480] tipc: Resetting bearer [ 922.598086][ T8478] tipc: Resetting bearer [ 922.648792][ T8478] tipc: Disabling bearer [ 922.859812][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10160'. [ 923.159253][ T8493] syzkaller0: entered promiscuous mode [ 923.185335][ T8493] syzkaller0: entered allmulticast mode [ 923.205285][ T8512] tipc: Enabling of bearer rejected, failed to enable media [ 925.247100][ T8518] tipc: Enabled bearer , priority 0 [ 925.291489][ T8518] tipc: Disabling bearer [ 925.338791][ T8527] x_tables: duplicate underflow at hook 1 [ 925.348804][ T8527] openvswitch: netlink: IP tunnel dst address not specified [ 925.505516][ T8542] sctp: [Deprecated]: syz.3.10171 (pid 8542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.505516][ T8542] Use struct sctp_sack_info instead [ 925.605638][ T8550] netlink: 'syz.3.10174': attribute type 21 has an invalid length. [ 925.644336][ T8550] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10174'. [ 925.691981][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10174'. [ 925.706859][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.765310][ T8554] bridge_slave_1 (unregistering): left allmulticast mode [ 925.773345][ T8554] bridge_slave_1 (unregistering): left promiscuous mode [ 925.789218][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.920154][ T8558] netlink: 'syz.0.10177': attribute type 1 has an invalid length. [ 925.980224][ T8568] netdevsim netdevsim2: Direct firmware load for SOv4 failed with error -2 [ 925.990266][ T8568] netdevsim netdevsim2: Falling back to sysfs fallback for: SOv4 [ 926.219807][ T8583] smc: net device gre0 applied user defined pnetid SYZ1 [ 926.231508][ T8583] smc: net device gre0 erased user defined pnetid SYZ1 [ 926.244569][ T8585] netlink: 'syz.4.10183': attribute type 32 has an invalid length. [ 926.349700][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10183'. [ 926.390340][ T8598] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10184'. [ 926.697176][ T8625] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 926.751384][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10193'. [ 926.908376][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10199'. [ 926.954087][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10200'. [ 927.041466][ T8635] netlink: 'syz.3.10196': attribute type 4 has an invalid length. [ 927.070371][ T8635] netlink: 'syz.3.10196': attribute type 4 has an invalid length. [ 927.162132][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10199'. [ 927.332905][ T8670] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10204'. [ 927.384476][ T8670] bond5 (unregistering): Released all slaves [ 927.927970][ T8696] netlink: 'syz.4.10215': attribute type 4 has an invalid length. [ 927.994589][ T8709] netlink: 'syz.4.10215': attribute type 4 has an invalid length. [ 928.073323][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10218'. [ 928.108055][ T8715] netlink: 'syz.3.10219': attribute type 1 has an invalid length. [ 928.142733][ T8715] netlink: 'syz.3.10219': attribute type 2 has an invalid length. [ 928.341634][ T8728] pimreg: left allmulticast mode [ 928.403123][ T8739] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 928.506138][ T8732] bond3: Removing last ns target with arp_interval on [ 928.553395][ T8749] netlink: 'syz.0.10230': attribute type 1 has an invalid length. [ 928.679120][ T8754] netlink: 'syz.3.10231': attribute type 1 has an invalid length. [ 928.713096][ T8759] netlink: 'syz.2.10233': attribute type 12 has an invalid length. [ 928.722735][ T8759] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.10233'. [ 928.728688][ T8754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 928.759097][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10234'. [ 928.771547][ T8761] bond2: (slave geneve2): making interface the new active one [ 928.781382][ T8761] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 928.801685][ T8758] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 928.828860][T26757] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 928.869882][ T8762] bond3: option xmit_hash_policy: invalid value (64) [ 928.883674][ T8762] bond3 (unregistering): Released all slaves [ 928.959115][T26757] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 928.985804][T26757] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 929.036778][T26757] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 929.173268][ T8780] syzkaller0: entered promiscuous mode [ 929.181462][ T8780] syzkaller0: entered allmulticast mode [ 929.253134][ T8788] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 931.552701][T26759] veth0_to_bridge: left allmulticast mode [ 931.558681][T26759] veth0_to_bridge: left promiscuous mode [ 931.564452][T26759] bridge0: port 3(veth0_to_bridge) entered disabled state [ 931.574487][T26759] bridge_slave_0: left allmulticast mode [ 931.580255][T26759] bridge_slave_0: left promiscuous mode [ 931.585994][T26759] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.790844][T26759] bond3 (unregistering): (slave gretap1): Releasing active interface [ 932.266934][T26759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.279558][T26759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.289947][T26759] bond0 (unregistering): Released all slaves [ 932.302880][T26759] bond1 (unregistering): Released all slaves [ 932.432761][T26759] bond2 (unregistering): Released all slaves [ 932.445312][T26759] bond3 (unregistering): Released all slaves [ 932.580234][T26759] bond4 (unregistering): Released all slaves [ 932.709776][T26759] bond5 (unregistering): (slave veth3): Releasing active interface [ 932.719736][T26759] bond5 (unregistering): Released all slaves [ 932.732318][T26759] bond6 (unregistering): Released all slaves [ 932.748351][T26759] bond7 (unregistering): Released all slaves [ 932.886979][T26759] bond8 (unregistering): Released all slaves [ 932.901314][T26759] bond9 (unregistering): Released all slaves [ 932.914983][T26759] bond10 (unregistering): Released all slaves [ 933.043671][T26759] bond11 (unregistering): Released all slaves [ 933.174477][T26759] bond12 (unregistering): Released all slaves [ 933.292665][T26759] bond13 (unregistering): (slave wireguard0): Releasing backup interface [ 933.301428][T26759] wireguard0: left promiscuous mode [ 933.308832][T26759] bond13 (unregistering): Released all slaves [ 933.323587][T26759] bond14 (unregistering): Released all slaves [ 933.511581][T26759] : left promiscuous mode [ 933.555515][T26759] tipc: Left network mode [ 933.903319][T26759] hsr_slave_0: left promiscuous mode [ 933.909754][T26759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.917981][T26759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.925785][T26759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.933760][T26759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.955415][T26759] vlan0: left allmulticast mode [ 933.960553][T26759] veth0_vlan: left allmulticast mode [ 933.965831][T26759] vlan0: left promiscuous mode [ 933.971074][T26759] veth0_macvtap: left promiscuous mode [ 933.977112][T26759] : left promiscuous mode [ 933.981680][T26759] veth0_vlan: left promiscuous mode [ 978.960009][ T8840] __nla_validate_parse: 2 callbacks suppressed [ 978.960030][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10259'. [ 979.298113][ T8863] validate_nla: 4 callbacks suppressed [ 979.298131][ T8863] netlink: 'syz.0.10265': attribute type 4 has an invalid length. [ 979.371557][ T8863] netlink: 'syz.0.10265': attribute type 4 has an invalid length. [ 979.488488][ T8884] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10271'. [ 979.505318][ T8889] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 979.534114][ T8884] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10271'. [ 979.587639][ T8896] tipc: New replicast peer: 255.255.255.255 [ 979.602154][ T8896] tipc: Enabled bearer , priority 10 [ 979.627354][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10271'. [ 980.076912][ T8920] netlink: 'syz.3.10284': attribute type 4 has an invalid length. [ 980.089625][ T8928] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 980.157490][ T8923] netlink: 'syz.3.10284': attribute type 4 has an invalid length. [ 980.166965][ T8928] syzkaller0: entered promiscuous mode [ 980.172504][ T8928] syzkaller0: entered allmulticast mode [ 980.252320][ T8941] "syz.1.10289" (8941) uses obsolete ecb(arc4) skcipher [ 980.366071][ T8948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 980.640426][ T8966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.656939][ T8966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.717752][ T5907] tipc: Node number set to 1241799675 [ 981.038854][ T8980] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 981.054430][ T8980] netlink: 'syz.0.10302': attribute type 11 has an invalid length. [ 981.062735][ T8980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10302'. [ 981.078676][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10302'. [ 981.088362][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10302'. [ 981.157364][ T30] audit: type=1107 audit(1761982957.986:13): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='xtiN^n!' [ 981.381401][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10305'. [ 981.393110][ T8996] netlink: 'syz.4.10304': attribute type 1 has an invalid length. [ 981.542681][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10306'. [ 982.085640][ T9039] netlink: zone id is out of range [ 982.108443][ T9056] netlink: 'syz.3.10315': attribute type 7 has an invalid length. [ 982.130400][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10315'. [ 982.449584][ T9065] v: renamed from veth1_macvtap [ 983.311010][ T9115] netlink: 'syz.4.10338': attribute type 1 has an invalid length. [ 983.349987][ T9104] netlink: 'syz.1.10334': attribute type 4 has an invalid length. [ 983.413736][ T9104] netlink: 'syz.1.10334': attribute type 4 has an invalid length. [ 983.441966][ T9129] IPVS: length: 24 != 4520664 [ 983.512925][ T9131] : entered promiscuous mode [ 983.656437][ T9137] netlink: 'syz.1.10344': attribute type 4 has an invalid length. [ 983.968295][ T9160] : renamed from bond_slave_1 (while UP) [ 984.024691][ T9168] tipc: Enabled bearer , priority 0 [ 984.037943][ T9170] syzkaller0: entered promiscuous mode [ 984.043708][ T9170] syzkaller0: entered allmulticast mode [ 984.137149][ T9170] tipc: Resetting bearer [ 984.152994][ T9174] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20001 [ 984.201265][ T9168] tipc: Resetting bearer [ 984.284615][ T9168] tipc: Disabling bearer [ 984.372686][ T9189] __nla_validate_parse: 13 callbacks suppressed [ 984.372704][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10361'. [ 984.430274][ T9194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 984.699481][ T9202] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 984.750819][ T9206] validate_nla: 3 callbacks suppressed [ 984.750837][ T9206] netlink: 'syz.3.10366': attribute type 1 has an invalid length. [ 984.753074][ T9202] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 984.798088][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10368'. [ 984.838799][ T9210] Can't find ip_set type bitmap:ip,mac [ 984.957441][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10369'. [ 984.990470][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10369'. [ 985.014435][ T9201] team0 (unregistering): Port device team_slave_0 removed [ 985.025231][ T9201] team0 (unregistering): Port device team_slave_1 removed [ 985.040999][ T9201] team0 (unregistering): Port device geneve0 removed [ 985.058255][ T9204] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 985.067614][ T9204] tipc: Enabled bearer , priority 10 [ 985.148814][ T9215] bond3: (slave geneve3): making interface the new active one [ 985.157272][ T9215] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 985.189245][T26756] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 985.319766][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10371'. [ 985.366534][T26756] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 985.389693][ T9243] netlink: 'syz.1.10373': attribute type 4 has an invalid length. [ 985.392633][T26756] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 985.421553][ T9243] netlink: 'syz.1.10373': attribute type 4 has an invalid length. [ 985.430236][T26756] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 985.870644][ T9266] netlink: 'syz.1.10379': attribute type 2 has an invalid length. [ 985.993279][ T9261] hsr0 speed is unknown, defaulting to 1000 [ 986.067403][ T2440] tipc: Node number set to 865349771 [ 986.272824][ T9290] netlink: 'syz.1.10384': attribute type 1 has an invalid length. [ 986.280993][ T9289] netlink: 'syz.1.10384': attribute type 1 has an invalid length. [ 986.533083][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10387'. [ 986.556867][ T9300] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10387'. [ 986.594901][ T9296] netlink: 'syz.0.10385': attribute type 4 has an invalid length. [ 986.605835][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10388'. [ 986.645201][ T9296] netlink: 'syz.0.10385': attribute type 4 has an invalid length. [ 986.982139][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10396'. [ 986.998014][ T9326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.022969][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10396'. [ 987.109931][ T9339] tipc: Enabled bearer , priority 0 [ 987.118682][ T9334] syzkaller0: entered promiscuous mode [ 987.124175][ T9334] syzkaller0: entered allmulticast mode [ 987.149484][ T9332] tipc: Resetting bearer [ 987.187858][ T9332] tipc: Disabling bearer [ 987.374739][ T9345] netlink: 'syz.1.10402': attribute type 4 has an invalid length. [ 987.394998][ T9345] netlink: 'syz.1.10402': attribute type 4 has an invalid length. [ 987.635295][ T9353] team0: Port device team_slave_1 removed [ 988.474457][ T9398] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 988.510744][ T9398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.591915][ T9404] sctp: [Deprecated]: syz.3.10420 (pid 9404) Use of int in maxseg socket option. [ 988.591915][ T9404] Use struct sctp_assoc_value instead [ 988.685148][ T9408] syzkaller1: entered promiscuous mode [ 988.691957][ T9408] syzkaller1: entered allmulticast mode [ 988.928380][ T9427] : renamed from hsr0 (while UP) [ 989.546492][ T9465] xt_TCPMSS: Only works on TCP SYN packets [ 989.698007][ T9474] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 989.784939][ T9488] __nla_validate_parse: 12 callbacks suppressed [ 989.784957][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10444'. [ 989.854655][ T9478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 989.903920][ T9488] bond_slave_0: entered promiscuous mode [ 989.911607][ T9488] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 989.921724][ T9488] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 990.357201][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10455'. [ 990.687178][ T9545] tipc: Started in network mode [ 990.692096][ T9545] tipc: Node identity 924f97c2c3bb, cluster identity 4711 [ 990.727093][ T9545] tipc: Enabled bearer , priority 0 [ 990.759702][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10463'. [ 990.774711][ T9552] syzkaller0: entered promiscuous mode [ 990.781764][ T9552] syzkaller0: entered allmulticast mode [ 990.838330][ T9545] tipc: Resetting bearer [ 990.869279][ T9544] tipc: Resetting bearer [ 990.921369][ T9544] tipc: Disabling bearer [ 990.939760][ T9565] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10467'. [ 990.973819][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10466'. [ 990.984688][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10466'. [ 990.999250][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10466'. [ 991.036202][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10466'. [ 991.326441][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10474'. [ 991.338712][ T9582] netlink: 328 bytes leftover after parsing attributes in process `syz.0.10472'. [ 991.417316][ T9592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 991.701647][ T9608] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 992.400851][ T9637] tipc: Enabled bearer , priority 0 [ 992.408955][ T9637] syzkaller0: entered promiscuous mode [ 992.414449][ T9637] syzkaller0: entered allmulticast mode [ 992.426937][ T9637] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 992.768845][ T9650] validate_nla: 5 callbacks suppressed [ 992.768864][ T9650] netlink: 'syz.3.10494': attribute type 2 has an invalid length. [ 992.813472][ T9641] tipc: Resetting bearer [ 992.842416][ T9635] tipc: Resetting bearer [ 992.974597][ T9635] tipc: Disabling bearer [ 993.070699][ T9659] batadv1: entered allmulticast mode [ 993.295397][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.912740][ T9715] netlink: 'syz.1.10509': attribute type 4 has an invalid length. [ 993.973085][ T9715] netlink: 'syz.1.10509': attribute type 4 has an invalid length. [ 994.148471][ T9743] vxcan2: entered allmulticast mode [ 994.161875][ T9747] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 994.340561][ T9756] netlink: 'syz.3.10520': attribute type 1 has an invalid length. [ 994.473529][ T9772] delete_channel: no stack [ 994.718419][ T9782] netlink: 'syz.1.10528': attribute type 4 has an invalid length. [ 994.741470][ T9782] netlink: 'syz.1.10528': attribute type 4 has an invalid length. [ 994.840503][ T9795] __nla_validate_parse: 20 callbacks suppressed [ 994.840524][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10532'. [ 995.286782][ T9826] netlink: 'syz.0.10541': attribute type 1 has an invalid length. [ 995.321116][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10543'. [ 995.514529][ T9830] netlink: 'syz.0.10544': attribute type 4 has an invalid length. [ 995.531309][ T9830] netlink: 'syz.0.10544': attribute type 4 has an invalid length. [ 995.552127][ T9840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10548'. [ 995.768995][ T9859] Cannot find del_set index 4 as target [ 995.776564][ T9858] Cannot find del_set index 4 as target [ 995.920362][ T9870] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10556'. [ 996.059585][ T30] audit: type=1800 audit(1761982972.896:14): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10551" name="memory.events" dev="tmpfs" ino=1122 res=0 errno=0 [ 996.175071][ T9882] syzkaller0: entered promiscuous mode [ 996.185995][ T9882] syzkaller0: entered allmulticast mode [ 996.279352][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10561'. [ 996.292040][ T9889] xt_l2tp: unknown flags: 10 [ 996.998993][ T9933] Cannot find del_set index 4 as target [ 997.052115][ T9935] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10576'. [ 997.065092][ T9933] netlink: 'syz.1.10574': attribute type 2 has an invalid length. [ 997.073153][ T9938] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10576'. [ 997.085328][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10574'. [ 997.137368][ T9942] set match dimension is over the limit! [ 997.234424][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10578'. [ 997.530356][ T9964] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10583'. [ 997.532798][ T9927] hsr0 speed is unknown, defaulting to 1000 [ 998.480343][T10011] netlink: 'syz.1.10596': attribute type 10 has an invalid length. [ 998.516890][ T9992] hsr0 speed is unknown, defaulting to 1000 [ 998.770139][T10022] netem: invalid attributes len -24 [ 998.786460][T10022] netem: change failed [ 998.796768][T10026] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 998.808984][T10025] netlink: 'syz.0.10599': attribute type 3 has an invalid length. [ 999.030313][T10043] veth0_macvtap: left promiscuous mode [ 999.520663][T10064] netlink: 'syz.0.10608': attribute type 32 has an invalid length. [ 999.577102][T10064] bond4: option coupled_control: invalid value (52) [ 999.592962][T10068] xt_l2tp: invalid flags combination: c [ 999.594039][T10064] bond4 (unregistering): Released all slaves [ 999.791518][T10076] SET target dimension over the limit! [ 999.825514][T10078] netlink: 'syz.4.10615': attribute type 27 has an invalid length. [ 999.830964][T10080] 8021q: VLANs not supported on gre0 [ 999.833687][T10078] netlink: 'syz.4.10615': attribute type 4 has an invalid length. [ 999.849449][T10078] __nla_validate_parse: 5 callbacks suppressed [ 999.849466][T10078] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10615'. [ 1000.047425][T10090] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10617'. [ 1000.060137][T10090] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10617'. [ 1000.070057][T10090] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10617'. [ 1000.157299][T10094] netlink: 'syz.3.10620': attribute type 1 has an invalid length. [ 1000.175682][T10096] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10621'. [ 1000.242108][T10094] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1000.512554][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1000.594876][T10129] syzkaller0: entered promiscuous mode [ 1000.611872][T10129] syzkaller0: entered allmulticast mode [ 1000.636751][T10129] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10628'. [ 1000.707763][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10632'. [ 1000.744974][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10632'. [ 1000.755995][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10632'. [ 1000.945829][T10158] ip6t_rpfilter: unknown options [ 1001.045511][T10156] netlink: 'syz.3.10637': attribute type 4 has an invalid length. [ 1001.078504][T10164] netlink: 'syz.2.10636': attribute type 10 has an invalid length. [ 1001.113424][T10163] netlink: 'syz.3.10637': attribute type 4 has an invalid length. [ 1001.123201][T10164] veth0_virt_wifi: entered allmulticast mode [ 1001.415369][T10181] netlink: 'syz.1.10646': attribute type 15 has an invalid length. [ 1001.446737][T26750] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1001.458825][T26750] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1001.566904][T26750] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1001.588374][T26750] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1001.993011][T10218] ip6t_srh: unknown srh invflags 4000 [ 1002.019805][T10218] ip6t_srh: unknown srh invflags 4000 [ 1002.053471][T26750] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1002.070125][T26750] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1002.107203][T26750] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1002.138084][T26750] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1002.232321][T10238] x_tables: duplicate underflow at hook 2 [ 1002.383094][T10246] set match dimension is over the limit! [ 1002.664053][T10262] bond3: entered promiscuous mode [ 1002.678529][T10271] 8021q: VLANs not supported on lo [ 1003.102738][T10295] tipc: Enabling of bearer rejected, failed to enable media [ 1003.115483][T10298] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1003.126822][T10298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.889932][T10340] bond5: Invalid ad_actor_system MAC address. [ 1003.898781][T10340] bond5: option ad_actor_system: invalid value (1) [ 1003.968348][T10340] bond5 (unregistering): Released all slaves [ 1004.998197][T10412] tunl0: left promiscuous mode [ 1005.224023][T10431] validate_nla: 8 callbacks suppressed [ 1005.224041][T10431] netlink: 'syz.0.10715': attribute type 1 has an invalid length. [ 1005.442617][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.458293][T10412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.521460][T10412] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1005.543712][T10412] sit1: left promiscuous mode [ 1005.584533][T10431] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1005.609058][T10439] vxlan0: entered promiscuous mode [ 1005.620144][T10439] vxlan0: entered allmulticast mode [ 1005.640526][ T2433] hsr0 speed is unknown, defaulting to 1000 [ 1005.646487][T26750] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.646516][T26750] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.646555][T26750] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.646578][T26750] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.646609][T26750] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.681270][ T2433] syz1: Port: 1 Link DOWN [ 1005.743883][T26750] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.754158][T26750] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1005.763259][T26750] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.774793][T26750] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1005.787803][T26750] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1005.798277][T26750] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1005.810879][T10455] __nla_validate_parse: 23 callbacks suppressed [ 1005.810899][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10719'. [ 1005.825089][T10457] xt_CONNSECMARK: invalid mode: 0 [ 1005.832098][T26750] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1005.903194][T10460] syzkaller1: entered promiscuous mode [ 1005.909356][T10460] syzkaller1: entered allmulticast mode [ 1006.041236][T10470] netlink: 'syz.3.10726': attribute type 75 has an invalid length. [ 1006.229889][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10730'. [ 1006.294541][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10731'. [ 1006.420474][T10489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1006.426499][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10734'. [ 1006.503521][T10508] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10735'. [ 1006.515454][T10501] bond5 (unregistering): Released all slaves [ 1006.674008][T10517] netlink: 'syz.1.10739': attribute type 30 has an invalid length. [ 1006.786975][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10739'. [ 1006.797901][T10528] IPVS: Scheduler module ip_vs_sip not found [ 1006.879052][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10739'. [ 1007.088092][T10551] bridge_slave_0: left allmulticast mode [ 1007.095098][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10749'. [ 1007.096970][T10551] bridge_slave_0: left promiscuous mode [ 1007.118515][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10749'. [ 1007.124451][T10551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.144338][T10551] bond0: (slave bridge_slave_1): Releasing backup interface [ 1007.217351][T10551] bond0: (slave bond_slave_0): Releasing backup interface [ 1007.240989][T10551] bond0: (slave bond_slave_1): Releasing backup interface [ 1007.261752][T10551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.279509][T10551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.290949][T10551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.300067][T10551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.309768][T10551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1007.507244][T10589] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10756'. [ 1007.611134][T10597] netlink: zone id is out of range [ 1007.643313][T10597] netlink: 'syz.2.10758': attribute type 5 has an invalid length. [ 1007.752767][T10606] dvmrp6: left allmulticast mode [ 1007.814196][T10603] macvtap1: entered promiscuous mode [ 1007.823120][T10603] vlan0: entered promiscuous mode [ 1007.831123][T10603] macvtap1: entered allmulticast mode [ 1007.839433][T10603] vlan0: entered allmulticast mode [ 1007.845298][T10603] veth0_vlan: entered allmulticast mode [ 1007.859237][T10613] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1007.866965][T10613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.890434][T10617] SET target dimension over the limit! [ 1008.353980][T10640] batadv0: entered promiscuous mode [ 1008.377220][T10640] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1008.387924][T10640] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1008.399742][T10640] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1008.482562][T10645] netlink: 'syz.0.10773': attribute type 29 has an invalid length. [ 1008.509604][T10645] netlink: 'syz.0.10773': attribute type 29 has an invalid length. [ 1008.548920][T10645] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 1008.934956][T10678] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 1009.016033][T10678] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ1 [ 1009.199643][T10680] netlink: 'syz.0.10781': attribute type 4 has an invalid length. [ 1009.267681][T10680] netlink: 'syz.0.10781': attribute type 4 has an invalid length. [ 1009.664142][T10713] tipc: Enabled bearer , priority 0 [ 1009.723237][T10715] bridge0: port 3(team0) entered disabled state [ 1009.997651][T10715] team0 (unregistering): left allmulticast mode [ 1010.003954][T10715] team_slave_0: left allmulticast mode [ 1010.010771][T10715] team_slave_1: left allmulticast mode [ 1010.016379][T10715] team0 (unregistering): left promiscuous mode [ 1010.022555][T10715] team_slave_0: left promiscuous mode [ 1010.029511][T10715] team_slave_1: left promiscuous mode [ 1010.035353][T10715] bridge0: port 3(team0) entered disabled state [ 1010.070156][T10715] team0 (unregistering): Port device team_slave_0 removed [ 1010.095827][T10715] team0 (unregistering): Port device team_slave_1 removed [ 1010.124052][T10715] team0 (unregistering): Port device bridge1 removed [ 1010.176393][T10713] syzkaller0: entered promiscuous mode [ 1010.185287][T10713] syzkaller0: entered allmulticast mode [ 1010.241010][T10726] IPv6: sit3: Disabled Multicast RS [ 1010.267483][T10726] sit3: entered allmulticast mode [ 1010.341030][T10744] veth1_vlan: mtu less than device minimum [ 1010.473799][T10712] tipc: Resetting bearer [ 1010.495765][T10712] tipc: Disabling bearer [ 1010.508661][T10747] [ 1010.511023][T10747] ====================================================== [ 1010.518044][T10747] WARNING: possible circular locking dependency detected [ 1010.525085][T10747] syzkaller #0 Not tainted [ 1010.529513][T10747] ------------------------------------------------------ [ 1010.536542][T10747] syz.0.10794/10747 is trying to acquire lock: [ 1010.542701][T10747] ffffffff8f425d98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1010.552021][T10747] [ 1010.552021][T10747] but task is already holding lock: [ 1010.559377][T10747] ffff888042eebd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 1010.568687][T10747] [ 1010.568687][T10747] which lock already depends on the new lock. [ 1010.568687][T10747] [ 1010.579074][T10747] [ 1010.579074][T10747] the existing dependency chain (in reverse order) is: [ 1010.588072][T10747] [ 1010.588072][T10747] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1010.596054][T10747] lock_acquire+0x120/0x360 [ 1010.601071][T10747] _raw_spin_lock_bh+0x36/0x50 [ 1010.606347][T10747] nr_rt_device_down+0x12a/0x720 [ 1010.611807][T10747] nr_device_event+0x137/0x150 [ 1010.617086][T10747] notifier_call_chain+0x1b6/0x3e0 [ 1010.622706][T10747] __dev_notify_flags+0x18d/0x2e0 [ 1010.628235][T10747] netif_change_flags+0xe8/0x1a0 [ 1010.633679][T10747] dev_change_flags+0x130/0x260 [ 1010.639040][T10747] dev_ioctl+0x7b4/0x1150 [ 1010.643882][T10747] sock_do_ioctl+0x22c/0x300 [ 1010.648983][T10747] sock_ioctl+0x576/0x790 [ 1010.653820][T10747] __se_sys_ioctl+0xfc/0x170 [ 1010.658929][T10747] do_syscall_64+0xfa/0xfa0 [ 1010.663954][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.670354][T10747] [ 1010.670354][T10747] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1010.678158][T10747] lock_acquire+0x120/0x360 [ 1010.683180][T10747] _raw_spin_lock_bh+0x36/0x50 [ 1010.688451][T10747] nr_rt_device_down+0xa9/0x720 [ 1010.693807][T10747] nr_device_event+0x137/0x150 [ 1010.699080][T10747] notifier_call_chain+0x1b6/0x3e0 [ 1010.704702][T10747] __dev_notify_flags+0x18d/0x2e0 [ 1010.710234][T10747] netif_change_flags+0xe8/0x1a0 [ 1010.715682][T10747] dev_change_flags+0x130/0x260 [ 1010.721041][T10747] dev_ioctl+0x7b4/0x1150 [ 1010.725882][T10747] sock_do_ioctl+0x22c/0x300 [ 1010.730980][T10747] sock_ioctl+0x576/0x790 [ 1010.735816][T10747] __se_sys_ioctl+0xfc/0x170 [ 1010.740925][T10747] do_syscall_64+0xfa/0xfa0 [ 1010.745938][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.752340][T10747] [ 1010.752340][T10747] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1010.760239][T10747] validate_chain+0xb9b/0x2140 [ 1010.765519][T10747] __lock_acquire+0xab9/0xd20 [ 1010.770702][T10747] lock_acquire+0x120/0x360 [ 1010.775748][T10747] _raw_spin_lock_bh+0x36/0x50 [ 1010.781111][T10747] nr_remove_neigh+0x25/0xe0 [ 1010.786211][T10747] nr_add_node+0x1d9f/0x2570 [ 1010.791306][T10747] nr_rt_ioctl+0xc12/0xd50 [ 1010.796315][T10747] sock_do_ioctl+0xdc/0x300 [ 1010.801328][T10747] sock_ioctl+0x576/0x790 [ 1010.806167][T10747] __se_sys_ioctl+0xfc/0x170 [ 1010.811278][T10747] do_syscall_64+0xfa/0xfa0 [ 1010.816300][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.822702][T10747] [ 1010.822702][T10747] other info that might help us debug this: [ 1010.822702][T10747] [ 1010.832917][T10747] Chain exists of: [ 1010.832917][T10747] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1010.832917][T10747] [ 1010.846724][T10747] Possible unsafe locking scenario: [ 1010.846724][T10747] [ 1010.854161][T10747] CPU0 CPU1 [ 1010.859518][T10747] ---- ---- [ 1010.864877][T10747] lock(&nr_node->node_lock); [ 1010.869629][T10747] lock(nr_node_list_lock); [ 1010.876726][T10747] lock(&nr_node->node_lock); [ 1010.884001][T10747] lock(nr_neigh_list_lock); [ 1010.888668][T10747] [ 1010.888668][T10747] *** DEADLOCK *** [ 1010.888668][T10747] [ 1010.896792][T10747] 1 lock held by syz.0.10794/10747: [ 1010.901978][T10747] #0: ffff888042eebd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 1010.911724][T10747] [ 1010.911724][T10747] stack backtrace: [ 1010.917609][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.0.10794 Not tainted syzkaller #0 PREEMPT(full) [ 1010.917631][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1010.917641][T10747] Call Trace: [ 1010.917648][T10747] [ 1010.917655][T10747] dump_stack_lvl+0x189/0x250 [ 1010.917681][T10747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.917700][T10747] ? __pfx__printk+0x10/0x10 [ 1010.917714][T10747] ? stack_trace_save+0x9c/0xe0 [ 1010.917736][T10747] print_circular_bug+0x2ee/0x310 [ 1010.917756][T10747] check_noncircular+0x134/0x160 [ 1010.917776][T10747] validate_chain+0xb9b/0x2140 [ 1010.917801][T10747] __lock_acquire+0xab9/0xd20 [ 1010.917823][T10747] ? nr_remove_neigh+0x25/0xe0 [ 1010.917840][T10747] lock_acquire+0x120/0x360 [ 1010.917853][T10747] ? nr_remove_neigh+0x25/0xe0 [ 1010.917873][T10747] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1010.917892][T10747] ? nr_remove_neigh+0x25/0xe0 [ 1010.917909][T10747] _raw_spin_lock_bh+0x36/0x50 [ 1010.917926][T10747] ? nr_remove_neigh+0x25/0xe0 [ 1010.917943][T10747] nr_remove_neigh+0x25/0xe0 [ 1010.917961][T10747] nr_add_node+0x1d9f/0x2570 [ 1010.917979][T10747] ? dev_get_by_name+0x21/0x200 [ 1010.917997][T10747] ? dev_get_by_name+0x21/0x200 [ 1010.918012][T10747] ? dev_get_by_name+0x21/0x200 [ 1010.918028][T10747] ? nr_call_to_digi+0x136/0x1b0 [ 1010.918045][T10747] nr_rt_ioctl+0xc12/0xd50 [ 1010.918065][T10747] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1010.918080][T10747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1010.918104][T10747] ? apparmor_capable+0x137/0x1b0 [ 1010.918123][T10747] ? capable+0x89/0xe0 [ 1010.918138][T10747] ? nr_ioctl+0x1b1/0x3b0 [ 1010.918152][T10747] sock_do_ioctl+0xdc/0x300 [ 1010.918172][T10747] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1010.918195][T10747] sock_ioctl+0x576/0x790 [ 1010.918212][T10747] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.918229][T10747] ? __fget_files+0x3a0/0x420 [ 1010.918243][T10747] ? __fget_files+0x2a/0x420 [ 1010.918257][T10747] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1010.918272][T10747] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.918289][T10747] __se_sys_ioctl+0xfc/0x170 [ 1010.918308][T10747] do_syscall_64+0xfa/0xfa0 [ 1010.918327][T10747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1010.918345][T10747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.918359][T10747] ? clear_bhb_loop+0x60/0xb0 [ 1010.918375][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.918389][T10747] RIP: 0033:0x7fb5fc78efc9 [ 1010.918404][T10747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.918418][T10747] RSP: 002b:00007fb5fd66a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.918434][T10747] RAX: ffffffffffffffda RBX: 00007fb5fc9e5fa0 RCX: 00007fb5fc78efc9 [ 1010.918446][T10747] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 1010.918456][T10747] RBP: 00007fb5fc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1010.918465][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.918475][T10747] R13: 00007fb5fc9e6038 R14: 00007fb5fc9e5fa0 R15: 00007ffc11f59088 [ 1010.918492][T10747]