last executing test programs: 2.002146152s ago: executing program 0 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40080, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.86258433s ago: executing program 1 (id=3729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)={0x5c, r7, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x9, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x10, 0x7, 0x3}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x4, 0x8, {{0x23, 0x4, 0x2, 0x2, 0x8c, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xd6, [@initdev={0xac, 0x1e, 0x3, 0x0}, @multicast2, @local]}, @generic={0x0, 0x9, "69d57d5e029357"}, @timestamp_addr={0x44, 0x4, 0x22, 0x1, 0x7}, @cipso={0x86, 0x30, 0x2, [{0x7, 0x8, "000b89995400"}, {0x2, 0x10, "3263cb0d2a82acbcf208670f5fb7"}, {0x5, 0x12, "d1fecfcca16e20ba8a5562f206f1b305"}]}, @rr={0x7, 0x27, 0xe6, [@rand_addr=0x64010100, @empty, @remote, @broadcast, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x32}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) r13 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3d, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @private=0xa010100}, {{0x4e22, 0x4e25, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r14, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x3, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xffffffff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000002, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0x1003, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x3, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x0, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x2, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x13, 0x8, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfdffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x2, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x1000401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r13, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc5e0267738074a85}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x488c0}, 0x24004080) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = socket$pppoe(0x18, 0x1, 0x0) tee(r18, r19, 0x1ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.452581938s ago: executing program 2 (id=3735): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1.446768469s ago: executing program 4 (id=3737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @nop, @sack={0x5, 0x12, [0x7, 0x767, 0xb, 0xfffffffc]}, @timestamp={0x8, 0xa, 0x800001, 0x8a}, @exp_fastopen={0xfe, 0x10, 0xf989, "47d7e257a86ae6629da4ebb6"}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x0, @void}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000240)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, @ethernet={0x1, @broadcast}, @llc={0x1a, 0x100, 0x3, 0x76, 0x73, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @can={0x1d, r2}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='veth0_virt_wifi\x00', 0x6da3f8b3, 0xf88, 0x6}) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000018000004000001907800000000ffffffffe000907800000000"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) r8 = socket$kcm(0x11, 0x2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe", 0xa5}], 0x1}}], 0x1, 0x240080e4) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r11, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004840)=ANY=[@ANYBLOB="18000000430007a20127bd7000fcdbdf25037c4000040045"], 0x18}}, 0xc000) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, &(0x7f00000007c0)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000000100)={0x0, {0x32, 0x3, 0x6, 0x4, 0x7}}) sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500008400000000000000d8d41cba69ec09000000000071113900000000008510000002000000850000003400000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.364227595s ago: executing program 3 (id=3738): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000007280)={0x0, 0x0, &(0x7f0000007240)={&(0x7f00000071c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.252682472s ago: executing program 3 (id=3739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) 1.187035162s ago: executing program 3 (id=3740): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"8365c0b5054c045bef361a6dc3d13faa", 0x0, 0x0, {0x3, 0x2}, {0x0, 0x1}, 0x1, [0x1ff, 0x5, 0x4, 0x6, 0x0, 0x81, 0x9a36, 0x1, 0x2, 0x1a00000000, 0x4, 0x7, 0x8, 0x2, 0xffe00, 0x6bdf]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x98}}, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000001100)="4c636135cb37548755865e78eb198497a258dec16e54668cf761ab74b53101f3f6f74d2cb52467045c18a85f31ec0f3d779c3f820c5b46125afe150749f192642d0b978109dc7af9254ffd185d93d882ce1fd751bd87641196842946ed9f37f5f6d64963cd7c776412d20a7385d88e2f8487a5f20b6b0e8ffec4a866d79094f06ff47a37fea7", 0x86}, {&(0x7f00000011c0)="ac00c5eb80863714b35bfef697ed9a0148653273a599b87765135bcb47c168b1e3772a35fdcaba355ea0a82015b28ee72e60d209a8628311492f036e23cca84ec10269a50acaedd6c20a0f", 0x4b}, {&(0x7f0000001240)="92b9cbb1cffdd04ddbc0a24379219d233c7e4e02103354ebe381b2a39baa13e9d39f1d435563274201174b7d6b0e4b4b80604af37a187078a36ad2829b855c991e745f38bc9dc2b785f11cdff6e3167a52ad51c1b05c0311562a6f16095b41a97c96b9576d4b83487e4c199eedc491d1c1180cc77e5e56f6ea7365505c88f900e7472b93c432221c8e8b52c47fb611c6246fcdd0d75bb18ed9603f1756769c1ce57af25d", 0xa4}, {&(0x7f0000001300)="66b764343937ca43ffedd5bb06240a", 0xf}, {&(0x7f0000001340)="4985e37f0eb032dfac7d297aaf298723709f0c8a3c201e615ea911ddb6d9654fbec3696f4a02622f2c832221ce666d6a3701b9d5f27bcfb2baf891633d0c522d07a675c30c12f35bfd275cc2dcd460f2ddae3938c185ac2f2ebc44c22ccf65d6657d1ffdb95bdc7113f19768c7c898ce6792dac32b563ad010167ba6b5d57e414ef1bb596e0e6ae443004f21ed51e5f9be621c1dbb7640f44d1c4f7f2fc900fa7023213b32ee48dc0143fadcb89fbaaeb8716f3dacb89808ccd87f8a06d0ebae8e6a708c61dcca7dec03f84b6c22dd434dd49b1b94dd81566da6a37edeb7babee6", 0xe1}, {&(0x7f0000001440)="d31d9ebd861a4186085ca485d1ae6ccc7adea079fe22528f2b3c4dde54a3b64693115559ebebc350159c4aa8ece107ec5b88aa", 0x33}, {&(0x7f0000001480)="96860d87ab564248f1ca11a031b5e688effe7deece5b26072736ebc266740137f6a8fa5c96f2f1ddf3c440000ace76635e69f4d1fdc22282de736ae95a3f08feed4743630b75a538ac2fd0af20ae7893efb867c688dc3b79d8ea457bc48e548a1bcd659283ce2c083bfbd9dee421ff70e9854e18598f8b7df4297d3ab6b8a54569f42cb83fbcbcc87196aa5f08fabfffec4d4f7ca4c19cb49c42d9552bc62a03532e30a4833c605c0c19", 0xaa}, {&(0x7f0000001540)="3726102de2b249d202f90bd67fd7ac5d2ac7df7e10bce5c54816d07021782dfbf5b5a6624141953cabdbc65ff7494e704b0f47cb9d891ab2cff5e7b7c70d235a3732568f9e1274ba99f7f2917ad764d36e66b36a21a60c86bd0d3c3d90e65c70f183c16fc8a8291636a806c7a8dbd8c5a182b6604ab00cc82e9b3d5d9ed308a7e1675f7623b86114fb262a14", 0x8c}], 0x8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xd4, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5fa4cbd4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0xd4}}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="33d702f6741d64298eab3dc282428f8a", 0x10}], 0x1, 0x0, 0x0, 0x18800}], 0x1, 0x20044000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000100)={{r1}, r2, 0xa, @unused=[0x0, 0x9, 0x3, 0x7], @devid}) 1.186008442s ago: executing program 4 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000006c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') r11 = getpid() sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r12, 0x112, 0x9, 0x0, &(0x7f0000000e40)) r13 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000ac0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b80)={0x0}, &(0x7f0000000bc0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c00)=0x0) r18 = getgid() sendmsg$unix(r3, &(0x7f0000000cc0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)="eaf30b6269cd56bf3fe48b3c4c7d453c3b3c28f94789dcfd12788a6ad9bb5c9b841a19208d059d0c2e3807af0fe4ae0dc1034ab9f12d0cd3ffa40a35ac0fcce3fba8a437e9725a80592a2bab5464e6205e08db973a953df0f750a812ef8f33165aa82cfd175655aa5a0920e12d36664d376297d5bd37f5cce78193b8b96c7d908e9869356fb9b9ebe5a5ad3695053c081f1757f8c80ae1f735fc30ddc251bf089d86ccd8d1090f0e4c2b8efa44a86ead217b4f0dfa2490e8c2c7237e1ff5f7f8bb64bb6fe1983b148d7eb4c3f4ebe817cdab7e392ab386584a", 0xd9}, {&(0x7f0000000440)="4caaa18d11be9e0284b3f16b46052263189b200ed19637672d994f6fa1a63cb73de25b188d00485c6ab4051a2c9b2cb1de08", 0x32}, {&(0x7f0000000480)="a30b12e58b12fd10efea6e353bd707af10c1c39f2245ae34ffe866213fd79500e788a67f99bd434ac2b5a5f9087c2ab042b76942856fb0ba5682e2cc6a5ebd57", 0x40}, {&(0x7f00000004c0)="93e3a03d5f2b6f15bb031f40f64d17d8d49835c7e0466cafa8c83daa041c713515ecf0964c54763c8cffbceb4c82d89188daef60e24a5e9664af1add5a105b186a6ce4f09a353b791b40c8bfd479cf9469585506b9c7085cda2ce77e73ddd0a16ffb3a4544f819b661b9cd2ee005b4f71736abe373c5864641e3dca0ec2923ede9140e42816ed3bf5e61e44cf717d4e749cc974cc1aa78360b0700e042e1935499e5042ffe1fb3b0c486fee91f9cd03f82cab67b90551d35bf2cc81b4682e71a5a0e2036da4e173793c55be1cb6f52b4e9e9", 0xd2}, {&(0x7f00000005c0)="869be77f0b721d8fb3e429a6db0431e10973f57c9b4e01a2613a716e5058ac98ba967a066a90c465e93bb8f48a5651ba585ffb4dde4448b1635c06a0eaa2df21eb68bb93003f5a7d1e475f61b09547406bb1456a0564c1c51d3cfe3bb3f81fcf540385213b0c7dee963bcabe95aeee05ec800ba531921685fe47448ac5ed3e1bc5e190dd026126c7af110a2aa7494d5762d9f8ec0e4242279fdbe7f7c5a5954e64da47edc706059078db722e0d029364077d40b2be746a39555f92a7a3fff3e72fa569c49a6903634f0f9cf22bc4cd48f1883a87ca0f9d670eb9655da8f4515b8c19f75833331f646e", 0xe9}, {&(0x7f0000000780)="13b27843b3d43d2ab625838002f2c8b29623adb58f120c237cdc298c4aa87c686f418c8c60b9e891209883db2db668dd98464a37036d8b909ca92098dac8670abdbff952d572d35d62821dc4ad46a56cfaa483ece70a3d03162984ecbd764291b3e8b3", 0x63}], 0x6, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r9}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x78, 0x48000}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.125348027s ago: executing program 2 (id=3742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0xd, 0x6, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x65, 0x0, 0x80, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, {[@ssrr={0x89, 0xf, 0x35, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0x7, 0x6a, [@empty]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="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", 0xff, 0x2004c090, &(0x7f0000000440)={0x11, 0x16, r2, 0x1, 0xa, 0x6, @random="b0f907ce8006"}, 0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000040)) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000180)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x2, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r9, 0x25, 0x10, @val=@tcx={@void, @value=r1, @void, @void, r12}}, 0x1c) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x6c, r14, 0x5, 0x40000000, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x21, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x7, 0x7}}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'l'}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r14, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x4000001) 1.056602164s ago: executing program 0 (id=3743): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1e8, 0x65, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x140, 0x1, [@m_skbmod={0xf0, 0x10, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x9, 0x8, 0x1, 0x2}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x4, 0xffffffffffffffff, 0xf9c00, 0x4}, 0xe}}]}, {0x74, 0x6, "b1d40772f2c508dd5234a53cc487bcd80966f5e868ea8cf9bbdc1f2fa8229a8efef44964c980b1f3aa4a298cfa73820a51bbfe1939f315536b1f1a7185d51d3d2010b5d8960e514902be0ec45adb58643c18d51db2bde3bde7aa05c47929c54e0740adfb657947b1718883130b7332d5"}, {0xc}, {0xc, 0x8, {0x32f698b7dba51e7a}}}}, @m_connmark={0x4c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x19, 0x6, "726786f34dc39a3b098ea66afe225634df06865f96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0xffff06da}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x32}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x34}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) 1.056008604s ago: executing program 3 (id=3744): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) (async) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000048104002c0012809a9f32cab2e7ebc150ecbf71b06a3109000100626f6e64000000001c00028008000700f4000000050001000500000008000200", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x8000, 0x60, 0x3, 0x27, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x425, 0x0, 0xba, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2f, 0x2, [{0x0, 0x6, "d349dcba"}, {0x7, 0x11, "ccc2740def8f0c76a585f4f57a1f69"}, {0x4, 0x3, "93"}, {0x1, 0x5, "1dd883"}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x6, "80a92b85"}]}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0xd}, r2}, 0x14) ioctl$sock_ifreq(r1, 0x8935, &(0x7f0000000000)={'lo\x00', @ifru_map={0x800, 0x600c2740, 0xeba, 0x5, 0x4, 0x4}}) 1.013357802s ago: executing program 4 (id=3745): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x28000600) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000009000)=r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000700)={0xa, 0x4e24, 0x1ff, @mcast1, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @local, 0x400}, 0x1c, 0x0}}], 0x2, 0x4048044) 929.917659ms ago: executing program 1 (id=3746): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 880.366542ms ago: executing program 3 (id=3747): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) getsockname$packet(r1, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="6161844bcd63037530ca131cc8aa944a47636e507c4a4e121a800dad084de5f8675bbc55b18794010a2810d19a2113a29bccd53e6832dfcd0a05d243f46dca59ab47caca543f6b7991cbc53da73bb84e0fa2e16cd18bd08fa86f50b741e51b78fb7e86a385c776fe0e9a01196ee606f802b91a1c3da7aa58f54ceeb8ae048b6373bdd41905d7c225e8806398fb79976f2dfd10bf71bb0dd6ccb556ab03efa681e3", @ANYRES64, @ANYRES32=r1], 0x118}, {&(0x7f0000000180)={0x1c, 0x20, 0x2, 0x70bd27, 0x25dfdbfe, "", [@typed={0xc, 0x12, 0x0, 0x0, @u64=0xff}]}, 0x1c}], 0x2, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3a8}}, 0x0) close(0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c80)=@allocspi={0x15c, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0x3}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r6, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x401e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1011}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaabffffffffffff86dd6000000000140600fe80000000001c0000000000000000bbfe800000000000040000b800000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r8], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) 878.71247ms ago: executing program 2 (id=3748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000005e754b8f08cdd637478b472000"/35], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 872.524412ms ago: executing program 0 (id=3749): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x40fa1f24de734a8f, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r2, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) 859.296866ms ago: executing program 4 (id=3750): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000f000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24}, 0x94) 712.647787ms ago: executing program 1 (id=3751): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r2, r0}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) 711.385962ms ago: executing program 2 (id=3752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff42, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r1, 0x1, 0x400, 0x0, {0x3}}, 0x14}}, 0x10) r2 = socket(0x1d, 0x5, 0xa0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0xc0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff42, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r1, 0x1, 0x400, 0x0, {0x3}}, 0x14}}, 0x10) (async) socket(0x1d, 0x5, 0xa0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0xc0) (async) getsockopt(r2, 0x200000000114, 0x2713, 0x0, 0x0) (async) 682.626848ms ago: executing program 0 (id=3753): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket(0x10, 0x3, 0x0) 678.759263ms ago: executing program 4 (id=3754): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = socket(0x10, 0x803, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="01000000061000001800128008000100677470000c08028008000100", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) (async) accept4$unix(r2, 0x0, &(0x7f0000000000), 0x80000) 618.968762ms ago: executing program 1 (id=3755): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$netlink(0x10, 0x3, 0x14) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x7}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x4}]}}}]}, 0x44}}, 0x0) 543.948254ms ago: executing program 2 (id=3756): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7}}, 0x0, 0x0, 0x9, 0x6, 0x0, 0x8, 0xfc}, &(0x7f0000000140)=0x9c) r4 = socket$inet6_sctp(0xa, 0x2, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r3, 0x2, 0x10, 0x6, 0x2280}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r5, 0x9, 0x5, 0xf3bed9fa, 0x3, 0x9}, &(0x7f0000000240)=0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = getpid() (async) r8 = getuid() sendmsg$nl_generic(r6, &(0x7f0000002580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002540)={&(0x7f00000002c0)={0x225c, 0x29, 0x400, 0x70bd27, 0x25dfdbfb, {0x16}, [@typed={0x8, 0xa8, 0x0, 0x0, @pid=r7}, @generic="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", @nested={0x1c, 0x6f, 0x0, 0x1, [@typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @nested={0x4, 0x59}]}, @generic="b17b87756ab3941a2147d8b1830f0a4ac14c7a353fa40732fac38326613bc3316147a6568b3e2ff2548102a0dabac6084038066584d89d18f9f0ab9fe5657d8125604de3020eff6bd82d040f9dcd5e0c409411fb7785bc554b8d849db4de44ac5748712c1525320005e933e4203d24a721c7d71cfcddf47960caa42c86c301b76e2cd71a964ac14ee4f2dda11244c8109853a151bfb5ebdd2abd18f1146e6cbca686fb9f345dd5780788a556c9c8d1fc19497c12cc7e6a5557d4c4b131a785e710f402", @typed={0x4, 0x147}, @nested={0x27, 0x3e, 0x0, 0x1, [@generic="ec810d50a7a51a07c86693fa6b1888", @typed={0x8, 0x13b, 0x0, 0x0, @uid=r8}, @nested={0x4, 0xc8}, @nested={0x4, 0x5d}, @nested={0x4, 0xa4}]}, @generic="6dafc80b0ed9bfe473de27e40f2c08f16083b212bf6738728a2ef9b6eb0d321f02229fcac8b39e8991bb69a82e75a2d50179999c96d42ed54791b0a57be5b287399639d1bc31f91506e49a59b8d88c914798eb909f666e83a2", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x2}, @nested={0x10cf, 0xd4, 0x0, 0x1, [@generic="71348fbb3d02c9e028ced7b233398249501ecc947cc55abd4ede1067dfab111ef930bfb23a88aeb7401fabbf215c3c195fc94050ee33b243ce7ac42b31c3972b38c140fe6d4df8eb232687145211465f586f971f6342c967", @generic="44547d70ebdfec7c7088a4b59efa4050d889602ec35a02e48fe5a7e779a235b382547fa0db", @generic="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", @nested={0x4, 0x9b}, @generic="512e80a76c93751a13bd44c8b8f96b5e31588636a058e6717d3f46a654984c427acb7c48fada10120ae2466342fa3e828d7055b41f2a97ac8a223a6b4aabc17b57f367f516f81e2c7fc8"]}]}, 0x225c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002b80)=@broute={'broute\x00', 0x20, 0x4, 0x550, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002600], 0x0, &(0x7f00000025c0), &(0x7f0000002600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x5, 0x0, 0x16, 'veth0_to_batadv\x00', 'nicvf0\x00', 'pimreg0\x00', 'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, [0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x6005, '\x00', 'lo\x00', 'bond_slave_1\x00', 'wlan0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff], @random="1ccaa231d2ef", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xce, 0x16e, 0x1a6, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x2}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x7, 0x15, 0x3, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffffc, 'syz1\x00', {0x4}}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x2, {0x8}}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="0596c616131a", 0xffffffffffffffff}}}}, {0x9, 0x8, 0xa00, 'wg0\x00', 'vcan0\x00', 'bridge_slave_1\x00', 'veth0_to_bridge\x00', @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0x101, 0xff, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x3, 0x1, 0xfbfb, 'syzkaller1\x00', 'ipvlan0\x00', 'team_slave_0\x00', 'dvmrp0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x3, 0x9, 0x0, 0x0, "abb2af9d177775792619a506f05327381be96c59a89a26a73fad2110118b0b3e608bc8c9e7af59cb80827d626d1ece747550116384f946cdeb1e2bcc7e56bcb5"}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x400}}}}]}]}, 0x5c8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000002c00)={0x18, 0x0, {0x2, @multicast, 'ipvlan1\x00'}}, 0x1e) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002c80), r9) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x50, r11, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc800) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e00), r9) sendmsg$TIPC_NL_NODE_GET(r12, &(0x7f0000004100)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000040c0)={&(0x7f0000002e40)={0x1254, r13, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91d2}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6534aa5a}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x110c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x38b69d3e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x1254}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000004180), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x24, r14, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xcc000}, 0x20000000) (async) r15 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSPGRP(r15, 0x8902, &(0x7f0000004280)=r7) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000042c0), &(0x7f0000004300)=0x4) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r16, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x1c, r17, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x88c0) setsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000004480)={r7, r8, 0xee01}, 0xc) 543.094727ms ago: executing program 0 (id=3757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000900020005000500020000000c0007800500150001000000050004000000000011000300686173683a6e65742c6e657400"/88], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x140b, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4000) pwritev(r1, &(0x7f0000000000), 0x0, 0x1, 0x7) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x24, 0x24, 0x3dd681fbf96b935, 0x0, 0x25dfdbfd, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xf2}}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40800) 418.979134ms ago: executing program 4 (id=3758): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff000009"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x51, 0x29}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x1, 0x8, &(0x7f0000000100)="8d839cb3f394064c", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) 396.81102ms ago: executing program 2 (id=3759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x4048800) write$nci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="610508b74741d795d726f657ac3fae7f3f670303048205060b0893cc26a2f70f6dba0ffd08074a4669857db13bf6388d684df00bd0f28ee407451a8b5b6999d41a32c376e9b4cb44dcffccf5ecf9e71cbd2ba51ed4d67935d7a39b81180c8a4fb1b8"], 0x62) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0x10000008ebc, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 288.361341ms ago: executing program 0 (id=3760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x20, &(0x7f00000013c0)={&(0x7f0000000340)=""/4096, 0x1000, 0x0, &(0x7f0000001340)=""/101, 0x65}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0xffffffffffffffff, 0x6}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001500), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000015c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xa, 0x9, &(0x7f0000000040)=@raw=[@generic={0x98, 0x0, 0x5, 0x3, 0x4}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x1, 0x7, 0x6, 0x7, 0xfffffffffffffff4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xfa, &(0x7f0000000100)=""/250, 0x41000, 0x5a, '\x00', r1, @fallback=0x2e, r2, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x5, 0x3, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000001640)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7, r8], &(0x7f0000001680)=[{0x0, 0x2, 0x9, 0x8}, {0x5, 0x4, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x8}], 0x10, 0x13a6f129}, 0x94) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x8, 0x0, 0x7, 0xfffeffff, 0x20a, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001800)={r6}) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001840), 0x3) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r6, &(0x7f0000001880)={@void, @val={0x2, 0x3, 0xf3, 0x8, 0xe0fb}, @arp=@generic={0x336, 0x15, 0x6, 0x3, 0x8, @empty, '=mA', @local, "4f99b182d08a4a"}}, 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb757}}, [0x2, 0x4, 0x8, 0x9, 0xfffffffffffffffa, 0x2, 0x5, 0x9, 0x100, 0x4, 0x9, 0x4, 0x8001, 0x97]}, &(0x7f00000019c0)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000001a00)={r11, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x5}}, 0x3, 0x2, 0x317, 0xffffffff, 0x2}, &(0x7f0000001ac0)=0x98) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001b00)='ns/mnt\x00') ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f0000001b40)) sendmsg$AUDIT_TRIM(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x10, 0x3f6, 0x10, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c000}, 0x400c5) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000001e40)={r9}) r14 = socket$key(0xf, 0x3, 0x2) recvmsg(r14, &(0x7f00000021c0)={&(0x7f0000001e80)=@ax25={{0x3, @null}, [@rose, @remote, @netrom, @default, @rose, @null, @default, @rose]}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/235, 0xeb}, {&(0x7f0000002000)=""/34, 0x22}, {&(0x7f0000002040)=""/175, 0xaf}], 0x3, &(0x7f0000002140)=""/122, 0x7a}, 0x20) 286.582442ms ago: executing program 1 (id=3761): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) (async) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 64) 158.349252ms ago: executing program 1 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r11 = socket$isdn(0x22, 0x2, 0x2) close(r11) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r10, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) 0s ago: executing program 3 (id=3763): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x18}, @val={0x0, 0x1, 0x3, 0x96f, 0x0, 0x4c}, @eth={@empty, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@llc={0x4, {@snap={0xab, 0x1, "32e3", "9bcb3d", 0x890d, "549f3193e06a3dfedc032ada9106bb78f2f981891ff082c72f5915cb42f1f99108df4f16d74b08325d29cdb18b92e513c357c97dd30f25a2aa705a43ff4b1508c1005fbff8b3963b4725e05695c642d422a9ac6d3b1c798a8cddfc8f5ec18b6861eba65a163396eb004e9f055098e531b36347217f49b4620cc4dcc231677ba5fd38a29a3cbe878bbbf3167aec767305"}}}}}}, 0xb9) (async) write$tun(r2, &(0x7f00000000c0)={@val={0x0, 0x18}, @val={0x0, 0x1, 0x3, 0x96f, 0x0, 0x4c}, @eth={@empty, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@llc={0x4, {@snap={0xab, 0x1, "32e3", "9bcb3d", 0x890d, "549f3193e06a3dfedc032ada9106bb78f2f981891ff082c72f5915cb42f1f99108df4f16d74b08325d29cdb18b92e513c357c97dd30f25a2aa705a43ff4b1508c1005fbff8b3963b4725e05695c642d422a9ac6d3b1c798a8cddfc8f5ec18b6861eba65a163396eb004e9f055098e531b36347217f49b4620cc4dcc231677ba5fd38a29a3cbe878bbbf3167aec767305"}}}}}}, 0xb9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) r4 = socket(0x2b, 0x1, 0x0) listen(r4, 0x0) sendmmsg$inet6(r4, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): dge7): making interface the new active one [ 219.223057][T12501] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 219.280565][T12495] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 219.312138][T12502] macvlan5: entered promiscuous mode [ 219.323030][T12502] macvlan5: entered allmulticast mode [ 219.362124][T12502] bond4: entered promiscuous mode [ 219.383269][T12502] bridge7: entered promiscuous mode [ 219.411432][T12502] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 219.420422][T12502] bond4: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 219.441045][T12502] bond4: left promiscuous mode [ 219.445962][T12502] bridge7: left promiscuous mode [ 219.922737][T12553] bond4: Removing last arp target with arp_interval on [ 220.161755][T12575] nft_compat: unsupported protocol 0 [ 220.537387][T12595] netlink: 'syz.4.1870': attribute type 12 has an invalid length. [ 220.592036][T12595] bond4: option primary_reselect: invalid value (255) [ 220.602862][T12595] bond4 (unregistering): Released all slaves [ 221.046312][T12596] macsec1: entered promiscuous mode [ 221.054425][T12612] openvswitch: netlink: Flow key attr not present in new flow. [ 221.057681][T12596] macsec1: entered allmulticast mode [ 221.085964][T12596] bond5: (slave macsec1): Error -34 calling dev_set_mtu [ 221.122530][ T30] audit: type=1107 audit(1766459792.469:4): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 221.360218][T12631] netlink: 'syz.1.1882': attribute type 2 has an invalid length. [ 221.385137][T12631] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 221.863364][T12656] syzkaller0: entered promiscuous mode [ 221.894929][T12656] syzkaller0: entered allmulticast mode [ 222.053736][T12670] netlink: 'syz.0.1893': attribute type 39 has an invalid length. [ 222.053831][T12672] __nla_validate_parse: 16 callbacks suppressed [ 222.053844][T12672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1894'. [ 222.220127][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'. [ 222.252578][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 222.530621][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1901'. [ 222.688537][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1902'. [ 222.721352][T12708] netlink: 'syz.3.1903': attribute type 16 has an invalid length. [ 222.759987][T12710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.782148][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 222.803892][T12712] gtp0: entered promiscuous mode [ 222.809912][T12712] gtp0: entered allmulticast mode [ 222.959441][T12722] syzkaller1: entered promiscuous mode [ 222.973417][T12722] syzkaller1: entered allmulticast mode [ 222.998140][T12722] : renamed from hsr0 [ 223.168722][T12740] Cannot find del_set index 3 as target [ 223.307763][T12746] bond0: entered allmulticast mode [ 223.315391][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 223.315391][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 223.325028][T12746] bond_slave_0: entered allmulticast mode [ 223.376957][T12746] bond_slave_1: entered allmulticast mode [ 223.383389][T12746] batadv0: entered allmulticast mode [ 223.402266][T12746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.447789][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 223.716684][T12772] x_tables: duplicate entry at hook 3 [ 224.164248][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1932'. [ 224.194543][T12810] sctp: [Deprecated]: syz.2.1933 (pid 12810) Use of int in maxseg socket option. [ 224.194543][T12810] Use struct sctp_assoc_value instead [ 224.277422][T12817] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 224.295193][T12817] ip6tnl2: entered promiscuous mode [ 224.307159][T12817] ip6tnl2: entered allmulticast mode [ 224.499698][T12830] Cannot find del_set index 1 as target [ 224.629081][T12838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.712532][T12842] bond6: invalid ARP target 0.0.0.0 specified for addition [ 224.721024][T12842] bond6: option arp_ip_target: invalid value (0) [ 224.758377][T12842] bond6 (unregistering): Released all slaves [ 224.807564][T12848] netlink: 'syz.0.1944': attribute type 11 has an invalid length. [ 224.832692][T12848] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 224.926256][T12848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.163635][T12867] netlink: 'syz.0.1950': attribute type 13 has an invalid length. [ 225.198578][T12867] erspan0: refused to change device tx_queue_len [ 225.209231][T12867] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 225.236001][T12869] team0: Caught tx_queue_len zero misconfig [ 225.245790][T12873] x_tables: duplicate underflow at hook 1 [ 225.266392][T12874] tipc: Enabled bearer , priority 0 [ 225.293418][T12867] syzkaller0: entered promiscuous mode [ 225.299396][T12867] syzkaller0: entered allmulticast mode [ 225.349109][T12867] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.438026][T12867] tipc: Resetting bearer [ 225.446596][T12866] tipc: Resetting bearer [ 225.498349][T12866] tipc: Disabling bearer [ 225.664107][T12898] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 225.701730][T12898] bond6 (unregistering): Released all slaves [ 226.876716][T12975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.226475][T12999] __nla_validate_parse: 11 callbacks suppressed [ 227.226497][T12999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1990'. [ 227.383650][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'. [ 227.393202][T13013] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 227.563598][T13029] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 227.687870][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 228.242549][T13076] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2013'. [ 228.271529][T13076] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2013'. [ 228.406092][T13085] raw_sendmsg: syz.0.2017 forgot to set AF_INET. Fix it! [ 229.330212][T13140] syzkaller0: left promiscuous mode [ 229.335503][T13140] syzkaller0: left allmulticast mode [ 229.716713][T13166] batman_adv: batadv0: Adding interface: dummy0 [ 229.724890][T13166] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.754937][T13166] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 230.623160][T13213] IPVS: stopping backup sync thread 8853 ... [ 231.451268][T13238] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 231.463181][T13238] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 231.518510][T13240] syzkaller0: entered promiscuous mode [ 231.524220][T13240] syzkaller0: entered allmulticast mode [ 231.881583][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 232.226893][T13273] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 232.246320][T13273] bond0: (slave wlan1): Opening slave failed [ 232.268716][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2103'. [ 232.279284][T13271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.335105][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2106'. [ 232.483981][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 232.734171][T13290] macsec1: entered promiscuous mode [ 232.746535][T13290] bridge0: entered promiscuous mode [ 232.754894][T13290] bridge0: port 4(macsec1) entered blocking state [ 232.761838][T13290] bridge0: port 4(macsec1) entered disabled state [ 232.771572][T13290] macsec1: entered allmulticast mode [ 232.782307][T13290] bridge0: entered allmulticast mode [ 232.794052][T13290] macsec1: left allmulticast mode [ 232.799387][T13290] bridge0: left allmulticast mode [ 232.808179][T13290] bridge0: left promiscuous mode [ 233.103125][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 233.433099][T13322] bridge0: port 4(syz_tun) entered blocking state [ 233.446738][T13322] bridge0: port 4(syz_tun) entered disabled state [ 233.462974][T13322] syz_tun: entered allmulticast mode [ 233.475300][T13322] syz_tun: entered promiscuous mode [ 233.566111][T13331] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 233.828795][T13348] team_slave_1: Caught tx_queue_len zero misconfig [ 234.305232][T13380] veth1_to_bond: entered allmulticast mode [ 234.326092][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 234.341954][T13378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2142'. [ 234.375551][T13378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2142'. [ 234.429487][T13380] bond0: (slave bond_slave_1): Releasing backup interface [ 234.472780][T13380] veth1_to_bond (unregistering): left allmulticast mode [ 234.795052][T13403] syzkaller1: entered promiscuous mode [ 234.819142][T13403] syzkaller1: entered allmulticast mode [ 235.164537][T13428] netlink: 'syz.0.2157': attribute type 29 has an invalid length. [ 235.192210][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 235.192720][T13421] netlink: 'syz.3.2156': attribute type 21 has an invalid length. [ 235.204788][T13428] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 235.310941][T13432] bond7: (slave gretap3): making interface the new active one [ 235.320434][T13432] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 235.494929][T13438] tipc: Cannot configure node identity twice [ 235.523787][T13440] netlink: 'syz.3.2162': attribute type 2 has an invalid length. [ 235.541956][T13443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.567367][T13443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.658556][T13448] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 235.666678][T13448] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2164'. [ 235.768554][T13458] veth0_to_bridge: entered promiscuous mode [ 235.782548][T13455] veth0_to_bridge: left promiscuous mode [ 235.918609][T13465] netlink: 'syz.2.2172': attribute type 1 has an invalid length. [ 235.927637][T13465] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.2172'. [ 236.070953][T13473] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 236.091604][T13473] Cannot find set identified by id 1 to match [ 236.245275][T13485] vlan2: entered promiscuous mode [ 236.265238][T13485] vlan2: entered allmulticast mode [ 236.272543][T13485] hsr_slave_1: entered allmulticast mode [ 236.306073][T13489] tipc: Enabled bearer , priority 0 [ 236.323090][T13483] syzkaller0: entered promiscuous mode [ 236.337737][T13483] syzkaller0: entered allmulticast mode [ 236.349136][T13483] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 236.389112][T13483] tipc: Resetting bearer [ 236.401569][T13482] tipc: Resetting bearer [ 236.429024][T13482] tipc: Disabling bearer [ 236.592323][T13506] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 236.944099][T13531] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 236.965505][T13531] batadv1: entered promiscuous mode [ 236.977848][T13531] batadv1: entered allmulticast mode [ 236.995356][T13531] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 237.026698][T13531] team0: Failed to send options change via netlink (err -105) [ 237.040338][T13531] team0: Port device batadv1 added [ 237.417205][ T8647] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 237.427028][ T8647] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 237.449471][T13555] bridge0: Caught tx_queue_len zero misconfig [ 237.738564][T13565] __nla_validate_parse: 8 callbacks suppressed [ 237.738587][T13565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2205'. [ 237.851078][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2206'. [ 237.928648][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.936788][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.955332][T13573] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2205'. [ 238.068948][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'. [ 238.079658][T13583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'. [ 238.196463][T13587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2212'. [ 238.307642][T13595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2215'. [ 238.459862][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'. [ 238.541237][T13606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'. [ 238.592066][T13610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2219'. [ 238.693795][T13610] bond6: entered allmulticast mode [ 238.718784][T13610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.890072][T13616] bond7 (unregistering): Released all slaves [ 239.026980][T13627] syzkaller1: entered promiscuous mode [ 239.063584][T13627] syzkaller1: entered allmulticast mode [ 239.095445][T13637] netlink: 'syz.0.2228': attribute type 11 has an invalid length. [ 239.396788][T13621] infiniband !yz!: set down [ 239.431936][T13651] tc_dump_action: action bad kind [ 239.479469][T13621] infiniband !yz!: added team_slave_0 [ 239.530030][T13649] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 239.602106][T13621] RDS/IB: !yz!: added [ 239.606243][T13621] smc: adding ib device !yz! with port count 1 [ 239.612697][T13621] smc: ib device !yz! port 1 has no pnetid [ 240.338580][T13683] veth0: entered promiscuous mode [ 240.354065][T13683] veth0: left promiscuous mode [ 241.635103][T13741] bond8: entered allmulticast mode [ 241.641002][T13741] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.862908][T13752] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 241.950514][T13752] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.963167][T13752] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 241.978202][T13752] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 242.112459][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.137841][T13730] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 242.145021][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.180120][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.217242][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.230046][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.236474][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.299029][T13765] tipc: Cannot configure node identity twice [ 242.320658][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.337396][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.343810][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.412018][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.450986][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.470889][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.481470][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.497972][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.547196][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.553655][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.627872][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.634296][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.698703][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.712501][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.725723][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.733771][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.742098][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.748969][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.755923][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.763758][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.773462][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.797526][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.814175][T13783] __nla_validate_parse: 12 callbacks suppressed [ 242.814198][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2279'. [ 242.817580][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.845389][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.852845][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.860028][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.869399][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.876076][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.883434][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.892086][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'. [ 242.907590][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.917544][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.932517][T13761] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.960994][T13790] team1: entered promiscuous mode [ 242.970406][T13790] team1: entered allmulticast mode [ 242.980904][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 243.692017][T13836] rdma_rxe: rxe_newlink: failed to add lo [ 243.836691][T13842] syzkaller1: entered promiscuous mode [ 243.853125][T13842] syzkaller1: entered allmulticast mode [ 243.942087][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 244.119045][T13861] geneve3: entered promiscuous mode [ 244.139363][ T1039] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 244.167602][ T1039] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 244.186847][ T1039] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 244.208830][ T1039] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 244.302777][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 244.362359][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2315'. [ 244.415351][T13874] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2315'. [ 244.425087][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2315'. [ 244.632030][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 245.156758][T13917] netlink: 'syz.2.2327': attribute type 1 has an invalid length. [ 245.203119][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2327'. [ 245.340090][T13920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.357282][T13920] bond7: (slave bond8): making interface the new active one [ 245.365607][T13920] bond7: (slave bond8): Enslaving as an active interface with an up link [ 255.971993][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.653650][T13955] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2331'. [ 277.676282][T13958] FAULT_INJECTION: forcing a failure. [ 277.676282][T13958] name failslab, interval 1, probability 0, space 0, times 0 [ 277.676718][T13953] xt_bpf: check failed: parse error [ 277.698917][T13958] CPU: 1 UID: 0 PID: 13958 Comm: syz.2.2330 Not tainted syzkaller #0 PREEMPT(full) [ 277.698946][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.698958][T13958] Call Trace: [ 277.698966][T13958] [ 277.698975][T13958] dump_stack_lvl+0x189/0x250 [ 277.699006][T13958] ? __pfx____ratelimit+0x10/0x10 [ 277.699027][T13958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.699051][T13958] ? __pfx__printk+0x10/0x10 [ 277.699085][T13958] ? __pfx___might_resched+0x10/0x10 [ 277.699106][T13958] ? fs_reclaim_acquire+0x7d/0x100 [ 277.699131][T13958] should_fail_ex+0x414/0x560 [ 277.699165][T13958] should_failslab+0xa8/0x100 [ 277.699203][T13958] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 277.699232][T13958] ? __d_alloc+0x37/0x6f0 [ 277.699262][T13958] __d_alloc+0x37/0x6f0 [ 277.699295][T13958] d_alloc_pseudo+0x21/0xc0 [ 277.699324][T13958] alloc_file_pseudo+0xcc/0x210 [ 277.699351][T13958] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 277.699375][T13958] ? evm_inode_alloc_security+0x40/0xb0 [ 277.699394][T13958] ? security_inode_alloc+0xd5/0x330 [ 277.699430][T13958] sock_alloc_file+0xb8/0x2e0 [ 277.699462][T13958] do_accept+0x34b/0x680 [ 277.699488][T13958] ? __pfx_do_accept+0x10/0x10 [ 277.699533][T13958] __sys_accept4+0x127/0x210 [ 277.699557][T13958] ? __pfx___sys_accept4+0x10/0x10 [ 277.699572][T13958] ? ksys_write+0x22a/0x250 [ 277.699594][T13958] ? __pfx_ksys_write+0x10/0x10 [ 277.699619][T13958] __x64_sys_accept4+0x9a/0xb0 [ 277.699640][T13958] do_syscall_64+0xfa/0xf80 [ 277.699661][T13958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.699680][T13958] ? clear_bhb_loop+0x60/0xb0 [ 277.699701][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.699720][T13958] RIP: 0033:0x7f024bf8f749 [ 277.699739][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.699757][T13958] RSP: 002b:00007f024cee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 277.699779][T13958] RAX: ffffffffffffffda RBX: 00007f024c1e5fa0 RCX: 00007f024bf8f749 [ 277.699793][T13958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.699806][T13958] RBP: 00007f024cee2090 R08: 0000000000000000 R09: 0000000000000000 [ 277.699818][T13958] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 277.699844][T13958] R13: 00007f024c1e6038 R14: 00007f024c1e5fa0 R15: 00007ffe287e0418 [ 277.699879][T13958] [ 277.968308][T13968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2329'. [ 277.998687][T13969] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2328'. [ 278.551444][T14000] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 278.698445][T14000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.714680][T14006] vlan0: entered allmulticast mode [ 278.738444][T14006] bond4: entered allmulticast mode [ 278.781987][T14016] No such timeout policy "syz0" [ 278.797732][T14017] bond4: (slave gretap2): making interface the new active one [ 278.806598][T14017] gretap2: entered allmulticast mode [ 278.814224][T14017] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 278.824973][T14022] netlink: 'syz.2.2348': attribute type 1 has an invalid length. [ 279.125703][T14037] syzkaller0: entered promiscuous mode [ 279.150583][T14037] syzkaller0: entered allmulticast mode [ 279.171350][T14044] FAULT_INJECTION: forcing a failure. [ 279.171350][T14044] name failslab, interval 1, probability 0, space 0, times 0 [ 279.231172][T14044] CPU: 1 UID: 0 PID: 14044 Comm: syz.4.2355 Not tainted syzkaller #0 PREEMPT(full) [ 279.231202][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.231214][T14044] Call Trace: [ 279.231222][T14044] [ 279.231232][T14044] dump_stack_lvl+0x189/0x250 [ 279.231260][T14044] ? __pfx____ratelimit+0x10/0x10 [ 279.231280][T14044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.231303][T14044] ? __pfx__printk+0x10/0x10 [ 279.231333][T14044] ? __pfx___might_resched+0x10/0x10 [ 279.231355][T14044] ? fs_reclaim_acquire+0x7d/0x100 [ 279.231382][T14044] should_fail_ex+0x414/0x560 [ 279.231416][T14044] should_failslab+0xa8/0x100 [ 279.231451][T14044] kmem_cache_alloc_noprof+0x88/0x710 [ 279.231481][T14044] ? alloc_empty_file+0x55/0x1d0 [ 279.231511][T14044] alloc_empty_file+0x55/0x1d0 [ 279.231535][T14044] alloc_file_pseudo+0x13d/0x210 [ 279.231563][T14044] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 279.231583][T14044] ? evm_inode_alloc_security+0x40/0xb0 [ 279.231602][T14044] ? security_inode_alloc+0xd5/0x330 [ 279.231639][T14044] sock_alloc_file+0xb8/0x2e0 [ 279.231671][T14044] do_accept+0x34b/0x680 [ 279.231698][T14044] ? __pfx_do_accept+0x10/0x10 [ 279.231749][T14044] __sys_accept4+0x127/0x210 [ 279.231773][T14044] ? __pfx___sys_accept4+0x10/0x10 [ 279.231789][T14044] ? ksys_write+0x22a/0x250 [ 279.231812][T14044] ? __pfx_ksys_write+0x10/0x10 [ 279.231837][T14044] __x64_sys_accept4+0x9a/0xb0 [ 279.231860][T14044] do_syscall_64+0xfa/0xf80 [ 279.231882][T14044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.231902][T14044] ? clear_bhb_loop+0x60/0xb0 [ 279.231925][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.231943][T14044] RIP: 0033:0x7f48b038f749 [ 279.231962][T14044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.231978][T14044] RSP: 002b:00007f48b1248038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 279.232000][T14044] RAX: ffffffffffffffda RBX: 00007f48b05e5fa0 RCX: 00007f48b038f749 [ 279.232014][T14044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 279.232026][T14044] RBP: 00007f48b1248090 R08: 0000000000000000 R09: 0000000000000000 [ 279.232038][T14044] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 279.232051][T14044] R13: 00007f48b05e6038 R14: 00007f48b05e5fa0 R15: 00007ffc75bebb28 [ 279.232086][T14044] [ 279.614392][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'. [ 279.809617][T14075] x_tables: duplicate underflow at hook 2 [ 280.041310][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 280.195844][T14096] IPVS: set_ctl: invalid protocol: 200 255.255.255.255:20001 [ 280.220083][T14096] netlink: 'syz.1.2372': attribute type 21 has an invalid length. [ 280.228774][T14096] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2372'. [ 280.324784][T14105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.369857][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 280.420355][T14108] tipc: Enabling of bearer rejected, failed to enable media [ 280.451540][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'. [ 280.502009][T14114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2378'. [ 280.511693][T14114] nbd: illegal input index -8454144 [ 280.742713][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 280.993373][T14144] bond9: (slave sit0): Device is not bonding slave [ 281.001588][T14144] bond9: option active_slave: invalid value (sit0) [ 281.015676][T14144] bond9 (unregistering): Released all slaves [ 281.259049][T14159] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 281.270295][T14157] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.277869][T14157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.286707][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.294041][T14157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.306260][T14159] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 281.399387][T14169] xt_policy: neither incoming nor outgoing policy selected [ 281.421879][T14169] netlink: 'syz.0.2392': attribute type 10 has an invalid length. [ 281.430129][T14169] batman_adv: batadv0: Removing interface: dummy0 [ 281.448104][T14169] team0: Device dummy0 failed to register rx_handler [ 281.546337][T14174] syzkaller0: entered promiscuous mode [ 281.568076][T14174] syzkaller0: entered allmulticast mode [ 281.606633][T14174] tipc: Enabled bearer , priority 0 [ 281.622128][T14174] tipc: Resetting bearer [ 281.624853][T14184] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 281.636203][T14173] tipc: Resetting bearer [ 282.363725][T14209] netlink: 'syz.2.2401': attribute type 9 has an invalid length. [ 283.385390][T14173] tipc: Disabling bearer [ 283.482872][ T9] tipc: Node number set to 2415153510 [ 283.534795][T14216] __nla_validate_parse: 10 callbacks suppressed [ 283.534819][T14216] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2403'. [ 283.745109][T14231] veth0_to_bridge: entered promiscuous mode [ 283.807856][T14231] veth0_to_bridge: left promiscuous mode [ 284.764121][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 284.795938][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 285.098471][T14290] tipc: Enabled bearer , priority 0 [ 285.127351][T14288] netlink: 'syz.1.2427': attribute type 1 has an invalid length. [ 285.140192][T14290] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 285.235493][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 285.271503][T14290] tipc: Resetting bearer [ 285.467969][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2431'. [ 285.543709][T14312] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 285.577252][T14316] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 285.832207][T14327] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2439'. [ 285.993202][T14341] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 286.031083][T14338] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 286.051224][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'. [ 286.127674][ T9] tipc: Node number set to 4269801492 [ 286.278190][T14359] netlink: 'syz.4.2451': attribute type 16 has an invalid length. [ 286.323699][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2451'. [ 286.353602][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 286.514890][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'. [ 287.049096][T14413] netlink: 'syz.1.2466': attribute type 8 has an invalid length. [ 287.243253][T14432] openvswitch: netlink: Message has 8 unknown bytes. [ 287.250894][T14432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.264797][T14432] Bluetooth: MGMT ver 1.23 [ 287.341485][T14433] set match dimension is over the limit! [ 287.349301][T14433] netlink: 'syz.0.2471': attribute type 11 has an invalid length. [ 287.608071][T14436] syzkaller0: entered promiscuous mode [ 287.617271][T14436] syzkaller0: entered allmulticast mode [ 287.648905][T14455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.546432][T14480] x_tables: duplicate underflow at hook 1 [ 289.520394][T14485] __nla_validate_parse: 9 callbacks suppressed [ 289.520417][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 289.538887][T14485] netlink: 'syz.4.2486': attribute type 15 has an invalid length. [ 289.564193][T14487] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 289.576008][T14487] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 289.629324][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 289.631561][T14489] openvswitch: netlink: Flow key attr not present in new flow. [ 289.653353][T14485] netlink: 'syz.4.2486': attribute type 15 has an invalid length. [ 289.674388][ T8664] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 289.689690][ T8664] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 289.698691][ T8664] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 289.721470][ T8664] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 289.762068][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2490'. [ 289.856105][T14502] xt_SECMARK: invalid mode: 9 [ 289.907811][T14496] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2490'. [ 289.917571][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 289.944858][T14498] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 290.014182][T14510] netlink: 1144 bytes leftover after parsing attributes in process `syz.1.2494'. [ 290.285752][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2502'. [ 290.314335][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'. [ 290.600437][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 290.603521][T14546] netlink: 'syz.4.2508': attribute type 83 has an invalid length. [ 290.624812][T14546] netlink: 'syz.4.2508': attribute type 83 has an invalid length. [ 291.303867][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2521'. [ 291.758215][T14607] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 291.823318][T14607] syzkaller1: entered promiscuous mode [ 291.837569][T14607] syzkaller1: entered allmulticast mode [ 292.713376][T14650] syzkaller1: entered promiscuous mode [ 292.737430][T14650] syzkaller1: entered allmulticast mode [ 292.902303][T14666] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 292.908857][T14665] syzkaller0: left promiscuous mode [ 292.921737][T14665] syzkaller0: left allmulticast mode [ 293.606528][T14713] netlink: 'syz.4.2561': attribute type 6 has an invalid length. [ 293.852684][T14730] block nbd3: not configured, cannot reconfigure [ 294.587626][T14768] __nla_validate_parse: 6 callbacks suppressed [ 294.587648][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'. [ 294.587882][T14772] tipc: Resetting bearer [ 294.696861][T14771] tipc: Resetting bearer [ 294.871697][T14784] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 294.966769][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'. [ 294.978249][T14784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.008399][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 295.015241][T14791] bond5: (slave veth1): Enslaving as an active interface with a down link [ 295.056420][T14784] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 295.200252][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 295.662136][ T8653] tipc: Resetting bearer [ 295.697877][T14833] mac80211_hwsim hwsim5 : renamed from wlan1 [ 295.808282][T14831] gtp0: entered promiscuous mode [ 295.821161][T14831] gtp0: entered allmulticast mode [ 295.992058][T14845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.182337][T14845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.212066][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'. [ 296.240003][T14861] openvswitch: netlink: Message has -2 unknown bytes. [ 296.269453][T14865] openvswitch: netlink: Message has -2 unknown bytes. [ 296.292101][T14845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.439943][T14845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.518133][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 296.838811][ T1153] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.872090][ T1153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.932708][ T8651] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.008056][ T8651] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.133998][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 297.155867][T14900] xt_cgroup: invalid path, errno=-2 [ 297.157382][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2614'. [ 297.165318][T14900] syzkaller1: entered promiscuous mode [ 297.185987][T14900] syzkaller1: entered allmulticast mode [ 297.262299][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 297.274009][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2614'. [ 298.348093][T14981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.426439][T14976] macsec1: entered promiscuous mode [ 298.432117][T14976] macsec1: entered allmulticast mode [ 298.438715][T14976] bond6: (slave macsec1): Error -34 calling dev_set_mtu [ 298.719366][T15005] tipc: Enabling of bearer rejected, failed to enable media [ 298.879165][T15013] openvswitch: netlink: Key 11 has unexpected len 845 expected 2 [ 299.036040][T15020] netlink: 'syz.2.2653': attribute type 12 has an invalid length. [ 299.228068][T15026] syzkaller0: entered promiscuous mode [ 299.244056][T15026] syzkaller0: entered allmulticast mode [ 299.637814][T15049] Cannot find del_set index 49151 as target [ 299.644955][T15050] Cannot find del_set index 49151 as target [ 299.654210][T15049] s5: renamed from vlan1 [ 299.697875][T15052] __nla_validate_parse: 3 callbacks suppressed [ 299.697910][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 299.780744][T15060] netlink: 'syz.2.2662': attribute type 16 has an invalid length. [ 299.796337][T15060] netlink: 'syz.2.2662': attribute type 3 has an invalid length. [ 299.805742][T15060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2662'. [ 300.068881][T15071] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2666'. [ 300.080289][T15069] netlink: 'syz.2.2665': attribute type 11 has an invalid length. [ 300.090300][T15069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2665'. [ 300.210604][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'. [ 300.320616][T15086] x_tables: duplicate underflow at hook 3 [ 300.330363][T15086] netlink: 'syz.1.2672': attribute type 11 has an invalid length. [ 300.531262][T15102] : entered promiscuous mode [ 300.653398][T15111] tipc: Resetting bearer [ 300.687807][T15111] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2680'. [ 300.759532][T15115] tipc: Resetting bearer [ 300.891308][T15129] netlink: 'syz.1.2687': attribute type 12 has an invalid length. [ 300.899589][T15129] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2687'. [ 300.911065][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 300.920472][T15129] bridge_slave_1: left allmulticast mode [ 300.926364][T15129] bridge_slave_1: left promiscuous mode [ 300.933901][T15129] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.945275][T15129] bridge_slave_0: left allmulticast mode [ 300.954850][T15129] bridge_slave_0: left promiscuous mode [ 300.962845][T15129] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.459863][T15162] openvswitch: netlink: EtherType 0 is less than min 600 [ 301.469925][T15159] netlink: 'syz.2.2694': attribute type 2 has an invalid length. [ 301.612741][T15164] bridge6: entered promiscuous mode [ 301.619066][T15164] bridge6: entered allmulticast mode [ 301.721752][T15171] block nbd2: Unsupported socket: should be TCP or UNIX. [ 301.810983][ T8660] tipc: Resetting bearer [ 301.914619][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'. [ 302.229503][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 302.241790][T15197] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 302.292528][T15199] gre2: entered promiscuous mode [ 302.317634][T15199] gre2: entered allmulticast mode [ 302.701056][T15228] tipc: Enabled bearer , priority 0 [ 302.711877][T15228] syzkaller0: entered promiscuous mode [ 302.730397][T15228] syzkaller0: entered allmulticast mode [ 302.767717][T15228] tipc: Resetting bearer [ 303.148869][T15249] netlink: 'syz.4.2718': attribute type 1 has an invalid length. [ 303.290964][T15258] sctp: [Deprecated]: syz.4.2722 (pid 15258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.290964][T15258] Use struct sctp_sack_info instead [ 303.605821][T15271] netlink: set zone limit has 4 unknown bytes [ 303.643156][T15281] netlink: 'syz.0.2727': attribute type 4 has an invalid length. [ 303.697810][T15283] syzkaller0: entered promiscuous mode [ 303.703512][T15283] syzkaller0: entered allmulticast mode [ 303.913717][T15294] pim6reg: entered allmulticast mode [ 304.613898][T15328] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 304.958796][T15345] __nla_validate_parse: 78 callbacks suppressed [ 304.958820][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 305.073319][T15348] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 305.250819][T15359] sctp: [Deprecated]: syz.1.2749 (pid 15359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.250819][T15359] Use struct sctp_sack_info instead [ 305.447799][T15365] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2753'. [ 305.553135][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.563661][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.573066][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.585592][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.593929][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.668921][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.682459][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.694718][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.708679][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.716692][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.924850][T15370] lo speed is unknown, defaulting to 1000 [ 306.049387][ T5846] syz_tun (unregistering): left allmulticast mode [ 306.176136][T14661] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 306.298737][T14661] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 306.376592][T14661] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 306.404144][T15413] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2762'. [ 306.414876][T15413] 8021q: VLANs not supported on ip_vti0 [ 306.464744][T14661] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 306.627591][T15416] netlink: 'syz.3.2763': attribute type 4 has an invalid length. [ 306.920500][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 307.106509][T14661] team0: left allmulticast mode [ 307.121924][T14661] team_slave_0: left allmulticast mode [ 307.137402][T14661] team_slave_1: left allmulticast mode [ 307.153184][T14661] batadv1: left allmulticast mode [ 307.173591][T14661] team0: left promiscuous mode [ 307.183499][T14661] team_slave_0: left promiscuous mode [ 307.198182][T14661] team_slave_1: left promiscuous mode [ 307.205394][T14661] batadv1: left promiscuous mode [ 307.215690][T14661] bridge0: port 3(team0) entered disabled state [ 307.245522][T14661] bridge_slave_1: left allmulticast mode [ 307.259610][T15444] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2771'. [ 307.268983][T14661] bridge_slave_1: left promiscuous mode [ 307.269285][T14661] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.311028][T15444] netlink: 'syz.1.2771': attribute type 1 has an invalid length. [ 307.325534][T14661] bridge_slave_0: left allmulticast mode [ 307.334099][T14661] bridge_slave_0: left promiscuous mode [ 307.338624][T15444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.348626][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.421160][T14661] tipc: Resetting bearer [ 307.808085][ T5843] Bluetooth: hci5: command tx timeout [ 308.089835][T14661] bond4 (unregistering): (slave gretap2): Releasing active interface [ 308.098855][T14661] gretap2 (unregistering): left allmulticast mode [ 308.192876][T14661] bond1 (unregistering): (slave geneve2): Releasing active interface [ 308.368627][T14661] tipc: Disabling bearer [ 308.644257][T14661] bond0 (unregistering): left promiscuous mode [ 308.650796][T14661] bond_slave_0: left promiscuous mode [ 308.656388][T14661] bond_slave_1: left promiscuous mode [ 308.664029][T14661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.674403][T14661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.684245][T14661] bond0 (unregistering): Released all slaves [ 308.698439][T14661] bond1 (unregistering): Released all slaves [ 308.804526][T14661] bond2 (unregistering): Released all slaves [ 308.818370][T14661] bond3 (unregistering): Released all slaves [ 308.943235][T14661] bond4 (unregistering): Released all slaves [ 309.050817][T14661] bond5 (unregistering): (slave veth1): Releasing active interface [ 309.062784][T14661] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 309.075361][T14661] bond5 (unregistering): Released all slaves [ 309.231226][T15482] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 309.392539][T14661] : left promiscuous mode [ 309.521495][T15370] chnl_net:caif_netlink_parms(): no params data found [ 309.623850][T14661] tipc: Disabling bearer [ 309.640144][T14661] tipc: Left network mode [ 309.705628][T15497] bond0: entered promiscuous mode [ 309.720953][T15497] bond_slave_0: entered promiscuous mode [ 309.736346][T15497] batadv0: entered promiscuous mode [ 309.747789][T15497] debugfs: 'hsr1' already exists in 'hsr' [ 309.754714][T15497] Cannot create hsr debugfs directory [ 309.761932][T15497] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 309.773089][T15497] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 309.784792][T15497] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 309.861479][T15515] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2785'. [ 309.888775][ T5843] Bluetooth: hci5: command tx timeout [ 309.938690][T15517] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2785'. [ 309.991431][T15517] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2785'. [ 310.286297][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.315318][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.336432][T15370] bridge_slave_0: entered allmulticast mode [ 310.356351][T15370] bridge_slave_0: entered promiscuous mode [ 310.545293][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.567297][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.585295][T15370] bridge_slave_1: entered allmulticast mode [ 310.600242][T15370] bridge_slave_1: entered promiscuous mode [ 310.621688][T14662] nci: nci_rsp_packet: unsupported rsp opcode 0xf01 [ 310.903634][T15370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.915968][T15554] netlink: 'syz.3.2790': attribute type 1 has an invalid length. [ 310.961892][T15370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.124744][T15370] team0: Port device team_slave_0 added [ 311.151333][T15370] team0: Port device team_slave_1 added [ 311.380559][T15370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.398536][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.477156][T15370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.618840][T15370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.625907][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.732679][T15370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.815418][T14661] batadv0: left promiscuous mode [ 311.859391][T14661] hsr_slave_0: left promiscuous mode [ 311.902598][T14661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.938524][T14661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.967131][ T5843] Bluetooth: hci5: command tx timeout [ 311.994825][T15602] netlink: 'syz.3.2803': attribute type 39 has an invalid length. [ 312.081673][T15609] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2807'. [ 312.082306][T15610] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2807'. [ 312.102375][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2805'. [ 312.118559][T14661] team0 (unregistering): Port device batadv1 removed [ 312.279607][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2808'. [ 312.622011][T14661] team0 (unregistering): Port device team_slave_1 removed [ 312.668198][T14661] team0 (unregistering): Port device team_slave_0 removed [ 313.005496][T15602] syz_tun (unregistering): left allmulticast mode [ 313.019972][T15602] syz_tun (unregistering): left promiscuous mode [ 313.026577][T15602] bridge0: port 4(syz_tun) entered disabled state [ 313.242179][T15370] hsr_slave_0: entered promiscuous mode [ 313.256305][T15370] hsr_slave_1: entered promiscuous mode [ 313.303887][T15370] debugfs: 'hsr0' already exists in 'hsr' [ 313.322519][T15370] Cannot create hsr debugfs directory [ 313.379781][T15637] openvswitch: netlink: Unknown key attributes 2 [ 313.669689][T15654] netlink: 'syz.2.2815': attribute type 2 has an invalid length. [ 313.701047][T15657] netlink: 'syz.2.2815': attribute type 2 has an invalid length. [ 313.911110][T14661] IPVS: stop unused estimator thread 0... [ 313.917480][T15664] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2818'. [ 313.973708][T15664] netlink: 'syz.1.2818': attribute type 11 has an invalid length. [ 314.047591][ T5843] Bluetooth: hci5: command tx timeout [ 314.068540][T15671] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 314.203727][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 314.260207][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2820'. [ 314.292796][T15671] bond7: entered promiscuous mode [ 314.306448][T15671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.425097][T15687] bond7: (slave bridge9): making interface the new active one [ 314.457751][T15687] bridge9: entered promiscuous mode [ 314.464682][T15687] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 314.829040][T15707] mac80211_hwsim hwsim7 : renamed from wlan1 [ 315.067234][T15728] x_tables: unsorted underflow at hook 1 [ 315.203682][T15727] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 315.331583][T15727] netlink: 'syz.3.2830': attribute type 3 has an invalid length. [ 315.493258][T15740] IPVS: persistence engine module ip_vs_pe_ not found [ 315.610965][T15370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.620497][T15750] netlink: 'syz.2.2835': attribute type 13 has an invalid length. [ 315.643571][T15370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.701188][T15753] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 315.896742][T15370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.022235][T15753] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.057876][T15761] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 316.067159][T15753] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 316.081343][T15761] bond8: entered allmulticast mode [ 316.108939][T15762] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.117360][T15762] syzkaller0: entered promiscuous mode [ 316.122954][T15762] syzkaller0: entered allmulticast mode [ 316.150674][T15370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.165319][T15756] tipc: Enabled bearer , priority 0 [ 316.206173][T15783] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 316.313956][T15748] tipc: Resetting bearer [ 316.459078][T15748] tipc: Disabling bearer [ 316.611086][T15808] syzkaller0: entered promiscuous mode [ 316.616623][T15808] syzkaller0: entered allmulticast mode [ 316.777411][T15819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'. [ 316.916369][T15370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.017964][T15370] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.069773][T14661] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.077086][T14661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.124062][T14661] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.131314][T14661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.160236][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 317.188226][T15832] openvswitch: netlink: Flow key attr not present in new flow. [ 317.334236][T15851] tipc: Resetting bearer [ 317.469928][T15845] tipc: Resetting bearer [ 317.515440][ T8651] tipc: Resetting bearer [ 317.741457][T15863] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.2855'. [ 317.867627][T15873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2857'. [ 318.106507][T15370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.121277][T15883] nbd: device at index 2 is going down [ 318.153060][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2860'. [ 318.201608][T15884] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 318.338404][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 318.372973][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 318.413214][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 318.456295][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 318.475750][T15371] udevd[15371]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 318.513008][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 318.594956][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.641104][T15883] lo speed is unknown, defaulting to 1000 [ 319.089680][T15922] xt_hashlimit: size too large, truncated to 1048576 [ 319.309545][T15370] veth0_vlan: entered promiscuous mode [ 319.360115][T15370] veth1_vlan: entered promiscuous mode [ 319.463153][T15370] veth0_macvtap: entered promiscuous mode [ 319.476367][T15948] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 319.524723][T15370] veth1_macvtap: entered promiscuous mode [ 319.557478][T15370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.590190][T15370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.621338][T14661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.652500][T14661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.678740][T14661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.702269][T14661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.188457][T14661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.196345][T14661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.397908][ T8651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.405796][ T8651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.192351][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.208120][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.227252][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.247898][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.255706][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.651637][T16002] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.659310][T16002] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.806378][T16002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.821896][T16002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.997326][ T8648] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.035619][ T8648] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.076405][ T8648] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.117342][ T8648] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.183176][T16004] lo speed is unknown, defaulting to 1000 [ 322.197386][T16027] ip6t_srh: unknown srh match flags 4000 [ 322.268481][T16033] ip6t_srh: unknown srh match flags 4000 [ 322.407583][T16038] __nla_validate_parse: 65 callbacks suppressed [ 322.407608][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'. [ 322.559077][T16048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 323.330261][ T5843] Bluetooth: hci4: command tx timeout [ 323.438844][T16070] syzkaller0: entered promiscuous mode [ 323.461916][T16070] syzkaller0: entered allmulticast mode [ 323.805319][T16082] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 323.840661][T16082] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 323.862021][T16082] gretap1: entered promiscuous mode [ 323.878202][T16082] gretap1: entered allmulticast mode [ 324.083209][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 324.196400][T16104] netlink: 'syz.3.2909': attribute type 10 has an invalid length. [ 324.205773][T16104] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2909'. [ 324.484463][T16004] chnl_net:caif_netlink_parms(): no params data found [ 324.655252][T16123] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2916'. [ 324.794222][T16131] team_slave_1: mtu less than device minimum [ 324.802164][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.811465][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.819128][T16004] bridge_slave_0: entered allmulticast mode [ 324.829652][T16004] bridge_slave_0: entered promiscuous mode [ 324.839625][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.847707][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.855247][T16004] bridge_slave_1: entered allmulticast mode [ 324.863582][T16004] bridge_slave_1: entered promiscuous mode [ 324.959307][T16004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.984623][T16004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.102097][T16004] team0: Port device team_slave_0 added [ 325.119551][T16004] team0: Port device team_slave_1 added [ 325.258092][T16004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.269490][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.301191][T16004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.328382][T16004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.335817][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.390369][T16004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.400533][T16164] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 325.409129][ T5843] Bluetooth: hci4: command tx timeout [ 325.421604][T16157] tipc: Enabling of bearer rejected, already enabled [ 325.490121][T16164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 325.578866][T16167] bond8: (slave geneve4): making interface the new active one [ 325.593310][T16167] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 325.653038][T16004] hsr_slave_0: entered promiscuous mode [ 325.663289][T16004] hsr_slave_1: entered promiscuous mode [ 325.670205][T16004] debugfs: 'hsr0' already exists in 'hsr' [ 325.676166][T16004] Cannot create hsr debugfs directory [ 325.844551][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2929'. [ 325.966912][T16185] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2931'. [ 325.989431][T16185] nbd: socks must be embedded in a SOCK_ITEM attr [ 326.090070][T16004] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.207322][T16004] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.342330][T16004] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.348226][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2936'. [ 326.522196][T16004] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.547522][T16214] xt_policy: too many policy elements [ 326.567252][T16214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2939'. [ 326.628040][T16218] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.767391][T16004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.786687][T16004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.815803][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 326.826179][T16004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.892679][T16004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.993468][T16229] netlink: 'syz.3.2944': attribute type 4 has an invalid length. [ 327.134439][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.192638][T16004] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.240442][T14661] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.247744][T14661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.302339][T14661] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.309618][T14661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.487288][ T5843] Bluetooth: hci4: command tx timeout [ 327.864402][T16004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.981881][T16004] veth0_vlan: entered promiscuous mode [ 328.013802][T16004] veth1_vlan: entered promiscuous mode [ 328.124537][T16004] veth0_macvtap: entered promiscuous mode [ 328.158835][T16004] veth1_macvtap: entered promiscuous mode [ 328.183954][T16308] netlink: 'syz.1.2965': attribute type 4 has an invalid length. [ 328.213815][T16004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.237067][T16308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2965'. [ 328.278339][T16308] `: renamed from bond0 (while UP) [ 328.309983][T16004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.323550][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 328.342261][ T8669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.360155][ T8669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.383442][ T8669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.405891][ T8669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.593115][T16320] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 328.694995][T16327] tipc: Resetting bearer [ 328.717341][T16326] tipc: Resetting bearer [ 328.737518][ T8645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.758220][ T8645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.821633][ T8645] tipc: Resetting bearer [ 328.893094][ T8651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.931697][ T8651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.940787][T16342] lo speed is unknown, defaulting to 1000 [ 329.211587][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 329.313974][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 329.459905][T16358] veth0_to_bond: entered allmulticast mode [ 329.486600][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.496605][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.510890][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.525472][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.535243][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.570387][ T5843] Bluetooth: hci4: command tx timeout [ 329.818667][T16359] lo speed is unknown, defaulting to 1000 [ 330.156037][T16379] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2988'. [ 331.118078][T16398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2993'. [ 331.336080][T16400] : entered promiscuous mode [ 331.577132][ T5843] Bluetooth: hci1: command tx timeout [ 331.858698][T16419] netlink: 'syz.1.2998': attribute type 12 has an invalid length. [ 332.035616][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2999'. [ 332.084935][T16359] chnl_net:caif_netlink_parms(): no params data found [ 332.296292][T16428] bond1 (unregistering): Released all slaves [ 332.557206][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3007'. [ 333.204482][T16466] veth1_macvtap: left promiscuous mode [ 333.248984][T16466] macsec0: entered promiscuous mode [ 333.254532][T16466] macsec0: entered allmulticast mode [ 333.275904][T16456] veth1_macvtap: entered promiscuous mode [ 333.288922][T16456] veth1_macvtap: entered allmulticast mode [ 333.295180][T16456] macsec0: left promiscuous mode [ 333.317602][T16456] macsec0: left allmulticast mode [ 333.337137][T16456] veth1_macvtap: left allmulticast mode [ 333.439569][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.447591][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.455189][T16359] bridge_slave_0: entered allmulticast mode [ 333.468123][T16359] bridge_slave_0: entered promiscuous mode [ 333.481295][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.488833][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.496219][T16359] bridge_slave_1: entered allmulticast mode [ 333.504615][T16359] bridge_slave_1: entered promiscuous mode [ 333.573504][T16479] sctp: [Deprecated]: syz.1.3011 (pid 16479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.573504][T16479] Use struct sctp_sack_info instead [ 333.654748][ T5843] Bluetooth: hci1: command tx timeout [ 333.664948][T16479] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3011'. [ 333.756896][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.767698][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'. [ 333.801804][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.822156][T16487] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 334.019564][T16359] team0: Port device team_slave_0 added [ 334.071564][T16359] team0: Port device team_slave_1 added [ 334.263731][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.283492][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.335251][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.349478][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.356464][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.386321][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.408630][T16514] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3021'. [ 334.419313][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 334.501352][T16518] syzkaller1: entered promiscuous mode [ 334.517079][T16518] syzkaller1: entered allmulticast mode [ 334.610171][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3023'. [ 334.651002][T16359] hsr_slave_0: entered promiscuous mode [ 334.660800][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 334.666035][T16359] hsr_slave_1: entered promiscuous mode [ 334.678812][T16359] debugfs: 'hsr0' already exists in 'hsr' [ 334.684605][T16359] Cannot create hsr debugfs directory [ 334.874244][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3026'. [ 334.985469][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 335.363724][T16558] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3030'. [ 335.500860][T16359] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.543536][T16359] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.590894][T16359] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 335.660196][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'. [ 335.730212][ T5843] Bluetooth: hci1: command tx timeout [ 335.773203][T16359] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.798600][T16359] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.822751][T16582] netlink: 'syz.0.3035': attribute type 83 has an invalid length. [ 335.825918][T16359] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 335.930406][T16587] netlink: 'syz.2.3037': attribute type 21 has an invalid length. [ 335.973816][T16359] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.003350][T16359] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.019717][T16359] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 336.160492][T16359] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.180742][T16359] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.197578][T16359] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 336.396610][T16615] netlink: 'syz.0.3044': attribute type 3 has an invalid length. [ 336.665862][T16626] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 336.689075][T16635] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 336.759570][T16636] FAULT_INJECTION: forcing a failure. [ 336.759570][T16636] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 336.774246][T16359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.804212][T16636] CPU: 1 UID: 0 PID: 16636 Comm: syz.0.3048 Not tainted syzkaller #0 PREEMPT(full) [ 336.804241][T16636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.804253][T16636] Call Trace: [ 336.804261][T16636] [ 336.804269][T16636] dump_stack_lvl+0x189/0x250 [ 336.804299][T16636] ? __pfx____ratelimit+0x10/0x10 [ 336.804320][T16636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.804344][T16636] ? __pfx__printk+0x10/0x10 [ 336.804372][T16636] ? __might_fault+0xb0/0x130 [ 336.804413][T16636] should_fail_ex+0x414/0x560 [ 336.804447][T16636] _copy_from_user+0x2d/0xb0 [ 336.804471][T16636] ___sys_sendmsg+0x158/0x2a0 [ 336.804499][T16636] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.804531][T16636] ? rcu_read_lock_any_held+0xb3/0x120 [ 336.804589][T16636] ? __fget_files+0x2a/0x420 [ 336.804612][T16636] ? __fget_files+0x3a0/0x420 [ 336.804648][T16636] __x64_sys_sendmsg+0x19b/0x260 [ 336.804673][T16636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.804705][T16636] ? __pfx_ksys_write+0x10/0x10 [ 336.804727][T16636] ? do_syscall_64+0xbe/0xf80 [ 336.804750][T16636] do_syscall_64+0xfa/0xf80 [ 336.804768][T16636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.804787][T16636] ? clear_bhb_loop+0x60/0xb0 [ 336.804812][T16636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.804830][T16636] RIP: 0033:0x7f9b01f8f749 [ 336.804848][T16636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.804865][T16636] RSP: 002b:00007f9b02d45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.804886][T16636] RAX: ffffffffffffffda RBX: 00007f9b021e5fa0 RCX: 00007f9b01f8f749 [ 336.804899][T16636] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 336.804912][T16636] RBP: 00007f9b02d45090 R08: 0000000000000000 R09: 0000000000000000 [ 336.804925][T16636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.804937][T16636] R13: 00007f9b021e6038 R14: 00007f9b021e5fa0 R15: 00007ffe65d6e6f8 [ 336.804973][T16636] [ 336.806557][T16359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.041779][T16359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.058712][T16359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.443909][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.536141][T16673] netlink: 'syz.0.3055': attribute type 11 has an invalid length. [ 337.554520][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.619491][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.627050][ T8656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.686472][T14662] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.693990][T14662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.807622][ T5845] Bluetooth: hci1: command tx timeout [ 337.905505][T16696] pim6reg: left allmulticast mode [ 338.258676][T16709] netlink: 'syz.0.3064': attribute type 3 has an invalid length. [ 338.294343][T16712] C: Caught tx_queue_len zero misconfig [ 338.748075][T16740] __nla_validate_parse: 6 callbacks suppressed [ 338.748105][T16740] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3074'. [ 338.826165][T16748] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 338.872367][T16740] 1{X: renamed from 30{X [ 338.891066][T16740] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 339.037868][T16751] bond1: (slave gretap1): making interface the new active one [ 339.065893][T16751] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 339.144816][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.298310][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3082'. [ 339.324317][T16359] veth0_vlan: entered promiscuous mode [ 339.404242][T16359] veth1_vlan: entered promiscuous mode [ 339.551416][T16359] veth0_macvtap: entered promiscuous mode [ 339.606913][T16359] veth1_macvtap: entered promiscuous mode [ 339.728557][T16359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.762376][T16793] netlink: 'syz.0.3087': attribute type 11 has an invalid length. [ 339.859327][T16790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.874172][T16790] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.888946][ T5845] Bluetooth: hci1: command 0x0405 tx timeout [ 339.906548][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 339.915734][T16790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.935398][T16359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.953984][T16798] veth1_to_bond: entered allmulticast mode [ 340.021251][T16801] `: (slave bond_slave_1): Releasing backup interface [ 340.029465][T16801] bond_slave_1 (unregistering): left promiscuous mode [ 340.066206][T16801] veth1_to_bond (unregistering): left allmulticast mode [ 340.096465][ T8645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.112676][ T8645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.125057][ T8645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.137555][ T8645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.305872][ T8651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.316896][ T8651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.368893][T16815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3094'. [ 340.377771][ T8651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.388899][ T8651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.614022][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3096'. [ 340.677893][T16825] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 340.944566][T16839] netlink: 'syz.4.3102': attribute type 1 has an invalid length. [ 341.016617][T16839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.035594][T16836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3101'. [ 341.076630][T16845] bond1: (slave veth5): Enslaving as an active interface with a down link [ 341.095914][T16839] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 341.128258][T16839] bond1: entered promiscuous mode [ 341.368747][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.379583][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.391386][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.406864][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.416156][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.428281][T16853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.454830][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3106'. [ 341.766190][T16862] delete_channel: no stack [ 342.045620][T16871] ipvlan2: entered promiscuous mode [ 342.059195][T16875] netlink: 'syz.4.3112': attribute type 9 has an invalid length. [ 342.060267][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 342.078810][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 342.107635][T16876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3111'. [ 342.265663][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.278782][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.286916][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.301116][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.317226][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.445551][T16880] lo speed is unknown, defaulting to 1000 [ 342.493397][T16901] netlink: 'syz.4.3119': attribute type 1 has an invalid length. [ 342.509621][T16898] sctp: [Deprecated]: syz.3.3118 (pid 16898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.509621][T16898] Use struct sctp_sack_info instead [ 342.806029][T16915] Cannot find add_set index 0 as target [ 342.919731][T16921] netlink: 'syz.3.3126': attribute type 2 has an invalid length. [ 343.014438][T16926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.817524][T16970] __nla_validate_parse: 2 callbacks suppressed [ 343.817544][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 343.847517][T16975] xt_TCPMSS: Only works on TCP SYN packets [ 343.894420][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3143'. [ 343.927418][T16974] FAULT_INJECTION: forcing a failure. [ 343.927418][T16974] name failslab, interval 1, probability 0, space 0, times 0 [ 343.947421][T16974] CPU: 1 UID: 0 PID: 16974 Comm: syz.3.3141 Not tainted syzkaller #0 PREEMPT(full) [ 343.947451][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.947463][T16974] Call Trace: [ 343.947472][T16974] [ 343.947482][T16974] dump_stack_lvl+0x189/0x250 [ 343.947512][T16974] ? __pfx____ratelimit+0x10/0x10 [ 343.947533][T16974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.947557][T16974] ? __pfx__printk+0x10/0x10 [ 343.947589][T16974] ? __pfx___might_resched+0x10/0x10 [ 343.947611][T16974] ? fs_reclaim_acquire+0x7d/0x100 [ 343.947641][T16974] should_fail_ex+0x414/0x560 [ 343.947678][T16974] should_failslab+0xa8/0x100 [ 343.947705][T16974] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 343.947737][T16974] ? __alloc_skb+0x255/0x430 [ 343.947765][T16974] ? napi_skb_cache_get+0x4a5/0x780 [ 343.947784][T16974] ? napi_skb_cache_get+0x151/0x780 [ 343.947809][T16974] __alloc_skb+0x255/0x430 [ 343.947834][T16974] ? __pfx___alloc_skb+0x10/0x10 [ 343.947868][T16974] netlink_dump+0x1b7/0xe90 [ 343.947901][T16974] ? __netlink_lookup+0xbd/0x8a0 [ 343.947932][T16974] ? __pfx_netlink_dump+0x10/0x10 [ 343.947952][T16974] ? __netlink_lookup+0x7db/0x8a0 [ 343.947997][T16974] ? netlink_lookup+0x30/0x200 [ 343.948019][T16974] ? netlink_lookup+0x30/0x200 [ 343.948040][T16974] ? netlink_lookup+0x30/0x200 [ 343.948071][T16974] __netlink_dump_start+0x5cb/0x7e0 [ 343.948115][T16974] rtnetlink_rcv_msg+0x9eb/0xb70 [ 343.948140][T16974] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 343.948166][T16974] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 343.948184][T16974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.948203][T16974] ? ref_tracker_free+0x63a/0x7d0 [ 343.948221][T16974] ? __pfx_rtnl_dumpit+0x10/0x10 [ 343.948240][T16974] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 343.948277][T16974] netlink_rcv_skb+0x208/0x470 [ 343.948302][T16974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.948327][T16974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.948367][T16974] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.948402][T16974] netlink_unicast+0x82f/0x9e0 [ 343.948437][T16974] ? __pfx_netlink_unicast+0x10/0x10 [ 343.948462][T16974] ? netlink_sendmsg+0x642/0xb30 [ 343.948485][T16974] ? skb_put+0x11b/0x210 [ 343.948511][T16974] netlink_sendmsg+0x805/0xb30 [ 343.948548][T16974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.948579][T16974] ? aa_sock_msg_perm+0xf1/0x1b0 [ 343.948606][T16974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.948625][T16974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.948652][T16974] __sock_sendmsg+0x21c/0x270 [ 343.948685][T16974] ____sys_sendmsg+0x505/0x820 [ 343.948717][T16974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.948761][T16974] ? import_iovec+0x74/0xa0 [ 343.948790][T16974] ___sys_sendmsg+0x21f/0x2a0 [ 343.948817][T16974] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.948850][T16974] ? rcu_read_lock_any_held+0xb3/0x120 [ 343.948909][T16974] ? __fget_files+0x2a/0x420 [ 343.948933][T16974] ? __fget_files+0x3a0/0x420 [ 343.948971][T16974] __x64_sys_sendmsg+0x19b/0x260 [ 343.948999][T16974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.949034][T16974] ? __pfx_ksys_write+0x10/0x10 [ 343.949059][T16974] ? do_syscall_64+0xbe/0xf80 [ 343.949085][T16974] do_syscall_64+0xfa/0xf80 [ 343.949106][T16974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.949126][T16974] ? clear_bhb_loop+0x60/0xb0 [ 343.949151][T16974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.949170][T16974] RIP: 0033:0x7fd814b8f749 [ 343.949189][T16974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.949207][T16974] RSP: 002b:00007fd815944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.949229][T16974] RAX: ffffffffffffffda RBX: 00007fd814de5fa0 RCX: 00007fd814b8f749 [ 343.949243][T16974] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 343.949257][T16974] RBP: 00007fd815944090 R08: 0000000000000000 R09: 0000000000000000 [ 343.949270][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.949282][T16974] R13: 00007fd814de6038 R14: 00007fd814de5fa0 R15: 00007fff7d0192c8 [ 343.949319][T16974] [ 344.368091][ T5843] Bluetooth: hci2: command tx timeout [ 344.416160][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 344.445833][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 344.466496][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3146'. [ 344.543333][T16880] chnl_net:caif_netlink_parms(): no params data found [ 344.728380][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 344.750149][T16999] bond2: Removing last ns target with arp_interval on [ 345.040672][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3152'. [ 345.070579][T16880] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.082758][T16880] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.090609][T16880] bridge_slave_0: entered allmulticast mode [ 345.102092][T16880] bridge_slave_0: entered promiscuous mode [ 345.126104][T16880] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.143765][T16880] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.152774][T16880] bridge_slave_1: entered allmulticast mode [ 345.169614][T16880] bridge_slave_1: entered promiscuous mode [ 345.380810][T16880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.405443][T16880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.418861][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 345.512819][T16880] team0: Port device team_slave_0 added [ 345.529338][T16880] team0: Port device team_slave_1 added [ 345.679404][T16880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.687607][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.687615][T17057] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3162'. [ 345.687642][T16880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.761576][T16880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.768936][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.775663][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'. [ 345.795801][T16880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.046799][T16880] hsr_slave_0: entered promiscuous mode [ 346.086661][T16880] hsr_slave_1: entered promiscuous mode [ 346.098403][T16880] debugfs: 'hsr0' already exists in 'hsr' [ 346.111769][T16880] Cannot create hsr debugfs directory [ 346.119862][T17076] netlink: 'syz.0.3165': attribute type 5 has an invalid length. [ 346.140949][T17069] netlink: 'syz.0.3165': attribute type 5 has an invalid length. [ 346.223042][T17076] geneve2: entered promiscuous mode [ 346.277440][T17076] geneve2: entered allmulticast mode [ 346.323851][ T8653] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 346.447528][ T5843] Bluetooth: hci2: command tx timeout [ 346.478525][ T8653] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 346.524063][ T8653] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 346.587626][ T8653] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 347.073185][T17097] lo: entered promiscuous mode [ 347.083228][T17097] lo: entered allmulticast mode [ 347.126896][T16880] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.174361][T17120] 8021q: VLANs not supported on ipvlan1 [ 347.182152][T17097] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 347.220473][T16880] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.349996][T16880] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.452398][T17138] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.466202][T17138] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.549301][T16880] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.852601][T17155] geneve3: entered promiscuous mode [ 347.864899][T17158] sctp: [Deprecated]: syz.1.3188 (pid 17158) Use of int in maxseg socket option. [ 347.864899][T17158] Use struct sctp_assoc_value instead [ 348.085949][T16880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.101398][T16880] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.143814][T16880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.168253][T16880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.454424][T16880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.534224][ T5843] Bluetooth: hci2: command tx timeout [ 348.554278][T16880] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.572283][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.579584][ T8669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.664844][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.672308][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.230837][T16880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.258157][T17235] syz_tun: entered allmulticast mode [ 349.289299][T17234] syz_tun: left allmulticast mode [ 349.376788][T16880] veth0_vlan: entered promiscuous mode [ 349.406232][T17241] __nla_validate_parse: 6 callbacks suppressed [ 349.406254][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3210'. [ 349.418529][T16880] veth1_vlan: entered promiscuous mode [ 349.469927][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'. [ 349.519990][T16880] veth0_macvtap: entered promiscuous mode [ 349.545737][ T5843] block nbd4: Receive control failed (result -1) [ 349.552208][T16880] veth1_macvtap: entered promiscuous mode [ 349.556443][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3211'. [ 349.718977][T16880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.768444][T16880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.831818][T14662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.858457][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.899958][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.021543][ T6018] IPVS: starting estimator thread 0... [ 350.049841][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.137134][T17266] IPVS: using max 29 ests per chain, 69600 per kthread [ 350.338571][T17268] syzkaller0: entered promiscuous mode [ 350.350179][T17268] syzkaller0: entered allmulticast mode [ 350.469281][T17281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 350.607973][ T5843] Bluetooth: hci2: command tx timeout [ 352.222188][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.242314][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.371224][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 352.383068][ T8667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.396789][ T8667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.476395][T17306] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3228'. [ 352.500598][T17306] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3228'. [ 352.526449][T17306] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3228'. [ 352.603643][T17312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.607753][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3228'. [ 353.153764][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.164616][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.174272][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.184554][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.192813][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.287691][T17342] lo speed is unknown, defaulting to 1000 [ 354.196127][T17363] lo speed is unknown, defaulting to 1000 [ 354.754842][T17342] chnl_net:caif_netlink_parms(): no params data found [ 354.963228][T17399] syzkaller0: entered promiscuous mode [ 354.969644][T17399] syzkaller0: entered allmulticast mode [ 355.045936][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.131150][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.233794][T17342] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.247539][ T5843] Bluetooth: hci3: command tx timeout [ 355.267784][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.286716][T17342] bridge_slave_0: entered allmulticast mode [ 355.319494][T17342] bridge_slave_0: entered promiscuous mode [ 355.354474][T17342] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.370568][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.378622][T17342] bridge_slave_1: entered allmulticast mode [ 355.389560][T17342] bridge_slave_1: entered promiscuous mode [ 355.475866][T17342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.505908][T17342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.719473][T17342] team0: Port device team_slave_0 added [ 355.738722][T17342] team0: Port device team_slave_1 added [ 355.902549][T17342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.919191][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.980342][T17342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.014492][T17433] pim6reg527: entered allmulticast mode [ 356.022764][T17342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.037026][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.100252][T17342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.105131][T17437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3263'. [ 356.441462][T17342] hsr_slave_0: entered promiscuous mode [ 356.455485][T17342] hsr_slave_1: entered promiscuous mode [ 356.464562][T17342] debugfs: 'hsr0' already exists in 'hsr' [ 356.477705][T17342] Cannot create hsr debugfs directory [ 356.922212][T17471] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 356.944715][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'. [ 356.999542][T17342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.028081][T17342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 357.046617][T17342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.063844][T17476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.103382][T17476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.322611][T17472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.332079][ T5843] Bluetooth: hci3: command tx timeout [ 357.342061][T17472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.351634][T17472] bond0 (unregistering): Released all slaves [ 357.379242][T17478] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 357.389679][T17478] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 357.445630][T17342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.457834][T17342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 357.470271][T17342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.482271][T17490] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3280'. [ 357.610531][T17342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.629697][T17342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 357.659087][T17495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 357.668361][T17342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.697567][T17497] netlink: 'syz.2.3282': attribute type 1 has an invalid length. [ 357.741967][T17497] batman_adv: batadv0: Adding interface: bond1 [ 357.750395][T17497] batman_adv: batadv0: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.777094][T17497] batman_adv: batadv0: Not using interface bond1 (retrying later): interface not active [ 357.795117][T17501] batman_adv: batadv0: Adding interface: ipvlan2 [ 357.801750][T17501] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.828061][T17501] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 357.864522][T17342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.879211][T17342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 357.892777][T17342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.936338][T17502] team0: No ports can be present during mode change [ 358.077759][T17513] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3286'. [ 358.107536][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3286'. [ 358.272758][T17516] xt_l2tp: v2 sid > 0xffff: 1114112 [ 358.346602][T17342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.401619][T17527] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3292'. [ 358.415105][T17342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.451472][T17342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.510578][T17342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.618922][T17528] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3290'. [ 358.714938][T17545] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3296'. [ 358.994862][T17342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.117213][T17342] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.172711][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 359.184431][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.191886][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.217484][T14662] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.224762][T14662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.414706][ T5843] Bluetooth: hci3: command tx timeout [ 359.418613][T17576] Bluetooth: MGMT ver 1.23 [ 359.674272][T17599] bond0: option min_links: invalid value (18446744073709551614) [ 359.722691][T17599] bond0: option min_links: allowed values 0 - 2147483647 [ 359.736520][T17599] bond0 (unregistering): Released all slaves [ 359.915701][T17342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.098380][T17342] veth0_vlan: entered promiscuous mode [ 360.141803][T17342] veth1_vlan: entered promiscuous mode [ 360.257486][T17627] tipc: Started in network mode [ 360.277137][T17627] tipc: Node identity faffffffffffffff06, cluster identity 4711 [ 360.353502][T17342] veth0_macvtap: entered promiscuous mode [ 360.389356][T17635] netlink: 'syz.2.3321': attribute type 7 has an invalid length. [ 360.400426][T17342] veth1_macvtap: entered promiscuous mode [ 360.408458][T17636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.418892][T17638] netlink: 'syz.2.3321': attribute type 7 has an invalid length. [ 360.456660][T17644] netlink: 'syz.0.3323': attribute type 4 has an invalid length. [ 360.490628][T17644] netlink: 'syz.0.3323': attribute type 29 has an invalid length. [ 360.502426][T17644] netlink: 'syz.0.3323': attribute type 29 has an invalid length. [ 360.545974][T17342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.699015][T17342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.742787][ T8648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.769987][T17659] erspan0: entered promiscuous mode [ 360.790161][T17659] gretap0: entered promiscuous mode [ 360.809269][T17659] debugfs: 'hsr1' already exists in 'hsr' [ 360.826531][T17659] Cannot create hsr debugfs directory [ 360.856760][ T8648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.900358][ T8648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.926507][ T8648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.188592][ T8669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.196671][ T8669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.281529][T17684] __nla_validate_parse: 5 callbacks suppressed [ 361.281550][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 361.296149][ T8648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.314121][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3335'. [ 361.339813][ T8648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.491022][ T5843] Bluetooth: hci3: command tx timeout [ 361.599409][T17693] block nbd5: server does not support multiple connections per device. [ 361.630862][T17693] block nbd5: shutting down sockets [ 361.828807][T17714] IPVS: Error connecting to the multicast addr [ 362.071073][T17728] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 362.117620][T17728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3348'. [ 362.158279][T17728] ip6_vti0: entered promiscuous mode [ 362.163836][T17728] ip6_vti0: entered allmulticast mode [ 362.370159][T17743] team_slave_0: entered promiscuous mode [ 362.376019][T17743] team_slave_1: entered promiscuous mode [ 362.415442][T17743] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 362.442975][T17743] team0: Device macvtap1 is already an upper device of the team interface [ 362.500756][T17743] team_slave_0: left promiscuous mode [ 362.506424][T17743] team_slave_1: left promiscuous mode [ 363.051588][T17783] tipc: Enabling of bearer rejected, failed to enable media [ 363.222158][T17797] IPVS: length: 177 != 8 [ 363.304396][T17803] Cannot find set identified by id 0 to match [ 363.571252][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 363.600679][T17813] syzkaller1: entered promiscuous mode [ 363.606220][T17813] syzkaller1: entered allmulticast mode [ 363.642826][T17813] netlink: 'syz.4.3376': attribute type 1 has an invalid length. [ 363.723729][T17824] netlink: 'syz.2.3378': attribute type 16 has an invalid length. [ 363.757805][T17824] netlink: 'syz.2.3378': attribute type 17 has an invalid length. [ 363.893450][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.902922][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.089668][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.110312][T17824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.292639][T17843] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3382'. [ 364.400705][T17832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.413149][T17832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.455502][ T8669] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.487700][ T8669] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.504677][ T8669] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.525808][ T8669] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.624239][T17832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.639863][T17832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.721803][T17864] netlink: 'syz.4.3387': attribute type 39 has an invalid length. [ 364.739707][ T8653] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 364.961244][T17867] netlink: 'syz.1.3388': attribute type 83 has an invalid length. [ 365.001107][T17832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.016729][T17832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 365.032084][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'. [ 365.161971][T17878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3392'. [ 365.201502][T17832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.217503][T17832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 365.282883][T17884] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3394'. [ 365.299260][T17880] netlink: 'syz.3.3393': attribute type 10 has an invalid length. [ 365.316206][T17880] netlink: 'syz.3.3393': attribute type 2 has an invalid length. [ 365.354189][T17886] openvswitch: netlink: Duplicate or invalid key (type 0). [ 365.358085][T17884] Cannot find add_set index 0 as target [ 365.377732][T17886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.450427][ T8669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 365.471365][ T8669] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 365.558724][T17893] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3397'. [ 365.570834][ T8653] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 365.580312][ T8653] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 365.597288][T17896] tipc: Started in network mode [ 365.607027][T17896] tipc: Node identity d2111b2298b6, cluster identity 4711 [ 365.617547][T17896] tipc: Enabled bearer , priority 0 [ 365.635762][T17897] syzkaller0: entered promiscuous mode [ 365.646819][T17897] syzkaller0: entered allmulticast mode [ 365.707348][T17902] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 365.724818][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 365.747792][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 365.775331][T17891] tipc: Resetting bearer [ 365.796183][T17916] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3401'. [ 365.861373][T17891] tipc: Disabling bearer [ 365.931922][ T3442] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 365.958629][ T3442] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.199496][T17932] openvswitch: netlink: EtherType 0 is less than min 600 [ 366.445592][T17949] netlink: 'syz.4.3411': attribute type 29 has an invalid length. [ 366.757785][T17960] syzkaller1: entered promiscuous mode [ 366.774037][T17960] syzkaller1: entered allmulticast mode [ 366.972062][T17968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.135331][T17978] __nla_validate_parse: 1 callbacks suppressed [ 367.135353][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3420'. [ 367.200714][T17975] netlink: 'syz.4.3419': attribute type 64 has an invalid length. [ 367.209073][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3419'. [ 367.267965][T17979] netlink: 'syz.4.3419': attribute type 64 has an invalid length. [ 367.281374][T17979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3419'. [ 367.292265][T17984] sctp: [Deprecated]: syz.3.3421 (pid 17984) Use of int in maxseg socket option. [ 367.292265][T17984] Use struct sctp_assoc_value instead [ 367.319924][T17984] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 367.496031][T17991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3424'. [ 367.612749][T18006] openvswitch: netlink: IP tunnel dst address not specified [ 367.724453][T18018] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3430'. [ 367.742275][T18018] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3430'. [ 368.124172][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3435'. [ 368.665277][T18060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3441'. [ 368.863512][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 369.062191][T18084] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 369.187905][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 369.516195][T18113] bond0 (unregistering): Released all slaves [ 369.602450][T18115] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 369.611534][T18115] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 369.796908][T18134] batman_adv: batadv0: Adding interface: dummy0 [ 369.817492][T18134] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.876351][T18134] batman_adv: batadv0: Interface activated: dummy0 [ 370.439383][T18167] IPv6: sit1: Disabled Multicast RS [ 370.467889][T18167] sit1: entered allmulticast mode [ 370.726451][T18189] netlink: 'syz.0.3473': attribute type 23 has an invalid length. [ 370.835867][T18192] syzkaller1: entered allmulticast mode [ 370.966230][T18207] netlink: 'syz.0.3477': attribute type 10 has an invalid length. [ 371.022240][T18207] team0: Port device dummy0 added [ 372.121934][T18275] openvswitch: netlink: Missing key (keys=40, expected=100) [ 372.138971][T18274] __nla_validate_parse: 73 callbacks suppressed [ 372.138992][T18274] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3500'. [ 372.167615][T18274] openvswitch: netlink: Missing key (keys=40, expected=100) [ 372.175332][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3500'. [ 372.329520][T18282] syzkaller0: entered promiscuous mode [ 372.335068][T18282] syzkaller0: entered allmulticast mode [ 372.348617][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3505'. [ 372.392874][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3505'. [ 372.470650][T18299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'. [ 372.590697][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 372.603507][T18282] tipc: Started in network mode [ 372.611884][T18282] tipc: Node identity 02826ca10acd, cluster identity 4711 [ 372.620489][T18282] tipc: Enabled bearer , priority 0 [ 372.688125][ T5843] Bluetooth: hci3: command tx timeout [ 372.700521][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'. [ 372.713521][T18312] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 372.727442][T18281] tipc: Resetting bearer [ 372.860023][T18281] tipc: Disabling bearer [ 373.080263][T18335] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3516'. [ 373.294776][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3518'. [ 373.336503][T18348] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 373.372252][T18348] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 373.386741][T18348] team0: Failed to send options change via netlink (err -105) [ 373.405546][T18348] team0: Port device batadv1 added [ 373.432950][T18354] netlink: 'syz.0.3522': attribute type 39 has an invalid length. [ 373.789278][T18364] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 373.854444][T18370] pim6reg1: entered promiscuous mode [ 373.880100][T18370] pim6reg1: entered allmulticast mode [ 373.990286][T18364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.213680][T18389] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3531'. [ 374.332423][T18394] gre0: entered promiscuous mode [ 374.531968][T18402] netlink: 'syz.3.3537': attribute type 6 has an invalid length. [ 374.650434][T18404] netlink: 'syz.0.3538': attribute type 2 has an invalid length. [ 374.671727][T18404] netlink: 'syz.0.3538': attribute type 7 has an invalid length. [ 375.939548][T18443] Bluetooth: MGMT ver 1.23 [ 376.133970][T18454] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 376.192965][T18457] netlink: 'syz.1.3551': attribute type 30 has an invalid length. [ 376.275341][T18458] bond3: (slave gretap1): making interface the new active one [ 376.298136][T18458] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 376.356431][T18463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.374266][T18470] netlink: 'syz.3.3557': attribute type 11 has an invalid length. [ 376.405244][T18457] bond1: option arp_missed_max: invalid value (0) [ 376.423683][T18457] bond1: option arp_missed_max: allowed values 1 - 255 [ 376.434817][T18457] bond1 (unregistering): Released all slaves [ 376.764191][T18490] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 376.778747][T18490] netlink: 'syz.4.3564': attribute type 15 has an invalid length. [ 377.234835][T18520] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 377.514694][T18536] __nla_validate_parse: 11 callbacks suppressed [ 377.514716][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 377.682425][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3582'. [ 377.738975][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888034e98c00: connection exists (00 00). last cmd: 14 [ 377.752186][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88806a141400: connection exists (00 00). last cmd: 14 [ 377.763747][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806a141400: 0x00000: (1) Already in one or more connection managed sessions and cannot support another. [ 377.800960][T18552] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 377.830704][T18560] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3587'. [ 377.881902][T18546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.006687][T18546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.053282][T18569] netlink: 163948 bytes leftover after parsing attributes in process `syz.2.3590'. [ 378.145646][T18572] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3591'. [ 378.161051][T18572] xt_policy: neither incoming nor outgoing policy selected [ 378.178518][T18546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.234013][T18578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3593'. [ 378.363742][T18546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.433212][T18584] netlink: 'syz.2.3594': attribute type 2 has an invalid length. [ 378.477248][T18583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3594'. [ 378.488020][T18583] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3594'. [ 378.497438][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 378.698931][ T1153] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.705179][T18592] Cannot find set identified by id 0 to match [ 378.743536][ T1153] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.828034][ T8649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.880924][ T8649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.110016][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 379.469233][T18618] netlink: 'syz.0.3605': attribute type 16 has an invalid length. [ 379.478520][T18618] netlink: 'syz.0.3605': attribute type 17 has an invalid length. [ 379.532156][T18618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.552467][T18621] net veth1_virt_wifi .: renamed from virt_wifi0 [ 379.743884][T18640] Cannot find add_set index 65532 as target [ 380.146676][T18663] syz_tun: entered allmulticast mode [ 380.308855][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.316728][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.426508][T18663] bridge_slave_0: left allmulticast mode [ 380.433028][T18663] bridge_slave_0: left promiscuous mode [ 380.441358][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.459982][T18663] bridge_slave_1: left allmulticast mode [ 380.465861][T18663] bridge_slave_1: left promiscuous mode [ 380.472680][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.488803][T18663] bond0: (slave bond_slave_0): Releasing backup interface [ 380.504760][T18663] bond0: (slave bond_slave_1): Releasing backup interface [ 380.522362][T18663] team0: Port device team_slave_0 removed [ 380.537710][T18663] team0: Port device team_slave_1 removed [ 380.547881][T18663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.559630][T18663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.573444][T18663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.585665][T18663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.602488][T18663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.681704][T18680] pim6reg: entered allmulticast mode [ 380.891327][T18691] netlink: 'syz.0.3627': attribute type 1 has an invalid length. [ 380.928213][T18694] xt_hashlimit: max too large, truncated to 1048576 [ 381.521245][ T8649] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.532393][T18716] tipc: Started in network mode [ 381.537577][T18716] tipc: Node identity ac141429, cluster identity 4711 [ 381.544658][T18716] tipc: New replicast peer: 255.255.255.255 [ 381.555828][T18716] tipc: Enabled bearer , priority 10 [ 381.562878][ T8649] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.577057][ T8649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.587429][ T8649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.079459][T18744] team0: Device gtp0 is up. Set it down before adding it as a team port [ 382.139982][T18742] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 382.233020][T18747] netlink: 'syz.4.3647': attribute type 83 has an invalid length. [ 382.566406][T18769] netlink: 'syz.4.3653': attribute type 3 has an invalid length. [ 382.667634][ T6018] tipc: Node number set to 2886997033 [ 382.786052][T18771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.014053][T18786] __nla_validate_parse: 44 callbacks suppressed [ 383.014073][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3661'. [ 383.043228][T18785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3659'. [ 383.099850][T18789] lo: left promiscuous mode [ 383.108291][T18789] lo: left allmulticast mode [ 383.113641][T18789] gre0: left promiscuous mode [ 383.385401][ T8648] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.396063][ T8648] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.406073][T18799] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3665'. [ 383.421459][ T8648] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.441521][ T8648] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.086224][T18844] netlink: 'syz.2.3677': attribute type 4 has an invalid length. [ 384.375059][T18850] tipc: Enabling of bearer rejected, failed to enable media [ 384.540488][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 385.355584][T18875] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 385.569496][T18885] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3691'. [ 385.942769][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'. [ 386.101050][T18903] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 386.760210][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3705'. [ 386.773613][T18937] tipc: Invalid UDP bearer configuration [ 386.773682][T18937] tipc: Enabling of bearer rejected, failed to enable media [ 386.931954][T18945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3710'. [ 386.941922][T18945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3710'. [ 386.960161][T18947] xt_connbytes: Forcing CT accounting to be enabled [ 387.061695][T18952] netlink: 'syz.2.3712': attribute type 1 has an invalid length. [ 387.096901][T18952] netlink: 'syz.2.3712': attribute type 18 has an invalid length. [ 387.142556][ T8645] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.157992][ T8645] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.238492][ T8645] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.313597][ T8645] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.337219][T18966] netlink: 'syz.4.3717': attribute type 29 has an invalid length. [ 387.381513][T18966] netlink: 'syz.4.3717': attribute type 29 has an invalid length. [ 387.398829][T18966] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3717'. [ 387.471596][T18970] netlink: 'syz.0.3719': attribute type 8 has an invalid length. [ 387.493998][T18981] netlink: 'syz.2.3722': attribute type 2 has an invalid length. [ 387.741033][T18996] netlink: 'syz.3.3727': attribute type 2 has an invalid length. [ 388.010782][ T3442] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.021025][T19012] __nla_validate_parse: 2 callbacks suppressed [ 388.021045][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3733'. [ 388.037909][ T3442] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.052794][ T3442] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.072117][ T3442] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.242554][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3735'. [ 388.270676][T19016] netlink: 'syz.2.3735': attribute type 5 has an invalid length. [ 388.302517][T19016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3735'. [ 388.322827][T19016] geneve2: entered promiscuous mode [ 388.329579][T19016] geneve2: entered allmulticast mode [ 388.338496][T14662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 388.347812][T14662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 388.361461][T14662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 388.389991][T14662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 388.410666][T19033] netlink: 'syz.3.3740': attribute type 63 has an invalid length. [ 388.538097][T19041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3744'. [ 388.848030][T19051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3747'. [ 388.935637][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3754'. [ 389.044726][T19072] bond1: option all_slaves_active: invalid value (7) [ 389.062283][T19072] bond1 (unregistering): Released all slaves [ 389.110821][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 389.338432][ T1153] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd7 [ 389.423942][T19104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3762'. [ 389.609087][T19087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.635226][T19111] netlink: 'syz.3.3763': attribute type 10 has an invalid length. Connection to 10.128.1.29 closed by remote host. [ 389.736883][T19111] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 390.602195][T19110] syz_tun (unregistering): left allmulticast mode [ 391.026281][ T1153] bridge_slave_1: left allmulticast mode [ 391.033016][ T1153] bridge_slave_1: left promiscuous mode [ 391.039008][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.050640][ T1153] bridge_slave_0: left allmulticast mode [ 391.056638][ T1153] bridge_slave_0: left promiscuous mode [ 391.062937][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.480519][ T1153] bond1 (unregistering): (slave veth5): Releasing active interface [ 391.492164][ T1153] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 391.503056][ T1153] bond1 (unregistering): Released all slaves [ 391.516251][ T1153] bond2 (unregistering): Released all slaves [ 391.603254][ T1153] tipc: Disabling bearer [ 391.609278][ T1153] tipc: Left network mode [ 392.098515][ T1153] hsr_slave_0: left promiscuous mode [ 392.104567][ T1153] hsr_slave_1: left promiscuous mode [ 392.121992][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.130154][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.138367][ T1153] batman_adv: batadv0: Interface deactivated: dummy0 [ 392.145857][ T1153] batman_adv: batadv0: Removing interface: dummy0 [ 392.462648][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 392.502890][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 393.220495][ T1153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.232077][ T1153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.299032][ T1153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.309503][ T1153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.372157][ T1153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.383022][ T1153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.460372][ T1153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.471087][ T1153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.554114][ T1153] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.564259][ T1153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.575826][ T1153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.635132][ T1153] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.645235][ T1153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.655933][ T1153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.712846][ T1153] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.723305][ T1153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.733399][ T1153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.782314][ T1153] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.792692][ T1153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 393.803622][ T1153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 393.886271][ T1153] bridge_slave_1: left allmulticast mode [ 393.892474][ T1153] bridge_slave_1: left promiscuous mode [ 393.898266][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.907210][ T1153] bridge_slave_0: left allmulticast mode [ 393.912902][ T1153] bridge_slave_0: left promiscuous mode [ 393.918936][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.932024][ T1153] bridge_slave_1: left allmulticast mode [ 393.938187][ T1153] bridge_slave_1: left promiscuous mode [ 393.943896][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.954870][ T1153] bridge_slave_0: left allmulticast mode [ 393.960762][ T1153] bridge_slave_0: left promiscuous mode [ 393.966665][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.131007][ T1153] erspan0 (unregistering): left promiscuous mode [ 394.150404][ T1153] gretap0 (unregistering): left promiscuous mode [ 394.270018][ T1153] batman_adv: batadv0: Removing interface: ipvlan2 [ 394.547487][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.558646][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.568553][ T1153] bond0 (unregistering): Released all slaves [ 394.582312][ T1153] batman_adv: batadv0: Removing interface: bond1 [ 394.589771][ T1153] bond1 (unregistering): Released all slaves [ 394.603650][ T1153] bond2 (unregistering): Released all slaves [ 394.741008][ T1153] bond1 (unregistering): (slave gretap1): Releasing active interface [ 395.095411][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.107124][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.116538][ T1153] bond0 (unregistering): Released all slaves [ 395.130220][ T1153] bond1 (unregistering): Released all slaves [ 395.143723][ T1153] bond2 (unregistering): Released all slaves [ 395.276443][ T1153] tipc: Left network mode [ 395.289991][ T1153] tipc: Left network mode [ 396.228756][ T1153] hsr_slave_0: left promiscuous mode [ 396.234913][ T1153] hsr_slave_1: left promiscuous mode [ 396.252326][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.260490][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.278684][ T1153] hsr_slave_0: left promiscuous mode [ 396.284796][ T1153] hsr_slave_1: left promiscuous mode [ 396.291964][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.299890][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.309195][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.316732][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.338967][ T1153] veth1_macvtap: left promiscuous mode [ 396.345588][ T1153] veth0_macvtap: left promiscuous mode [ 396.351561][ T1153] veth1_vlan: left promiscuous mode [ 396.358738][ T1153] veth0_vlan: left promiscuous mode [ 396.820725][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 396.866220][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 397.311685][ T1153] pim6reg (unregistering): left allmulticast mode [ 397.721754][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 397.770745][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 398.078077][ T1153] team0 (unregistering): Port device dummy0 removed [ 398.638512][ T1153] IPVS: stop unused estimator thread 0...