last executing test programs: 1.031563663s ago: executing program 0 (id=11324): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32, @ANYBLOB="38002f800c00020000000000000000000800010000e103800600010000000000080002000200000008000100"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x28, 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r4], 0x5c}}, 0x800) 869.003564ms ago: executing program 0 (id=11329): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10000, 0x68620}, [@IFLA_WEIGHT={0x8, 0xf, 0xfff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x20040800) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'geneve0\x00'}) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000180)='geneve0\x00', 0x28600, &(0x7f00000001c0)={@_ha_fsid={[0x8001, 0x2]}, {0x0, 0x5, 0x3, 0x81}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0xa}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) r6 = getuid() sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=@expire={0x220, 0x18, 0x200, 0x70bd28, 0x25dfdbfc, {{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xb2, 0x4e22, 0xff, 0x2, 0x0, 0x80, 0x2f, r5, r6}, {@in=@remote, 0x4d5, 0x6c}, @in=@rand_addr=0x64010100, {0x3, 0x6, 0x5, 0x0, 0x0, 0x5, 0x800, 0x53f}, {0x9, 0x80000000, 0xff, 0x4}, {0x54d, 0x8, 0x8001}, 0x70bd2b, 0x3500, 0x2, 0x2, 0x1, 0x41}, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth={0x112, 0x1, {{'blake2s-128\x00'}, 0x650, "c4cb9cc324058523611d68564e0dc10ab9ade50e145c1ee9624147a723571de453f2d5c361789b6a832e092ee019e5c01eb6f8185dd21b0c14d68b92a6eeba20b7aac7f64bed5fe077199271054e9e904b49327c7a5e6dacc5ef3a8c12b9fbfde36c0aadf553946f92814e6d4daca1354d38cb64289bdc5f35b136c9d6926cf8b2205707504ec3d09231ad97985fc858037fc4618d844e61516a5479b57d367e1b0fd43d0a1bbc1833ae7f8f80d46dfbff38ffb2abc43a5886c3a5fa380322dbe776f771721a1f446300"}}, @offload={0xc, 0x1c, {r1, 0x2}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40000}, 0x84) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$xdp(r2, &(0x7f0000000600)={0x2c, 0xb, r5, 0x28, r3}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000680)=""/96, &(0x7f0000000700)=0x60) write$tun(r2, &(0x7f0000000740)={@val={0x0, 0x884c}, @void, @eth={@remote, @local, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @generic={0x306, 0x1, 0x6, 0x6, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "82047ae0aa93", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, "207405"}}}}}, 0x33) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xea49876352879363}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x627faff3c9303a8e) (async, rerun: 32) write$nci(r2, &(0x7f0000000880)=@DATA={0x2, 0x0, 0x0, 0x0, 0xd3, "ef93317d72f0675f3b72000e539ef14f5c55fa66c1a06cf01c660b11ed465cd49abd430a853afd285d8792dc53f4a5fd336abdfaf799893339b4060615f505bfdc7f5a38f7aa8007e337a3f46701d0e91a33c32e2c3cc967a6a8f5227c25f290aac052016f10b3c614559323e03444dae423ecb2b056ee5300c246af7d6debd3d852588bdce9697b90b641af0a072805e206704b65554a2473a1b0237c96db057351817d231fc4d80055606bf699390776fb3253eec5d2ca0711a76e0939523c340269ca314e38"}, 0xca) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800500}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@bridge_dellink={0x48, 0x11, 0x100, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x49413, 0x400}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "339e57459519a88a149234044a3f65"}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'batadv0\x00', @ifru_data=&(0x7f0000000ac0)="c8eff6cc81eeb741be31425396de0f9ea71b1f8f3f087e70080fece82c3a7bee"}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r2, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e80)={r2, r5, 0x25, 0xe, @val=@target_btf_id=r11}, 0x14) (async) connect$can_j1939(r2, &(0x7f0000000ec0)={0x1d, r10, 0x3, {0x0, 0xf0, 0x3}, 0xfc}, 0x18) (async) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f00), 0x2000, 0x0) write$ppp(r13, &(0x7f0000000f40)="883fc775aa3ce6f95992f6e51243874ecf2250f9cc0f5fe61976b8449df4a1789ccbb3fb815324f41656b44f", 0x2c) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000f80), r2) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r12, 0x82307202, &(0x7f0000000fc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001200)={{{@in=@multicast2, @in6=@ipv4}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000001300)=0xe8) 862.862597ms ago: executing program 2 (id=11330): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x6, 'cpuset'}, {0x2d, 'io'}, {0x2d, 'cpuset'}, {0x0, 'rdma'}, {0x2d, 'cpuset'}, {0x2b, 'perf_event'}, {0x2d, 'rdma'}]}, 0x34) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x8, 0x1, 0xfc, 0x4, 0x8, 0x74e7}, &(0x7f00000000c0)=0x20) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)={0x0, "dbc563"}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='veth0_to_bond\x00') ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000006c0)={{r1, &(0x7f0000000200)='!{-([+\x00', 0x8c403, &(0x7f0000000240)={@align=0x1ff, {0x6, 0x5, 0x3ff, 0x2}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x9}, 0x3, &(0x7f0000000640)=[{0x1, 0x8, &(0x7f0000000300)='perf_event', &(0x7f0000000340)="f9de363c75ac3f5ec89a80dba509721b9a8483193bfc2e1cdce8347712d3d651899293726dbdc45ee92031acbe45b662b5843b0d3eb88dd40c5be5744e331f7adcb3157de72a88c8b741e7e6d26e1ca0e8dbc05986be5a64bd02c0c2b8669340cd91e646ce39eaebb35bf1fcbd4b9ae14f2d564362927c5aee6be615f9202365e5a9987caf9e1e719c916e69916c4fd8b9617eb683833b3c6c73c945ecb6d6b9ada9fad4b0d7160305413130b07a174a5fce7668b1d684efc069", 0xba, 0x30}, {0x1, 0x80000000, &(0x7f0000000400)='\x00', &(0x7f0000000440)="fff41a1872102ee9676e876fc339530491364c9fb35c2ab6fcea6a562ec1294ff5c86722916e264edb14906c0a0294885d5fd2df77310434fb340047209918a079f8ddb262fbb9c8ad437a818e100e110078b634543ecbb6fd668660de9e799ed65296fa2935efb57142cdf0921fcdf9bd3c03059d2a260312f42b9efac940f34ad97c142a584405b0b62865173978ead25469bb17ea4bd4080a8c1b4efbfc3a0abad151efff2ea862ee80abb2907afb8902bf199c556649b4ec92d1aaa0d5c391cb987e5d18cb7f8e", 0xc9, 0x38}, {0x3, 0x1, &(0x7f0000000540)='\x00', &(0x7f0000000580)="bc99f7f8480dcf06bfb56f2aebf1d7668772688b9b2ff7b05327f6fd7b9c86e4faac5c1ef313a6d0bc90adee6a59ea1a913a230232c4069d4ee4304759ee7656774b7aa0430de248cac21eb8cf6376e29bf25d788a2b655d61617fb1cf32259dd97e19f3bfac003b22fb63ea1c96c998a27cc9a35d4f4fcb90d0e6aef3cb0e9ea60d1377f10ca8", 0x87, 0x52}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', r2, 0x700, 0x7, 0x401, 0x8, {{0x2b, 0x4, 0x1, 0x1, 0xac, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x58, 0x1, 0x0, [{@multicast1, 0x101}, {@remote, 0x5}, {@empty, 0x7}, {@private=0xa010100, 0x77}, {@empty, 0x1ff}, {@loopback, 0x7}, {@multicast1, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@empty, 0x80000000}, {@empty, 0x1}]}, @timestamp={0x44, 0x24, 0x19, 0x0, 0x1, [0x7, 0x6, 0xada, 0x9, 0x780c, 0x3, 0x9, 0xa98]}, @rr={0x7, 0x13, 0xab, [@broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100, @multicast1]}, @rr={0x7, 0xb, 0xa8, [@loopback, @empty]}, @end, @end]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x0, 0xca, 0xf6, &(0x7f0000000880)="ffb17d1623c2f304886cdcba6705f2075a8c553d170739b0240d52ce22010de941e645d4752420e4a3b4eac4998fdffbfe6b3f5be1647651c306025a91a7003fe52f0e043b3a9bdea2ce7374b75ac636903118c7625523dd1b4c2b7fc28edada52cb4cccf897d148fb17bbd6fd550df705eade7391efeb9d82a051af416aef7dac1b9c8fa04148f0bf492b15c10482d3b7a97c9f6c2d76a93dcdebd7dd37936625e80305b9c193607f46d6d68870d11458ba3fe5b98cb45ce7647398c9a27a7d12cf3f0cdf059d9dbfcf", &(0x7f0000000980)=""/246, 0x5, 0x0, 0x94, 0x2c, &(0x7f0000000a80)="ef81bb19b7b721d17e79c7fe0dba4630bcc9524077ccd298f518820df7352a2d675a95e30c7571081d44a42d98c762cbb85d37f5769320aa5ca9cee32b7e634d48495fcd82a15f9c6767411503bd7772d3e1a0dc2deeb0af1e72cc9dba2894389f83c2c6f2b72cdcd0417560a75d892d91d52cf8231a36e26f50a41d349ef3fd19c89104876101781f9e1b3aeb5350424fb17e77", &(0x7f0000000b40)="b20b1ec0b20d26c8bab889fdba7cc14ac4561ab5ff988a79abefba7e02eb6cee2abfee305191f21ad325e1b9", 0x4, 0x0, 0xb}, 0x50) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000c00)={0x7e37fae604284005, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x18) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000c40)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000cc0)=0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r3) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @dev}, &(0x7f0000000dc0)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8430}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xffff}, @ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8001) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000f40)=""/86, &(0x7f0000000fc0)=0x56) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000001000)=0x80, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) getsockopt$inet6_mreq(r5, 0x29, 0x599061e9b4872ef3, &(0x7f0000001080)={@initdev, 0x0}, &(0x7f00000010c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001180)={'ip6tnl0\x00', &(0x7f0000001100)={'ip6tnl0\x00', r4, 0x2f, 0x2, 0xf6, 0x868, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x7fffffff, 0x7}}) r11 = getpid() sendmsg$nl_route(r6, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)=@getlink={0x8c, 0x12, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x4a000, 0x24000}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_IFALIAS={0x14, 0x14, 'vcan0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_WEIGHT={0x8, 0xf, 0x40}, @IFLA_NET_NS_PID={0x8, 0x13, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}, @IFLA_PHYS_SWITCH_ID={0xa, 0x24, "76dd63b5759d"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5e746e0}, @IFLA_EXT_MASK={0x8, 0x1d, 0x800}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000054) write$cgroup_subtree(r0, &(0x7f0000001300)={[{0x2d, 'blkio'}, {0x2d, 'memory'}]}, 0xf) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001340), &(0x7f0000001380)=0x4) connect$rxrpc(r3, &(0x7f00000013c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010100}}, 0x24) ioctl$XFS_IOC_GETBMAPA(r6, 0xc020582c, &(0x7f0000001400)={0xdf, 0x5, 0x9, 0xf51, 0x5}) sendmsg$NFT_BATCH(r3, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x4c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_DATA={0x1c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x3a}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x9100}]}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c004}, 0x10060) 755.782277ms ago: executing program 2 (id=11333): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f280150409"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000100)="9cc547b630ba54fdee4af283d21b17949a1f3441c826b719a453de2c2b20ff046ac64b00bec80aa56e49ced6bb2fdada44f567742b8bb1fcd242b080451897d4c06453550638c3da20460cd49ba7b1c0f52cc239625728d1c332289f9f840709b97a17da1c26dc64c7523e12bfd04e4eae30471688b6c47e527f7f46f54af662e46fafaa66ecd8d496400dff") 744.61542ms ago: executing program 0 (id=11334): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="39000000130003470000560000002500809e429c0357076f27ab8a1fdf6b79323ba404000400"/57, 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800f000100657874686472000014000280080007400000000008000640000000010900010073797a30000000000900020073797a320000000005e90640c500000014000000781100010000000000000000000000000a"], 0x84}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000280)=0xfecc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={r8, @in={{0x2, 0x4e22, @remote}}, 0x8, 0x1, 0x8, 0xe, 0x80, 0x9, 0x9}, &(0x7f0000000640)=0x9c) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000240)=0xfe) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 653.417679ms ago: executing program 1 (id=11336): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040012) (async) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="e667c2b5887b00000e8ba98766577d000442"], 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x810) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x3c, r2, 0x731, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 653.031411ms ago: executing program 3 (id=11337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 603.731354ms ago: executing program 2 (id=11338): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001300)={r4, 0x6e2}, &(0x7f0000001340)=0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001300)={r4, 0x6e2}, &(0x7f0000001340)=0x8) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) (async) 603.115543ms ago: executing program 1 (id=11339): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2000003, 0x10, r1, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) (async) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2000003, 0x10, r1, 0x0) (async) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async) 565.007899ms ago: executing program 3 (id=11340): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) gettid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket(0x2a, 0x2, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x7, 0x0, 0xc, 0x7c6, 0xfdb1, 0xc, 0xc16d, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) (async) r10 = socket$nl_generic(0x11, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r12}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 558.101448ms ago: executing program 4 (id=11341): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x19, 0x20, 0x70bd2d, 0x25dfdbfc, {0x2, 0x80, 0x0, 0x40, 0xff, 0x3, 0xfe, 0x6, 0xb00}, [@RTA_UID={0x8}]}, 0x24}}, 0x8000) 440.913566ms ago: executing program 1 (id=11342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x11, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r5) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c120100feffff7fa100000008000500", @ANYRES32=r4], 0x50}}, 0x0) 439.323617ms ago: executing program 4 (id=11343): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) 436.934772ms ago: executing program 2 (id=11344): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r3, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 384.376995ms ago: executing program 4 (id=11345): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2a, &(0x7f00000000c0)=0x7a, 0x30) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r7, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r5, &(0x7f0000000300)="fd", 0x1, 0x40008c4, &(0x7f0000000200)={0x11, 0xf8, r8, 0x1, 0x8, 0x6, @random="156f5faf7478"}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x77, 0x6, "68d2744a67d5d26ec1d5bae42e39f63491e4a5d02216acbfd77072cf54647b81a63b1ba1d77ee10bf1fdb29fbe05ce7d5383545d65b1074518e4648c6355ad374f5397734d42b71e89aaf3bce87e25db33196cb8fe2f50f9593d77fa061b882fea04531ee0075af8bfdcdc1cecae37f1b73da8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xffffffffffffffa3, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x2004c004) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000100)={0x1}) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000140)={0xfffffffffffffffc, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 342.622135ms ago: executing program 0 (id=11346): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) 261.189285ms ago: executing program 3 (id=11347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000804}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x84}, 0x1, 0x0, 0x0, 0x4002002}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 259.997271ms ago: executing program 1 (id=11348): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 259.605054ms ago: executing program 4 (id=11349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8], 0x28}}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@gettaction={0xe4, 0x32, 0x108, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x50b}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 249.114536ms ago: executing program 0 (id=11350): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000020030c00048008000140000000090900010073797a300000000005000300160000000600024006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000190000032dbd7000ffdbdf251d01040015000400040000e0040200003684e7bd5fef75e70200000008000e00", @ANYRES32=r3, @ANYBLOB="08000e00", @ANYRES32=r4, @ANYBLOB="39f8d6d30ca43a58cf5103a647bc8704c1904120485cc98d6a050b802883056e8199b62bfb60eef1358cd52018aea9d17c48c873ff375038571f38443237cc567c89e4e42c817c523c150934768a34c518559a2c695e20187c5c5a1b18831393dd7a87f8201ac503fa57eb331f309de877399ce86a6457b4ee216974fd3abd7167a630fba1906422aca0ffa1a733efdfce7bc3030aede7c0400126184628adfe8de4b5faaaee2de103df2a6fb7077ebd5504f7cb5f7ac60e"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x30) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x22, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x4, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x40000800) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x3e2, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) 221.631095ms ago: executing program 4 (id=11351): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x5e, @empty, 0x4e24, 0x3, 'dh\x00', 0x11, 0x5, 0x2a}, 0x2c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = accept4$inet(r0, 0x0, &(0x7f0000000140), 0xc0000) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000180)={0x7fff, 0xa77, 0x9, 0x1, 0x9, 0x2c7, 0x4, 0xfffff8ed}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x3, 0x4, 0xffffffffffffa8d3, 0x5d}) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000240)={{0x9, 0x4}, 0x100, './file0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x0, 0x70bd28, 0x1ec, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x28000810) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000540)={'syz_tun\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000580)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000640)={0x10, 0x3, {0x9, @struct={0x3727, 0x3}, 0x0, 0x8, 0x4, 0x1, 0xa1b9, 0x2, 0x40, @usage=0x5, 0x3, 0xc, [0x5, 0x100000001, 0x2, 0x0, 0x0, 0x100]}, {0x1, @struct={0xb176, 0x3}, 0x0, 0x5, 0x0, 0x8, 0x400, 0x6, 0x82, @struct={0x2}, 0xff, 0x3, [0xa60000000000, 0x2, 0x400000000000000, 0x5, 0x8000, 0x2]}, {0x3109, @struct={0x6, 0xa46a}, 0x0, 0x1ff, 0xd, 0xa5e, 0x9, 0xfffffffffffffffd, 0x20, @struct={0x80, 0x1}, 0x7, 0x9, [0x6, 0x800, 0x100000000, 0x9, 0x5, 0x4]}, {0x3, 0x7, 0x4}}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000a40)={{r5}, r6, 0x10, @inherit={0x60, &(0x7f00000005c0)={0x1, 0x3, 0x3, 0x1, {0x2b, 0x2, 0x6, 0x100000000, 0x3}, [0x841c, 0x2, 0xc3d]}}, @devid=r7}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000002400)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000001a80)=@newchain={0x940, 0x64, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x2, 0x2}, {0x9, 0xd}}, [@f_rsvp6={{0xa}, {0x54, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}, @TCA_RSVP_POLICE={0x34, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xeb72}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x57}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}, @f_rsvp6={{0xa}, {0x8b0, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_POLICE={0x870, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x80000001, 0x3, 0x4, 0x8, 0xff, 0x1, 0x6, 0x7fff, 0x48, 0x401, 0xff, 0xcea, 0x6, 0x1, 0x7, 0x8, 0x0, 0x5, 0xff, 0xf0, 0x6, 0x9, 0x1800000, 0x6, 0x6f, 0x6, 0x647, 0x6, 0x7, 0x1, 0x0, 0x3, 0xfadd, 0x83f, 0x40, 0x0, 0x1, 0x2, 0x7fffffff, 0xa236, 0x1b, 0x6, 0xfffffffb, 0x3, 0x2, 0x5, 0x1, 0x70, 0x6, 0x0, 0x401, 0x373, 0x0, 0x7fffffff, 0x4e, 0x0, 0x7, 0xe, 0x5, 0x7fffffff, 0x5, 0x280, 0x0, 0x2, 0x1ff, 0x4, 0x2, 0x80000001, 0x4, 0x7, 0x10001, 0x2, 0xfffff73b, 0x4, 0x3, 0x6c, 0x7, 0x7, 0x100, 0x6, 0xdb, 0x3, 0x9, 0x4, 0x8c44, 0x7, 0x1004, 0x1, 0xfffffffb, 0x3, 0xeaad, 0x9, 0xdb67, 0xe9, 0x9, 0x48, 0x7fffffff, 0x400, 0x1, 0x0, 0x4, 0x10, 0x9, 0x2, 0xffffffff, 0x1, 0x5, 0x1, 0xfffffffe, 0x4, 0x5, 0xf70, 0x6, 0x2, 0x81, 0x5e5, 0xe, 0x4, 0xfea, 0x401, 0x3, 0x1, 0x4, 0x3ff, 0x5, 0x1, 0xfffffffe, 0x7, 0x1, 0x100, 0x4, 0xbc5, 0x0, 0x5, 0xfff, 0xfffffffc, 0xffffffff, 0xd, 0x77, 0x9, 0x800, 0x96, 0x8, 0x10000, 0x6, 0x1, 0x101, 0x78e, 0x97e, 0x9, 0x1, 0xc2d9, 0x7, 0xb, 0x80000000, 0x40, 0x2, 0x5, 0x20b, 0xe3f0, 0x2, 0xe136, 0x7, 0xfffffffe, 0x1, 0x7, 0x2, 0x8, 0x0, 0x1000, 0x1, 0x0, 0x6, 0x1, 0x2, 0x5, 0x7, 0x9, 0x8e, 0x100, 0x40, 0x0, 0xfffffffb, 0x8, 0x400, 0x200, 0x4, 0x2, 0x354, 0x2, 0x1, 0x0, 0x0, 0x4, 0x9, 0x826f, 0xd55, 0x26, 0x6, 0xd1, 0xfffffff7, 0x0, 0x7, 0xff, 0x7, 0x7fff, 0x8, 0x7, 0x3, 0x4, 0x7, 0x7, 0x8, 0x0, 0x6, 0x4, 0x7, 0xca2e, 0x2, 0x8, 0x7, 0xf0, 0x1, 0xffff0be8, 0x4, 0x8, 0x8, 0x3, 0x2c, 0x3, 0x80000000, 0xeb55, 0x0, 0x2, 0x3, 0x6, 0x1, 0xffff, 0x8, 0x6, 0x80000001, 0x8000, 0xff3, 0x1, 0x2, 0x55, 0x0, 0x50f, 0x7ff, 0x23d, 0xeaea, 0x4, 0x9, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x300000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xde7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xd, 0x9, 0x9d41, 0x7, {0x3, 0x1, 0x3ff, 0x9, 0x3, 0x80000001}, {0x2, 0x2, 0x7, 0x365, 0x8, 0x8}, 0xa66, 0xb29, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff9, 0x13540090, 0xc5, 0x200, 0x9, 0x1000, 0xa, 0xfff, 0xfffffff7, 0x5, 0xc1, 0x7ff, 0x8, 0xc7d7, 0x8, 0x6, 0x1, 0xfffffffb, 0xcd3, 0x0, 0x4, 0x9, 0x3, 0x1, 0x1836, 0x61, 0x6, 0x8, 0x3, 0x1, 0x9, 0x200, 0x3, 0x7ff, 0x5, 0x2010854e, 0x7, 0x8, 0x4, 0x4, 0x12, 0x80000001, 0x0, 0xfffffff8, 0x8, 0xdc, 0x2ca, 0x48, 0x58a, 0x4, 0x4, 0xfffffffb, 0x987, 0x3, 0x7, 0x2, 0x0, 0x3, 0x1ff, 0x6, 0x0, 0xe44, 0x5, 0x3, 0x3, 0x0, 0x3, 0x9, 0xe8d4, 0x10001, 0x5, 0x4, 0x6, 0x2, 0x2, 0x100000, 0x4, 0x3, 0x7fff, 0x4, 0x9, 0x2, 0x5, 0x7, 0x7, 0x6a, 0xb, 0x4, 0xe, 0xb3be, 0x4, 0xdcd6, 0x80000000, 0x7fff, 0x8d0, 0x7, 0x1, 0x0, 0xf060, 0x5, 0x8, 0xf, 0x6, 0x3, 0x2, 0x8, 0x7, 0x3, 0x7, 0xfffffffb, 0x3, 0x9, 0xfff, 0x2, 0x47b, 0x1, 0x6, 0xc2b, 0x2, 0x4, 0x101, 0x0, 0x85, 0xb5df, 0x2, 0x9b29, 0x0, 0x6, 0x5, 0x2, 0xfffffeff, 0xffff8001, 0x1, 0x5, 0x749a, 0x5, 0x2, 0x2, 0xfffff2e2, 0xffff0339, 0xffffffff, 0x8, 0x610, 0x3, 0x5, 0xe6, 0x6, 0x10000, 0x200, 0x5, 0x5, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7, 0x5, 0x1, 0x5, 0x101, 0xb95, 0x3, 0xa, 0x8001, 0x880b, 0x9, 0x456, 0xb5d, 0x8001, 0x1, 0x7, 0xd85, 0x2, 0xe329, 0x1, 0x3, 0x4, 0x4ea3, 0x7, 0x4, 0xf, 0x3, 0x6, 0x4, 0x8, 0x9, 0xffffff29, 0x200, 0x81, 0x81, 0x7, 0x1, 0x80000000, 0x2, 0x6, 0x1c, 0xf1, 0x9, 0x1, 0x2, 0xd, 0x6, 0x81, 0xd, 0x3, 0x569b6f14, 0x68d, 0x1, 0xb91, 0x3, 0x5, 0x8, 0x8, 0x9, 0x4, 0x0, 0x8000, 0x6, 0x3, 0x80, 0x1, 0x6, 0xffff0000, 0x1, 0x944b, 0x4, 0x401, 0xd, 0x8d08, 0x1, 0x3c3, 0x5, 0xb50, 0xb, 0x80000001, 0x2, 0x7, 0xb, 0x7, 0xf, 0x1ff, 0x0, 0x2, 0x0, 0x9, 0xff, 0x0, 0x2f8e, 0x1, 0x4, 0x9, 0x6, 0x2, 0xfffffc00]}]}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}]}}]}, 0x940}, 0x1, 0x0, 0x0, 0x20008085}, 0x4010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002440)={'team0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002480)={0xffffffffffffffff, 0x8, 0x0, 0x81}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r10, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x6000020}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x44, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x40000) ioctl$FITHAW(r5, 0xc0045878) r11 = openat$cgroup_ro(r3, &(0x7f0000002600)='rdma.current\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002640)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000002680)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002700), r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000027c0)={'ip6tnl0\x00', &(0x7f0000002740)={'ip6_vti0\x00', r12, 0x2d, 0x1, 0x5, 0x7fffffff, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x1, 0x0, 0x8}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000002c00)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002940)={0x26c, r13, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 157.148806ms ago: executing program 2 (id=11352): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdrdstopts={{0x11, 0x29, 0x37, {0x1}}}], 0x18}}], 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000340)=0x5, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="3900000014000549ca192c000500015601618575e2854a2e4afd8657567b36f3132f3f62123231ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x3b}], 0x1, 0x0, 0x0, 0xc00e}, 0x8050) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000003100000000000000", @ANYRES32, @ANYBLOB="0000000000ffffffffffffffef00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d2a000000000000140003006970766c616e3100"], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) accept4$x25(r3, 0x0, 0x0, 0x81800) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) 155.898896ms ago: executing program 1 (id=11353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x2, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48891}, 0x20000000) 139.441761ms ago: executing program 3 (id=11354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76, 0x80000001}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 108.845821ms ago: executing program 0 (id=11355): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"/457], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 49.17605ms ago: executing program 1 (id=11356): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x32, 0x3c, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010101, @multicast1}, "28afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea2"}}}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x1d, &(0x7f0000000100)=0xfefffff9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000340)='ipvlan1\x00') sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x1}, @window={0x3, 0x7, 0xfffd}, @mss={0x2, 0x2876}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x6}, @window={0x3, 0x101, 0x2}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x3}, &(0x7f0000000300)=0x28) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r8, 0x400442c9, 0x200000f3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001080)={r5, r7, 0x25, 0x0, @void}, 0x10) socket(0x10, 0x803, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) 48.016958ms ago: executing program 4 (id=11357): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x495b866df80b4e6b}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x270bd2e, 0x259fdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x8010, r6, 0x61ccd000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfc}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}}, 0x40000d1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x495b866df80b4e6b}, 0x14}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x270bd2e, 0x259fdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x8010, r6, 0x61ccd000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfc}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}}, 0x40000d1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) 47.518334ms ago: executing program 3 (id=11358): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006100000000040000180000000000000000000000000095000000000010000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 10.959712ms ago: executing program 3 (id=11359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @private=0xa010102, 0x0, 0x0, 'lblc\x00', 0x2d, 0xff, 0x26}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x8, 0x8, 0x4, 0x0, 0x9}, 0x5, 0x85, [{0x5, 0x10, 0xe3cb, 0xffff7fff, 0x7ff, 0xc00}]}, [{0xfffff800, 0xd286, 0x2, 0x2, 0x4b, 0x9}, {0x9, 0x8, 0x2, 0x8, 0x2, 0x1dc2}, {0x6, 0x4, 0x8, 0x1, 0x5, 0xffffffff}, {0x467fb76c, 0x8001, 0x5, 0x2, 0x7, 0x2}, {0xa, 0x6, 0x1, 0xffffffff, 0x0, 0x9}, {0x9, 0x32c9, 0x800, 0xe4, 0x8, 0x80000000}, {0x0, 0xe, 0x0, 0x3, 0x8, 0xfd}, {0x9, 0x78a, 0x2, 0xea, 0x40000000, 0xfffffffa}, {0xff, 0x1f, 0x0, 0x2, 0x3}, {0x4, 0x4, 0x7, 0x7, 0x101, 0x4}, {0x16, 0xffffffff, 0x8, 0x0, 0x80000001, 0xfffffff8}, {0x9, 0x7, 0x7fffffff, 0x8, 0x401, 0x8}, {0x7, 0xa, 0xf, 0x80, 0x2, 0x7}, {0x2, 0x8000, 0x1, 0x800, 0x4, 0x5}, {0x1828, 0x8, 0x9, 0x8, 0x5, 0x200}, {0x2, 0xfffff531, 0x80000001, 0x4, 0x8, 0x100}, {0xfffffff1, 0x2, 0x8, 0x6, 0x7, 0x79a9}, {0x8, 0x2, 0x7, 0x0, 0x2, 0x5}, {0x5, 0x8, 0x2, 0x1, 0x5}, {0x0, 0x528, 0x2, 0x90af, 0x2, 0x3}, {0xa1, 0x3, 0x5, 0x9, 0x0, 0x1}, {0x10001, 0xde, 0x16, 0xcb, 0x6}, {0x5c6, 0x1, 0x6, 0x3, 0x0, 0x3}, {0x3b5, 0x7, 0x4, 0x3, 0x6, 0xfffff800}, {0x3, 0x952, 0x8001, 0x6, 0x6, 0x6adcf24c}, {0x17, 0x4, 0x0, 0x1ff, 0x5, 0x80000001}, {0x1, 0x4, 0x7fff, 0x2, 0x9, 0x3}, {0x9, 0x9, 0x0, 0x6, 0x1, 0x5}, {0x80000000, 0x0, 0x10001, 0xc40d, 0x5}, {0x8, 0xa00000, 0xfffffed1, 0x7, 0x80, 0x3}, {0x1, 0x7, 0x4, 0x5, 0x1, 0x4}, {0x100, 0xfffffeff, 0xfff, 0x1, 0xf6b, 0xf}, {0x8, 0x8, 0x8, 0x89, 0x8001, 0x6b4}, {0x800, 0x5, 0x8ea, 0x7fffffff, 0x0, 0x3}, {0xfffffffb, 0x7ff, 0xc, 0xa40, 0x3, 0xd5c}, {0x8, 0xe, 0x2, 0x1000, 0x0, 0x2}, {0xffff, 0x6, 0x80000001, 0xb, 0x6e, 0x80}, {0x7ff, 0x7, 0x7, 0x1, 0x5, 0x10}, {0xe000, 0x401, 0x2, 0x3, 0x0, 0x7}, {0x80000001, 0x4, 0x3, 0x6000, 0x4bc0}, {0x7fff, 0x6, 0x9, 0x5, 0x5, 0x4}, {0x80000001, 0x8, 0x0, 0x7f, 0x1, 0xd7}, {0x75a2, 0x3, 0x5, 0x80000000, 0xfff, 0xdf8}, {0x3, 0x4, 0x2, 0x4, 0x3, 0x1}, {0x6, 0x1, 0x401, 0x5, 0x9, 0xfffffff9}, {0x8001, 0x3, 0xbe, 0xffff, 0x1, 0x5}, {0x40, 0x1ff, 0x3, 0xd43d, 0x6, 0xfffffe97}, {0x5fe6, 0x8001, 0x7ff, 0x9, 0x6, 0x6}, {0xf, 0x7f, 0x7, 0x3, 0x3, 0x7f}, {0x101, 0x9, 0x2, 0x8, 0x200, 0xbb3}, {0x3, 0x0, 0x6, 0x4, 0x7f, 0x3ff}, {0x6, 0x5, 0x7fffffff, 0x3, 0x9079, 0x1}, {0x1d, 0x9, 0x2, 0x9, 0x7fffffff, 0x5}, {0x7ff, 0x6, 0x5, 0x764, 0x47a1488a, 0x3}, {0x9, 0x5, 0x8, 0x200, 0x4, 0x7}, {0x7fff, 0x3, 0xf, 0x1ff, 0x7, 0x3}, {0x9, 0x77d, 0x9, 0x10001, 0x3, 0x1000}, {0xe1ad, 0x400, 0x3, 0xd, 0x8d, 0x3}, {0x5, 0x6, 0x9, 0x1, 0x2, 0x30}, {0x5, 0x1ff, 0xae, 0x6, 0x5, 0x9}, {0x9, 0xff, 0x9, 0xff, 0x6, 0x5074}, {0x5, 0x6, 0xa, 0x7, 0x3, 0x81}, {0x81, 0x1000, 0x80000001, 0x4, 0xd32f, 0x4}, {0x2, 0x8, 0xd, 0xb09, 0xe, 0x29e7}, {0x9, 0x5, 0xa2, 0x47ba, 0x401, 0x7}, {0xc3, 0x0, 0x80, 0xfff, 0x9a53, 0x3}, {0x9, 0x36, 0xff, 0xb6e, 0x40, 0x8}, {0x3, 0x7, 0x5, 0x9, 0x1, 0x7fff}, {0x0, 0x100, 0xf6, 0x8, 0x4, 0x100}, {0x3, 0x2, 0x4, 0x32db, 0x3400000, 0xfffffff9}, {0x0, 0xfffff46d, 0x6, 0xfffffffd, 0x8, 0xe}, {0xe26, 0x800, 0x7fff, 0x8000, 0x0, 0x6}, {0x4, 0xff, 0x5b05676a, 0x8, 0xfffffffa, 0x5}, {0x5, 0x401, 0x9, 0x5, 0xf3, 0x6}, {0x9, 0x2, 0x4, 0x9, 0x9947, 0x1}, {0x7, 0x6, 0xfffff98b, 0x1, 0x5, 0xffffff80}, {0xffffffff, 0x4, 0x3f1e, 0x9, 0x7, 0x8}, {0x0, 0xaa1, 0x3, 0xfffff000, 0x2, 0x3}, {0xb6f, 0x10001, 0x7, 0x40, 0x6, 0x3}, {0x8, 0x0, 0x9, 0x4, 0xfffc0000, 0x200000}, {0x447, 0xffff8000, 0x9, 0x324, 0xfffffff8, 0x6}, {0xa, 0x80, 0x2, 0x4, 0x2}, {0x80000000, 0x5, 0x0, 0x1c, 0x7, 0x1}, {0x1ff, 0x6, 0x1, 0x2, 0x5b51, 0xfffffffb}, {0xd194, 0xfffffffe, 0x42, 0x2, 0x7f, 0x6}, {0x7dc8, 0x2, 0xde8, 0xfffffffd, 0xa30, 0x7}, {0x8, 0x65a, 0x3, 0x1, 0x11d, 0x7}, {0x2, 0xff, 0xb, 0x3, 0xd9, 0x2}, {0x1, 0x0, 0x0, 0xfb, 0x0, 0x5}, {0x0, 0x1, 0x0, 0x909c, 0xff25, 0xfffffffd}, {0x8, 0x6, 0x8, 0x6}, {0x3ff, 0xfffffffc, 0x6, 0x6, 0x6, 0x8a}, {0x2, 0x7000, 0xfb3a, 0x4, 0x978, 0x6}, {0x3, 0x1, 0xfffffffe, 0x5, 0x7, 0xe0b}, {0x7, 0x2, 0x2, 0xffffff80, 0x5}, {0x9, 0xf, 0x1, 0x0, 0x100, 0x5}, {0x8, 0x8, 0x4, 0x7, 0x4}, {0x4, 0xfffff63e, 0x100, 0xffffff71, 0x5, 0x8}, {0x8, 0xffffff81, 0x7ff, 0x0, 0x8, 0x3}, {0x6, 0x9, 0x0, 0x9, 0x32e4, 0x5}, {0x2, 0x80000000, 0x80000001, 0x8, 0x8, 0x4}, {0xffffff00, 0x1f9, 0x8, 0x81, 0x8, 0x8}, {0xffffffff, 0x7, 0x1, 0x5, 0x8, 0x8a0c}, {0x8, 0x4e7f, 0x8, 0x5, 0x400000, 0x80000000}, {0x3, 0x6, 0x12, 0x8, 0x8, 0x10000}, {0x71af, 0x2, 0x529, 0x1ff, 0x5, 0x4}, {0x8, 0x2, 0xd9fd, 0x3, 0x7fffffff, 0x4557}, {0x1ff, 0x571bc561, 0x9, 0x0, 0x401, 0xf45}, {0x576f, 0x0, 0x8, 0x3, 0xb33b, 0x40c20000}, {0x8, 0x1, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x2, 0x34, 0x1, 0x2, 0x5}, {0x9, 0x401, 0x4, 0x1, 0x8, 0x1}, {0x2, 0x8000, 0x0, 0x4, 0x7, 0x2a}, {0xf, 0xa4000, 0x3, 0xfffffff8, 0x1ff, 0x1b0}, {0x8, 0x2, 0x1, 0xdd56, 0x6, 0x8}, {0x1e, 0x200, 0x0, 0x9, 0xfffffffa, 0x9}, {0x4, 0x89, 0x43, 0x7, 0x8}, {0x3, 0x8, 0xfff, 0xd, 0xffffff92, 0x2}, {0x3, 0x9, 0x0, 0x8, 0x48d5}, {0x7, 0x4, 0xc, 0x4, 0x9, 0x4}, {0xbc11, 0x5, 0x8, 0x3, 0xfff, 0x7fff}, {0x0, 0x80, 0x79, 0x7, 0x3, 0x32a6}, {0x0, 0x101, 0x7ff, 0xb, 0x0, 0xe2}, {0xe, 0xd, 0x6, 0xc, 0x3, 0x1}, {0x2, 0x8483, 0x4, 0xd975, 0x9, 0x4}, {0x2, 0x8, 0x8, 0x91d, 0x3f, 0x1000}, {0x92, 0x8, 0xff, 0xfffffffb, 0x2, 0x7}, {0x89, 0x7, 0x2, 0x5, 0x800, 0x2}], [{0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x4}, {0x0, 0x1}, {0x5}, {}, {0x7}, {0x1}, {0x5}, {0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x8e4ce4f5ff7404f5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x6}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0xe}, {0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x34a91f47ac66fc06}, {0x2}, {0x2}, {0x1, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xfd6fe880e4699896}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x63ba3786dc977f4b}, {0x5, 0x8f6229bd24c8f3e2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 0s ago: executing program 2 (id=11360): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) (async) kernel console output (not intermixed with test programs): port 6081 - 0 [ 563.351837][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.367654][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9251'. [ 563.444532][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.500562][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.549109][T13955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.560128][T13955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.581603][ T7240] netlink: 216 bytes leftover after parsing attributes in process `syz.4.9256'. [ 563.607573][ T5627] Bluetooth: hci5: command tx timeout [ 563.700623][ T7256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.807344][ T7265] xt_hashlimit: invalid rate [ 563.984485][ T7279] veth0: entered promiscuous mode [ 564.058742][ T7277] veth0: left promiscuous mode [ 564.086129][ T7299] dvmrp0: entered allmulticast mode [ 564.420340][ T7333] __nla_validate_parse: 4 callbacks suppressed [ 564.420358][ T7333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9283'. [ 564.561047][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9285'. [ 564.636149][ T7325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.639406][ T7348] team_slave_1: entered promiscuous mode [ 564.655843][ T7348] team0: Port device team_slave_1 removed [ 564.665347][ T7349] netlink: 'syz.0.9287': attribute type 4 has an invalid length. [ 564.675652][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9288'. [ 564.709009][ T7348] netlink: 'syz.1.9288': attribute type 1 has an invalid length. [ 564.717358][ T7348] netlink: 'syz.1.9288': attribute type 2 has an invalid length. [ 564.990353][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9296'. [ 565.015110][ T7377] ip6erspan0: entered allmulticast mode [ 565.177893][ T7399] netlink: 348 bytes leftover after parsing attributes in process `syz.3.9306'. [ 565.247818][ T7407] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9307'. [ 565.631072][ T7450] openvswitch: netlink: IP tunnel dst address not specified [ 565.648278][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.688081][ T5627] Bluetooth: hci5: command tx timeout [ 565.905153][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9325'. [ 565.925885][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9321'. [ 565.951489][ T7471] team_slave_1: left promiscuous mode [ 566.012413][ T7471] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 566.402219][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9332'. [ 566.441884][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9332'. [ 566.745249][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.754223][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.764748][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.774939][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.785101][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.243298][ T7565] xt_hashlimit: size too large, truncated to 1048576 [ 567.327934][ T7573] xt_hashlimit: size too large, truncated to 1048576 [ 567.394909][ T7577] syzkaller0: entered promiscuous mode [ 567.433918][ T7577] syzkaller0: entered allmulticast mode [ 567.520319][ T7585] syzkaller0: entered promiscuous mode [ 567.535975][ T7585] syzkaller0: entered allmulticast mode [ 567.547696][ T7524] lo speed is unknown, defaulting to 1000 [ 567.716047][ T7593] syzkaller0: entered promiscuous mode [ 567.729559][ T7593] syzkaller0: entered allmulticast mode [ 567.769515][ T5634] Bluetooth: hci5: command tx timeout [ 567.778503][ T7600] netlink: 'syz.0.9359': attribute type 16 has an invalid length. [ 567.797906][ T7593] tipc: Started in network mode [ 567.805163][ T7593] tipc: Node identity aa7b709e6026, cluster identity 4711 [ 567.813011][ T7593] tipc: Enabled bearer , priority 0 [ 567.820020][ T7600] veth0_macvtap: entered allmulticast mode [ 567.839171][ T7592] tipc: Resetting bearer [ 567.858019][ T7592] tipc: Disabling bearer [ 567.882998][ T7611] netlink: 'syz.0.9359': attribute type 16 has an invalid length. [ 568.116708][ T7632] netlink: 'syz.4.9367': attribute type 21 has an invalid length. [ 568.136643][ T7632] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.181942][ T7632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 568.189220][ T7632] IPv6: NLM_F_CREATE should be set when creating new route [ 568.196462][ T7632] IPv6: NLM_F_CREATE should be set when creating new route [ 568.203729][ T7632] IPv6: NLM_F_CREATE should be set when creating new route [ 568.295198][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.309754][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.318048][ T7524] bridge_slave_0: entered allmulticast mode [ 568.341304][ T7524] bridge_slave_0: entered promiscuous mode [ 568.349051][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.356203][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.364374][ T7524] bridge_slave_1: entered allmulticast mode [ 568.373228][ T7524] bridge_slave_1: entered promiscuous mode [ 568.388393][ T7655] netlink: 'syz.1.9372': attribute type 1 has an invalid length. [ 568.473424][ T7655] bond1: entered promiscuous mode [ 568.494204][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.504051][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.531023][ T7663] macvtap1: entered allmulticast mode [ 568.560542][ T7655] macvtap2: entered allmulticast mode [ 568.600872][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.636320][ T7655] bond1: (slave bridge1): making interface the new active one [ 568.656050][ T7655] bridge1: entered promiscuous mode [ 568.664585][ T7655] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 568.684859][ T7524] team0: Port device team_slave_0 added [ 568.699687][ T7524] team0: Port device team_slave_1 added [ 568.748989][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.760394][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.796051][ T7524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.813521][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.817026][ T5634] Bluetooth: hci3: command tx timeout [ 568.826588][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.834728][ T7696] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 568.854278][ T7524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.933404][ T7524] hsr_slave_0: entered promiscuous mode [ 568.940665][ T7524] hsr_slave_1: entered promiscuous mode [ 568.950201][ T7524] debugfs: 'hsr0' already exists in 'hsr' [ 568.955956][ T7524] Cannot create hsr debugfs directory [ 569.022844][ T7703] netlink: 'syz.2.9387': attribute type 6 has an invalid length. [ 569.275079][ T7720] netlink: 'syz.2.9393': attribute type 1 has an invalid length. [ 569.317800][ T7719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.325413][ T7719] bond1: (slave bond2): making interface the new active one [ 569.333396][ T7719] bond1: (slave bond2): Enslaving as an active interface with an up link [ 569.355577][ T7524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 569.378282][ T7524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.386259][ T7524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 569.398373][ T7524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.406136][ T7524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 569.418358][ T7524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.426460][ T7524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 569.436037][ T7524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.479274][ T7740] __nla_validate_parse: 16 callbacks suppressed [ 569.479291][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9396'. [ 569.508307][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9396'. [ 569.544062][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.578830][ T7524] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.623138][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.630300][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.676259][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.683406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.738757][ T7759] netlink: 'syz.0.9403': attribute type 1 has an invalid length. [ 569.755222][ T7759] netlink: 'syz.0.9403': attribute type 1 has an invalid length. [ 569.774294][ T7759] netlink: 'syz.0.9403': attribute type 1 has an invalid length. [ 569.794863][ T7762] Bluetooth: MGMT ver 1.23 [ 569.801851][ T7759] netlink: 'syz.0.9403': attribute type 2 has an invalid length. [ 569.819262][ T7759] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9403'. [ 569.842429][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9406'. [ 570.158701][ T7804] netlink: 432 bytes leftover after parsing attributes in process `syz.1.9414'. [ 570.176161][ T7807] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 570.272606][ T7812] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9414'. [ 570.293228][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9414'. [ 570.346283][ T7822] bond0: Caught tx_queue_len zero misconfig [ 570.418908][ T7830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9419'. [ 570.433760][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.491460][ T7524] veth0_vlan: entered promiscuous mode [ 570.499160][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9422'. [ 570.512299][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9422'. [ 570.543845][ T7524] veth1_vlan: entered promiscuous mode [ 570.630588][ T7848] bond2: entered promiscuous mode [ 570.635837][ T7848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.678878][ T7524] veth0_macvtap: entered promiscuous mode [ 570.687904][ T7850] syzkaller0: entered promiscuous mode [ 570.693872][ T7850] syzkaller0: entered allmulticast mode [ 570.716172][ T7524] veth1_macvtap: entered promiscuous mode [ 570.752146][ T7861] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 570.788288][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.807779][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.852596][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.883202][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.897365][ T5634] Bluetooth: hci3: command tx timeout [ 570.912973][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.926149][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.963296][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.116993][ T7883] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 571.164650][ T7883] bond4 (unregistering): Released all slaves [ 571.280867][T13949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.325423][T13949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.388456][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.413092][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.819439][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.827883][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.836239][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.844490][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.852177][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.053109][T13959] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.065328][T13959] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.102658][T13959] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.112795][T13959] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.161957][T13959] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.173616][T13959] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.211573][ T7958] lo speed is unknown, defaulting to 1000 [ 572.232328][T13959] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.242381][T13959] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.318172][T13949] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.328554][T13949] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.350579][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.363135][T13949] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.376039][T13959] bond6: left allmulticast mode [ 572.381167][T13959] bond6: left promiscuous mode [ 572.386137][T13959] bridge0: port 2(bond6) entered disabled state [ 572.393927][T13959] bridge_slave_0: left allmulticast mode [ 572.400364][T13959] bridge_slave_0: left promiscuous mode [ 572.406066][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.474987][T13959] bond3 (unregistering): (slave gretap1): Releasing active interface [ 572.505190][T13959] bond7 (unregistering): (slave bridge3): Releasing active interface [ 572.520566][T13959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.531449][T13959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.542303][T13959] bond0 (unregistering): (slave bond1): Releasing backup interface [ 572.552187][T13959] bond0 (unregistering): Released all slaves [ 572.561831][T13959] bond1 (unregistering): Released all slaves [ 572.571648][T13959] bond2 (unregistering): Released all slaves [ 572.583196][T13959] bond3 (unregistering): Released all slaves [ 572.593966][T13959] bond4 (unregistering): (slave C): Releasing backup interface [ 572.602153][T13959] bond4 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 572.614146][T13959] bond4 (unregistering): Released all slaves [ 572.623364][T13959] bond5 (unregistering): Released all slaves [ 572.632397][T13959] bond6 (unregistering): Released all slaves [ 572.641698][T13959] bond7 (unregistering): Released all slaves [ 572.651825][T13959] bond8 (unregistering): Released all slaves [ 572.660996][T13959] bond9 (unregistering): Released all slaves [ 572.679458][T13959] bond10 (unregistering): Released all slaves [ 572.688479][T13959] bond11 (unregistering): Released all slaves [ 572.700202][T13959] bond12 (unregistering): Released all slaves [ 572.710955][T13959] bond13 (unregistering): Released all slaves [ 572.784480][T13959] tipc: Disabling bearer [ 572.791061][T13959] tipc: Left network mode [ 572.842930][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.850298][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.858240][ T7958] bridge_slave_0: entered allmulticast mode [ 572.864846][ T7958] bridge_slave_0: entered promiscuous mode [ 572.874205][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.881628][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.889573][ T7958] bridge_slave_1: entered allmulticast mode [ 572.896421][ T7958] bridge_slave_1: entered promiscuous mode [ 572.919197][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.931532][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.957680][ T7958] team0: Port device team_slave_0 added [ 572.964577][ T7958] team0: Port device team_slave_1 added [ 572.976611][ T5634] Bluetooth: hci3: command tx timeout [ 572.989002][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.996032][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.022340][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.039476][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.048315][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 573.051853][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.082342][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.117767][ T7958] hsr_slave_0: entered promiscuous mode [ 573.123839][ T7958] hsr_slave_1: entered promiscuous mode [ 573.130668][ T7958] debugfs: 'hsr0' already exists in 'hsr' [ 573.136448][ T7958] Cannot create hsr debugfs directory [ 573.205261][ T7958] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.275824][ T7958] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.321854][T13959] hsr_slave_0: left promiscuous mode [ 573.342852][T13959] hsr_slave_1: left promiscuous mode [ 573.349720][T13959] dummy0: left allmulticast mode [ 573.354677][T13959] veth0_macvtap: left promiscuous mode [ 573.360990][T13959] veth1_vlan: left promiscuous mode [ 573.366233][T13959] veth0_vlan: left promiscuous mode [ 573.424417][ T421] smc: removing ib device syz0 [ 573.468953][T13959] team0 (unregistering): Port device team_slave_1 removed [ 573.510466][ T13] smbdirect: ib_dev[syz1] removed [ 573.519207][ T7958] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.535398][ T421] smbdirect: ib_dev[syz0] removed [ 573.563536][ T7958] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.928015][ T5634] Bluetooth: hci4: command tx timeout [ 574.133919][T13959] IPVS: stop unused estimator thread 0... [ 574.535561][ T7927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.554499][ T7958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.579145][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.605819][ T7986] validate_nla: 9 callbacks suppressed [ 574.605835][ T7986] netlink: 'syz.2.9463': attribute type 1 has an invalid length. [ 574.614651][ T7958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 574.647393][ T7986] __nla_validate_parse: 11 callbacks suppressed [ 574.647408][ T7986] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9463'. [ 574.674497][ T7986] workqueue: Failed to create a rescuer kthread for wq "phy7-mac-cmds": -EINTR [ 574.683764][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.728462][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9466'. [ 574.739079][ T7958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 574.771766][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.785101][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9466'. [ 574.789573][ T7958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.841864][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.854565][ T8010] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9468'. [ 574.867704][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9466'. [ 575.047912][ T5634] Bluetooth: hci3: command tx timeout [ 575.094590][ T7958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.116465][ T7958] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.129271][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.136402][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.163462][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.170628][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.563446][ T8069] Bluetooth: MGMT ver 1.23 [ 575.591472][ T8069] Bluetooth: hci1: too big key_count value 32778 [ 575.612682][ T8072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9480'. [ 575.625706][ T8069] netlink: 'syz.4.9479': attribute type 7 has an invalid length. [ 575.632283][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9481'. [ 575.650976][ T8069] netlink: 'syz.4.9479': attribute type 5 has an invalid length. [ 575.665574][ T8069] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9479'. [ 575.668343][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9481'. [ 575.722762][ T8076] netlink: 'syz.1.9481': attribute type 2 has an invalid length. [ 575.864143][ T8076] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9481'. [ 575.906340][ T7958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.007751][ T8035] Bluetooth: hci4: command tx timeout [ 576.037910][ T7958] veth0_vlan: entered promiscuous mode [ 576.192164][ T7958] veth1_vlan: entered promiscuous mode [ 576.200597][ T8112] veth0: entered promiscuous mode [ 576.208767][ T8111] veth0: left promiscuous mode [ 576.222714][ T8120] netlink: 'syz.3.9488': attribute type 4 has an invalid length. [ 576.291283][ T7958] veth0_macvtap: entered promiscuous mode [ 576.335618][ T7958] veth1_macvtap: entered promiscuous mode [ 576.424937][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.462553][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.483993][ T8147] syzkaller0: entered promiscuous mode [ 576.505424][ T8147] syzkaller0: entered allmulticast mode [ 576.551159][T13949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.610042][T13949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.648159][T13949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.691320][ T8165] netlink: 'syz.2.9499': attribute type 1 has an invalid length. [ 576.726329][T13949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.911916][ T8185] lo: entered allmulticast mode [ 576.930787][ T8185] tunl0: entered allmulticast mode [ 576.949810][ T8185] gre0: entered allmulticast mode [ 577.014725][ T8185] gretap0: entered allmulticast mode [ 577.023357][ T8185] erspan0: entered allmulticast mode [ 577.032418][ T8185] ip_vti0: entered allmulticast mode [ 577.040958][ T8185] ip6_vti0: entered allmulticast mode [ 577.050418][ T8185] sit0: entered allmulticast mode [ 577.059549][ T8185] ip6tnl0: entered allmulticast mode [ 577.067058][ T8185] ip6gre0: entered allmulticast mode [ 577.081468][ T8185] syz_tun: entered allmulticast mode [ 577.186270][ T421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.219396][ T421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.265157][T13949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.300619][T13949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.370106][ T8224] xt_l2tp: invalid flags combination: 8 [ 577.981013][ T8275] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 578.043095][ T8280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.086664][ T8035] Bluetooth: hci4: command 0x040f tx timeout [ 578.113374][ T8289] netlink: 'syz.1.9524': attribute type 24 has an invalid length. [ 578.280996][ T8305] netlink: 'syz.2.9529': attribute type 10 has an invalid length. [ 578.296448][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.305033][ T8305] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 578.325433][ T8305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.354102][ T8305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.377673][ T8305] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 578.388368][ T8305] bond0 (unregistering): Released all slaves [ 578.515097][ T8322] sctp: [Deprecated]: syz.2.9534 (pid 8322) Use of int in max_burst socket option deprecated. [ 578.515097][ T8322] Use struct sctp_assoc_value instead [ 578.663676][ T8322] lo speed is unknown, defaulting to 1000 [ 579.043088][ T8369] netlink: 'syz.2.9544': attribute type 5 has an invalid length. [ 579.101041][ T8370] netlink: 'syz.0.9543': attribute type 13 has an invalid length. [ 579.379138][ T8370] syzkaller0: entered promiscuous mode [ 579.408159][ T8370] syzkaller0: entered allmulticast mode [ 579.600827][ T8414] openvswitch: netlink: IPv4 tun info is not correct [ 580.054954][ T8461] validate_nla: 1 callbacks suppressed [ 580.054972][ T8461] netlink: 'syz.3.9570': attribute type 1 has an invalid length. [ 580.070616][ T8461] __nla_validate_parse: 18 callbacks suppressed [ 580.070632][ T8461] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.9570'. [ 580.115389][ T8429] xt_hashlimit: size too large, truncated to 1048576 [ 580.170698][ T5627] Bluetooth: hci4: command 0x040f tx timeout [ 580.221327][ T8475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9575'. [ 580.234594][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9573'. [ 580.240096][ T8475] ip6tnl0: entered allmulticast mode [ 580.267479][ T8475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9575'. [ 580.288966][ T8479] netlink: 'syz.2.9573': attribute type 58 has an invalid length. [ 580.354429][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9573'. [ 580.656995][ T8515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9584'. [ 580.773073][ T8522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 580.912284][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9588'. [ 580.954007][ T8529] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9588'. [ 581.108448][ T8550] team0: Caught tx_queue_len zero misconfig [ 581.175492][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 581.195247][ T8557] veth0_to_team: Caught tx_queue_len zero misconfig [ 581.210894][ T8558] netlink: 265 bytes leftover after parsing attributes in process `syz.4.9596'. [ 581.284548][ T8569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.502441][ T8594] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.597757][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.605197][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.679063][ T8602] bridge_slave_0: left allmulticast mode [ 581.684762][ T8602] bridge_slave_0: left promiscuous mode [ 581.700746][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.714961][ T8602] bridge_slave_1: left allmulticast mode [ 581.721211][ T8602] bridge_slave_1: left promiscuous mode [ 581.727653][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.742365][ T8602] team0: Port device team_slave_0 removed [ 581.754028][ T8602] team0: Port device team_slave_1 removed [ 581.761290][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.771612][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.781205][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.790168][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.801390][ T8602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.853646][ T8594] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.033654][ T8644] lo: Caught tx_queue_len zero misconfig [ 582.059563][ T8644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 582.166949][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.181861][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.191148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.218200][ T8657] lo speed is unknown, defaulting to 1000 [ 582.247934][ T5627] Bluetooth: hci4: command 0x040f tx timeout [ 582.281178][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.290165][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.324249][ T8659] tipc: Enabling of bearer rejected, failed to enable media [ 582.388303][ T8662] netlink: 'syz.3.9626': attribute type 2 has an invalid length. [ 582.396642][ T8663] netlink: 'syz.3.9626': attribute type 2 has an invalid length. [ 582.489362][ T8594] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.566048][ T8594] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.685019][T13951] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.699929][ T77] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.720279][ T77] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.733322][ T77] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.934408][ T9] IPVS: starting estimator thread 0... [ 582.955264][ T8703] 8021q: VLANs not supported on tunl0 [ 583.037464][ T8701] IPVS: using max 52 ests per chain, 124800 per kthread [ 583.082438][ T8714] veth1_to_team: Caught tx_queue_len zero misconfig [ 583.207652][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.216196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.251779][ T8732] netlink: 'syz.4.9650': attribute type 1 has an invalid length. [ 583.343265][ T8738] pim6reg1: entered promiscuous mode [ 583.363854][ T8745] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 583.370379][ T8745] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 583.382596][ T8738] pim6reg1: entered allmulticast mode [ 583.424789][ T8737] netlink: Conntrack attr has 4 unknown bytes [ 583.562763][ T8768] netlink: 'syz.0.9661': attribute type 21 has an invalid length. [ 583.626070][ T8753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.759063][ T8778] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 583.771917][ T8778] bond1 (unregistering): Released all slaves [ 583.801071][ T8790] tipc: Enabling of bearer rejected, failed to enable media [ 584.019883][ T8811] veth0: Caught tx_queue_len zero misconfig [ 584.082674][ T8813] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 584.090997][T18475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.099257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.251081][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.259830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.354785][ T8835] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 584.360852][ T8835] syzkaller1: Refused to change device type [ 584.663804][ T8856] sctp: [Deprecated]: syz.3.9687 (pid 8856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.663804][ T8856] Use struct sctp_sack_info instead [ 587.433747][ T8841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.548177][ T8876] __nla_validate_parse: 22 callbacks suppressed [ 587.548208][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9693'. [ 587.559712][ T8880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9695'. [ 587.579383][ T8880] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9695'. [ 587.809759][ T8895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9697'. [ 587.974232][ T8921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9702'. [ 588.030359][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9705'. [ 588.059648][ T8927] netlink: 'syz.2.9705': attribute type 6 has an invalid length. [ 588.092074][ T8930] tipc: Enabling of bearer rejected, failed to enable media [ 588.101068][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9705'. [ 588.111257][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9708'. [ 588.123867][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9705'. [ 588.138293][ T8927] netlink: 'syz.2.9705': attribute type 6 has an invalid length. [ 588.157365][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9705'. [ 588.200638][ T8943] sctp: [Deprecated]: syz.4.9709 (pid 8943) Use of int in max_burst socket option deprecated. [ 588.200638][ T8943] Use struct sctp_assoc_value instead [ 588.206723][ T8944] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 588.409298][T10593] net_ratelimit: 11 callbacks suppressed [ 588.409314][T10593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.423241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.480257][ T8967] bond1 (unregistering): Released all slaves [ 588.724397][ T8997] xt_TPROXY: Can be used only with -p tcp or -p udp [ 588.771702][ T9001] syzkaller0: entered promiscuous mode [ 588.778426][ T9001] syzkaller0: entered allmulticast mode [ 588.894196][ T9010] xt_l2tp: v2 sid > 0xffff: 1114112 [ 589.108566][ T9035] xt_TCPMSS: Only works on TCP SYN packets [ 589.161307][ T9039] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 589.277382][ T29] audit: type=1107 audit(1782177422.521:27): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')[ßi}Ô„]œÈ\š‹ŸTRî»$¼ê¼ipÒy$¨Ëü±¨P{â” [ 589.277382][ T29] `áÌp“©ƶ+ø^ [ 589.277382][ T29] ‹þüC}ñù¶[ºmL:¬B‹jpVæèEîL¨ñ€z [ 589.277382][ T29] ù!üˆ³M— uÝSn6^çKè0ö‰¬z‘­q•ä°¸vKH‡…(ŵÓk;Tõ' [ 589.332439][ T9053] openvswitch: netlink: IPv4 tun info is not correct [ 589.447544][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.455798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.497001][ T9063] ip6tnl0: Caught tx_queue_len zero misconfig [ 589.525083][ T9065] syzkaller1: entered promiscuous mode [ 589.543005][ T9065] syzkaller1: entered allmulticast mode [ 589.677678][ T9092] netlink: 'syz.1.9754': attribute type 1 has an invalid length. [ 589.689821][T10593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.697954][T10593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.706036][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.714125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.722223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.772277][ T9095] macvtap3: entered allmulticast mode [ 589.795074][ T9092] macvtap4: entered allmulticast mode [ 589.934701][ T9114] netlink: 'syz.1.9759': attribute type 12 has an invalid length. [ 589.949442][ T9116] netlink: 'syz.0.9758': attribute type 4 has an invalid length. [ 590.030903][ T9118] netlink: 'syz.4.9760': attribute type 10 has an invalid length. [ 590.047360][ T9128] batadv_slave_1: entered promiscuous mode [ 590.070559][ T9115] batadv_slave_1: left promiscuous mode [ 590.124715][ T29] audit: type=1800 audit(1782177423.361:28): pid=9114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9759" name="memory.events" dev="tmpfs" ino=574 res=0 errno=0 [ 590.276062][ T9138] syzkaller0: entered promiscuous mode [ 590.284735][ T9138] syzkaller0: entered allmulticast mode [ 590.379092][ T9146] Cannot find del_set index 4 as target [ 590.380123][ T9148] syzkaller0: entered promiscuous mode [ 590.392450][ T9148] syzkaller0: entered allmulticast mode [ 590.714193][ T9176] bond3: entered promiscuous mode [ 590.724906][ T9176] bond3: entered allmulticast mode [ 590.734906][ T9176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.769531][ T9188] syzkaller1: entered promiscuous mode [ 590.792416][ T9188] syzkaller1: entered allmulticast mode [ 590.809989][ T9171] lo: entered promiscuous mode [ 590.833669][ T9171] tunl0: entered promiscuous mode [ 590.854518][ T9171] gre0: entered promiscuous mode [ 590.866167][ T9171] gretap0: entered promiscuous mode [ 590.878508][ T9171] erspan0: entered promiscuous mode [ 590.894343][ T9171] ip_vti0: entered promiscuous mode [ 590.957799][ T9202] syzkaller0: entered promiscuous mode [ 590.963389][ T9202] syzkaller0: entered allmulticast mode [ 591.128977][ T9222] tap0: tun_chr_ioctl cmd 1074025672 [ 591.140019][ T9222] tap0: ignored: set checksum disabled [ 591.154722][ T9218] tap0: tun_chr_ioctl cmd 1074025672 [ 591.166853][ T9218] tap0: ignored: set checksum disabled [ 591.415107][ T9254] sctp: [Deprecated]: syz.3.9801 (pid 9254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.415107][ T9254] Use struct sctp_sack_info instead [ 591.546362][ T9267] team0: No ports can be present during mode change [ 591.686344][ T9279] netlink: 'syz.0.9809': attribute type 12 has an invalid length. [ 591.875537][ T9292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.920945][ T9304] xt_CT: No such helper "snmp_trap" [ 592.204921][ T9339] gretap0: entered promiscuous mode [ 592.223990][ T9339] gretap0: left promiscuous mode [ 592.292200][ T9348] netlink: 'syz.3.9830': attribute type 4 has an invalid length. [ 592.713058][ T9388] netlink: 'syz.0.9842': attribute type 21 has an invalid length. [ 592.724445][ T9389] netlink: 'syz.0.9842': attribute type 21 has an invalid length. [ 592.786057][ T9401] __nla_validate_parse: 37 callbacks suppressed [ 592.786070][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9845'. [ 592.821872][ T9403] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9846'. [ 592.946974][ T9411] netlink: 512 bytes leftover after parsing attributes in process `syz.1.9848'. [ 592.981676][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9849'. [ 592.990688][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9849'. [ 593.003710][ T9413] geneve2: entered promiscuous mode [ 593.009018][ T9413] geneve2: entered allmulticast mode [ 593.015961][T13955] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 593.026600][T13955] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 593.035745][T13955] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 593.045908][T13955] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 593.103578][ T9420] validate_nla: 3 callbacks suppressed [ 593.103593][ T9420] netlink: 'syz.1.9852': attribute type 1 has an invalid length. [ 593.164305][ T9423] netlink: 'syz.4.9853': attribute type 7 has an invalid length. [ 593.177179][ T9423] netlink: 'syz.4.9853': attribute type 5 has an invalid length. [ 593.185010][ T9423] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9853'. [ 593.243493][ T9430] netlink: 'syz.4.9853': attribute type 7 has an invalid length. [ 593.254873][ T9430] netlink: 'syz.4.9853': attribute type 5 has an invalid length. [ 593.268587][ T9430] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9853'. [ 593.272791][ T9434] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9855'. [ 593.409608][ T9445] netlink: 'syz.4.9859': attribute type 1 has an invalid length. [ 593.425876][ T9445] netlink: 'syz.4.9859': attribute type 1 has an invalid length. [ 593.592931][ T9468] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9866'. [ 593.618492][ T5728] net_ratelimit: 22 callbacks suppressed [ 593.618507][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.632649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.636404][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9869'. [ 593.652367][ T9468] syzkaller0: entered promiscuous mode [ 593.658976][ T9468] syzkaller0: entered allmulticast mode [ 593.674489][ T9478] Unsupported ieee802154 address type: 0 [ 593.732489][ T9481] netlink: 'syz.4.9871': attribute type 1 has an invalid length. [ 593.815368][ T9481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 593.823611][ T9481] bond4: (slave bond5): making interface the new active one [ 593.831609][ T9481] bond4: (slave bond5): Enslaving as an active interface with an up link [ 593.921133][ T9502] Cannot find set identified by id 65534 to match [ 593.931914][T10589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.940252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.969256][ T9499] syzkaller0: entered promiscuous mode [ 593.974873][ T9499] syzkaller0: entered allmulticast mode [ 594.107648][ T9511] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 594.220608][ T9522] xfrm1: entered allmulticast mode [ 594.647634][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.655918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.716012][ T9569] syzkaller0: entered promiscuous mode [ 594.722975][ T9569] syzkaller0: entered allmulticast mode [ 594.731523][ T9575] netlink: 'syz.4.9899': attribute type 1 has an invalid length. [ 594.740658][ T9572] xt_hashlimit: size too large, truncated to 1048576 [ 594.766097][ T9575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 594.782129][ T9579] macvlan0: entered promiscuous mode [ 594.898084][T13959] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.908035][T13959] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.918104][ T9576] syzkaller1: entered promiscuous mode [ 594.923671][ T9576] syzkaller1: entered allmulticast mode [ 594.940836][ T9582] geneve2: entered promiscuous mode [ 594.946132][ T9582] geneve2: entered allmulticast mode [ 594.953288][ T9572] syzkaller1: left promiscuous mode [ 594.959110][ T9572] syzkaller1: left allmulticast mode [ 594.972834][T13959] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.996362][T13959] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.026435][T13959] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 595.051253][T13959] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 595.089679][ T421] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 595.098702][ T421] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 595.161278][ T9601] netlink: 'syz.0.9907': attribute type 3 has an invalid length. [ 595.180935][ T5728] IPVS: starting estimator thread 0... [ 595.209331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.276855][ T9607] IPVS: using max 60 ests per chain, 144000 per kthread [ 595.286791][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.295033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.315143][ T9617] openvswitch: netlink: Actions may not be safe on all matching packets [ 595.328171][ T9617] mac80211_hwsim hwsim122 ÿ: renamed from wlan1 [ 595.606469][ T9645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.626447][ T9645] vlan2: entered promiscuous mode [ 595.632661][ T9645] bond4: entered promiscuous mode [ 595.639165][ T9645] vlan2: entered allmulticast mode [ 595.644353][ T9645] bond4: entered allmulticast mode [ 595.681308][ T9645] bond4: (slave bridge3): making interface the new active one [ 595.689293][ T9645] bridge3: entered promiscuous mode [ 595.694675][ T9645] bridge3: entered allmulticast mode [ 595.703214][ T9645] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 596.002327][T10589] IPVS: starting estimator thread 0... [ 596.106634][ T9685] IPVS: using max 53 ests per chain, 127200 per kthread [ 596.137261][ T9692] bond5: Removing last arp target with arp_interval on [ 596.942894][ T77] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.974562][ T77] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.018255][ T9777] syzkaller0: entered promiscuous mode [ 597.025950][ T9777] syzkaller0: entered allmulticast mode [ 597.061864][ T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.099722][ T77] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.283846][ T9805] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.048418][ T9870] __nla_validate_parse: 23 callbacks suppressed [ 598.048431][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9989'. [ 598.107566][ T9874] syzkaller0: entered promiscuous mode [ 598.113030][ T9874] syzkaller0: entered allmulticast mode [ 598.121705][ T9874] validate_nla: 4 callbacks suppressed [ 598.121716][ T9874] netlink: 'syz.1.9991': attribute type 11 has an invalid length. [ 598.135668][ T9874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9991'. [ 598.265773][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9995'. [ 598.806994][ T5728] net_ratelimit: 13 callbacks suppressed [ 598.807006][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.821089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.848765][T10593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.857035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.271520][ T9804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.422705][ T9899] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 600.434583][ T9899] bond1 (unregistering): Released all slaves [ 600.480293][ T9908] 8021q: VLANs not supported on ip_vti0 [ 600.495845][ T9904] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10001'. [ 600.567868][T10589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.576143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.591809][ T9918] pimreg: entered allmulticast mode [ 600.602397][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10003'. [ 600.630125][ T9921] netlink: 596 bytes leftover after parsing attributes in process `syz.3.10005'. [ 600.639457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.731951][ T9929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.792145][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10008'. [ 600.801928][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10008'. [ 600.842354][ T9934] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10006'. [ 600.887744][T10591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.896020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.252922][ T9939] xt_l2tp: invalid flags combination: 8 [ 601.391655][ T9945] netlink: 'syz.0.10013': attribute type 2 has an invalid length. [ 601.401324][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10013'. [ 602.220610][T10017] netlink: 'syz.0.10034': attribute type 1 has an invalid length. [ 602.275059][T10017] netlink: 'syz.0.10034': attribute type 1 has an invalid length. [ 602.287013][T10017] netlink: 'syz.0.10034': attribute type 1 has an invalid length. [ 602.295284][T10017] netlink: 'syz.0.10034': attribute type 2 has an invalid length. [ 602.298873][T10028] lo: Caught tx_queue_len zero misconfig [ 602.334534][T10031] netlink: 'syz.4.10037': attribute type 13 has an invalid length. [ 602.350885][T10031] veth1_macvtap: left promiscuous mode [ 602.366904][T10031] macsec0: entered allmulticast mode [ 602.513703][T10042] netlink: 'syz.1.10038': attribute type 13 has an invalid length. [ 602.595288][T10042] erspan0: refused to change device tx_queue_len [ 602.770023][T10060] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 602.795018][T10060] ip6tnl0: Caught tx_queue_len zero misconfig [ 602.961819][T10071] ip6tnl0: left allmulticast mode [ 602.985275][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.992735][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.117927][T10079] __nla_validate_parse: 6 callbacks suppressed [ 603.117954][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10051'. [ 603.324385][T10091] netlink: 'syz.3.10052': attribute type 1 has an invalid length. [ 603.333229][T10091] netlink: 'syz.3.10052': attribute type 2 has an invalid length. [ 603.342402][T10091] netlink: 'syz.3.10052': attribute type 1 has an invalid length. [ 603.352233][T10091] netlink: 'syz.3.10052': attribute type 3 has an invalid length. [ 603.361183][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10052'. [ 603.376952][T10071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.391533][T10071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.479102][T10071] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 603.503210][T10071] bond1: left promiscuous mode [ 603.509535][T10071] bridge1: left promiscuous mode [ 603.518643][T10071] macvtap1: left allmulticast mode [ 603.525147][T10071] macvtap2: left allmulticast mode [ 603.533782][T10071] bond2: left promiscuous mode [ 603.542516][T10071] macvtap3: left allmulticast mode [ 603.548521][T10071] macvtap4: left allmulticast mode [ 603.566149][T10071] geneve2: left promiscuous mode [ 603.574662][T10071] geneve2: left allmulticast mode [ 603.589092][T10071] vlan2: left promiscuous mode [ 603.605615][T10071] bond4: left promiscuous mode [ 603.615806][T10071] bridge3: left promiscuous mode [ 603.621677][T10071] vlan2: left allmulticast mode [ 603.632432][T10071] bond4: left allmulticast mode [ 603.643693][T10071] bridge3: left allmulticast mode [ 603.668054][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10053'. [ 603.754285][T13949] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.784195][T13949] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.829816][T13949] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 603.878706][T13949] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.902826][T13949] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.910234][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10056'. [ 603.922481][T13949] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 603.938642][T22207] pim6reg: left allmulticast mode [ 603.943903][T22207] dvmrp0: left allmulticast mode [ 603.966269][T22207] bond2 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 603.978916][T22207] bond2 (unregistering): (slave ip6gretap0): Releasing backup interface [ 603.988947][T22207] bond2 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - e6:be:50:38:09:e1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 604.175763][T22207] batman_adv: batadv0: Removing interface: gretap1 [ 604.300697][T22207] bond0 (unregistering): Released all slaves [ 604.315484][T22207] bond1 (unregistering): Released all slaves [ 604.342947][T22207] bond2 (unregistering): (slave veth5): Releasing backup interface [ 604.354861][T22207] bond2 (unregistering): Released all slaves [ 604.370416][T22207] bond3 (unregistering): Released all slaves [ 604.395434][T22207] bond4 (unregistering): Released all slaves [ 604.415819][T22207] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 604.434144][T22207] bond5 (unregistering): Released all slaves [ 604.449053][T22207] bond6 (unregistering): Released all slaves [ 604.460747][T22207] bond7 (unregistering): Released all slaves [ 604.473242][T22207] bond8 (unregistering): Released all slaves [ 604.515666][ T421] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.525539][ T421] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.536472][ T421] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 604.551293][ T421] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.564329][ T421] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.574339][ T421] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 604.625903][T22207] tipc: Disabling bearer [ 604.639831][T22207] tipc: Left network mode [ 604.674109][T10135] sctp: [Deprecated]: syz.4.10060 (pid 10135) Use of int in maxseg socket option. [ 604.674109][T10135] Use struct sctp_assoc_value instead [ 604.697593][T22207] IPVS: stopping master sync thread 15013 ... [ 605.002188][T10166] syzkaller0: entered promiscuous mode [ 605.019618][T10166] syzkaller0: entered allmulticast mode [ 605.050267][T10166] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 605.424941][T10205] TCP: TCP_TX_DELAY enabled [ 605.568063][T10216] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10081'. [ 605.631009][T10216] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10081'. [ 605.944007][T10244] xt_ecn: cannot match TCP bits for non-tcp packets [ 606.030482][T10244] : entered promiscuous mode [ 606.565117][T10287] vlan2: entered promiscuous mode [ 606.575340][T10287] bridge0: entered promiscuous mode [ 606.716237][T10294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 606.858596][T10302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.895693][T10302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.363700][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10110'. [ 607.380540][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10101'. [ 607.415159][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10101'. [ 607.459433][T10346] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 607.591822][ T29] audit: type=1800 audit(1782177440.831:29): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10111" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=996 res=0 errno=0 [ 607.672308][T22207] hsr_slave_0: left promiscuous mode [ 607.707852][T22207] hsr_slave_1: left promiscuous mode [ 607.726393][T22207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.761343][T10370] netlink: 'syz.0.10113': attribute type 10 has an invalid length. [ 607.776250][T22207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.823520][T10375] netlink: 'syz.1.10115': attribute type 6 has an invalid length. [ 607.830027][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10114'. [ 607.842789][T22207] veth0_vlan: left promiscuous mode [ 608.007608][ T24] page_pool_release_retry() stalled pool shutdown: id 234, 1 inflight 60 sec [ 608.211735][T22207] team0 (unregistering): Port device team_slave_1 removed [ 608.224684][T22207] team0 (unregistering): Port device team_slave_0 removed [ 608.287513][T10370] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.295543][T10370] bond0: (slave team0): Enslaving as an active interface with an up link [ 608.307169][T10373] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 608.316224][T10373] netlink: 184 bytes leftover after parsing attributes in process `syz.4.10114'. [ 608.349341][T10384] geneve3: entered promiscuous mode [ 608.368122][T10384] geneve3: entered allmulticast mode [ 608.475998][T10413] net_ratelimit: 10 callbacks suppressed [ 608.476015][T10413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.526390][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10123'. [ 608.557038][T10414] bond7: option all_slaves_active: invalid value (222) [ 608.585436][T10414] bond7 (unregistering): Released all slaves [ 608.822081][T10445] netlink: 'syz.4.10129': attribute type 1 has an invalid length. [ 608.875138][T10445] 8021q: adding VLAN 0 to HW filter on device bond7 [ 608.929365][T10451] bond7: (slave ip6erspan1): making interface the new active one [ 608.947162][T10451] bond7: (slave ip6erspan1): Enslaving as an active interface with an up link [ 608.982312][T22207] IPVS: stop unused estimator thread 0... [ 609.129870][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10134'. [ 609.204227][T22207] bond0: left allmulticast mode [ 609.221580][T22207] bond0: left promiscuous mode [ 609.232046][T10472] netlink: 'syz.1.10136': attribute type 1 has an invalid length. [ 609.246250][T22207] bridge0: port 1(bond0) entered disabled state [ 609.300271][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10136'. [ 609.326049][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10136'. [ 609.403491][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10138'. [ 609.453376][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10136'. [ 609.484743][T22207] team0: Port device gtp2 removed [ 609.490003][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10136'. [ 609.519786][T10488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10136'. [ 609.578646][T22207] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 609.592236][T22207] bridge1 (unregistering): left promiscuous mode [ 609.637836][T22207] ¯ (unregistering): Released all slaves [ 609.679065][T22207] bond1 (unregistering): Released all slaves [ 609.725183][T22207] bond2 (unregistering): Released all slaves [ 609.741297][T22207] bond3 (unregistering): Released all slaves [ 609.755035][T22207] bond4 (unregistering): Released all slaves [ 609.782505][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10143'. [ 609.799737][T22207] bond5 (unregistering): Released all slaves [ 609.812219][T22207] bond6 (unregistering): Released all slaves [ 609.824047][T22207] bond0 (unregistering): Released all slaves [ 609.844362][T22207] bond7 (unregistering): Released all slaves [ 609.856798][T22207] bond8 (unregistering): Released all slaves [ 609.873075][T22207] bond9 (unregistering): Released all slaves [ 609.908694][T22207] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 609.936249][T22207] bond10 (unregistering): (slave bond11): Releasing active interface [ 609.947489][T22207] bond10 (unregistering): Released all slaves [ 609.963886][T22207] bond11 (unregistering): Released all slaves [ 609.988627][T22207] bond12 (unregistering): Released all slaves [ 610.009067][T22207] bond13 (unregistering): Released all slaves [ 610.022306][T22207] bond14 (unregistering): Released all slaves [ 610.045026][T22207] bond15 (unregistering): Released all slaves [ 610.059940][T10472] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 610.113863][T10486] team0: Failed to send options change via netlink (err -105) [ 610.141160][T10486] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 610.169242][T10486] team0: Port device team_slave_0 removed [ 610.214490][T10515] tipc: Enabled bearer , priority 0 [ 610.263224][T10512] syzkaller0: entered promiscuous mode [ 610.316859][T10512] syzkaller0: entered allmulticast mode [ 610.425135][T10524] tipc: Resetting bearer [ 610.513085][T10544] netlink: 'syz.0.10151': attribute type 4 has an invalid length. [ 610.529684][T10504] tipc: Resetting bearer [ 610.557937][T10504] tipc: Disabling bearer [ 610.578809][T10545] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 610.849066][T10574] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 610.890281][T10574] sctp: [Deprecated]: syz.3.10150 (pid 10574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.890281][T10574] Use struct sctp_sack_info instead [ 611.092373][T10585] bridge7: entered promiscuous mode [ 611.121554][T10585] bridge7: entered allmulticast mode [ 611.192153][T22207] hsr_slave_0: left promiscuous mode [ 611.226045][T22207] hsr_slave_1: left promiscuous mode [ 611.392005][T10619] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 611.632324][T10606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.643154][T10606] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.757508][T10606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.798680][T10606] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.905267][T10606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.917684][T10641] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 611.961348][T10606] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.028723][T22207] IPVS: stop unused estimator thread 0... [ 612.084476][T10606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.133305][T10606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.235964][ T421] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.277688][ T421] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.338411][ T421] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.359092][ T421] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.378620][ T421] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.399505][ T421] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.422598][ T421] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.432422][ T421] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.051430][T10712] xt_nat: multiple ranges no longer supported [ 613.148112][T10719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.377990][T10739] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 613.409150][T10739] bridge0: port 3(batadv1) entered blocking state [ 613.472972][T10739] bridge0: port 3(batadv1) entered disabled state [ 613.480562][T10739] batadv1: entered allmulticast mode [ 613.487407][T10739] batadv1: entered promiscuous mode [ 613.493164][T10739] bridge0: port 3(batadv1) entered blocking state [ 613.499703][T10739] bridge0: port 3(batadv1) entered forwarding state [ 613.556846][T11790] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 613.613963][T10747] __nla_validate_parse: 10 callbacks suppressed [ 613.613980][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10192'. [ 613.645143][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10192'. [ 613.728565][T11232] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 613.866628][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 613.875899][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 614.064867][T22208] bond1: left allmulticast mode [ 614.074964][T22208] bond1: left promiscuous mode [ 614.081068][T22208] bridge0: port 4(bond1) entered disabled state [ 614.103093][T22208] team0: left promiscuous mode [ 614.108359][T22208] team_slave_0: left promiscuous mode [ 614.114334][T22208] team_slave_1: left promiscuous mode [ 614.123445][T22208] geneve1: left promiscuous mode [ 614.130125][T22208] bridge0: port 3(team0) entered disabled state [ 614.140914][T22208] bridge_slave_0: left allmulticast mode [ 614.148467][T22208] bridge_slave_0: left promiscuous mode [ 614.154632][T22208] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.180820][T22208] pimreg: left allmulticast mode [ 614.197218][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10197'. [ 614.213116][T22208] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 614.223270][T22208] ip6gre1 (unregistering): left promiscuous mode [ 614.279424][T22208] erspan0 (unregistering): left promiscuous mode [ 614.290787][T22208] gretap0 (unregistering): left promiscuous mode [ 614.333680][T22208] geneve1 (unregistering): left allmulticast mode [ 614.354752][T22208] team0: Port device geneve1 removed [ 614.379858][T22208] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 614.388712][T22208] bridge2 (unregistering): left promiscuous mode [ 614.421783][T22208] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.435363][T22208] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.449294][T22208] .` (unregistering): Released all slaves [ 614.461019][T22208] bond1 (unregistering): Released all slaves [ 614.475775][T22208] bond2 (unregistering): Released all slaves [ 614.494780][T22208] bond3 (unregistering): Released all slaves [ 614.514909][T22208] bond4 (unregistering): Released all slaves [ 614.533355][T22208] bond5 (unregistering): Released all slaves [ 614.555275][T22208] bond6 (unregistering): Released all slaves [ 614.575386][T22208] bond7 (unregistering): Released all slaves [ 614.590312][T22208] bond8 (unregistering): Released all slaves [ 614.602345][T22208] bond9 (unregistering): Released all slaves [ 614.614326][T22208] bond10 (unregistering): (slave veth9): Releasing active interface [ 614.625602][T22208] bond10 (unregistering): Released all slaves [ 614.638582][T22208] bond11 (unregistering): Released all slaves [ 614.651000][T22208] bond0 (unregistering): Released all slaves [ 614.679218][T13955] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 615.686992][ T77] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 615.697140][ T77] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 616.038832][T10719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.139922][T10794] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10198'. [ 616.518023][T10820] syzkaller0: entered promiscuous mode [ 616.544801][T10820] syzkaller0: entered allmulticast mode [ 616.647014][T11790] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 616.752070][T10841] xt_TCPMSS: Only works on TCP SYN packets [ 616.905011][ T5286] veth0_vlan: left promiscuous mode [ 616.928264][ T5286] veth0_vlan: entered promiscuous mode [ 616.985807][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10209'. [ 617.084243][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10211'. [ 617.146314][T10855] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 617.363306][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10212'. [ 617.448017][T10875] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 617.838985][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10222'. [ 617.866188][T10911] netlink: 'syz.0.10224': attribute type 1 has an invalid length. [ 617.905067][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10224'. [ 617.911382][T10899] syzkaller0: entered promiscuous mode [ 617.958068][T10899] syzkaller0: entered allmulticast mode [ 618.038836][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10227'. [ 618.369842][T10945] netlink: 'syz.3.10233': attribute type 1 has an invalid length. [ 618.381731][T10945] netlink: 'syz.3.10233': attribute type 11 has an invalid length. [ 618.663837][T10955] __nla_validate_parse: 2 callbacks suppressed [ 618.663857][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10236'. [ 618.720395][T10961] netlink: 'syz.3.10237': attribute type 11 has an invalid length. [ 618.916856][T10973] netlink: 'syz.1.10239': attribute type 11 has an invalid length. [ 619.014185][T10985] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 619.024838][T10984] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 619.080609][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10243'. [ 619.133448][T10991] netlink: 'syz.3.10245': attribute type 4 has an invalid length. [ 619.338665][T11002] tc_dump_action: action bad kind [ 619.359011][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10247'. [ 619.412089][T11010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10247'. [ 619.426065][T11011] set match dimension is over the limit! [ 619.638465][T11028] syzkaller0: entered promiscuous mode [ 619.648481][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10257'. [ 619.660783][T11028] syzkaller0: entered allmulticast mode [ 619.677027][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10257'. [ 619.686857][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 619.701122][T11025] tls_set_device_offload_rx: netdev not found [ 619.792698][T11041] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10261'. [ 619.810659][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10261'. [ 619.821881][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10261'. [ 619.914932][T11049] netlink: 'syz.2.10263': attribute type 1 has an invalid length. [ 619.924735][T11049] netlink: 'syz.2.10263': attribute type 2 has an invalid length. [ 619.933914][T11049] netlink: 'syz.2.10263': attribute type 1 has an invalid length. [ 619.938841][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10264'. [ 619.943284][T11049] netlink: 'syz.2.10263': attribute type 3 has an invalid length. [ 620.075270][T11054] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.093907][T11054] bridge0: port 3(bond6) entered blocking state [ 620.101198][T11054] bridge0: port 3(bond6) entered disabled state [ 620.109534][T11054] bond6: entered allmulticast mode [ 620.116269][T11054] bond6: entered promiscuous mode [ 620.613613][T11079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.664412][T11079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.752078][T11079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.790724][T11089] only policy match revision 0 supported [ 620.790742][T11089] unable to load match [ 620.811522][T11089] syzkaller0: entered promiscuous mode [ 620.817333][T11089] syzkaller0: entered allmulticast mode [ 620.826154][T11079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.853125][T11091] syzkaller1: entered promiscuous mode [ 620.859020][T11091] syzkaller1: entered allmulticast mode [ 620.899200][T13955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.913546][T13955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.929088][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.949833][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.030333][T11094] veth0_macvtap: left promiscuous mode [ 621.032388][T11097] netlink: 'syz.3.10279': attribute type 1 has an invalid length. [ 621.258622][T11110] TC_ACT_REPEAT abuse ? [ 621.551274][T11127] h: entered promiscuous mode [ 621.593713][T11125] bond4: (slave gre0): Device is not bonding slave [ 621.601594][T11125] bond4: option active_slave: invalid value (gre0) [ 621.619807][T11125] bond4 (unregistering): Released all slaves [ 621.974648][T11172] ip6t_srh: unknown srh invflags 4000 [ 622.167475][T11181] veth0_to_bond: Caught tx_queue_len zero misconfig [ 622.212659][T11152] bridge3: entered promiscuous mode [ 622.220073][T11152] bridge3: entered allmulticast mode [ 622.452224][T11207] syzkaller1: entered promiscuous mode [ 622.484204][T11207] syzkaller1: entered allmulticast mode [ 622.515774][ T29] audit: type=1800 audit(1782177455.751:30): pid=11218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10315" name="memory.events" dev="tmpfs" ino=1238 res=0 errno=0 [ 622.672873][T11225] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 622.688927][T11225] bond8 (unregistering): Released all slaves [ 622.933377][T11257] can: request_module (can-proto-4) failed. [ 622.938311][T11252] block nbd0: reconnected socket [ 623.190477][T11283] validate_nla: 6 callbacks suppressed [ 623.190494][T11283] netlink: 'syz.1.10331': attribute type 1 has an invalid length. [ 623.243252][T11290] netlink: 'syz.4.10333': attribute type 2 has an invalid length. [ 623.270650][T11290] netlink: 'syz.4.10333': attribute type 2 has an invalid length. [ 623.538728][T11312] syzkaller1: entered promiscuous mode [ 623.557238][T11312] syzkaller1: entered allmulticast mode [ 623.676889][T11326] __nla_validate_parse: 17 callbacks suppressed [ 623.676908][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10345'. [ 623.695756][ T5627] block nbd0: Receive control failed (result -32) [ 623.796232][T11335] IPv6: NLM_F_CREATE should be specified when creating new route [ 624.019483][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10351'. [ 624.052885][T11355] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10351'. [ 624.092314][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10351'. [ 624.330567][T11382] syzkaller1: entered allmulticast mode [ 624.352219][T11375] syzkaller1: left allmulticast mode [ 624.608379][ T5627] Bluetooth: hci4: link tx timeout [ 624.613552][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 624.884113][T11435] nbd: couldn't find device at index 2958377 [ 625.038022][T11446] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.10369'. [ 625.160165][ T8035] Bluetooth: hci4: link tx timeout [ 625.165902][ T8035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 625.188230][ T8035] Bluetooth: hci4: link tx timeout [ 625.188604][T11458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10372'. [ 625.193733][ T8035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 625.257952][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.269092][T11464] tls_set_device_offload_rx: netdev not found [ 625.282353][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10373'. [ 625.291927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.324809][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10373'. [ 625.522068][T11483] netlink: 'syz.4.10380': attribute type 2 has an invalid length. [ 625.536876][ T8035] Bluetooth: hci4: link tx timeout [ 625.542337][ T8035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 625.556775][T11483] netlink: 'syz.4.10380': attribute type 2 has an invalid length. [ 625.588865][T11487] macvlan0: entered promiscuous mode [ 625.619195][ T8035] Bluetooth: hci4: link tx timeout [ 625.624745][ T8035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 625.637861][T11485] veth0_macvtap: Caught tx_queue_len zero misconfig [ 625.663736][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10381'. [ 625.754958][T11499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.851512][T11499] 8021q: adding VLAN 0 to HW filter on device bond9 [ 625.904380][T11505] netlink: 'syz.0.10386': attribute type 13 has an invalid length. [ 625.925015][T11499] 8021q: adding VLAN 0 to HW filter on device bond10 [ 626.012431][T11499] 8021q: adding VLAN 0 to HW filter on device bond11 [ 626.046137][T11499] 8021q: adding VLAN 0 to HW filter on device bond12 [ 626.074848][T11499] 8021q: adding VLAN 0 to HW filter on device bond13 [ 626.095306][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10390'. [ 626.119195][T11499] 8021q: adding VLAN 0 to HW filter on device bond14 [ 626.152846][T11499] 8021q: adding VLAN 0 to HW filter on device bond15 [ 626.161447][T11505] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.222875][T11499] 8021q: adding VLAN 0 to HW filter on device bond16 [ 626.277556][T11499] 8021q: adding VLAN 0 to HW filter on device bond17 [ 626.290869][ T8035] Bluetooth: hci4: link tx timeout [ 626.296449][ T8035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 626.325954][T11499] 8021q: adding VLAN 0 to HW filter on device bond18 [ 626.351886][T11499] 8021q: adding VLAN 0 to HW filter on device bond19 [ 626.388754][T11499] 8021q: adding VLAN 0 to HW filter on device bond20 [ 626.430862][T11499] 8021q: adding VLAN 0 to HW filter on device bond21 [ 626.464634][T11499] 8021q: adding VLAN 0 to HW filter on device bond22 [ 626.559149][T11567] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 626.568542][ T8035] Bluetooth: hci4: link tx timeout [ 626.573967][ T8035] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 626.574010][T11567] macvlan2: entered promiscuous mode [ 626.588055][T11567] macvlan2: entered allmulticast mode [ 626.594127][T11567] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 626.649026][ T8035] Bluetooth: hci4: command 0x040f tx timeout [ 626.707922][T11581] netlink: 'syz.0.10401': attribute type 11 has an invalid length. [ 626.822203][T11592] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 626.903717][ T29] audit: type=1804 audit(1782177460.141:31): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10405" name="/newroot/154/cgroup.controllers" dev="tmpfs" ino=802 res=1 errno=0 [ 626.936577][ T29] audit: type=1800 audit(1782177460.141:32): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10405" name="cgroup.controllers" dev="tmpfs" ino=802 res=0 errno=0 [ 627.141265][T11620] team1: entered promiscuous mode [ 627.147898][T11620] team1: entered allmulticast mode [ 627.189954][T11625] IPVS: sed: FWM 3 0x00000003 - no destination available [ 627.198326][T11625] netlink: 'syz.3.10415': attribute type 1 has an invalid length. [ 627.207523][T11625] netlink: 'syz.3.10415': attribute type 1 has an invalid length. [ 627.215913][T11625] netlink: 'syz.3.10415': attribute type 1 has an invalid length. [ 627.381058][T11635] syzkaller1: entered promiscuous mode [ 627.397696][T11635] syzkaller1: entered allmulticast mode [ 627.446769][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 627.510526][T11647] x_tables: duplicate underflow at hook 3 [ 627.810221][T11672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 627.821053][T11677] veth0: entered promiscuous mode [ 627.831025][T11681] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 627.845464][T11677] veth0: left promiscuous mode [ 627.901636][T11684] veth0_macvtap: Caught tx_queue_len zero misconfig [ 628.004881][T11694] x_tables: duplicate entry at hook 1 [ 628.179063][T11706] syzkaller0: entered promiscuous mode [ 628.194385][T11706] syzkaller0: entered allmulticast mode [ 628.221927][T11706] TC_ACT_REPEAT abuse ? [ 628.428723][T11731] validate_nla: 3 callbacks suppressed [ 628.428753][T11731] netlink: 'syz.4.10446': attribute type 39 has an invalid length. [ 628.489062][T11737] only policy match revision 0 supported [ 628.489079][T11737] unable to load match [ 628.504255][T11737] syzkaller0: entered promiscuous mode [ 628.511354][T11737] syzkaller0: entered allmulticast mode [ 628.711980][T11755] __nla_validate_parse: 15 callbacks suppressed [ 628.712010][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10458'. [ 628.720018][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10459'. [ 628.720362][T11757] netlink: 'syz.3.10459': attribute type 58 has an invalid length. [ 628.720377][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10459'. [ 628.730418][ T8035] Bluetooth: hci4: command 0x040f tx timeout [ 628.894563][T11763] macsec0: left allmulticast mode [ 628.930029][T11765] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10462'. [ 628.939513][T11765] veth0_to_bond: default FDB implementation only supports local addresses [ 629.006367][T11772] bond0: option ad_select: unable to set because the bond device is up [ 629.043483][T11775] only policy match revision 0 supported [ 629.043500][T11775] unable to load match [ 629.059384][T11775] syzkaller0: entered promiscuous mode [ 629.064955][T11775] syzkaller0: entered allmulticast mode [ 629.088070][T11777] syzkaller0: entered promiscuous mode [ 629.093588][T11777] syzkaller0: entered allmulticast mode [ 629.232445][T11785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10470'. [ 629.316271][T11795] netlink: 'syz.1.10472': attribute type 1 has an invalid length. [ 629.319621][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10473'. [ 629.333626][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10473'. [ 629.477849][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10476'. [ 629.591913][T11815] only policy match revision 0 supported [ 629.591943][T11815] unable to load match [ 629.621115][T11815] syzkaller0: entered promiscuous mode [ 629.627313][T11815] syzkaller0: entered allmulticast mode [ 629.764578][T11821] veth1_macvtap: left promiscuous mode [ 629.771693][T11821] macsec0: entered promiscuous mode [ 629.777453][T11821] macsec0: entered allmulticast mode [ 629.834087][T11827] openvswitch: netlink: Missing key (keys=40, expected=100) [ 632.423765][T11806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 632.440000][T11858] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10484'. [ 632.577708][T11232] IPVS: starting estimator thread 0... [ 632.638727][T11873] netlink: 'syz.1.10488': attribute type 4 has an invalid length. [ 632.647399][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10486'. [ 632.688103][T11867] IPVS: using max 49 ests per chain, 117600 per kthread [ 632.782332][T11877] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 632.864894][T11874] macvlan2: entered promiscuous mode [ 632.894433][T11874] macvlan2: entered allmulticast mode [ 632.928524][T11874] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 633.216166][T11923] syz.1.10498 (11923) used obsolete PPPIOCDETACH ioctl [ 633.411959][T11935] xt_hashlimit: size too large, truncated to 1048576 [ 633.507267][T11946] lo: entered promiscuous mode [ 633.513064][T11946] lo: left allmulticast mode [ 633.519438][T11946] netlink: 'syz.2.10505': attribute type 2 has an invalid length. [ 633.529899][T11946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.563132][T11952] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 633.572617][T11949] netlink: 'syz.2.10505': attribute type 2 has an invalid length. [ 633.581160][T11949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.635484][T11958] netlink: 'syz.0.10507': attribute type 1 has an invalid length. [ 633.700915][T11965] block nbd2: not configured, cannot reconfigure [ 633.759656][T11958] macvtap0: entered allmulticast mode [ 633.801281][T11958] macvtap1: entered allmulticast mode [ 633.823294][T11958] __nla_validate_parse: 1 callbacks suppressed [ 633.823322][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10507'. [ 634.008579][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10514'. [ 634.115030][T11999] sock: sock_timestamping_bind_phc: sock not bind to device [ 634.178369][T12000] openvswitch: netlink: Actions may not be safe on all matching packets [ 634.188714][T12000] netlink: 784 bytes leftover after parsing attributes in process `syz.2.10519'. [ 634.199692][T12000] netlink: 'syz.2.10519': attribute type 2 has an invalid length. [ 634.553083][T12002] netlink: 'syz.1.10520': attribute type 16 has an invalid length. [ 634.562343][T12002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10520'. [ 634.701758][T12002] veth0_macvtap: entered allmulticast mode [ 634.739669][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10520'. [ 634.818464][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10523'. [ 634.830765][T12012] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10524'. [ 634.845343][T12012] netlink: 35 bytes leftover after parsing attributes in process `syz.4.10524'. [ 634.862770][T12012] netlink: 'syz.4.10524': attribute type 5 has an invalid length. [ 634.898222][T12012] netlink: 'syz.4.10524': attribute type 6 has an invalid length. [ 634.927770][T12012] netlink: 35 bytes leftover after parsing attributes in process `syz.4.10524'. [ 634.978313][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10526'. [ 635.133420][T12032] 0: reclassify loop, rule prio 0, protocol 700 [ 635.292191][T12056] netlink: 'syz.0.10536': attribute type 9 has an invalid length. [ 635.531028][T12078] syz_tun: left allmulticast mode [ 635.674459][T12086] syzkaller0: entered promiscuous mode [ 635.680601][T12086] syzkaller0: entered allmulticast mode [ 635.753550][T12091] netlink: 'syz.2.10549': attribute type 1 has an invalid length. [ 635.813456][T12091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.940505][T12115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.017372][T12121] sctp: [Deprecated]: syz.1.10557 (pid 12121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.017372][T12121] Use struct sctp_sack_info instead [ 636.139946][T12133] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 636.182450][T12126] hsr0: entered promiscuous mode [ 636.414246][T12161] netlink: 'syz.1.10565': attribute type 1 has an invalid length. [ 636.510386][T12161] 8021q: adding VLAN 0 to HW filter on device bond7 [ 636.567419][T12161] bond0: entered promiscuous mode [ 636.572866][T12161] bond_slave_0: entered promiscuous mode [ 636.580006][T12161] bond_slave_1: entered promiscuous mode [ 636.586354][T12161] bond0: entered allmulticast mode [ 636.592296][T12161] bond_slave_0: entered allmulticast mode [ 636.601460][T12161] bond_slave_1: entered allmulticast mode [ 636.609140][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.961398][T12191] bond3 (unregistering): Released all slaves [ 637.191400][T12223] bond0: invalid ARP target 0.0.0.0 specified for addition [ 637.210006][T12223] bond0: option arp_ip_target: invalid value (0) [ 637.641644][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.767815][T12280] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 637.785558][T12274] xt_cgroup: xt_cgroup: no path or classid specified [ 638.119502][T12307] tipc: Failed to remove unknown binding: 66,0,0/0:2850330935/2850330936 [ 638.141183][T12307] tipc: Failed to remove unknown binding: 66,0,0/0:2850330935/2850330936 [ 638.853954][T12369] macvtap0: entered allmulticast mode [ 638.878651][T12369] veth0_macvtap: entered allmulticast mode [ 638.928886][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.960834][T12369] __nla_validate_parse: 30 callbacks suppressed [ 638.960865][T12369] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10626'. [ 639.000361][T12369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.045548][T12380] openvswitch: netlink: Flow actions attr not present in new flow. [ 639.151258][T12387] syz_tun: entered allmulticast mode [ 639.181508][T12387] pimreg: entered allmulticast mode [ 639.204759][T12385] syz_tun: left allmulticast mode [ 639.379107][T12405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10635'. [ 639.406685][T12405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10635'. [ 639.424769][T12408] dvmrp0: entered allmulticast mode [ 639.533963][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10638'. [ 639.967534][T12443] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 639.977096][T12443] bond8 (unregistering): Released all slaves [ 640.065285][T12448] geneve0: entered promiscuous mode [ 640.210543][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10651'. [ 640.274956][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10653'. [ 640.395008][T12479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.402305][T12479] IPv6: NLM_F_CREATE should be set when creating new route [ 640.508860][T12487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10657'. [ 640.529751][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10658'. [ 640.666322][T12494] vlan3: entered promiscuous mode [ 640.671952][T12494] bridge0: entered promiscuous mode [ 640.736015][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10659'. [ 640.799185][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10661'. [ 640.932044][T12511] tipc: Enabling of bearer rejected, failed to enable media [ 641.301996][T12521] validate_nla: 4 callbacks suppressed [ 641.302013][T12521] netlink: 'syz.2.10666': attribute type 39 has an invalid length. [ 641.318263][T12524] netlink: 'syz.2.10666': attribute type 39 has an invalid length. [ 641.837268][T12573] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 641.838772][T12575] netlink: 'syz.3.10681': attribute type 5 has an invalid length. [ 642.166720][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 643.158174][T12618] lo: Caught tx_queue_len zero misconfig [ 643.165208][T12618] netlink: 'syz.0.10691': attribute type 1 has an invalid length. [ 643.231271][T12624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.979611][T12596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.992593][T12616] __nla_validate_parse: 6 callbacks suppressed [ 644.992609][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10690'. [ 645.185692][T12632] xt_CT: No such helper "snmp" [ 645.228668][T12652] gretap1: entered promiscuous mode [ 645.258890][T12652] macvtap1: entered promiscuous mode [ 645.277289][T12652] macvtap1: entered allmulticast mode [ 645.304930][T12652] veth1_vlan: entered allmulticast mode [ 645.337384][T12655] syzkaller0: entered promiscuous mode [ 645.357023][T12655] syzkaller0: entered allmulticast mode [ 645.384860][T12655] tipc: Started in network mode [ 645.399019][T12655] tipc: Node identity ac14142f, cluster identity 4711 [ 645.408698][T12655] tipc: New replicast peer: 0.0.0.0 [ 645.414602][T12655] tipc: Enabled bearer , priority 10 [ 645.457936][T12668] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10707'. [ 645.468226][T12668] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10707'. [ 645.479137][T12668] netlink: 19 bytes leftover after parsing attributes in process `syz.2.10707'. [ 645.543839][T12674] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10708'. [ 645.562636][T12674] ip6tnl0: Caught tx_queue_len zero misconfig [ 645.690144][T12682] bond6: entered promiscuous mode [ 645.706329][T12682] bond6: entered allmulticast mode [ 645.714042][T12682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.803012][T12666] erspan0: entered promiscuous mode [ 645.815768][T12666] erspan0: entered allmulticast mode [ 645.969315][T12703] smc: net device team_slave_0 applied user defined pnetid SYZ2 [ 646.004276][T12709] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10719'. [ 646.019022][T12708] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10719'. [ 646.058624][T12713] netlink: 'syz.4.10721': attribute type 5 has an invalid length. [ 646.301513][T12731] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.10726'. [ 646.415146][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10728'. [ 646.427419][T12742] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10730'. [ 646.537749][T10589] tipc: Node number set to 2886997039 [ 646.851914][T12791] netlink: 'syz.3.10741': attribute type 2 has an invalid length. [ 647.043383][T12807] tipc: Disabling bearer [ 647.064506][T12809] netlink: 'syz.4.10748': attribute type 64 has an invalid length. [ 647.268573][T12819] netlink: 'syz.1.10752': attribute type 1 has an invalid length. [ 647.295660][T12819] bond8: entered promiscuous mode [ 647.302061][T12819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 647.315759][T12819] bond8: entered allmulticast mode [ 647.336062][T12819] bond8: (slave bridge10): making interface the new active one [ 647.344274][T12819] bridge10: entered promiscuous mode [ 647.350264][T12819] bridge10: entered allmulticast mode [ 647.359002][T12819] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 647.451186][T12840] netlink: 'syz.0.10758': attribute type 29 has an invalid length. [ 648.071044][T12896] netlink: 'syz.3.10776': attribute type 29 has an invalid length. [ 648.100364][T12903] netlink: 'syz.3.10776': attribute type 29 has an invalid length. [ 648.121027][T12896] netlink: 'syz.3.10776': attribute type 29 has an invalid length. [ 648.132233][T12903] netlink: 'syz.3.10776': attribute type 29 has an invalid length. [ 648.210677][T12916] syzkaller0: entered promiscuous mode [ 648.223789][T12916] syzkaller0: entered allmulticast mode [ 648.273059][T12920] syzkaller0: entered promiscuous mode [ 648.284895][T12920] syzkaller0: entered allmulticast mode [ 648.371508][T12929] 8021q: VLANs not supported on lo [ 648.378366][T12929] netlink: 'syz.4.10786': attribute type 10 has an invalid length. [ 648.495060][T12938] netlink: 'syz.4.10789': attribute type 64 has an invalid length. [ 648.589300][T12944] 8021q: VLANs not supported on ip6_vti0 [ 648.673494][T12947] nbd: couldn't find a device at index 1073872896 [ 648.865506][T12959] team0: Port device team_slave_0 removed [ 649.219437][T12992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.772986][T13041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 649.804246][T13041] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 649.879854][T13051] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.891852][T13051] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.072807][T13067] __nla_validate_parse: 36 callbacks suppressed [ 650.072836][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10834'. [ 650.115992][T13073] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10837'. [ 650.185798][T13078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10838'. [ 650.263989][T13084] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10840'. [ 650.442998][T13104] only policy match revision 0 supported [ 650.443029][T13104] unable to load match [ 650.469902][T13104] syzkaller0: entered promiscuous mode [ 650.477270][T13104] syzkaller0: entered allmulticast mode [ 650.560829][T13115] netlink: 248 bytes leftover after parsing attributes in process `syz.4.10850'. [ 650.663802][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10853'. [ 650.733868][T13133] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.10859'. [ 650.755754][T13133] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 650.764568][T13133] 0ªX¹¦Dö»: entered allmulticast mode [ 650.778714][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10859'. [ 650.860482][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10862'. [ 650.886421][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10862'. [ 650.911613][T13148] sctp: [Deprecated]: syz.2.10862 (pid 13148) Use of int in max_burst socket option deprecated. [ 650.911613][T13148] Use struct sctp_assoc_value instead [ 650.939612][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.019341][T13158] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.411410][T13203] macsec1: entered promiscuous mode [ 651.417152][T13203] bridge0: entered promiscuous mode [ 651.422590][T13203] macsec1: entered allmulticast mode [ 651.428509][T13203] bridge0: entered allmulticast mode [ 651.434374][T13203] bridge0: port 3(macsec1) entered blocking state [ 651.441334][T13203] bridge0: port 3(macsec1) entered disabled state [ 651.451293][T13203] bridge0: left allmulticast mode [ 651.466680][T10593] bridge0: left promiscuous mode [ 654.579493][T13221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.730487][T13296] validate_nla: 3 callbacks suppressed [ 654.730515][T13296] netlink: 'syz.1.10903': attribute type 2 has an invalid length. [ 654.885531][T13317] macvtap0: entered allmulticast mode [ 654.894399][T13317] veth0_macvtap: entered allmulticast mode [ 654.974390][T13323] pimreg3: entered allmulticast mode [ 654.981820][T13328] Dead loop on virtual device ip6_vti0 (net 641), fix it urgently! [ 655.071718][T13336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.246069][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574a4800: rx timeout, send abort [ 655.431090][T13364] syzkaller0: entered promiscuous mode [ 655.437611][T13364] syzkaller0: entered allmulticast mode [ 655.669584][T13378] netlink: 'syz.0.10923': attribute type 1 has an invalid length. [ 655.692566][T13378] bond3: entered promiscuous mode [ 655.698191][T13378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.730048][T13378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.741880][T13378] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 655.746147][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574a5000: rx timeout, send abort [ 655.753581][T13383] __nla_validate_parse: 18 callbacks suppressed [ 655.753608][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10925'. [ 655.760764][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574a4800: abort rx timeout. Force session deactivation [ 655.798063][T13378] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 655.813684][T13378] bond3: (slave ip6gre1): making interface the new active one [ 655.821692][T13378] ip6gre1: entered promiscuous mode [ 655.828396][T13378] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 655.837760][T13390] sctp: [Deprecated]: syz.2.10927 (pid 13390) Use of int in max_burst socket option. [ 655.837760][T13390] Use struct sctp_assoc_value instead [ 655.858425][T13387] tipc: Enabling of bearer rejected, failed to enable media [ 655.872305][T13393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10928'. [ 655.918553][T13378] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10923'. [ 655.938018][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10923'. [ 655.949219][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10923'. [ 656.048764][T13402] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.10931'. [ 656.090240][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10934'. [ 656.179007][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10937'. [ 656.179266][T13414] netlink: 'syz.4.10935': attribute type 1 has an invalid length. [ 656.260379][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880574a5000: abort rx timeout. Force session deactivation [ 656.460992][T13449] team_slave_1: Caught tx_queue_len zero misconfig [ 656.530342][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10943'. [ 656.717038][T13452] syzkaller0: entered promiscuous mode [ 656.722644][T13452] syzkaller0: entered allmulticast mode [ 657.149917][T13495] syzkaller0: entered promiscuous mode [ 657.166280][T13495] syzkaller0: entered allmulticast mode [ 657.195893][T13495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10953'. [ 657.281114][T13508] netlink: 'syz.1.10955': attribute type 142 has an invalid length. [ 657.368105][T13507] veth5: entered promiscuous mode [ 657.385348][T13507] veth5: entered allmulticast mode [ 657.497847][T13528] netlink: 'syz.4.10962': attribute type 4 has an invalid length. [ 657.505812][T13528] netlink: 'syz.4.10962': attribute type 1 has an invalid length. [ 657.650942][T13535] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 657.662859][T13535] sctp: [Deprecated]: syz.1.10964 (pid 13535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 657.662859][T13535] Use struct sctp_sack_info instead [ 657.683464][T13538] syzkaller1: entered promiscuous mode [ 657.698286][T13538] syzkaller1: entered allmulticast mode [ 657.761897][T13544] netlink: 'syz.2.10969': attribute type 2 has an invalid length. [ 657.849441][T13554] syzkaller0: entered promiscuous mode [ 657.858839][T13554] syzkaller0: entered allmulticast mode [ 658.022632][T13582] veth0_macvtap: entered promiscuous mode [ 658.038346][T13582] macvlan0: entered promiscuous mode [ 658.224681][T13599] only policy match revision 0 supported [ 658.224700][T13599] unable to load match [ 658.334649][T13602] netlink: 'syz.4.10986': attribute type 11 has an invalid length. [ 658.335369][T13614] 8021q: VLANs not supported on gre0 [ 658.439035][T13620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.538808][T13620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.578477][T13623] sit0: entered promiscuous mode [ 658.710535][T13643] bond24: option arp_all_targets: invalid value (18446744073709551613) [ 658.721091][T13643] bond24 (unregistering): Released all slaves [ 658.756886][T13641] only policy match revision 0 supported [ 658.756915][T13641] unable to load match [ 658.859197][T13657] netlink: 'syz.4.11006': attribute type 1 has an invalid length. [ 658.887130][T13657] 8021q: adding VLAN 0 to HW filter on device bond24 [ 658.939121][T13666] netlink: 'syz.4.11009': attribute type 10 has an invalid length. [ 658.957628][T13666] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 659.365344][T13701] ip6gre1: entered allmulticast mode [ 659.439229][T13706] only policy match revision 0 supported [ 659.439268][T13706] unable to load match [ 659.578826][T13717] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 659.591590][T13717] bond4 (unregistering): Released all slaves [ 659.607642][T13721] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 659.622610][T13721] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 659.640771][T13721] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 659.661088][T13721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 660.437194][T13745] syzkaller0: entered promiscuous mode [ 660.442723][T13745] syzkaller0: entered allmulticast mode [ 661.954241][T13670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.086212][T13755] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 662.091353][ T29] audit: type=1804 audit(1782177495.321:33): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11029" name="/newroot/383/cgroup.controllers" dev="tmpfs" ino=1996 res=1 errno=0 [ 662.130004][T13752] __nla_validate_parse: 21 callbacks suppressed [ 662.130032][T13752] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.11029'. [ 662.131834][T13755] netlink: 'syz.4.11033': attribute type 1 has an invalid length. [ 662.155067][T13761] syzkaller0: entered promiscuous mode [ 662.161716][T13761] syzkaller0: entered allmulticast mode [ 662.181176][ T29] audit: type=1800 audit(1782177495.321:34): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11029" name="cgroup.controllers" dev="tmpfs" ino=1996 res=0 errno=0 [ 662.206735][T13755] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11033'. [ 662.207361][T13747] simple: basic_2 [ 662.237567][T13757] simple: basic_4 [ 662.242195][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11035'. [ 662.319979][T13763] xt_CT: No such helper "snmp" [ 662.425205][T13768] netlink: 165 bytes leftover after parsing attributes in process `syz.2.11037'. [ 662.508791][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11041'. [ 662.591501][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.665578][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11047'. [ 662.685100][T13799] v: renamed from vlan0 (while UP) [ 662.722388][T13799] syzkaller0: entered promiscuous mode [ 662.731399][T13799] syzkaller0: entered allmulticast mode [ 662.906341][T13827] tunl0: entered promiscuous mode [ 662.914610][T13827] tunl0: left allmulticast mode [ 662.929568][T13827] netlink: 'syz.2.11055': attribute type 3 has an invalid length. [ 662.947946][T13827] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11055'. [ 663.082448][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11061'. [ 663.114018][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11057'. [ 663.144551][T13854] ip6tnl2: entered allmulticast mode [ 663.209856][T13857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11062'. [ 663.253792][T13857] team0: Port device team_slave_0 removed [ 663.354968][T13866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.092794][T13877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.094023][T13876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.292804][T13900] syzkaller0: entered promiscuous mode [ 664.304074][T13900] syzkaller0: entered allmulticast mode [ 664.401803][T13902] syzkaller0: entered promiscuous mode [ 664.408104][T13902] syzkaller0: entered allmulticast mode [ 664.680888][T13938] openvswitch: netlink: Actions may not be safe on all matching packets [ 664.805681][T13964] gretap0: entered promiscuous mode [ 664.817552][T13964] vlan1: entered promiscuous mode [ 664.972552][T13975] vlan0: entered allmulticast mode [ 665.081515][T13995] openvswitch: netlink: Missing key (keys=40, expected=100) [ 665.200196][T14003] syzkaller0: entered promiscuous mode [ 665.210253][T14003] syzkaller0: entered allmulticast mode [ 665.525531][T14027] bond7: option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 665.540385][T14027] bond7 (unregistering): Released all slaves [ 665.737903][T14042] team1: entered promiscuous mode [ 665.754450][T14042] team1: entered allmulticast mode [ 665.794718][T14044] hsr_slave_1 (unregistering): left promiscuous mode [ 666.083680][T14061] openvswitch: netlink: Missing valid actions attribute. [ 666.092018][T14061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.268714][T14079] openvswitch: netlink: EtherType 50a is less than min 600 [ 666.271001][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880348afc00: rx timeout, send abort [ 666.284750][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880348afc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 666.302948][T11232] IPVS: starting estimator thread 0... [ 666.352183][T14085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.377476][T14085] bond1: entered allmulticast mode [ 666.383642][T14085] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 666.406698][T14081] IPVS: using max 54 ests per chain, 129600 per kthread [ 666.613003][T14103] bond5: entered promiscuous mode [ 666.622456][T14103] bond5: entered allmulticast mode [ 666.634256][T14103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 666.983502][T14139] netlink: 'syz.0.11151': attribute type 10 has an invalid length. [ 667.049841][T14143] only policy match revision 0 supported [ 667.049869][T14143] unable to load match [ 667.089290][T14143] syzkaller0: entered promiscuous mode [ 667.107407][T14143] syzkaller0: entered allmulticast mode [ 667.151937][T14153] __nla_validate_parse: 31 callbacks suppressed [ 667.151954][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11155'. [ 667.230590][T14159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11158'. [ 667.450210][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11159'. [ 667.509907][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11165'. [ 667.525210][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11165'. [ 667.535341][T14185] openvswitch: netlink: Tunnel attr 13417 out of range max 16 [ 667.556434][T14192] bridge0: port 3(batadv1) entered disabled state [ 667.610991][T14196] bridge0: port 3(batadv1) entered blocking state [ 667.617622][T14196] bridge0: port 3(batadv1) entered forwarding state [ 667.639633][T14196] bridge0: entered allmulticast mode [ 667.676977][ T24] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 667.693923][T14202] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11169'. [ 667.750201][T14204] IPv6: sit2: Disabled Multicast RS [ 667.768092][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11171'. [ 667.808405][T14206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11170'. [ 667.899093][T14212] tipc: Enabled bearer , priority 0 [ 667.906432][T14212] syzkaller0: entered promiscuous mode [ 667.913229][T14212] syzkaller0: entered allmulticast mode [ 667.923089][T14212] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 667.934618][T14212] tipc: Resetting bearer [ 667.942600][T14211] tipc: Resetting bearer [ 667.953937][T14211] tipc: Disabling bearer [ 668.020834][ T24] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 668.109129][T14223] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.120295][T14223] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 668.151826][T14223] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.162315][T14223] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 668.225819][T14223] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.236829][T14223] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 668.306093][T14223] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.350268][T14223] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 668.475891][ T77] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 668.488232][ T77] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.506848][T14248] bridge0: port 3(vlan1) entered blocking state [ 668.513785][T14248] bridge0: port 3(vlan1) entered disabled state [ 668.521624][T14248] vlan1: entered allmulticast mode [ 668.531129][T14248] vlan1: entered promiscuous mode [ 668.562999][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.579485][T14253] bridge_slave_1: left allmulticast mode [ 668.591783][T14253] bridge_slave_1: left promiscuous mode [ 668.600767][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.604159][T14257] netlink: 'syz.3.11187': attribute type 1 has an invalid length. [ 668.624554][T14253] bond0: (slave veth0_to_bond): Releasing backup interface [ 668.628652][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11186'. [ 668.645747][T14253] bond0: (slave bond_slave_0): Releasing backup interface [ 668.656362][T14253] bond0: (slave bond_slave_1): Releasing backup interface [ 668.669622][T14253] team0: Port device team_slave_1 removed [ 668.676200][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.683814][T14253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.693409][T14253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.702100][T14253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.714405][T14253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 668.735107][ T77] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 668.745148][ T77] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.755789][T13955] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 668.786271][ T77] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 668.812235][ T77] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.845729][ T77] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 668.859670][ T77] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 668.945429][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11192'. [ 668.954851][T14278] netlink: 'syz.1.11193': attribute type 15 has an invalid length. [ 669.669982][T14324] xt_hashlimit: size too large, truncated to 1048576 [ 669.748825][T14330] vlan0: entered promiscuous mode [ 669.778981][ T13] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 669.828740][ T13] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 669.989270][T14339] syzkaller0: entered promiscuous mode [ 669.994834][T14339] syzkaller0: entered allmulticast mode [ 670.171151][T14342] syzkaller0: entered promiscuous mode [ 670.181167][T14342] syzkaller0: entered allmulticast mode [ 670.189851][T14337] netlink: 'syz.1.11211': attribute type 12 has an invalid length. [ 670.205949][T14337] netlink: 'syz.1.11211': attribute type 29 has an invalid length. [ 670.219117][T14337] netlink: 'syz.1.11211': attribute type 1 has an invalid length. [ 670.227805][T14337] netlink: 'syz.1.11211': attribute type 2 has an invalid length. [ 670.467012][ T5728] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 670.532769][T14399] gtp0: entered promiscuous mode [ 670.549105][T14399] gtp0: entered allmulticast mode [ 670.847728][T14429] netlink: 'syz.4.11232': attribute type 15 has an invalid length. [ 671.278574][T14462] syzkaller0: entered promiscuous mode [ 671.284530][T14462] syzkaller0: entered allmulticast mode [ 671.386983][T14483] netlink: 'syz.0.11248': attribute type 21 has an invalid length. [ 671.412870][T14483] netlink: 'syz.0.11248': attribute type 5 has an invalid length. [ 671.423189][T14483] netlink: 'syz.0.11248': attribute type 6 has an invalid length. [ 671.452074][T14485] bridge5: entered allmulticast mode [ 671.617715][T14505] NCSI netlink: No device for ifindex 65584 [ 671.946277][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 672.019579][T14538] syzkaller0: entered promiscuous mode [ 672.035495][T14538] syzkaller0: entered allmulticast mode [ 672.045365][T14538] tipc: Enabled bearer , priority 0 [ 672.054601][T14537] tipc: Resetting bearer [ 672.074618][T14537] tipc: Disabling bearer [ 672.142397][T14546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 672.159487][T14561] __nla_validate_parse: 18 callbacks suppressed [ 672.159504][T14561] netlink: 2084 bytes leftover after parsing attributes in process `syz.0.11267'. [ 672.180599][T14561] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11267'. [ 672.191790][T14557] syzkaller0: entered promiscuous mode [ 672.198080][T14557] syzkaller0: entered allmulticast mode [ 672.281434][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11271'. [ 672.329819][T14571] team0: Port device syz_tun added [ 672.363887][T14579] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11272'. [ 672.416945][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 672.440269][T14584] syzkaller0: entered promiscuous mode [ 672.465721][T14584] syzkaller0: entered allmulticast mode [ 672.529522][T14593] block nbd0: reconnected socket [ 672.534680][T14593] nbd: error processing sock list [ 672.558884][T14593] vlan3: entered promiscuous mode [ 672.564053][T14593] dummy0: entered promiscuous mode [ 672.609658][ T8035] block nbd0: Receive control failed (result -32) [ 672.722440][T14607] syzkaller0: entered promiscuous mode [ 672.732031][T14607] syzkaller0: entered allmulticast mode [ 672.769645][T14611] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11283'. [ 672.833181][T14615] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 672.912571][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11288'. [ 672.947897][T14622] syzkaller0: entered promiscuous mode [ 672.953513][T14622] syzkaller0: entered allmulticast mode [ 673.305700][T14667] Bluetooth: MGMT ver 1.23 [ 673.315962][T14669] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 673.351010][T14669] syzkaller1: entered promiscuous mode [ 673.366176][T14669] syzkaller1: entered allmulticast mode [ 673.393228][T14673] sctp: [Deprecated]: syz.1.11301 (pid 14673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 673.393228][T14673] Use struct sctp_sack_info instead [ 673.417580][T14675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.246781][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 682.486910][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 682.656830][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 688.637318][ T8035] Bluetooth: hci4: link tx timeout [ 688.642468][ T8035] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 690.726808][ T5627] Bluetooth: hci4: command 0x040f tx timeout [ 690.807720][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 692.887046][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 699.126842][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 730.486812][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 65 [ 741.706334][T14806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11306'. [ 741.722261][T14808] validate_nla: 6 callbacks suppressed [ 741.722278][T14808] netlink: 'syz.2.11308': attribute type 13 has an invalid length. [ 741.742958][T14806] syzkaller1: entered promiscuous mode [ 741.747198][T14812] xt_TCPMSS: Only works on TCP SYN packets [ 741.748993][T14806] syzkaller1: entered allmulticast mode [ 741.760253][T14808] netlink: 'syz.2.11308': attribute type 58 has an invalid length. [ 741.772157][T14808] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11308'. [ 741.787813][T14806] netlink: 'syz.0.11306': attribute type 1 has an invalid length. [ 741.797604][T14802] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 741.822833][T14802] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 741.833936][T14802] gretap1: entered promiscuous mode [ 741.840593][T14802] gretap1: entered allmulticast mode [ 741.877679][T14820] bridge0: entered promiscuous mode [ 741.884833][T14820] bridge0: entered allmulticast mode [ 742.031431][T14834] xt_hashlimit: size too large, truncated to 1048576 [ 742.070267][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11314'. [ 742.093765][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11317'. [ 742.125943][T14838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11314'. [ 742.310237][ T8035] block nbd1: Receive control failed (result -32) [ 742.388627][T14827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.416217][T14827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.478820][T14827] bond1: left allmulticast mode [ 742.507924][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11314'. [ 742.516286][T14856] gtp3: entered promiscuous mode [ 742.518542][T14838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11314'. [ 742.530542][T14856] gtp3: entered allmulticast mode [ 742.552158][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.572161][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.598182][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.620686][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11324'. [ 742.629706][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.665641][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.676017][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.692297][T14871] netlink: 'syz.0.11324': attribute type 1 has an invalid length. [ 742.709977][T14874] erspan0: left allmulticast mode [ 742.722789][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11325'. [ 742.771350][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.802548][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.908464][T14894] openvswitch: netlink: Message has 8 unknown bytes. [ 742.926222][T14889] bridge2: entered allmulticast mode [ 742.939384][T14892] netlink: 'syz.0.11334': attribute type 4 has an invalid length. [ 742.948862][T14889] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11332'. [ 742.961326][T14895] netlink: 'syz.2.11333': attribute type 1 has an invalid length. [ 743.174121][T14922] netlink: 'syz.1.11342': attribute type 21 has an invalid length. [ 743.199442][T14922] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 743.282918][T14929] block nbd2: Unsupported socket: should be TCP or UNIX. [ 743.328413][T14935] bridge3: entered promiscuous mode [ 743.333742][T14935] bridge3: entered allmulticast mode [ 743.508107][T14950] ipvlan1: entered allmulticast mode [ 743.513749][T14950] veth0_vlan: entered allmulticast mode [ 743.579354][T14959] netlink: 'syz.4.11357': attribute type 2 has an invalid length. [ 743.609354][T14959] netlink: 'syz.4.11357': attribute type 2 has an invalid length. [ 743.673521][T14962] tc action pedit 'at' offset -32769 out of bounds [ 743.767641][T14955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.754234][T14980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.856992][T22208] unregister_netdevice: waiting for bond5 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 755.468027][ T7524] team0: Port device syz_tun removed